last executing test programs: 8.669084676s ago: executing program 4 (id=44): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x201, 0x5}) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e930102030109021200"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x4, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x20}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x1, 0x4, 0x3ff, 0x9, 0x6}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x0, "ce7239a723"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x45f8, 0x7, 0x7, "0194fa9e"}, @as_header={0x7, 0x24, 0x1, 0xc3, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0x2, 0x60, {0x7, 0x25, 0x1, 0xc, 0x8, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0xd3, "b3a52529"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x5, 0x3, 0xf9}, @as_header={0x7, 0x24, 0x1, 0x3, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x9, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7}}}}}}}}]}}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0x11, 0x40, 0x5, 0x1, 0x1c}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000003c0)={0xffff, "c25cacd8771e5486e44edb756b1c5d6bdae54790c9178269f5040e91f77011a90100de923acb1657adabaa378aa6cf1a217c708f44092ac0be1e878cfb2e61a1ad01040000670fa0e565e3211a93c594901ab7bac217e99d3f4ed101e3b5463d3d8709b94e3875bbef5382ec6da68299782bb5130c899b3820831ecca501b8ee7487f8bf675227f4f861e4c582ee09f0ba55662194e19516f736d3c437cfebce34379cd364c8a8c3cee03dffdc6c6a3a404e567fda7dd2e1a018c697bbd1bc0939a94f3b1da8c311fd381ace06a3ccde21c3f20a5a85bc6dc4ea59405ffc3d89fe0ffd19c99cf3c78781e500"}) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12d}, {&(0x7f0000000fc0)="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", 0x1ba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600", 0xeb}, {&(0x7f0000000040)="7542473782798be019c2", 0xa}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c00", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000d40)="527a464c354b9bc3aea3f585674edd616a86dbb824ae6f56cbb99d9fe986bdd2d1c0992390cd0829706c9aeea8236287a152a036c32ea310fc45c151b6a4d792512173f3f8b7d9e62f43", 0x4a}, {&(0x7f0000000e40)="db97f5edaebcd931613673ce29faa8312322e0", 0x13}, {&(0x7f0000000f40)="e66682ccc8e0a1a6135a56905dec98880e2dd7a128889996e4a59b89792e0191a6766e1d4aa90a684bb6fc7e8189a24b5661d7ca6fd4db59968112b8d07c16985fb918af1fd089080752624eaaaa25625fe0303785e03dc70ff58ca920d1ea5319e5634a384f76cba8f4a43e", 0x6c}, {&(0x7f00000012c0)="d1324a0f67e11b258fd466b0747266f69d9546f46fce69138b3f96b61ba9f5b438994e780b46ad6cb05912cbfabea02e572311e41591029697df8f32b7ae6103e8b70619285379ce280f8109cd92525d86f4b3b744d33fc7fe3f43b0b105675431fd41344ca491f43491c3ed66e295f6326bbeb10b8333c4dce128d7a5fc57f422bc81565e3284572ae5301459cf2193586894dd170aea5c2c69769451dd17", 0x9f}, {0x0}], 0x5}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) getsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0xfff, 0x420200) 6.855706637s ago: executing program 3 (id=53): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5dee, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x83, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6e, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x5, 0x12, "240011000300"/16}, {0x0, 0x9, "c8f46976e79e56"}]}, @lsrr={0x83, 0xf, 0xbb, [@empty, @rand_addr=0x64010101, @multicast2]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000100)=""/189) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@loopback, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) 5.952663263s ago: executing program 1 (id=57): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800a0000100002800c00148008001700", @ANYRES32=r0, @ANYBLOB="2ea2dffceb3b3a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3, 0xffff}, {0x8}}}, 0x24}}, 0x20008010) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="0000232fbeedc408", 0x8}, {&(0x7f0000000440)="546daa2328e6ee123090d2264092a2a909c4475c6dc30a53c11bc2ee0d66a1da2a39d242e71a7f0e6c1cfaeac36a0e9a0ab2dafb1b64389eb47da9054f87eb8e31ad55641f002e497ad7999b237855d951e38591de1bc1d699", 0x59}, {&(0x7f0000000540)="19866823dff13f9f3ca2fb47bef569f536634cb6b868be9023d327ebf7533f9354d010278c9d50", 0x27}], 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)="f7acdf49be8dbbbc9a74cfe6572c5258c78a166623d56541ec14b53acea730ea7e8fe46677b086b53fb50b528e21f7987c7cfd3bb314df67692cfa7bbb1316bb73f65679988676b016915c46b81ef6c41d470b4fae5b91760b5b6ed7963354d0c33ffdef22bae9cde38e87102154a8cada03cb5a11953ecad73b5df87ad4815d2ef8fe61a9002a7927", 0x89}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4091}], 0x1, 0x44000) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000005c0)={0x0, 0x0, '\x00', @raw_data=[0x8, 0xc, 0x80, 0x800, 0x6, 0xfffffffd, 0x5387a88f, 0x7ff, 0x7fffffff, 0x0, 0x3, 0x100, 0xff, 0xf, 0x400, 0x21, 0x8, 0x80000000, 0x0, 0x1, 0x400, 0x2cb, 0x2ccd, 0x9b, 0x0, 0x6, 0x2, 0xd, 0x4, 0x4a95, 0x2e, 0x5]}) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1}, 0x40010163) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) read(r0, 0x0, 0x70) poll(&(0x7f00000001c0)=[{r0, 0xa}], 0x1, 0x9) r8 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r8, 0x40445637, &(0x7f0000000140)={0x0, "c42e68848c23f06c24533283c4761272f298e3e99dc1450727d16a1d245b6d11", 0x0, 0x0, 0x1000, 0x4}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, 0x0, 0x107) 5.731787551s ago: executing program 1 (id=60): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x1, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2000000000], 0x0, 0x4000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x100000001, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0xc1101}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.369809048s ago: executing program 4 (id=62): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001280)={0x30000010}) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80800032d) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x20000000, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 5.115309601s ago: executing program 4 (id=65): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x121882, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000380)='\b', 0x1}], 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000040000100fcff070004000000010000000800cb800400088017239c27f6848115c96d95a989f3e8770d6e45f14c153957475ce17e1e8dbb7e0465e2dbb3680f7ad9a50b96cec66b8d965880280ce0693beda8174ca52ae6de7c8ce85d6dd1c48ce06c1e7935137a000000fdb31ad3ba7a5ad504a777f04812c2b691e23bc292dc6036f33012e30f297cca3d43b1269467984126b0c3a726e414a2968be71adeae9a5b55dca49c0692f8e5b3eee91456b05db7ca173a95d5e8f0e8751e60452def2b6c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffea3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6c, 0x0, 0x0, 0x2, '\x00', r5, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="465dc6", 0x3}], 0x1}}], 0x1, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000003c0)={@loopback, @broadcast}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000180)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000400)=0x1) 4.907730625s ago: executing program 2 (id=68): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 4.891491301s ago: executing program 2 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000480)=""/256, 0x100}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f00000011c0)=""/4104, 0x1008}, {&(0x7f0000000700)=""/176, 0xb0}], 0x7}, 0x22162) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@caif=@dgm, &(0x7f0000000140)=0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x47, 0x1, 0x539e09df839dfe94, "d3fa5b89042b0f0094c5164ce8e84e0d4c7b546787a700", 0x30314247}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x1, 0x1}, 0x3ff, 0x2, 0x0, 0x0, 0xb, 0x2, 0x0, 0xfffffffe, 0x208001, 0x0}) sendto$unix(r2, &(0x7f0000000800)="3920dd8f0e0dc4883ad6d3ad9b91424b3142cef53d3aa3c465ca893d3ab5cfac36b6026175c4a3a70783f467848adb1ff7a293a9a6d4955ef0ef76f1b26b120b48686ae77576c93555b51bd7cc3b517486c6b5cc606518a9ff988b057e7b6d40248453f22693ac01ca3c07", 0x6b, 0xc804, &(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000000040, 0x7, &(0x7f0000006680)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000200)='+A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r7, 0x0) ftruncate(r7, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) write$binfmt_elf32(r8, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x4, 0x5, 0x8, 0x200}, [{0x4, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6474e551, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x7, 0xa, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x3049, 0x8000, 0x7}]}, 0xb8) close(r8) timerfd_gettime(r8, &(0x7f00000000c0)) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4.710630116s ago: executing program 1 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10540, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x9, 0x1, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9000) write$sndseq(r6, &(0x7f0000000080), 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c00000400100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10036) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 4.38688517s ago: executing program 0 (id=72): socket(0x11, 0x3, 0x8) socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x4e24, 0x2, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "1d7950f7fefd40fdb6fd11acb320f941266be92562007cdb", "fabe5b2733d5fc55e032b32026fd2ee8899183f604eef208fc77d70b69a1aab7"}}}}}}, 0x0) 4.312569042s ago: executing program 0 (id=73): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)='2', 0x1}], 0x1) r1 = open$dir(0x0, 0x2800, 0x100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r1, r2, 0x9, 0x0) 4.190376337s ago: executing program 0 (id=74): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x490121c8}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="48bf0000", @ANYRES16=r1, @ANYBLOB="200027bd7000fbdbdf2511000000080005000500000034000180070006006c630000060004004e2100000c0007002800000008000000140003000000000000000000000000000000000008000400bb0700000800050009000000"], 0x60}}, 0x40000c0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz0\x00', {0x8, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x7f, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x1ff, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0xfff, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x86f8, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x2, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x5, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x4, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x401, 0x3, 0xfffffff9, 0x401, 0x401, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x10000000, 0x0, 0x6, 0x5, 0x4, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) unshare(0x28040680) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="940100fd2d7f49203ee64f0000000000ff020000000002000000000000000001e00000020000000000000000000000000000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e02010000000000000000000000000000000032000000ff020000000000000000000000000001fefffffffffffffffcffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c00000000000000580002006362632874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000004000000000000000000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x194}}, 0x440d1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r6, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x2, &(0x7f0000000000)={@multicast2, @loopback, @broadcast}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.667942115s ago: executing program 3 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa8083, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) poll(&(0x7f0000000340), 0x0, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) poll(&(0x7f0000000280)=[{r4, 0x6003}], 0x1, 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x80000001, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404d091}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x3, 0x3, 0x8001, 0x3, 0x8}, {0x8, 0x0, 0x8, 0x8, 0x5, 0xc}, 0x1000006, 0x8, 0x1457}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9a85e05b5271}, @TCA_TBF_BURST={0x8, 0x6, 0x7}]}}]}, 0x6c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r11, 0x1, 0x2e, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0xb, 0x4) 3.171778195s ago: executing program 0 (id=76): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5a1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x85) lseek(r7, 0xff, 0x2) getdents64(r7, 0x0, 0x4f) r8 = dup(r0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000140)="28a8394bc29f9f4db98b3e55716023b8123d579493564d01df7fc972b92627894bcbbc90d041a3a932f2ee07350eba87d953bf0a390303f95f5fcfad4d4d4cf88c3c", &(0x7f00000040c0)="4b0859a746b77540e5c2cfa88f3a47074dc6ffd2bbe300f1e5a6f6c1cd6d3681f5ce07c587eb0727de7138993fb9457cd77e3583c2452fc41ae47573f38bc743254e094b0aef89d24d4bf6a25b95cf42fe83705981a74b1119a1086cb3af17ed3dee7990fac27bf2e5bedf2927d5a68225eb51f3244f93a0e60c6b4c978fb917aab398761762ec58e4e0e8a105bcf6fd3550a7a4e950cae39f56f17a9daa61b4aa661c4e20dcd2b3519fa87bbbc70b5539e2e79bf2e9b34cbcec87475d07bd9f216d50bcd0b9e7706a397cb7bec825795eb698dfc1a2489b8bcecd095646e8623041d1ae6e08163c4c150fbf4a719059454952e642f624ee9d34ee247b4cb91d95c43c8e88b9cf4d029495ba9e54de6437beaddd84d92a483506dac3462c6e62590bfdcd65d33e12ea89369a299bd6b81216ed319cf5e07fca7d1e639d46cc9431d88c240b3e31d0e0e9500cbd06164d4985e73e01d61e2bcf2c1c86adcadb0a67d4dfafeeb88cba31f5361a0dcf570cd4e1faff93079ebf4c441129839529788958617b926a52ab4e0eed164c0b238ca45b0d78f976e38ed6dece3e046064de9ac05053e12b9e7bf4ac1d99b2582459b918fb5e26803bdcf1752c7cba2ca3a1fa903684dfc4f9e8ee9ed00d1715c17e2ea86096aedc6cf8443d4d8fc32ca4c48275dc82574636ef660864f09ffc460fcf486afeea81833ce369954955062177181ed2a78690c2fc49e953cc6306a3a0f83c0a6119ba1618cd44bd3ef3e9177d038478381cd94b8b6bee18171bdbc0c4af5aeb7c96d88d653974d40256b96c185bbb48e01fa42aee3951577122a880cf982b37ebf4b88c7f1dd8758c4dad676256a32c2ef6761703ed9ed5abc1f5d129d066a79a92eeaa726127b6048743504cdadca781ea9b2f7c3085dd50e2c91100f7bfdc24c0c12e6d90c482e1a2134f49dbaea71768824931d9cc812ad4d3a262620a19d2fa2c3cb71cfd19d049ca46624833a8f520a273209bd19f545260aec98d4b845bd47364e0f459eb689cd02c6c31c71fa3f99b3450d92ddf524bba29da142a1ac6d22129d6465782029b01b1f175eb978bdabc35d4dc8ce55111605c5a5900bac4903add7ee9d130b1d421a6c50e48f9db1a002b815149fb7b06196375349b643adb6575d65939f76f5e033df10581095985ac14da7a49331f74e713b161ada18bd74493c8222876d2bedcc51693d4b9bfa4c3068e14b39213e12c129f210381b00821be4c09c7621cd82f572a35cd330d6ed00194fb97c2df9f5efb6262c80e4377ca1af9fa4fe87b97af5d43d883e4e862f2920e56e0d03fe8b96199cec2eda8ee86ae185ef5532ef4b0de093742b9078a87e76eac5317269fa0d61b4443323cfdbf61bf65acfa22e97bd93822eec716c5261fb3efe2703773c05dd0c73f3f1819dd290a2fa76be3b2b098c49a647dfbf1719c1e8263f1355ac05b6b0a704abd0b1599274a09099f7eb40256eb90849a898a23cb1db9de48c6969fd46e6edfa7b787f96fbf9fd8bfa8abdde5ea101ebb801154dbdebe2a966ba5120d3a707ff3da08e9f84310938826955e2bd03454281c9a41dcb176f4d9d9617cbd529e35d37abbdbd4d2d1f186fdf8a91623993c9d8a53ac2a3a22df7df799f30685204acae5fb363a08d09a18990b76571eaba92ee8a2b9544a51c00b23187ef66e106ed9a0ef71afe7cc6c1eed501bb83cfbf0e31f058a9cb733a11423c6d9ae70dedc4bf634f9499663579e6af0ecb0f8ebc51dd72c3b924542fdddebfa7cd0f8ff1287d8f493af7871c3124bc309387f6e57a89b620e03d7b0d140b75512fbceb33778282e28b81b9c343affa122a39eb2666b607e3634f8e95d5b002c7e90a170eb580dee6a172408217a19f302d09b8d11d843ebd8d39c9ef12479d285f21004d6f1dcaae79b3361c0c5971d9787f8d1fb5ab00fdcc6852962a4e982f0b82b8bf9e562f9182aade127c9fa7f278a054b7950d4a53c2d1dcd4df89f606ddeb187d31702ff29066332913e81358af9888f79cf77fad5b0843cef0effacbdd805c03680737b6adb7cc1247ee7e92e12ca28d0129ca77d85627ae04d4affef3cbcbeabf805dd5294631a4f7a437bf10e7ca4ec4b1cf7c9f4e15843f6fd66534f79072e3ce8f22535e12dbe948c493d5553dde775796b03ea8f49b0abcbad5cd7fa6c17452e4a7b6df92adfc6f0955e4a3d88bbc1ff0f9cd50c32c3d4dad5bd66e6d1ef632ac13e9be0f30c46d7d965a07e6887b17f2ca259f99540953b76c4ca0fdba62bb66cf6077a0881a4d4129620578effc86278c96aff25971b85f288a1f8428f0770493727cf8ec8e059ecd9db49b025836f85c436e48b2aee5f9a5495f9e5f331d7cd15fcccf68df6a47d4658efd043542857db08c48dc8fde39342c569088254d760f319c017c516a35ed88e0c5ae8531bb4571b51719afee064a681b000fb4ace787c4f575400dd46f41512d6f85b364bb1078db6439847143781762ec66ed2475232d2c57b70dd0173be71fa223517dea1467087a238e1ad0b3fac65c1b68864eb1aeab6fc679efbe76699d2eb50364ab9e632a19b3e038cc944cf281ad4b1f6f859323963d12dc4c786b551abefc68f655383deddd0f74154aa5e9f91f060a512db1acabda88c5844ae43396683428ec46fcdb84c4839f9e70d65d48e0627f68b31e406336096bda79626545eadef85a77d2f112deac80dd77c7b4c34093271da9de93e050643e1626af0230abd361cafa0b29abe1b07c82a6f565dc6c11fff10f30f6a8553601a7b1b3a9665623364b427784223bbae9993170319063f4b4c33df05fd793b957e08eeaccd2a50cff00ba5991da44ca03eb3d3c79aa90f5e3575b86bbf4881197c9f300905a895e5cc1d03b60eb5897089bf4bc33131a3a992497cc331ac2020cadc1d0ad435d4532fe2707d64964ab29eea2422577ee355149d4d494cf015817f7dd8c0731565f1a8bfed3a8a7c59ce941816ffbc80e8d7b8b59b35b09c725d417fa9fd3b86076acba8fc6b637b68733ab41ba9af50acb28c093269f7981339cf58314bee8f4f053793603d17c9083b6c7a0d7cf843c1d7b1c3435d221d74c2a27278fbe3d3e6885e1333977f7f9b41b9a52c7acbc93573a313b71bbb1c62ef195f4ac6e45d8e2498c87af23501a1d853a21c147d266dd37c9bdbf7060b03159b726f60b43e89afd1116ac39127689a2fd29ee791c05b289d06077290ab9bf11d840cc298defe38b6117e7cf9874564adbe649a1288fc6d45bf36c4cdd3cb2cce624d581d1a84be5eea64ce35ccaa0184715dce0acf80a3cbab31c7d2657490a6b4fdfa1ab2b42f061c2a038de43729b800f40786e1e7ac43db91b2b5fb595b42528a1122f297c678ff2623d7e97d1f68802b0ebff20e6c55e693b367cb19645ba04dee94ff86f76b723cd304369c9f0313275a65c24146fe90c699a0e9f7cc02f22f5e28e70a513d0546213bf215b5164cd0178cd4338b9b3a2efe54270cf38668e965e14f0bc33813e0706804555cd727c41e54eb8485afc9ad812695975e80e9c970722b16f27afacaec24f0d310ed17edbb95bd70fb896ffba9c9986b49fd9ac3c1f24ff778d73db9a130abb2631b8cdb698959fdfe48a921e8024ce760dfc9f9fbff74bc60226d3779e7898264bfe565665e5d65d1f23df062487062280a731d2af85b9e70ae71454f6c1f05b244797c98a42a11eaa5be87e94b0efeb4c901000000010000004691a0673e6be31a8d15bb42c69c2a0ff5c357cff80948fc858aff4394453e4ec663f749b27db84e7fc3a56c78549a94b8bc88c419b81b1ddcd39a6fcbb3ea06eccb5016fab88ce519f2ecde10bfc307d83af7bdad505634bf490c9d943ffe3497a69279bd9b46a8a11298b68d0198cc6b7cd8087b3d25b50872b2aea4f1bc190f07c44b2ed104d88e66c2b43403c7b6be58ed0a98b375826512d18f7b45cf0ebd067a2864d925ef2a158e8b27c39a8b8e5974bd939bcbc26553bfc6187d95c6c39b56eaa3253b03fcdd76216c4838fbfd643e84ea9f1dd72e4619a4e80d36e35c01818ab00b91fba85bafeb53833b77b6e4d6fa07102237513c1476a363c7fb233b81719173ab722d831c82ab8a0c73010a5f74336b3a4567e533d6c784fa1474c4f82479f98eb9595495cfc33710ea808e365cbe43246c4c79dd5820a85bb6bfbc496dfb43701c11e35a7b5678f7c5979f804c6f55fade6f2a14de76d738c22dfb11e13bcdb8d760cd09feac0094e5c74b0e5d9321f6e6f68fa6983c856c0a083e800fa51a4138dc62d875efeaf04ddfa9a8ad42fbd3f608ec8ea9be8640cdfddf93e01f4ec9c2537d9fa6c207e00a3cbb5ba134585f8dd88ff6de97ebfbad6cfec17813f072f38784a8ab4b9d2d5f7344c2ec8202a524cc6d50a2385fc333c6ea882e58fa8c35c4eadbd715e396a5df05ca19f6fa082cbe6a4dffe3cb5a7930571481ac6b2baf12bac56e74a1ac701d0c3ece59f153746b2883913e0cac79ab7af1e8f6982b20abce44913b99773805d70d6886a20401d7844cf06d34e68230cffb556271c79de9e41e08690a4d1a3ea908576caf0c5a270b9277420a423e563807bfb7537087f42b6ddb7aa0e72e8685cb09eb84c93e625f119d43ea4e5b49bf94c0db4b7076a99bfc1fedd71925c791029ac7c0381d0c77d2a328d9f0dc182fbfa266cee0ece9f4cb9f69818d1907f59d41307583880c601b33e5c13b78b0cf35193c7b00019f714584df2fb7672945073db638a57a6539324c9c08b63c66388ff0bd86db348a8f2285a50016818cb3f521e2ce7df2479679561ce5f254ac5a2e2ef31bea32414df575c27d57e9d3a415a81c782e9102d281ddec09686f0c73f6e2f494f54f52e24aefda7707aadde9ffdc87146f5a66c5722c9e727dd4398662bd73189dac5c876fa074a9ab9c6606c9036584a8d8d9fd5bc16b30067156c01a99ca17223add448e3e014e7e4349b5ac3b2bf198d86d2701345f75b55cf27ea94403793e2392f72ed5d554d5ceea7f1c5303ffb8bcf087f31cc8498ed8e110fffedd38dd490067f3291c209e887c987c2ef860ad4f17fed34277a144ba1519d6d80fe84de356155ec7337aa703c4be2cc83b3362f691460982094c3ac0a5aa54ac58f77182dd3dae21378c5596e50ee6d2eb917ce3201938e00be6cd14602093146fab90d16fe63c3c5dfdf02f0f08fc638653a8c2c2382b8c60be2bc3e8951d29998e6bb515ab7dcd7b1969dcb4ce6079e59ab9c1bda285824f9dabcd95661857d614493344419c881035185cda03a058b87c445b17a986526ccf23dcf47b87756e9134bb939f6bcf6217a1237e958e748b1d8c8e6260d6cd4aadc829be3a9ea3d3561144a6b1b83ccdd7adba3400e72fe7077a15a7dfe89c09bbd6059ee5d47ec48b9ca1a10e905c271664cc81e9686baeea92045593de35335f5ef5c18358338169e8a17a84d94ee25ecfca40e023c25dd926af4367b3a2b282d5f0c3587f0714aca90b928d66f75a23710152a8441c6d90147ef9afe1d7fb28696dc6a5b14ca1cb7d65d8ecb9a1629900d509fd61c38af2349c318b1921fe9976a0fe442239de8655483408bd0abc18255508f0d2d3613e09d0ef47f71ad53256d01443be1dffc0ce4350df282a82651e37808a87fa26540790cabd97b96d0289c5b608319373a2ae86a80c1f48d0c3b8f7800a23a4ed9c22378d157d57d9cb87ae9775778209806dde70ad50b0455257a512bd1726b842b0780919de"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r10, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c87b0073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/261], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r11 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x101081) ioctl$HIDIOCGFEATURE(r11, 0xc0404807, &(0x7f00000000c0)={0x4, "ccc0dde4b00a6d2c16b99a7fd0d48117b817abfccfa3806091bcc9f67e3de361a9172be4c429adba1c63d1674a55890c3e46ca658ca8939b7fc9c8f133dd3351"}) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3.041707489s ago: executing program 3 (id=77): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmmsg$unix(r1, &(0x7f0000000700)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="a28bdbd53fa214050c08eb545a4de9aa15b36f1ff44f92764024311cde5149dec8fb0f09d4ed34cefa39fbd5583b24e871c5656fceb499e2c04637ca5b9bd1969c0d37b9ac8d4e139e79dd698a7cd9afbe266b98585c85db65a91723161f7e2f0d612b0e6a", 0x65}, {&(0x7f00000004c0)="5fbe7b882b5f3ea28615c65bf394d986acc202c10be6f2dea583e3fcca60fe79b9fab8b817e03d76d1f649906a53f0de1a50ae1e8e55049a1f7f1e0f3b75c4cd69", 0x41}, {&(0x7f00000005c0)="ade5a34e97108380b646410c655a3254238ab9d3eceb8670e0b8f301664bc0d13f9e6faf6e42694781fa2f98d21b6c8b30fc2ffe349afbb2f734524be115587d7247180d4960fdec9bb561f6b7c123060d13facfdb08c579131c6c64a7ffc13ba95cc463a2b217cafbef429039699962f700412c6a0d1cb9e91de0e919eba7128c3085c4125fd623005551d63f41deb8998ec12d0ff4f6a55dbf8a98d161f9fdc8591a4c7f5ef3a70f23eea475c3daf53608c182dfaed742013147792353bb9a959d1e781316f37228a1", 0xca}], 0x3, &(0x7f00000006c0), 0x0, 0x880}}], 0x1, 0x10) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e33224dc00000000000000000073790400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200008009100000009000000010000800000000888ee9fdb45ada97dd28bc7af929edb66bbd02e523d043bf43903fe740b612ae9"], 0x138) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f00000004c0)={0x0, 0x1, &(0x7f00000006c0), &(0x7f00000003c0)}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000007ffc, 0xe, 0x4, 0x4, 0xa, 0x1000, 0xd35, 0x0, 0x7ffffeffffffb, 0x5, 0x8000000000000001, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xbde], 0x2, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x8, 0x9, 0xd5}, 0x14) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2"], 0x0) (async, rerun: 64) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x41e, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fe8000000000000000000000000000bb7f0000010500000000000000000000004e2300014e2300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000004d532000000fc010000000000000000000000000001fefffffffffffffffdffffffff7fffff00000000000000000010000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000006000000000000000200000000000000000000000000000007350000020004007d00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0xffffff03}}, 0x4050) (async, rerun: 32) syz_usb_connect$uac1(0xc465ee9aff117ea6, 0x71, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011003000000100140000102030109025f000301007d000904000000010100000a24010000000002010209040100000102000009040101010102000009050109000000006eee54c9000025010000000009040200000102000009040201010102000009058209000000000000250100000000000000"], 0x0) (rerun: 32) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000740)={0x2, {0x2, 0x1, 0x5, 0xffff, 0x9, 0x2}}) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x19, 0x5, "cc7d45a830efb0d768d9ebf448ed12827187fff9e30891461936f6c9443071699b6cc1d4930d977bfb9ee244edf316283c1a3a8ebc23bb56fefdd1c5654ceb2d", "1882d2ec7eba2ea433ba8d94b01659b5398b86944d235d40735c592ec6fca9b0", [0x5, 0x80000000]}) 2.684946437s ago: executing program 1 (id=78): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@mmap={0x5, 0x3, 0x4, 0x8, 0x8, {r1, r2/1000+60000}, {0x3, 0x0, 0x3, 0x3, 0x9, 0xdb, "06110e83"}, 0x4, 0x1, {}, 0x4, 0x0, r3}) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d5190203010902b408048006a00309047f0e01ff25de700a240101954c0201020824050503e31ef45d2f9c10879644f5c57f5c3b7dc071f3bf630573ae6c3dffa8b66c6bbc1a"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) 2.467641161s ago: executing program 2 (id=79): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffef1, 0x0, 0x0, 0x46881}, 0x240048d4) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 2.467503863s ago: executing program 3 (id=80): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0x18}, 0x8050) (fail_nth: 18) 2.212257288s ago: executing program 0 (id=81): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1.961762219s ago: executing program 0 (id=82): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = syz_clone(0x20008200, 0x0, 0xe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0xdd703f61efd88e4, 0x0, 0x0, 0x8}) setpgid(r2, r2) setpgid(0x0, r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x8, 0x7}, 0x90) tkill(r2, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) uname(&(0x7f0000000640)=""/4096) wait4(r2, 0x0, 0x0, 0x0) 1.880791634s ago: executing program 3 (id=83): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x68}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x3, 0x7, 0x1, 0x0, 0x800}]}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$HIDIOCGUSAGE(r2, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0x3, 0x7, 0xff, 0x1, 0x6c1}) read$char_usb(r2, 0x0, 0x0) 1.880444216s ago: executing program 4 (id=84): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)='2', 0x1}], 0x1) r1 = open$dir(0x0, 0x2800, 0x100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r1, r2, 0x9, 0x0) 1.667306495s ago: executing program 4 (id=85): clock_settime(0xfffffff8, &(0x7f0000000140)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005540), 0x80000, 0x0) fchmod(r0, 0x110) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0x3}) r1 = semget(0x1, 0x3, 0x92) semtimedop(r1, &(0x7f0000000040)=[{0x3, 0x81, 0x1000}, {0x0, 0x8, 0x1000}, {0x5, 0x6}, {0x1, 0x0, 0x1800}, {0x2, 0x9, 0x1000}], 0x5, &(0x7f0000000080)) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xf16f, 0x3}, 0x18, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a00801cff0000010200010014000200fc020000000000000000000000000000050019"], 0x38}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TIOCGICOUNT(r4, 0x5409, 0x0) landlock_restrict_self(r2, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0xc300}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) semop(r1, &(0x7f0000000100)=[{0x0, 0x6c03, 0x1800}, {0x2, 0x5, 0x1000}], 0x2) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000300)=""/96) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xe0) 1.027914088s ago: executing program 4 (id=86): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x201, 0x5}) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000ac0)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e930102030109021200"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xb9, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x4, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x20}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x1, 0x4, 0x3ff, 0x9, 0x6}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x0, "ce7239a723"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x45f8, 0x7, 0x7, "0194fa9e"}, @as_header={0x7, 0x24, 0x1, 0xc3, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0x2, 0x60, {0x7, 0x25, 0x1, 0xc, 0x8, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0xd3, "b3a52529"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x5, 0x3, 0xf9}, @as_header={0x7, 0x24, 0x1, 0x3, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x9, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7}}}}}}}}]}}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000000c0)={0x11, 0x40, 0x5, 0x1, 0x1c}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000003c0)={0xffff, "c25cacd8771e5486e44edb756b1c5d6bdae54790c9178269f5040e91f77011a90100de923acb1657adabaa378aa6cf1a217c708f44092ac0be1e878cfb2e61a1ad01040000670fa0e565e3211a93c594901ab7bac217e99d3f4ed101e3b5463d3d8709b94e3875bbef5382ec6da68299782bb5130c899b3820831ecca501b8ee7487f8bf675227f4f861e4c582ee09f0ba55662194e19516f736d3c437cfebce34379cd364c8a8c3cee03dffdc6c6a3a404e567fda7dd2e1a018c697bbd1bc0939a94f3b1da8c311fd381ace06a3ccde21c3f20a5a85bc6dc4ea59405ffc3d89fe0ffd19c99cf3c78781e500"}) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12d}, {&(0x7f0000000fc0)="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", 0x1ba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600", 0xeb}, {&(0x7f0000000040)="7542473782798be019c2", 0xa}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c", 0x24}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000d40)="527a464c354b9bc3aea3f585674edd616a86dbb824ae6f56cbb99d9fe986bdd2d1c0992390cd0829706c9aeea8236287a152a036c32ea310fc45c151b6a4d792512173f3f8b7d9e62f43", 0x4a}, {&(0x7f0000000e40)="db97f5edaebcd931613673ce29faa8312322e0", 0x13}, {&(0x7f0000000f40)="e66682ccc8e0a1a6135a56905dec98880e2dd7a128889996e4a59b89792e0191a6766e1d4aa90a684bb6fc7e8189a24b5661d7ca6fd4db59968112b8d07c16985fb918af1fd089080752624eaaaa25625fe0303785e03dc70ff58ca920d1ea5319e5634a384f76cba8f4a43e", 0x6c}, {&(0x7f00000012c0)="d1324a0f67e11b258fd466b0747266f69d9546f46fce69138b3f96b61ba9f5b438994e780b46ad6cb05912cbfabea02e572311e41591029697df8f32b7ae6103e8b70619285379ce280f8109cd92525d86f4b3b744d33fc7fe3f43b0b105675431fd41344ca491f43491c3ed66e295f6326bbeb10b8333c4dce128d7a5fc57f422bc81565e3284572ae5301459cf2193586894dd170aea5c2c69769451dd17", 0x9f}, {0x0}], 0x5}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) getsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0xfff, 0x420200) 795.425758ms ago: executing program 2 (id=87): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r1, r0, 0x0, 0x1ffffffffffffe) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f597dd27c9d4549ef02f5a000000000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 748.974337ms ago: executing program 1 (id=88): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) unshare(0x20000400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x20000890) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1b) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) 451.704362ms ago: executing program 1 (id=89): r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x100000, 0x10000000}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x0, 0x8], 0x2) 342.704334ms ago: executing program 2 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000026c0)=@svm={0x1, 0x1, 0x1080, {0xeeee0000}, {"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"}}) 166.90964ms ago: executing program 3 (id=91): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x800) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe0320000c"], 0x58) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x10000) io_uring_enter(r2, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x6516, 0x6d93, 0x8, 0x0, 0x204) (fail_nth: 3) 0s ago: executing program 2 (id=92): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x7b) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ddc, 0x3, 0x80}, {0x7, 0x2, 0x1, 0xd72}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="88", 0x5dc}], 0x1}, 0x8014) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/166, 0xa6, 0x3) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) close(0x3) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x80, 0x3, 0xc1}) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2f0d000000000000650000042190780a010101ac14140c8308a464e654cfb786060000000200004e214e2204519078089cc7e80394125f"], 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="020025bd70007e9fcfb3f4f89965edf1fddbdf250c000000050029000000000008003100f2ff0018080032000000008005002a0000000000080034006018000005002a000100000005002e0006000000060028000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x100, 0x70bc25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xe, 0xe}, {0xf, 0xffff}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}, {0x39, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 70.892952][ T5827] cgroup: Unknown subsys name 'net' [ 71.003056][ T5827] cgroup: Unknown subsys name 'cpuset' [ 71.011798][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.642693][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.649802][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.447333][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.423022][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.432102][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.434715][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.446881][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.451806][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.462260][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.462341][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.477957][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.485413][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.493597][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.502650][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.503234][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.520721][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.529537][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.536910][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.538513][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.545231][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.553002][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.559730][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.567660][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.573499][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.581476][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.596954][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.605546][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.613997][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.226226][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 75.289944][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 75.319161][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 75.409783][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 75.513288][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 75.560535][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.568718][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.576445][ T5856] bridge_slave_0: entered allmulticast mode [ 75.583806][ T5856] bridge_slave_0: entered promiscuous mode [ 75.630369][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.637734][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.645035][ T5856] bridge_slave_1: entered allmulticast mode [ 75.652256][ T5856] bridge_slave_1: entered promiscuous mode [ 75.674793][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.682007][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.689461][ T5854] bridge_slave_0: entered allmulticast mode [ 75.696365][ T5854] bridge_slave_0: entered promiscuous mode [ 75.730358][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.737679][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.744881][ T5855] bridge_slave_0: entered allmulticast mode [ 75.752204][ T5855] bridge_slave_0: entered promiscuous mode [ 75.759491][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.766632][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.774068][ T5854] bridge_slave_1: entered allmulticast mode [ 75.781996][ T5854] bridge_slave_1: entered promiscuous mode [ 75.813330][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.820568][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.827940][ T5855] bridge_slave_1: entered allmulticast mode [ 75.834882][ T5855] bridge_slave_1: entered promiscuous mode [ 75.858607][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.867942][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.875077][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.884337][ T5853] bridge_slave_0: entered allmulticast mode [ 75.891512][ T5853] bridge_slave_0: entered promiscuous mode [ 75.899544][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.907174][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.914539][ T5853] bridge_slave_1: entered allmulticast mode [ 75.922183][ T5853] bridge_slave_1: entered promiscuous mode [ 75.963355][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.003906][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.042681][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.054424][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.063941][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.071176][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.078622][ T5857] bridge_slave_0: entered allmulticast mode [ 76.085497][ T5857] bridge_slave_0: entered promiscuous mode [ 76.094431][ T5856] team0: Port device team_slave_0 added [ 76.103201][ T5856] team0: Port device team_slave_1 added [ 76.111159][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.125924][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.154346][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.161587][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.168992][ T5857] bridge_slave_1: entered allmulticast mode [ 76.175817][ T5857] bridge_slave_1: entered promiscuous mode [ 76.192843][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.213288][ T5854] team0: Port device team_slave_0 added [ 76.254549][ T5854] team0: Port device team_slave_1 added [ 76.270347][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.277368][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.303827][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.325528][ T5855] team0: Port device team_slave_0 added [ 76.342917][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.352706][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.359922][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.386253][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.398773][ T5853] team0: Port device team_slave_0 added [ 76.406175][ T5855] team0: Port device team_slave_1 added [ 76.422179][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.454396][ T5853] team0: Port device team_slave_1 added [ 76.469964][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.477171][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.503614][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.553211][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.560471][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.586502][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.598760][ T5840] Bluetooth: hci1: command tx timeout [ 76.598767][ T5847] Bluetooth: hci3: command tx timeout [ 76.610450][ T50] Bluetooth: hci0: command tx timeout [ 76.619370][ T5856] hsr_slave_0: entered promiscuous mode [ 76.625713][ T5856] hsr_slave_1: entered promiscuous mode [ 76.642488][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.649680][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.675635][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.686940][ T50] Bluetooth: hci2: command tx timeout [ 76.692809][ T5840] Bluetooth: hci4: command tx timeout [ 76.694544][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.705509][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.731696][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.751724][ T5857] team0: Port device team_slave_0 added [ 76.760194][ T5857] team0: Port device team_slave_1 added [ 76.766393][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.773408][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.799338][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.828441][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.835473][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.861768][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.940280][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.947319][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.973810][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.986061][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.993071][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.018991][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.035952][ T5855] hsr_slave_0: entered promiscuous mode [ 77.042288][ T5855] hsr_slave_1: entered promiscuous mode [ 77.048677][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 77.054482][ T5855] Cannot create hsr debugfs directory [ 77.096168][ T5854] hsr_slave_0: entered promiscuous mode [ 77.102557][ T5854] hsr_slave_1: entered promiscuous mode [ 77.109034][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 77.114812][ T5854] Cannot create hsr debugfs directory [ 77.142369][ T5853] hsr_slave_0: entered promiscuous mode [ 77.148958][ T5853] hsr_slave_1: entered promiscuous mode [ 77.155002][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 77.161035][ T5853] Cannot create hsr debugfs directory [ 77.275847][ T5857] hsr_slave_0: entered promiscuous mode [ 77.282285][ T5857] hsr_slave_1: entered promiscuous mode [ 77.288511][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 77.294281][ T5857] Cannot create hsr debugfs directory [ 77.690066][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.701807][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.715663][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.728112][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.746663][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.756465][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.764512][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.775854][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.832100][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.841785][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.850352][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.861487][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.870133][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.882774][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.899536][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.909073][ T5855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.000638][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.015695][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.024437][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.035067][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.050028][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.061732][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.069803][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.079985][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.195131][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.206736][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.222819][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.233975][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.243020][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.252646][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.260882][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.270588][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.316130][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.383546][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.394531][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.404429][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.414972][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.427459][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.449533][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.460235][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.468811][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.479880][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.492866][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.513998][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.521564][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.551968][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.559227][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.590983][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.623545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.630686][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.663943][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.671085][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.679591][ T5840] Bluetooth: hci1: command tx timeout [ 78.682755][ T50] Bluetooth: hci0: command tx timeout [ 78.691419][ T5840] Bluetooth: hci3: command tx timeout [ 78.692745][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.760945][ T50] Bluetooth: hci4: command tx timeout [ 78.760957][ T5840] Bluetooth: hci2: command tx timeout [ 78.778501][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.814428][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.821721][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.844969][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.852112][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.865853][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.934004][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.949113][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.982667][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.989799][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.019859][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.026974][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.043376][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.077373][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.113508][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.138159][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.145293][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.164627][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.192958][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.200087][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.218837][ T5856] veth0_vlan: entered promiscuous mode [ 79.276926][ T5856] veth1_vlan: entered promiscuous mode [ 79.327197][ T5855] veth0_vlan: entered promiscuous mode [ 79.353199][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.362519][ T5853] veth0_vlan: entered promiscuous mode [ 79.393013][ T5855] veth1_vlan: entered promiscuous mode [ 79.406673][ T5856] veth0_macvtap: entered promiscuous mode [ 79.415200][ T5853] veth1_vlan: entered promiscuous mode [ 79.433538][ T5856] veth1_macvtap: entered promiscuous mode [ 79.485605][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.514438][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.548250][ T5855] veth0_macvtap: entered promiscuous mode [ 79.560727][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.574526][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588369][ T5853] veth0_macvtap: entered promiscuous mode [ 79.595997][ T5855] veth1_macvtap: entered promiscuous mode [ 79.604471][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.614224][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.642748][ T5853] veth1_macvtap: entered promiscuous mode [ 79.659129][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.666331][ T5854] veth0_vlan: entered promiscuous mode [ 79.711913][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.725791][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.733999][ T5854] veth1_vlan: entered promiscuous mode [ 79.770086][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.792725][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.837423][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.852701][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.873814][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.885341][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.920508][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.929889][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.952910][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.978707][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.987454][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996741][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.996830][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.034942][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.063200][ T5857] veth0_vlan: entered promiscuous mode [ 80.094658][ T5854] veth0_macvtap: entered promiscuous mode [ 80.150727][ T5854] veth1_macvtap: entered promiscuous mode [ 80.161907][ T5857] veth1_vlan: entered promiscuous mode [ 80.165153][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.188715][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.196933][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.292731][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.303646][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.315763][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.330180][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.401415][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.410658][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.442499][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.452326][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.458441][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.469124][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.517210][ T5933] mmap: syz.2.3 (5933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.553851][ T5857] veth0_macvtap: entered promiscuous mode [ 80.576672][ T5857] veth1_macvtap: entered promiscuous mode [ 80.596924][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.628581][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.733089][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749774][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.750735][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.770517][ T50] Bluetooth: hci3: command tx timeout [ 80.771921][ T5840] Bluetooth: hci1: command tx timeout [ 80.776072][ T50] Bluetooth: hci0: command tx timeout [ 80.816139][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.839249][ T50] Bluetooth: hci4: command tx timeout [ 80.839259][ T5847] Bluetooth: hci2: command tx timeout [ 80.886796][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.961111][ T1129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.981164][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.993121][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.014214][ T1129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.036057][ T1129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.046653][ T1129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.191912][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.229354][ T3115] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.246718][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.363483][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.384070][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.393436][ T29] audit: type=1326 audit(1776965677.346:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x0 [ 81.460453][ T3115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.494097][ T3115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.514369][ T3115] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.545498][ T3115] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.574926][ T3115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.629251][ T3115] usb 2-1: config 0 descriptor?? [ 82.110265][ T5961] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 82.187698][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.359193][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 82.379232][ T46] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 82.413243][ T46] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 82.423882][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.458899][ T46] usb 1-1: Product: syz [ 82.470144][ T46] usb 1-1: Manufacturer: syz [ 82.481578][ T46] usb 1-1: SerialNumber: syz [ 82.516331][ T46] usb 1-1: config 0 descriptor?? [ 82.545026][ T46] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 82.571328][ T46] usb 1-1: setting power ON [ 82.585293][ T46] dvb-usb: bulk message failed: -22 (2/0) [ 82.611325][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.623311][ T46] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 82.634460][ T46] usb 1-1: media controller created [ 82.664718][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.707209][ T46] usb 1-1: selecting invalid altsetting 6 [ 82.714412][ T46] usb 1-1: digital interface selection failed (-22) [ 82.722519][ T46] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 82.741366][ T46] usb 1-1: setting power OFF [ 82.750524][ T46] dvb-usb: bulk message failed: -22 (2/0) [ 82.760872][ T46] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 82.761693][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 82.771212][ T46] (NULL device *): no alternate interface [ 82.789532][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 82.844804][ T5847] Bluetooth: hci0: command tx timeout [ 82.844834][ T5840] Bluetooth: hci3: command tx timeout [ 82.856707][ T50] Bluetooth: hci1: command tx timeout [ 82.878927][ T46] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 82.898972][ T46] usb 1-1: USB disconnect, device number 2 [ 82.918871][ T5840] Bluetooth: hci4: command tx timeout [ 82.924602][ T50] Bluetooth: hci2: command tx timeout [ 83.078477][ T5975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.244138][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.258993][ T5975] usb 5-1: config 3 has an invalid interface number: 73 but max is 1 [ 83.267317][ T5975] usb 5-1: config 3 has no interface number 1 [ 83.274250][ T5975] usb 5-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 83.285993][ T5975] usb 5-1: config 3 interface 0 has no altsetting 0 [ 83.293020][ T5975] usb 5-1: config 3 interface 73 has no altsetting 0 [ 83.307172][ T5975] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 83.316782][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.326917][ T5975] usb 5-1: Product: syz [ 83.331415][ T5975] usb 5-1: Manufacturer: syz [ 83.336166][ T5975] usb 5-1: SerialNumber: syz [ 83.777738][ T5924] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.959283][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 83.979691][ T3115] usbhid 2-1:0.0: can't add hid device: -71 [ 83.988160][ T3115] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 83.988528][ T5924] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 84.014899][ T3115] usb 2-1: USB disconnect, device number 2 [ 84.028759][ T5924] usb 1-1: config 0 has no interface number 0 [ 84.045195][ T5924] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.060172][ T5924] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 84.077102][ T5924] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.089335][ T5924] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.103414][ T5924] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 84.113299][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.160919][ T5924] usb 1-1: config 0 descriptor?? [ 84.200997][ T5994] FAULT_INJECTION: forcing a failure. [ 84.200997][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.215131][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 84.215161][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.215179][ T5994] Call Trace: [ 84.215194][ T5994] [ 84.215201][ T5994] dump_stack_lvl+0xe8/0x150 [ 84.215244][ T5994] should_fail_ex+0x412/0x560 [ 84.215275][ T5994] _copy_from_user+0x2d/0xb0 [ 84.215297][ T5994] ___sys_sendmsg+0x1c6/0x360 [ 84.215318][ T5994] ? __lock_acquire+0x6b5/0x2cf0 [ 84.215345][ T5994] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.215389][ T5994] ? __fget_files+0x2a/0x420 [ 84.215407][ T5994] ? __fget_files+0x3a0/0x420 [ 84.215434][ T5994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 84.215455][ T5994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 84.215482][ T5994] ? __pfx_ksys_write+0x10/0x10 [ 84.215512][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.215531][ T5994] do_syscall_64+0x15f/0xf80 [ 84.215555][ T5994] ? trace_irq_disable+0x3b/0x140 [ 84.215578][ T5994] ? clear_bhb_loop+0x40/0x90 [ 84.215601][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.215618][ T5994] RIP: 0033:0x7f44fd59c819 [ 84.215640][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.215653][ T5994] RSP: 002b:00007f44fe43f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.215679][ T5994] RAX: ffffffffffffffda RBX: 00007f44fd816090 RCX: 00007f44fd59c819 [ 84.215691][ T5994] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000005 [ 84.215700][ T5994] RBP: 00007f44fe43f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.215708][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.215715][ T5994] R13: 00007f44fd816128 R14: 00007f44fd816090 R15: 00007f44fd93fa48 [ 84.215736][ T5994] [ 84.413114][ T5924] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 84.655979][ T5975] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 84.689684][ T5975] dvb_usb_af9035 5-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 84.755261][ T10] usb 1-1: USB disconnect, device number 3 [ 84.776790][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 84.829978][ T5999] loop5: detected capacity change from 0 to 7 [ 84.882482][ T5975] usb 5-1: USB disconnect, device number 2 [ 84.910543][ T5999] Dev loop5: unable to read RDB block 7 [ 84.929039][ T5999] loop5: AHDI p1 [ 84.944798][ T5999] loop5: partition table partially beyond EOD, truncated [ 85.150864][ T6002] xt_TCPMSS: Only works on TCP SYN packets [ 85.185982][ T6009] netlink: 'syz.4.25': attribute type 15 has an invalid length. [ 85.206312][ T6009] netlink: 666 bytes leftover after parsing attributes in process `syz.4.25'. [ 85.379599][ T806] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.414858][ T6016] FAULT_INJECTION: forcing a failure. [ 85.414858][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.435422][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 85.435447][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.435457][ T6016] Call Trace: [ 85.435466][ T6016] [ 85.435474][ T6016] dump_stack_lvl+0xe8/0x150 [ 85.435507][ T6016] should_fail_ex+0x412/0x560 [ 85.435538][ T6016] _copy_from_iter+0x1d3/0x1670 [ 85.435560][ T6016] ? rcu_is_watching+0x15/0xb0 [ 85.435585][ T6016] ? __pfx__copy_from_iter+0x10/0x10 [ 85.435608][ T6016] ? netlink_sendmsg+0x650/0xb40 [ 85.435624][ T6016] ? skb_put+0x11b/0x210 [ 85.435643][ T6016] netlink_sendmsg+0x6c0/0xb40 [ 85.435666][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.435686][ T6016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 85.435707][ T6016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.435732][ T6016] ____sys_sendmsg+0x972/0x9f0 [ 85.435753][ T6016] ? __might_fault+0xaf/0x130 [ 85.435777][ T6016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.435803][ T6016] ? import_iovec+0x73/0xa0 [ 85.435826][ T6016] ___sys_sendmsg+0x2a5/0x360 [ 85.435844][ T6016] ? __lock_acquire+0x6b5/0x2cf0 [ 85.435872][ T6016] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.435918][ T6016] ? __fget_files+0x2a/0x420 [ 85.435935][ T6016] ? __fget_files+0x3a0/0x420 [ 85.435960][ T6016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 85.435982][ T6016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.436009][ T6016] ? __pfx_ksys_write+0x10/0x10 [ 85.436037][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.436057][ T6016] do_syscall_64+0x15f/0xf80 [ 85.436082][ T6016] ? clear_bhb_loop+0x40/0x90 [ 85.436103][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.436129][ T6016] RIP: 0033:0x7fce1039c819 [ 85.436145][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.436158][ T6016] RSP: 002b:00007fce1125e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.436177][ T6016] RAX: ffffffffffffffda RBX: 00007fce10615fa0 RCX: 00007fce1039c819 [ 85.436188][ T6016] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 85.436198][ T6016] RBP: 00007fce1125e090 R08: 0000000000000000 R09: 0000000000000000 [ 85.436207][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.436216][ T6016] R13: 00007fce10616038 R14: 00007fce10615fa0 R15: 00007fce1073fa48 [ 85.436241][ T6016] [ 85.467733][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.483946][ T6020] capability: warning: `syz.3.26' uses 32-bit capabilities (legacy support in use) [ 85.792417][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 85.835506][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.852166][ T806] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 85.869363][ T10] usb 5-1: config 0 has no interfaces? [ 85.871196][ T806] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.884806][ T10] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 85.884837][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.884858][ T10] usb 5-1: Product: syz [ 85.884871][ T10] usb 5-1: Manufacturer: syz [ 85.884885][ T10] usb 5-1: SerialNumber: syz [ 85.921671][ T10] usb 5-1: config 0 descriptor?? [ 85.926709][ T806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.937713][ T806] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.948367][ T806] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.984137][ T806] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.027497][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.187779][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.337149][ T6034] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 86.348176][ T6034] PKCS7: Only support pkcs7_signedData type [ 86.397712][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 86.413569][ T10] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 86.434008][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.446405][ T10] usb 1-1: Product: syz [ 86.451642][ T10] usb 1-1: Manufacturer: syz [ 86.460458][ T10] usb 1-1: SerialNumber: syz [ 86.515214][ T10] usb 1-1: config 0 descriptor?? [ 86.760645][ T10] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 86.778228][ T10] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 86.859122][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.871132][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.972686][ T6026] fuse: Bad value for 'fd' [ 87.024643][ T46] usb 1-1: USB disconnect, device number 4 [ 87.055326][ T6034] usbtmc 2-1:16.0: simple control status returned 34 [ 87.063427][ T24] cfg80211: failed to load regulatory.db [ 87.254517][ T10] usb 2-1: USB disconnect, device number 3 [ 87.418886][ T5924] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.434106][ T6057] trusted_key: syz.3.30 sent an empty control message without MSG_MORE. [ 87.446462][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 87.464237][ T6057] hsr0: entered promiscuous mode [ 87.473890][ T6057] macvlan2: entered allmulticast mode [ 87.486725][ T6057] hsr0: entered allmulticast mode [ 87.492199][ T6057] hsr_slave_0: entered allmulticast mode [ 87.499647][ T6057] hsr_slave_1: entered allmulticast mode [ 87.581501][ T5924] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 87.591372][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 87.596016][ T5924] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 87.627686][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.649264][ T5924] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 87.668578][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.689893][ T5924] usb 3-1: Product: syz [ 87.702775][ T5924] usb 3-1: Manufacturer: syz [ 87.714819][ T5924] usb 3-1: SerialNumber: syz [ 87.736039][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.741096][ T5924] usb 3-1: config 0 descriptor?? [ 87.744226][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.764474][ T5924] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 87.785566][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 87.809703][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 87.836128][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 87.869166][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 87.884939][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 87.893802][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 87.915301][ T5924] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 87.969590][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 87.989670][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 88.007802][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 88.026300][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 88.040674][ T5924] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 88.075834][ T5924] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 88.108106][ T5924] usb 3-1: USB disconnect, device number 2 [ 88.169695][ T5924] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 88.170842][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.220912][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.233353][ T5924] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 88.273102][ T5924] keyspan 3-1:0.0: device disconnected [ 88.385332][ T10] usb 5-1: USB disconnect, device number 3 [ 88.585505][ T6057] hsr0: left allmulticast mode [ 88.603135][ T6057] hsr_slave_0: left allmulticast mode [ 88.622696][ T6057] hsr_slave_1: left allmulticast mode [ 88.669344][ T1164] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.696164][ T1164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.725449][ T1164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.755663][ T1164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.838009][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.020956][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 89.044645][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 89.049243][ T6107] netlink: 'syz.0.39': attribute type 11 has an invalid length. [ 89.073771][ T10] usb 5-1: config 220 has no interface number 2 [ 89.086018][ T6107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 89.089214][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 89.116166][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 89.121900][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 89.139952][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 89.156633][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 89.167996][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.176264][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 89.178096][ T6112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.186863][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.215852][ T10] usb 5-1: Product: syz [ 89.231847][ T10] usb 5-1: Manufacturer: syz [ 89.241994][ T10] usb 5-1: SerialNumber: syz [ 89.347759][ T24] usb 4-1: device descriptor read/64, error -71 [ 89.363419][ T6116] tipc: Started in network mode [ 89.377726][ T6116] tipc: Node identity 7f000001, cluster identity 4711 [ 89.385472][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.405252][ T6116] tipc: Enabling of bearer rejected, failed to enable media [ 89.458469][ T6116] netlink: 39 bytes leftover after parsing attributes in process `syz.1.41'. [ 89.500799][ T6116] netlink: 1 bytes leftover after parsing attributes in process `syz.1.41'. [ 89.534001][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.569545][ T46] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 89.591789][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.600015][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.613555][ T46] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 89.628008][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.661116][ T46] usb 1-1: Product: syz [ 89.678650][ T46] usb 1-1: Manufacturer: syz [ 89.706678][ T10] usb 5-1: selecting invalid altsetting 0 [ 89.712634][ T46] usb 1-1: SerialNumber: syz [ 89.731285][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 89.749313][ T24] usb 4-1: device descriptor read/64, error -71 [ 89.759547][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 89.780467][ T46] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 89.823640][ T10] usb 5-1: selecting invalid altsetting 0 [ 89.846942][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 89.876138][ T10] usb 5-1: USB disconnect, device number 4 [ 89.908137][ T24] usb usb4-port1: attempt power cycle [ 90.076093][ T6129] process 'syz.1.43' launched '/dev/fd/8' with NULL argv: empty string added [ 90.219618][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.241008][ T46] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.248122][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.263530][ T46] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 90.281813][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.294845][ T46] usb 1-1: media controller created [ 90.311035][ T24] usb 4-1: device descriptor read/8, error -71 [ 90.327532][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.387737][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.529182][ T6139] netlink: 'syz.4.44': attribute type 15 has an invalid length. [ 90.551505][ T6139] netlink: 666 bytes leftover after parsing attributes in process `syz.4.44'. [ 90.564215][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.578033][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.598828][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 90.626571][ T10] usb 2-1: can't read configurations, error -61 [ 90.639415][ T24] usb 4-1: device descriptor read/8, error -71 [ 90.768978][ T24] usb usb4-port1: unable to enumerate USB device [ 90.798514][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.819678][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.829172][ T6146] FAULT_INJECTION: forcing a failure. [ 90.829172][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.846861][ T6146] CPU: 1 UID: 0 PID: 6146 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 90.846886][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.846896][ T6146] Call Trace: [ 90.846903][ T6146] [ 90.846909][ T6146] dump_stack_lvl+0xe8/0x150 [ 90.846941][ T6146] should_fail_ex+0x412/0x560 [ 90.846972][ T6146] _copy_from_user+0x2d/0xb0 [ 90.846993][ T6146] ___sys_sendmsg+0x1c6/0x360 [ 90.847014][ T6146] ? __lock_acquire+0x6b5/0x2cf0 [ 90.847045][ T6146] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.847090][ T6146] ? __fget_files+0x2a/0x420 [ 90.847109][ T6146] ? __fget_files+0x3a0/0x420 [ 90.847134][ T6146] __x64_sys_sendmsg+0x1bd/0x2a0 [ 90.847156][ T6146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.847182][ T6146] ? __pfx_ksys_write+0x10/0x10 [ 90.847211][ T6146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.847228][ T6146] do_syscall_64+0x15f/0xf80 [ 90.847249][ T6146] ? trace_irq_disable+0x3b/0x140 [ 90.847266][ T6146] ? clear_bhb_loop+0x40/0x90 [ 90.847279][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.847288][ T6146] RIP: 0033:0x7fad8e79c819 [ 90.847299][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.847307][ T6146] RSP: 002b:00007fad8c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.847318][ T6146] RAX: ffffffffffffffda RBX: 00007fad8ea15fa0 RCX: 00007fad8e79c819 [ 90.847325][ T6146] RDX: 00000000000000e0 RSI: 0000200000000400 RDI: 0000000000000003 [ 90.847331][ T6146] RBP: 00007fad8c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.847337][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.847344][ T6146] R13: 00007fad8ea16038 R14: 00007fad8ea15fa0 R15: 00007fad8eb3fa48 [ 90.847367][ T6146] [ 91.111873][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.123929][ T5924] usb 1-1: USB disconnect, device number 5 [ 91.129449][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.138819][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 91.140126][ T46] usb 5-1: config 0 has no interfaces? [ 91.150165][ T10] usb 2-1: can't read configurations, error -61 [ 91.165647][ T46] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 91.176002][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.184090][ T46] usb 5-1: Product: syz [ 91.187939][ T10] usb usb2-port1: attempt power cycle [ 91.188326][ T46] usb 5-1: Manufacturer: syz [ 91.198280][ T46] usb 5-1: SerialNumber: syz [ 91.211513][ T46] usb 5-1: config 0 descriptor?? [ 91.445437][ T6164] netlink: 'syz.0.49': attribute type 15 has an invalid length. [ 91.448342][ T3115] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.457613][ T6164] netlink: 666 bytes leftover after parsing attributes in process `syz.0.49'. [ 91.549180][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.580456][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.590396][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 91.598530][ T10] usb 2-1: can't read configurations, error -61 [ 91.622035][ T3115] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.631231][ T3115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.639524][ T3115] usb 3-1: Product: syz [ 91.643727][ T3115] usb 3-1: Manufacturer: syz [ 91.648418][ T3115] usb 3-1: SerialNumber: syz [ 91.661191][ T3115] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.684443][ T5925] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.717975][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.727722][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.750410][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.760890][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 91.768655][ T10] usb 2-1: can't read configurations, error -61 [ 91.776661][ T10] usb usb2-port1: unable to enumerate USB device [ 91.885803][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.927660][ T5903] usb 1-1: config 0 has no interfaces? [ 91.933522][ T6151] Zero length message leads to an empty skb [ 91.939999][ T5903] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 91.950312][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.959104][ T5903] usb 1-1: Product: syz [ 91.963337][ T5903] usb 1-1: Manufacturer: syz [ 91.974402][ T46] usb 3-1: USB disconnect, device number 3 [ 91.987096][ T5903] usb 1-1: SerialNumber: syz [ 92.000255][ T5903] usb 1-1: config 0 descriptor?? [ 92.132337][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.141150][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.771094][ T5925] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 92.789722][ T5925] ath9k_htc: Failed to initialize the device [ 92.806442][ T46] usb 3-1: ath9k_htc: USB layer deinitialized [ 92.827141][ T6193] loop5: detected capacity change from 0 to 7 [ 92.850818][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.860316][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.870266][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.879477][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.888745][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.898023][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.906544][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.915786][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.924330][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.933547][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.940351][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.951465][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.960724][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.971657][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.972982][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.980903][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 92.996528][ T6193] ldm_validate_partition_table(): Disk read failed. [ 93.003780][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.013060][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.021296][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.030491][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.038884][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.048032][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 93.066555][ T6193] Dev loop5: unable to read RDB block 0 [ 93.073789][ T6193] loop5: unable to read partition table [ 93.086481][ T6193] loop5: partition table beyond EOD, truncated [ 93.095235][ T6193] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 93.216421][ T6198] openvswitch: netlink: Message has 4 unknown bytes. [ 93.227104][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.238557][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 93.345834][ T29] audit: type=1326 audit(1776965689.296:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.383991][ T29] audit: type=1326 audit(1776965689.296:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.425698][ T29] audit: type=1326 audit(1776965689.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.448270][ T29] audit: type=1326 audit(1776965689.306:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.477083][ T29] audit: type=1326 audit(1776965689.306:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.521863][ T29] audit: type=1326 audit(1776965689.306:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.554382][ T29] audit: type=1326 audit(1776965689.306:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.577489][ T29] audit: type=1326 audit(1776965689.306:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.600175][ T29] audit: type=1326 audit(1776965689.306:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.623776][ T5975] usb 5-1: USB disconnect, device number 5 [ 93.630044][ T29] audit: type=1326 audit(1776965689.326:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad8e79c819 code=0x7ffc0000 [ 93.733814][ T6217] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 93.785453][ T6217] syz_tun: entered allmulticast mode [ 93.834844][ T6216] syz_tun: left allmulticast mode [ 94.196293][ T6235] usb usb8: usbfs: process 6235 (syz.2.69) did not claim interface 0 before use [ 94.247744][ T5975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.377710][ T5975] usb 5-1: device descriptor read/64, error -71 [ 94.485731][ T5925] usb 1-1: USB disconnect, device number 6 [ 94.627808][ T5975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.637005][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 94.787727][ T5975] usb 5-1: device descriptor read/64, error -71 [ 94.899988][ T5975] usb usb5-port1: attempt power cycle [ 95.260112][ T5975] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.341339][ T5975] usb 5-1: device descriptor read/8, error -71 [ 95.544739][ T6253] tipc: Started in network mode [ 95.554875][ T6253] tipc: Node identity 3e9e11534744, cluster identity 4711 [ 95.564727][ T6253] tipc: Enabled bearer , priority 0 [ 95.575242][ T6253] syzkaller0: entered promiscuous mode [ 95.581567][ T6253] syzkaller0: entered allmulticast mode [ 95.637943][ T5975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.662897][ T6253] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 95.678558][ T5975] usb 5-1: device descriptor read/8, error -71 [ 95.712599][ T6253] tipc: Resetting bearer [ 95.746980][ T6252] tipc: Resetting bearer [ 95.817890][ T5975] usb usb5-port1: unable to enumerate USB device [ 95.826216][ T6252] tipc: Disabling bearer [ 96.285689][ T5975] hid-generic 0008:0091:0009.0001: reserved main item tag 0xd [ 96.312563][ T5975] hid-generic 0008:0091:0009.0001: item fetching failed at offset 28/32 [ 96.331753][ T5975] hid-generic 0008:0091:0009.0001: probe with driver hid-generic failed with error -22 [ 96.693380][ T6267] FAULT_INJECTION: forcing a failure. [ 96.693380][ T6267] name failslab, interval 1, probability 0, space 0, times 1 [ 96.727700][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(full) [ 96.727726][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.727736][ T6267] Call Trace: [ 96.727732][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.727743][ T6267] [ 96.727751][ T6267] dump_stack_lvl+0xe8/0x150 [ 96.727783][ T6267] should_fail_ex+0x412/0x560 [ 96.727813][ T6267] should_failslab+0xa8/0x100 [ 96.727841][ T6267] __kmalloc_cache_noprof+0x88/0x660 [ 96.727862][ T6267] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 96.727886][ T6267] ? sctp_add_bind_addr+0x8c/0x370 [ 96.727913][ T6267] sctp_add_bind_addr+0x8c/0x370 [ 96.727935][ T6267] sctp_copy_local_addr_list+0x314/0x4f0 [ 96.727959][ T6267] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 96.727979][ T6267] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 96.728003][ T6267] ? sctp_v6_is_any+0x64/0x80 [ 96.728026][ T6267] ? sctp_copy_one_addr+0x93/0x360 [ 96.728050][ T6267] sctp_bind_addr_copy+0xb3/0x3c0 [ 96.728072][ T6267] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 96.728094][ T6267] sctp_connect_new_asoc+0x2ff/0x6b0 [ 96.728123][ T6267] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.728149][ T6267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 96.728173][ T6267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 96.728199][ T6267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 96.728224][ T6267] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 96.728255][ T6267] ? security_sctp_bind_connect+0x7e/0x2c0 [ 96.728290][ T6267] sctp_sendmsg+0x1528/0x2c10 [ 96.728328][ T6267] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.728355][ T6267] ? aa_sk_perm+0x6d5/0x900 [ 96.728378][ T6267] ? __might_fault+0xaf/0x130 [ 96.728397][ T6267] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.728421][ T6267] ? sock_rps_record_flow+0x19/0x350 [ 96.728444][ T6267] ? inet_sendmsg+0x2f4/0x370 [ 96.728462][ T6267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.728484][ T6267] ____sys_sendmsg+0x80a/0x9f0 [ 96.728513][ T6267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.728540][ T6267] ? import_iovec+0x73/0xa0 [ 96.728564][ T6267] ___sys_sendmsg+0x2a5/0x360 [ 96.728581][ T6267] ? __lock_acquire+0x6b5/0x2cf0 [ 96.728611][ T6267] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.728662][ T6267] ? __fget_files+0x2a/0x420 [ 96.728679][ T6267] ? __fget_files+0x3a0/0x420 [ 96.728705][ T6267] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.728727][ T6267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.728755][ T6267] ? __pfx_ksys_write+0x10/0x10 [ 96.728783][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.728801][ T6267] do_syscall_64+0x15f/0xf80 [ 96.728823][ T6267] ? trace_irq_disable+0x3b/0x140 [ 96.728846][ T6267] ? clear_bhb_loop+0x40/0x90 [ 96.728866][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.728882][ T6267] RIP: 0033:0x7f9f68b9c819 [ 96.728900][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.728914][ T6267] RSP: 002b:00007f9f69a75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.728933][ T6267] RAX: ffffffffffffffda RBX: 00007f9f68e15fa0 RCX: 00007f9f68b9c819 [ 96.728945][ T6267] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 96.728956][ T6267] RBP: 00007f9f69a75090 R08: 0000000000000000 R09: 0000000000000000 [ 96.728966][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.728975][ T6267] R13: 00007f9f68e16038 R14: 00007f9f68e15fa0 R15: 00007f9f68f3fa48 [ 96.729003][ T6267] [ 97.003410][ T6226] [U]  [ 97.169483][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 97.188705][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.220473][ T10] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 97.230099][ T10] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 97.275265][ T10] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 97.318575][ T10] usb 2-1: config 128 has no interface number 0 [ 97.340413][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 244, changing to 11 [ 97.357996][ T10] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1763, setting to 1024 [ 97.369950][ T10] usb 2-1: config 128 interface 127 has no altsetting 0 [ 97.387712][ T5903] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 97.405574][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d5.55 [ 97.416068][ T10] usb 2-1: New USB device strings: Mfr=25, Product=2, SerialNumber=3 [ 97.418071][ T5975] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.424694][ T10] usb 2-1: Product: syz [ 97.436764][ T10] usb 2-1: Manufacturer: syz [ 97.444879][ T10] usb 2-1: SerialNumber: syz [ 97.450918][ T6279] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 97.459727][ T6263] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.570499][ T6281] veth1_macvtap: left promiscuous mode [ 97.576199][ T6281] macsec0: entered promiscuous mode [ 97.581759][ T6281] macsec0: entered allmulticast mode [ 97.587674][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 97.593619][ T5903] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.595234][ T5975] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 97.606804][ T6281] veth1_macvtap: entered promiscuous mode [ 97.610976][ T5975] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 97.615787][ T5903] usb 1-1: config 0 has no interface number 0 [ 97.627447][ T5975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.633308][ T6281] veth1_macvtap: entered allmulticast mode [ 97.643851][ T5975] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 97.649705][ T5903] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 97.661545][ T5975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 97.672521][ T6281] macsec0: left promiscuous mode [ 97.684122][ T5975] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.700670][ T5975] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.710134][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.724855][ T5903] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 97.738211][ T6281] macsec0: left allmulticast mode [ 97.749547][ T6281] veth1_macvtap: left allmulticast mode [ 97.765035][ T5903] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.783967][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.808486][ T5903] usb 1-1: config 0 descriptor?? [ 97.828609][ T6271] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.845115][ T5903] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 97.886667][ T10] usb 2-1: USB disconnect, device number 8 [ 97.919348][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.950150][ T5975] usb 4-1: GET_CAPABILITIES returned 0 [ 97.955985][ T5975] usbtmc 4-1:16.0: can't read capabilities [ 98.061580][ T6283] netlink: 'syz.4.86': attribute type 15 has an invalid length. [ 98.069430][ T6283] netlink: 666 bytes leftover after parsing attributes in process `syz.4.86'. [ 98.211209][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 98.289609][ T5925] usb 4-1: USB disconnect, device number 6 [ 98.329117][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.446590][ T5903] IPVS: starting estimator thread 0... [ 98.504581][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.532091][ T10] usb 5-1: config 0 has no interfaces? [ 98.546932][ T10] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 98.557997][ T6293] IPVS: using max 31 ests per chain, 74400 per kthread [ 98.572480][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.610496][ T10] usb 5-1: Product: syz [ 98.622295][ T10] usb 5-1: Manufacturer: syz [ 98.634229][ T10] usb 5-1: SerialNumber: syz [ 98.665046][ T10] usb 5-1: config 0 descriptor?? [ 99.059238][ T6311] FAULT_INJECTION: forcing a failure. [ 99.059238][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 99.087760][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 99.087785][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.087796][ T6311] Call Trace: [ 99.087803][ T6311] [ 99.087811][ T6311] dump_stack_lvl+0xe8/0x150 [ 99.087844][ T6311] should_fail_ex+0x412/0x560 [ 99.087877][ T6311] should_failslab+0xa8/0x100 [ 99.087904][ T6311] __kmalloc_cache_noprof+0x88/0x660 [ 99.087926][ T6311] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 99.087948][ T6311] __io_uring_add_tctx_node+0x199/0x5f0 [ 99.087969][ T6311] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 99.087984][ T6311] ? __fget_files+0x2a/0x420 [ 99.088002][ T6311] ? __fget_files+0x2a/0x420 [ 99.088021][ T6311] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 99.088042][ T6311] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 99.088069][ T6311] ? __fget_files+0x3a0/0x420 [ 99.088089][ T6311] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 99.088109][ T6311] ? fput+0xa0/0xd0 [ 99.088125][ T6311] ? ksys_write+0x242/0x270 [ 99.088149][ T6311] ? __pfx_ksys_write+0x10/0x10 [ 99.088182][ T6311] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 99.088197][ T6311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.088216][ T6311] do_syscall_64+0x15f/0xf80 [ 99.088239][ T6311] ? trace_irq_disable+0x3b/0x140 [ 99.088262][ T6311] ? clear_bhb_loop+0x40/0x90 [ 99.088283][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.088297][ T6311] RIP: 0033:0x7f9f68b9c819 [ 99.088312][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.088323][ T6311] RSP: 002b:00007f9f699ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.088339][ T6311] RAX: ffffffffffffffda RBX: 00007f9f68e16090 RCX: 00007f9f68b9c819 [ 99.088349][ T6311] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000006 [ 99.088357][ T6311] RBP: 00007f9f699ef090 R08: 0000000000000000 R09: 0000000000000204 [ 99.088366][ T6311] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 99.088374][ T6311] R13: 00007f9f68e16128 R14: 00007f9f68e16090 R15: 00007f9f68f3fa48 [ 99.088396][ T6311] [ 99.088999][ T6311] ------------[ cut here ]------------ [ 99.309402][ T6311] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 99.309425][ T6311] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0xa36/0xa70, CPU#0: syz.3.91/6311 [ 99.324945][ T6311] Modules linked in: [ 99.328882][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 99.338017][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.348146][ T6311] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 99.354081][ T6311] Code: fd 65 48 8b 05 9b af 94 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c1 84 0f 07 cc e8 4b c0 19 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 3d c0 19 fd 4c 89 f7 be 03 00 00 00 e8 [ 99.373817][ T6311] RSP: 0018:ffffc9000cef7b90 EFLAGS: 00010293 [ 99.380173][ T6311] RAX: ffffffff84ac10a5 RBX: 0000000000000000 RCX: ffff8880309cbd80 [ 99.388216][ T6311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.396201][ T6311] RBP: ffffc9000cef7ce8 R08: ffff88802b27d007 R09: 1ffff1100564fa00 [ 99.404391][ T6311] R10: dffffc0000000000 R11: ffffed100564fa01 R12: 00000000fffffff4 [ 99.412403][ T6311] R13: ffff88802b27d000 R14: ffff8880309cc6e8 R15: 1ffff110061398dd [ 99.420429][ T6311] FS: 00007f9f699ef6c0(0000) GS:ffff888125214000(0000) knlGS:0000000000000000 [ 99.429585][ T6311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.436245][ T6311] CR2: 00007f9f699efd58 CR3: 0000000076ef4000 CR4: 00000000003526f0 [ 99.444279][ T6311] Call Trace: [ 99.447550][ T6311] [ 99.450532][ T6311] ? __kmalloc_cache_noprof+0x31c/0x660 [ 99.456163][ T6311] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 99.461951][ T6311] __io_uring_add_tctx_node+0x402/0x5f0 [ 99.467520][ T6311] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 99.473650][ T6311] ? __fget_files+0x2a/0x420 [ 99.478380][ T6311] ? __fget_files+0x2a/0x420 [ 99.482998][ T6311] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 99.489622][ T6311] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 99.495269][ T6311] ? __fget_files+0x3a0/0x420 [ 99.499981][ T6311] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 99.505960][ T6311] ? fput+0xa0/0xd0 [ 99.509824][ T6311] ? ksys_write+0x242/0x270 [ 99.514344][ T6311] ? __pfx_ksys_write+0x10/0x10 [ 99.519334][ T6311] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 99.524905][ T6311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.531135][ T6311] do_syscall_64+0x15f/0xf80 [ 99.536037][ T6311] ? trace_irq_disable+0x3b/0x140 [ 99.541117][ T6311] ? clear_bhb_loop+0x40/0x90 [ 99.545836][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.551845][ T6311] RIP: 0033:0x7f9f68b9c819 [ 99.556285][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.576108][ T6311] RSP: 002b:00007f9f699ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.584608][ T6311] RAX: ffffffffffffffda RBX: 00007f9f68e16090 RCX: 00007f9f68b9c819 [ 99.592635][ T6311] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000006 [ 99.600632][ T6311] RBP: 00007f9f699ef090 R08: 0000000000000000 R09: 0000000000000204 [ 99.608655][ T6311] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 99.616626][ T6311] R13: 00007f9f68e16128 R14: 00007f9f68e16090 R15: 00007f9f68f3fa48 [ 99.624672][ T6311] [ 99.627754][ T6311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.635038][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 99.644152][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.654224][ T6311] Call Trace: [ 99.657507][ T6311] [ 99.660454][ T6311] vpanic+0x56c/0xa60 [ 99.664530][ T6311] ? __pfx__printk+0x10/0x10 [ 99.669130][ T6311] ? __pfx_vpanic+0x10/0x10 [ 99.673637][ T6311] ? is_bpf_text_address+0x292/0x2b0 [ 99.679033][ T6311] ? is_bpf_text_address+0x26/0x2b0 [ 99.684266][ T6311] panic+0xc5/0xd0 [ 99.688039][ T6311] ? __pfx_panic+0x10/0x10 [ 99.692509][ T6311] __warn+0x315/0x4c0 [ 99.696500][ T6311] ? io_wq_put_and_exit+0xa36/0xa70 [ 99.701722][ T6311] ? io_wq_put_and_exit+0xa36/0xa70 [ 99.706928][ T6311] __report_bug+0x29a/0x540 [ 99.711456][ T6311] ? io_wq_put_and_exit+0xa36/0xa70 [ 99.716681][ T6311] ? __pfx___report_bug+0x10/0x10 [ 99.721727][ T6311] ? irqentry_exit+0x218/0x730 [ 99.726498][ T6311] ? lockdep_hardirqs_on+0x7a/0x110 [ 99.731715][ T6311] ? irqentry_exit+0x218/0x730 [ 99.736505][ T6311] ? rcu_is_watching+0x15/0xb0 [ 99.741283][ T6311] ? io_wq_put_and_exit+0xa36/0xa70 [ 99.746498][ T6311] report_bug+0x16a/0x220 [ 99.750838][ T6311] ? io_wq_put_and_exit+0xa36/0xa70 [ 99.756151][ T6311] ? io_wq_put_and_exit+0xa38/0xa70 [ 99.761405][ T6311] handle_bug+0x9c/0x200 [ 99.765666][ T6311] exc_invalid_op+0x1a/0x50 [ 99.770278][ T6311] asm_exc_invalid_op+0x1a/0x20 [ 99.775132][ T6311] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 99.780938][ T6311] Code: fd 65 48 8b 05 9b af 94 0e 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c1 84 0f 07 cc e8 4b c0 19 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 3d c0 19 fd 4c 89 f7 be 03 00 00 00 e8 [ 99.800549][ T6311] RSP: 0018:ffffc9000cef7b90 EFLAGS: 00010293 [ 99.806633][ T6311] RAX: ffffffff84ac10a5 RBX: 0000000000000000 RCX: ffff8880309cbd80 [ 99.814605][ T6311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.822567][ T6311] RBP: ffffc9000cef7ce8 R08: ffff88802b27d007 R09: 1ffff1100564fa00 [ 99.830544][ T6311] R10: dffffc0000000000 R11: ffffed100564fa01 R12: 00000000fffffff4 [ 99.838509][ T6311] R13: ffff88802b27d000 R14: ffff8880309cc6e8 R15: 1ffff110061398dd [ 99.846481][ T6311] ? io_wq_put_and_exit+0xa35/0xa70 [ 99.851703][ T6311] ? __kmalloc_cache_noprof+0x31c/0x660 [ 99.857268][ T6311] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 99.863008][ T6311] __io_uring_add_tctx_node+0x402/0x5f0 [ 99.868577][ T6311] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 99.874653][ T6311] ? __fget_files+0x2a/0x420 [ 99.879256][ T6311] ? __fget_files+0x2a/0x420 [ 99.883993][ T6311] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 99.890615][ T6311] __se_sys_io_uring_enter+0x1918/0x1bf0 [ 99.896265][ T6311] ? __fget_files+0x3a0/0x420 [ 99.900937][ T6311] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 99.906929][ T6311] ? fput+0xa0/0xd0 [ 99.910747][ T6311] ? ksys_write+0x242/0x270 [ 99.915242][ T6311] ? __pfx_ksys_write+0x10/0x10 [ 99.920092][ T6311] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 99.925648][ T6311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.931843][ T6311] do_syscall_64+0x15f/0xf80 [ 99.936450][ T6311] ? trace_irq_disable+0x3b/0x140 [ 99.941504][ T6311] ? clear_bhb_loop+0x40/0x90 [ 99.946188][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.952081][ T6311] RIP: 0033:0x7f9f68b9c819 [ 99.956495][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.976120][ T6311] RSP: 002b:00007f9f699ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.984561][ T6311] RAX: ffffffffffffffda RBX: 00007f9f68e16090 RCX: 00007f9f68b9c819 [ 99.992601][ T6311] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000006 [ 100.000682][ T6311] RBP: 00007f9f699ef090 R08: 0000000000000000 R09: 0000000000000204 [ 100.008672][ T6311] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 100.016658][ T6311] R13: 00007f9f68e16128 R14: 00007f9f68e16090 R15: 00007f9f68f3fa48 [ 100.024665][ T6311] [ 100.028338][ T6311] Kernel Offset: disabled [ 100.032654][ T6311] Rebooting in 86400 seconds..