last executing test programs: 28m27.484848521s ago: executing program 4 (id=920): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {0x8, 0x994, 0x66d}, 0x31, [0x9, 0xfffffffb, 0x80000001, 0x48, 0x8, 0x9, 0xfc, 0x6, 0x4, 0x10000, 0xfffffffb, 0x6, 0x2, 0x2, 0x5f, 0x0, 0xb1, 0xfff, 0xfff, 0x5, 0x10000, 0x1, 0x8001, 0x17d, 0x6000, 0x3, 0x2, 0x80000001, 0x61, 0x7, 0x3, 0x0, 0x7f, 0xfffffffe, 0x5, 0x1000, 0x9, 0x8, 0x86, 0x9, 0x0, 0x0, 0x5, 0x8, 0x10, 0x4, 0x100, 0x9, 0x5, 0x3ff, 0x9, 0x7, 0x8d18, 0xbf, 0x694, 0xd, 0x1, 0x3, 0x0, 0x9, 0xfffffffd, 0xfffff801, 0x7, 0xffffff27], [0xffff, 0x400, 0x1, 0xd16, 0x48e, 0x8001, 0x101, 0x20ffff, 0x7, 0x7, 0x2, 0x4, 0x3, 0x7, 0x9, 0x407c, 0x1, 0x5, 0x8, 0x4, 0x2f2, 0x0, 0x3, 0x7, 0x0, 0x7f, 0x20f60000, 0x9, 0x80, 0x6bf4, 0x7, 0x10000, 0x816d, 0x0, 0x3, 0xfffffc01, 0x8c, 0x9, 0x400, 0xffffffff, 0x0, 0x6, 0xc, 0x1, 0x2, 0xf7ef, 0xa7c, 0x2, 0x5, 0x69, 0x5, 0x9, 0x6, 0x5, 0x17c000, 0x3, 0xfffffff9, 0x7, 0xffffffff, 0x81, 0x9a4e, 0x3, 0x9, 0x1d4], [0x6, 0x3, 0x5, 0x3, 0x2, 0x508, 0x2, 0x2, 0x7, 0x5222db14, 0x5, 0x5, 0x2, 0x7, 0x3a6400, 0x3, 0x1, 0x1, 0x1c00, 0x7, 0x0, 0x0, 0x80, 0x5, 0x7ff, 0x1, 0x800, 0x110b48b5, 0x2, 0xfffffff9, 0x8000, 0x1, 0x0, 0x8, 0x8, 0x9, 0x72, 0x0, 0x1ff, 0x6, 0x5, 0x9, 0x638, 0x4, 0x8, 0x3afe, 0x28, 0xdd63, 0x0, 0x579d, 0x36131827, 0x7, 0x3, 0x8, 0x1ff, 0x4, 0x400000, 0xffffa84c, 0xe, 0x8, 0x5, 0xffff, 0x0, 0xd3], [0xfffff801, 0x7, 0x2, 0x46, 0x0, 0x7, 0x0, 0x5, 0x6, 0x10000, 0xb2a9, 0x267, 0x1ff, 0x9, 0x6, 0xfffff932, 0x2, 0x80000000, 0x235, 0x401, 0x9, 0xffffceb7, 0x7fff, 0x0, 0x3, 0x101, 0x2, 0x0, 0x5, 0x1, 0x80000000, 0x2, 0x10, 0x9, 0xe0000000, 0x7ff, 0x10000, 0x0, 0x6, 0x4, 0x3, 0xffffff69, 0x80000001, 0x7, 0x10001, 0xa7a9, 0x5, 0x4, 0x7, 0x5, 0x1, 0x3, 0x7, 0x8000, 0x1, 0x5, 0x1, 0x8, 0x2, 0x1ff, 0x1, 0x2, 0x7, 0x6]}, 0x45c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x6, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) 28m26.18325742s ago: executing program 4 (id=924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xa3, &(0x7f00000006c0)=@string={0xa3, 0x3, "323862168e95151822d692cc82378078b52b2890ea9d2cfe4746e808b917bb3e9af7a1c9d08af1a28bf309dc577f7ff0e606c5a984faa68647aae3c12175952ba51ef1a9d53a71eff62be1590e3ceb79b150bc2233e7ac73fa09d6d38c6585830ac6b7761a22246cf286814feb7c1ecb1a9ac24019f00a1313e900ba9177990d0c1cd4a8bc4b2abc8e0cc8449e803434ff853af85747c2712670e63962395d4172"}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x88001, 0x0, 0xb5f, 0xffffffffffffffff, 0xfffffe0008000001, 0x7, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x88001, 0x0, 0xb5f, 0xffffffffffffffff, 0xfffffe0008000001, 0x7, 0xffffffff}, 0x0) r4 = creat(0x0, 0x122) setxattr$security_capability(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)={0x18, 0x25, 0x305, 0x70bd26, 0x25dfdbfb, {0x1}, [@nested={0x4, 0x144}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x1, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x744e5800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) 28m26.045817685s ago: executing program 4 (id=926): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000780)}, 0x0) 28m25.900931203s ago: executing program 4 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a0000280440001800800014000000000080001400000000408000140000003ff080001400000007f08000140000006860800014000008001080001400000000708000140000000073c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080001400000800008000140000000091c000180080001407fffffff0800014000009af7080001400000000708000140000003ff700002802c00018008000140000000090800014000007ffa0800014000000002080001400000000c080001400000000a1c000180080001400000a8e5080001400000ffff080001400000000724000180080001400000008108000140000000010800014000000008080001400000000608000140000080002a01028044000180080001400000000608000140000000080800014000000fff080001400000000a08000140000000060800014000000000080001400000100008000140ffffffff440001804400014000000006080001400000000b08000140000000010800014000008001080001400000019508000140000000080800014000004beb08000140000000061400018008000140000000ff08000140000000062c000180080001400000000308000140000000050800014040000000080001400000000008000140000000042400018008000140000000060800014000000000080001400000000308000140002000003400018008000140000000020800014000007fff080001400000080008000140000001000800014000000009080001400000000ca000028014000180080001400000000608000140000000053400018008000140fffffffe08000140000000070800014000000101080001400000083f080001400000007f080001400000000834000180080001400000000408000140642568d30800014004000005080001400000000908000140000000020800014000000fff04000180"], 0x38c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0x4, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xf889, 0x1, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098851, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0xd, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb7, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x0, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x5, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x5b0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffff7, 0x6, 0x8, 0x5, 0xd, 0xfffffff7, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0x2, 0xfffffffd, 0x7fffffff, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffff7, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) 28m22.373765685s ago: executing program 4 (id=941): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x9, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 28m19.617903501s ago: executing program 4 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x7f, 0x1, 0x3, 0x0, 0x40}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(0x0, 0x205, 0x40901) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x7f, 0x1, 0x3, 0x0, 0x40}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x2000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) syz_open_dev$usbfs(0x0, 0x205, 0x40901) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) 28m4.092128971s ago: executing program 32 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x7f, 0x1, 0x3, 0x0, 0x40}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(0x0, 0x205, 0x40901) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x7f, 0x1, 0x3, 0x0, 0x40}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x2000}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) syz_open_dev$usbfs(0x0, 0x205, 0x40901) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) 24m9.375775064s ago: executing program 5 (id=1925): syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a05240401", @ANYRESDEC], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xf8, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x0, 0x0, 0xbb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb703, 0x28}, [@extension_unit={0xc, 0x24, 0x8, 0x6, 0x2, 0xc8, "89a767a912"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x1, 0x0, "f0"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x8, 0x4, '}'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x6, 0x0, 0x7, 0x7, 0x45}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x3, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x80, 0x4, 'T'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x45, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0x1, 0xfad6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x9, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x6, 0x2, "1fd081aae88d0d08"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x40, 0x8, "448b55e33d6448a7"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7, 0xa6, "bafaca920dc01d"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7f, 0x96, "eb5cc55f98"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x5, 0x4, {0x7, 0x25, 0x1, 0x0, 0x9, 0x5}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x0, 0x81, 0x8, 0x6}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x0, 0x2, 0x6, 0x7}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3600}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "1c6d6549ab094c629c6a42f4f78d12f6fc00ac7c761893ec5329fed9a2e9f02a85416f6f7b963354055b4946aa91fe8b3be018dc57d78ec0ff3b0c61b41d204d2a941b01a7010544cb4db92a80cc3eeb36f25cd08adbe64b8079bad32e58e8dc565f"}}, {0x57, &(0x7f00000002c0)=@string={0x57, 0x3, "b827b99fc67126995dfe8a7230065a21a51a020e8a6b0a87e45462d5c272f37dedfb96a8a306ac4feb712f7a123dd1d5c641edc66bb0b788b4d19117258f4142e33e6c590e23b9dac3dfd6d03454ed7a71f3d7d5e6"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x2c, &(0x7f0000000380)=@string={0x2c, 0x3, "ac73542180b71845eb8b4b347c6d2e74180f483d8ec6f6041dc8beab78a5db332e113d76dd7c9478bfc0"}}, {0xb9, &(0x7f00000003c0)=@string={0xb9, 0x3, "3c73cd7a52a7b2e1f93dcb98b6c8e1e31a5128a7142fa90009513ca314ebc7c15d315f1e07afc5995e36e97abbe96c49740c0ebd1cb75cd19f6fd73becf9903c3fc45d1c7b52253bb19a056ec138efa0b5072e95f18d1539a32ccfc65d1f2a4f68d855069765ec6e258665e78246ebcfdc8ac5f8ee528a2795a235f2238519788804d64689217059b4a66506607b302bb6e401beff54b347f50398e62ea5afb67ed2d139fbf14a39d0881d27cd41cefda97936d678bb94"}}, {0xc6, &(0x7f0000000480)=@string={0xc6, 0x3, "3351834a3c0c754c2d76d4962e02046a403332b6b6fbf5d5db375b8fdedc70f85dc5709501fa1e5eb0e7e050d74a89ad25e4290b6d7d93c5072427a3a7ff28e95b748a8d9bbbc92c5efb8fec2509e13e87abd26621c522c05b3c0c53f9dfd83a42c5fc90747676f15f04bf5c39c0469d61c875df81bd1029a7bb8a9de53ffc3e6d1cb8cbb0771be3f30f45cc284f249f88fb53590fa95cb6bc3c823bbfb84a65da3f568b27cc26e40789cbcc6abf9a3510092877b1044297fa8ef2ff6522861263f85f7e"}}, {0x2f, &(0x7f0000000580)=@string={0x2f, 0x3, "903b7a511be3a5629e1c4ccc8d5f1f8c33b26fe5ef877ee2b853beecb5200e1fb371d3942097b4e8d5a7b4fb4a"}}]}) 24m7.788349291s ago: executing program 5 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r5 = socket$unix(0x1, 0x1, 0x0) cachestat(r5, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r10 = openat(r8, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r10, 0x400, 0x1) fremovexattr(r10, &(0x7f0000000040)=@known='system.posix_acl_default\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) 24m6.672974587s ago: executing program 5 (id=1939): getpid() (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x10004, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/155, 0x9b}], 0x3}, 0xed}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)}], 0x8, &(0x7f0000000700)=""/34, 0x22}, 0x2}, {{&(0x7f0000000e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/5, 0x5}], 0x2, &(0x7f00000008c0)=""/228, 0xe4}, 0x7fbfffff}, {{&(0x7f00000009c0)=@phonet, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000580)=""/48, 0x30}, 0x3}, {{&(0x7f0000000bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/177, 0xb1}], 0x1}, 0xa5}], 0x5, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x20004045}}], 0x1, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r6, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x20000010}}], 0x1, 0x40) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 24m6.240578584s ago: executing program 5 (id=1941): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @multicast1}, 0x1, 0x0, 0x0, 0x0, 0x5817, &(0x7f0000000340)='ip6_vti0\x00', 0x3, 0x3, 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0/file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], 0x0, &(0x7f0000000200), 0x0}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005f010203010902120001000000c91b40cdbea0a9df9200"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x10}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0}) 24m5.593060586s ago: executing program 5 (id=1945): r0 = getpgrp(0xffffffffffffffff) ptrace(0x4208, r0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1f8, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2, 0x24}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x68e], 0x3}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x376a, 0xdf8, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 24m5.369901747s ago: executing program 5 (id=1946): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) r1 = socket(0xa, 0x3, 0x3a) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x1000000, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) socket$nl_route(0x10, 0x3, 0x0) 24m4.569999696s ago: executing program 33 (id=1946): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae010100000000010000000000f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f27424b80e2b7af277765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x7f8) r1 = socket(0xa, 0x3, 0x3a) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x1000000, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) socket$nl_route(0x10, 0x3, 0x0) 23m32.974429635s ago: executing program 2 (id=2225): mmap(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) fsopen(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x31}, 0x90) r8 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0xffff, 0x0, 0x0, 0x9122, 0x0, 0x1, {0x2}}) io_uring_enter(r8, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004e0001"], 0x18}}, 0x0) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1e003300c03c224f0802110000000802110000015050505050508502160000000800270002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008050}, 0x40000) 23m30.889727153s ago: executing program 2 (id=2244): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 23m30.836094439s ago: executing program 2 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x98, 0x20, 0x6, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4, 0x3}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r0, r3, 0x8f5, 0x100000000000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0x3, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) write$cgroup_type(r3, &(0x7f0000000180), 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) 23m27.692631046s ago: executing program 2 (id=2266): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x2c0408d0) 23m27.47829248s ago: executing program 2 (id=2268): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x35, 0x20, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001240)=ANY=[@ANYBLOB="b6000000370100000600000000000000ffff000010000000", @ANYRES32=0x0, @ANYBLOB="980071a42686a9c7bab7af81d7ad67a91bc2b62d6c52db09a3741d63d870a80abcf1e8d9ff4c7cffb33143202d9e9adeb2ecdaf912f978bcaa01af38bd7750de1433826f1106a585d339b2dbb7e802c3e0ba1e17b4ebca66bb6fb3d06fac50ca88ea0bdafb8690f1d19130ee97b6bf5b6e82e5c2314ce712737d753fd8cb89bf3e112d2b15b5a1b2e71db0809fd5522d8fe04a0070ca138a"], 0xb6) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 23m25.931459597s ago: executing program 2 (id=2274): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)}, 0x1) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x60000123) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000014c0)=""/4088, 0xff8}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0x0, 0x2002) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000640)=""/99, 0x63}], 0x1, 0x10, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) r7 = fsopen(&(0x7f0000000140)='proc\x00', 0x1) r8 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x40000, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xf8}}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}, 0x0, 0x0, &(0x7f00000008c0)="0662358faf9d6e85be46ccf1bb509ca081f8ef15c06ba04ca0481d71dd6879b5781edd2893e18b33bd8509460f2f1a1807b5690c06f3ce3496462c5299b817894b2bf9254a212f33d4b569d131a8674fa2be4d7fc24bdab437508b668e5be6529bdd8fddac64fb0fcceb0779a09d43daa622e31696fa9c43b434308d32deafbb311d87f1148a9fbb01678f0468fd669e9e89354b768246f894fb2098665cf7ee47e4c737ce6f6fd06744f3233cf10c630413b44fb52437d513068f22fafe32275cc9098fa4cef69cac128b2032cf6dfe6ea03bac2dfdccd7c6eba0caf976c43a65631c12f488e9b6e88f36a3cf3e2201f113e36dc74c") fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000001c0)='\x00', &(0x7f00000002c0)='./file0\x00', r8) 23m10.782931353s ago: executing program 34 (id=2274): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)}, 0x1) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x60000123) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000014c0)=""/4088, 0xff8}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0x0, 0x2002) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000640)=""/99, 0x63}], 0x1, 0x10, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) r7 = fsopen(&(0x7f0000000140)='proc\x00', 0x1) r8 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x40000, &(0x7f0000000740)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xf8}}], [{@pcr={'pcr', 0x3d, 0x3a}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}, 0x0, 0x0, &(0x7f00000008c0)="0662358faf9d6e85be46ccf1bb509ca081f8ef15c06ba04ca0481d71dd6879b5781edd2893e18b33bd8509460f2f1a1807b5690c06f3ce3496462c5299b817894b2bf9254a212f33d4b569d131a8674fa2be4d7fc24bdab437508b668e5be6529bdd8fddac64fb0fcceb0779a09d43daa622e31696fa9c43b434308d32deafbb311d87f1148a9fbb01678f0468fd669e9e89354b768246f894fb2098665cf7ee47e4c737ce6f6fd06744f3233cf10c630413b44fb52437d513068f22fafe32275cc9098fa4cef69cac128b2032cf6dfe6ea03bac2dfdccd7c6eba0caf976c43a65631c12f488e9b6e88f36a3cf3e2201f113e36dc74c") fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000001c0)='\x00', &(0x7f00000002c0)='./file0\x00', r8) 17m20.979946813s ago: executing program 3 (id=3441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2e49, &(0x7f0000000280)={0x0, 0x977f, 0x400, 0x0, 0x3}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000480)="51c858f94d20833eb28cc5aaa87a126e64ff1e6bfbd9a085e848dd980d9241d149f6faf8d81b35c9e6cbce56b07891ebd50e0f3ea37d7ee73099ea9d8268dc11b18efffe0be4a44de1fea6f04f10f83b980f177737999bb09f5381b63bf70a4ed0e9cd99c35e757553f7d089f1810f502c6a7f4add4721a4c6b947356c23a92e9ddf762c644b6b3311f59e0f1a43a5cb35715c713b53830cb2a56831a151e480e794248bc07faff0be89098408efe2f106c8867cd8b808af71cf87d71f770bd631572f0b7df71c142061b8f1aa5b9cb436af007e9e2e3fae96a61d95e03ecdd5eeb1abd1fb9780b882f9a54031ca64f65fbd2163c7bafa93184fc9aedff1d33a412d5f6e020197eebff7941b8459a0decc48c75b357e61c075b318727890", 0x11e) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x48) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x80, 0x1) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) io_pgetevents(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/85, 0x55) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 17m17.351786819s ago: executing program 3 (id=3452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0xfb, 0x47, 0x48, 0x40, 0x54c, 0x2e1, 0xd057, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x8, 0x90, 0x70, [{{0x9, 0x4, 0x70, 0x0, 0x2, 0x45, 0xd8, 0x1, 0xed, [], [{{0x9, 0x5, 0x2, 0x2, 0x400, 0x8b, 0x24, 0xf0}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x5, 0xa, 0xbf}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 17m15.725380339s ago: executing program 3 (id=3460): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140000020000af5dbf4318cf2456e8f9994a8000fbdbdf79130ec1ff0200ce997a6e43e6af18c437edc34800", @ANYRES32=r3, @ANYBLOB="080004000a010102"], 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x48006) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0xce20, 0x5, @local, 0x8}, 0x1c, 0x0}}], 0x1, 0x24048040) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x74, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xfc, 0x7, 0x80000000, 0x1, 0xd, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0xfb5f]}}, {{0x1c, 0x1, {0x8, 0x80, 0x206, 0x9, 0x1, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0x0, 0x80, 0x100]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m14.721033212s ago: executing program 3 (id=3464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x0) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) r3 = io_uring_setup(0x664c, &(0x7f0000000500)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4f2a7b1674a2054a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x2000080, 0x9, 0x2, 0xe05, 0x159, 0x4}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 17m10.054135939s ago: executing program 3 (id=3482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 17m9.543086018s ago: executing program 35 (id=3482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 25.021378621s ago: executing program 8 (id=6778): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) 21.992256771s ago: executing program 8 (id=6793): mprotect(&(0x7f0000d7c000/0x4000)=nil, 0x4000, 0x1000000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x18200, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x5f53, 0x200, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x3328}], 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000040), 0x0, 0x4008000) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x57, &(0x7f00000002c0)=""/21, 0x21}, 0x4}], 0x3d5, 0x45833af92e4a39fe, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000010, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) 21.04109975s ago: executing program 8 (id=6795): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaa6d, '\x00', r3, r0, 0x1, 0x2, 0x1}, 0x50) 20.947633033s ago: executing program 8 (id=6797): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_emit_ethernet(0xa2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb88a833008100430008004c00008c00000000002f907800000000ac1e010101440c8f530000000400000001444c7311ac1e59bd3cf6b68e0ef000010000000864010101000000010a01010000000004ac1e0101000003b16401010000010000e000000100000009ffffffff000000040000000000000001000000801890781200183f2500000000000000000000007f0000017f000001"], 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x1, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000140)={0x1}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0xff00000000000000}, 0x0, 0x0, 0x3, 0x1, 0x20, 0x1000}, 0x20) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20.850921275s ago: executing program 8 (id=6799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_PHYS_PORT_ID={0xa, 0x22, "b9347dc7eddd"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0xe, 0x6, 0xd, 0x0, @mcast2, @mcast2, 0x8000, 0x80, 0x5, 0x3061}}) 20.650064107s ago: executing program 8 (id=6800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000000000000bcb666f317d1571dc043a80ca514020f24b09921467513765befae91a0c117cc23b049085c09478679a9a600df4c26712247b04525ba0695b8d67caebe938ce649c9e690e37fdf3baef69a692fe34cd951af"], 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d0922") sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in=@rand_addr=0xfffffffd, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x10000, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x9}, {0x0, 0x0, 0x2}, 0x0, 0x3502, 0x2, 0x0, 0xfc, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd27, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20.400248494s ago: executing program 36 (id=6800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0400000000000000bcb666f317d1571dc043a80ca514020f24b09921467513765befae91a0c117cc23b049085c09478679a9a600df4c26712247b04525ba0695b8d67caebe938ce649c9e690e37fdf3baef69a692fe34cd951af"], 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d0922") sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in=@rand_addr=0xfffffffd, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x10000, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x9}, {0x0, 0x0, 0x2}, 0x0, 0x3502, 0x2, 0x0, 0xfc, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd27, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 17.078533875s ago: executing program 6 (id=6808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) r1 = socket(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) (async) write$cgroup_pressure(r3, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)=ANY=[@ANYBLOB], 0x1c}}, 0x0) (async) unshare(0x44000000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000060000000000000000000200000000004749ba97dc3f801fb6c9a663cb05a9439c9654ccdc"], 0x0, 0x1a, 0x0, 0x0, 0x4}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x800}, 0x10}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0xfffffffd, 0x4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x400c805}, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 16.91864317s ago: executing program 6 (id=6809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0200000004000000937e20c13340141b00140000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27, @ANYRES8=r1], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000980)=0x1) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002880)=ANY=[@ANYBLOB="3c0000001000030429bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r5], 0x3c}}, 0x20048000) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002880)=ANY=[@ANYBLOB="3c0000001000030429bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r5], 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r1}, {@val={r7}, @actul_num={@void, 0x5, 0x2}}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000070603000624000000a9ed5d4391000000000800574000000005"], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000070603000624000000a9ed5d4391000000000800574000000005"], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) 16.540946485s ago: executing program 6 (id=6810): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x45a, &(0x7f0000000200)={0x0, 0xf683, 0x2010, 0x80000, 0x352}, &(0x7f0000000440), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) tee(r0, 0xffffffffffffffff, 0x2, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) 13.37594213s ago: executing program 6 (id=6821): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.511352014s ago: executing program 9 (id=6830): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) (async) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$BLKRASET(r2, 0x1262, &(0x7f0000000000)=0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/236, 0xec, 0x0, &(0x7f0000000040)=""/175, 0xaf}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSMRU1(r4, 0x80047458, &(0x7f0000000300)=0x5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001480)={0x8, {"a2e3ad214fc752f91b5d30f70b06d038e7ff7fc6e5539b385d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b609a240c872adb988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a72eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa452370000000010403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b93903000000000000001c953fcad6f37525c1a0e94610dda3323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae0000000000000007eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d6039947329710309d83fdd9d8b4ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d6245939241a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78cd7d79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77900b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000eeffffffffffffff00000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (rerun: 32) 10.125126719s ago: executing program 6 (id=6831): bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x9d, 0x101, 0x5, 0x1d08, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x5}, 0x50) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x15ef931c2600f511}, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}, {&(0x7f0000002180)="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", 0xedb}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x7, 0xe, {0xe, 0x10, "57305b064fa8aab5d2cf599e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "5245ecfdf5644442d05cb06827251f6ac535d454008fb5003669a449663d76b694966b9ee9fa943d340f75cffe0dbb45f1d6f615f944390a13766b973f9570a229ed131b014a4b615f3b5e5a70ad7ca8d9140ebd3aa46279208381d49c0ccbcee20135671dd4b0d74e939a77848bad06f139acfae979db8ed47c4e9c9600b3bfc4"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="000f400000001f74b830ef4d6926ee9c69193b9f9bbbbf46cb41c35ef3455ba05941fd96030771e8f2aa72c1d8983f98d6ee1ad0fdc87c15ea144ceeb38d74ac750a8f03000000000000001538533c9330"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "f43e5d100b06"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "37b969b1"}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)={0x0, 0xb, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200e0200000002cfc54c204eb2495ced305ab3f2b4671368524f684294c8260a76c613d54f2dab0bf6acca8dfbcafc197096272bfc83b158739d2b8e0b0a77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0xe, 0xb8, {0xb8, 0x22, "464256bb7765b689c6cbf1d612f72b0991e335449d8a4b36d1fb2014fc601568a641e6cd2ab8c074cbef891b05d9248e27f94a8c725905645f8912a93726a34c2d0da4b9283e1ae44b15b7343b3ea7bfdf65fdbe774d0418f173df32869d90fdcaea6811159de084fe654fb65ca69de9b733712bc43b81316b8f5453a01f97e1f5c6ee3fd35c05cefd3c15911ae3a767f209c7eb23271010046f0dbd87d0f9dfad06a7a87e0e7ffd445ee08dd777dfb3d415b3cfc13e"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x20, 0x15, 0xd5, "2e24446a5a0bc00a44b70f5bd29761b686e6580af8decf9fd316ca37ad12e4e5d9a286cd564ba27a5a726310ed4611f17521ef30ab78f3adebd09f478cc2be229c9555edc21156cf1fe14d20816af907589f7201c4fe734a556f7de3ca4d7c9070018c324f18eee3c744c72d2d2b2c3c84e536fca8c17bbf83ff99351d0fd734b827256f05343f9e73faa2ae8c835cb5a8c6205b605d1185153a51be0702044e5b172998c4144692615506fa10321db80ddb1eb46a61e2da8e2a862509748c44e2fbec9235903a0ae3da0a401da8672e389a6f01c8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0xc0, 0x5, 0x4, "9bc7c1ae"}, &(0x7f0000000840)={0x40, 0x5, 0x1, "be"}}) 9.025242567s ago: executing program 9 (id=6832): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='.\x02\x00', 0x4) r6 = epoll_create1(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000200)={0x10, 0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) dup3(r8, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xff4, &(0x7f0000001840)=""/4084, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000000c0)='.\x02\x00', 0x2) ptrace(0x4208, r3) ptrace(0x4207, r3) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x0, 0xffffffea, 0x508df92b, 0x2, 0xfffffffffffffff9, 0x7f, 0x3e80, 0x8}, 0x0) fchdir(r2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 8.512910656s ago: executing program 0 (id=6836): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x1, 0x100269}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x14, 0x1aa, &(0x7f0000000100)="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"}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) 8.008153648s ago: executing program 1 (id=6838): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setns(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_clone(0x8000200, &(0x7f0000000040)="519eb9fed484e035858f1903a81f798b24df0f75e95e7f558570199372a5de05f9b3c1f7ddee0f2194e4dd0b342a0c523629883e61441e6b1786a5db7346b5c19be35326b260a1", 0x47, &(0x7f0000000100), 0x0, &(0x7f0000000300)="3b844f0659c16aa6ad949057b2730817df65b158485b47b1304137be5aa5c62b181a6fc70569ef74a4653a13196180c73d826f697ca0b2f9e2df25070fa8b055f12afd74babbaf5b9cbf1fe1612a05f8fab36fa37cb1f756fd66098bb0a79a6546b67adf1ac4f4ba7e0f93f617c4d8566cccabcbd90e1de789fdbb64346b7af4beefebc621af146caddc391dbef789634549ce0ad193706b540cd42a76cc468af3c56bca067d11e16a50f5ba0821f7558bd77e4abbb13278cc71d852dbfa20247501c4b2f17ae4c9fe5be11526be664afe24576976fa1a4ab2f0302626a6252c050e34c8e1eedfacf7b0a81082659d063fa3e4875ecf") prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = shmget(0x3, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "fffeffffffffffe2", "55184f000000000000000000006f00", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) 7.864860452s ago: executing program 7 (id=6839): unshare(0x68040200) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000240)=0x7ff, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x6f, 0x0, @fd_index=0x9}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b63707573f8fcad6b5cc2ec54657420"], 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r8, 0xc0045103, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="11032bbd7000fbdbdf2500000000a182007cbbb0ce0d545628419c7e0511874bb31194c2ecb1f0e8ed1703f617023572c7e4743efd29bda32a3fb7be03fc2b7152049cd18a2d6d0d6fd576df33fc1d59dd3fc879f34f371dd29eb3f660ccf3a77e6948ce0c4bd4729e8af56af217e00d7430ad2df4c54fed94bd6e68dc1c8f8f11be17e6a87122d61c7ffc4fcf41caf2d9f24b98bdddaf7c91095de87ff59356a13abc9529af7ec323502389cbe15ce0272e47afefd7fa7e0a45f71e76df7301681a75e9b70e087fd7a7606f75524425adf03a895c7937d42e57c06f01871911801dc94c35b50ae572b17eb2e5b5e1f98393bdbd3e7e3a450f0ecabc99387009a18164d800d09dd5a766d36c9af80c15b6da0a794175113630198c355d3fbb50943147b0b8096f5eaa057835febad875"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[], 0x64, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xb}, 0x1) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 7.41909264s ago: executing program 9 (id=6840): mmap(&(0x7f0000959000/0x4000)=nil, 0x4000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4f, 0x22, 0x76, 0x10, 0xb05, 0x9202, 0x944f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x2, 0x1, 0xb7, 0xaf, 0xe0, 0xfc, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file1/file3\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x6e6883, 0x1b9) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2, 0x5, 0xdddd1000, 0x1000, &(0x7f00004d5000/0x1000)=nil}) landlock_restrict_self(r2, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 7.292838285s ago: executing program 1 (id=6841): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.173157311s ago: executing program 9 (id=6842): mmap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x60, 0xec) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x1080}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.size\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x40000) 6.935914837s ago: executing program 6 (id=6843): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x2000}) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x51, 0x0, 0x6, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x80000000, 0x0, r1}, 0x50) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r7, 0x0) 6.356078263s ago: executing program 7 (id=6844): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x1}}) io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0) recvmmsg(r5, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x100, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9, &(0x7f0000000480)=[{0x803, 0x100000003, 0x1}], 0x1, 0x0, 0x47, 0x0, 0x54, 0x76}) 5.321004902s ago: executing program 0 (id=6845): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000005c0)=[@increfs, @acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x50}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r9 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='\x00\x00', 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x102, 0x2000101, 0x7ffc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4, 0x0, 0x0, 0x6}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.189145867s ago: executing program 1 (id=6846): r0 = syz_usb_connect(0x0, 0x4f, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x8c, 0x9a, 0x17, 0x8, 0x13d3, 0x3399, 0x2c36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x40, 0x62, 0xc0, 0x4, [{{0x9, 0x4, 0x92, 0x5, 0x0, 0x9c, 0xf9, 0x72, 0x8, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x6, 0x5, "e3a8462d82036f7db6"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7fff, 0xd6b0, 0x64}, @as_header={0x7, 0x24, 0x1, 0x7, 0x5}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4c, &(0x7f0000000240)=@string={0x4c, 0x3, "28a80c0000000000005c8bd6bd149f7445d29039a7a40f7a57be3975be448b0b6478d6b2de80cf36fa08bcc637fd731fb29d03000000000000006eb3d6dc7045e06d8a1ecc83ecf5eeb1"}}, {0x3, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x402}}, {0x1b, &(0x7f0000000040)=@string={0x1b, 0x3, "97ef019aff36fff69f24f49f0320acf0bcd69375c40edf2e67"}}]}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x4003, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES8=r0], 0x30}}, 0x44) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6bbb, 0x1f480, 0x0, 0x399}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f0000000100)) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74) 5.112236936s ago: executing program 0 (id=6847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x3, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000000000000000000000000000000000000000000000000000000000000000000000ffffac1414bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) 4.501338353s ago: executing program 7 (id=6848): symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000040)='./file0/file1\x00') 4.362805007s ago: executing program 9 (id=6849): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xffffffffffff2ea6, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x141}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r5 = getpgid(0xffffffffffffffff) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x11) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c884) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, r0, 0x401, 0x70bd25, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x56c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x3c}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0) 4.228579206s ago: executing program 7 (id=6850): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001d00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390425bd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300040001000000200012800800010073697400140002800800020000000001"], 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 3.177036818s ago: executing program 0 (id=6851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0xfffffffe, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0085de5d0d84d39bae000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff040000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x3, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}], "", ['\x00']}, 0x178) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.884606963s ago: executing program 0 (id=6852): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x3, 0x5, {{0x8, 0x4, 0x3, 0x8, 0x20, 0x68, 0x0, 0xe, 0x4, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0xf, [{@local, 0x2}]}]}}}}}) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) (rerun: 32) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000140)={0x5000, 0x2000, 0x1}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x4, 0x20004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) 2.634581134s ago: executing program 0 (id=6853): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000001, 0x4020, 0x6, 0x9, 0xf1, 0x6, 0x0, 0x0, 0x80, 0x4}}, 0x50) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0x6, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb3a9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x5, 0x58}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xa9, 0xc, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x5c}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x44, 0x24, 0x13, 0x80, "ae0d62dced1e43f3661806f2f73f4b9c36d86a093869c2cd3c8b264833bfbdcb10547b267c48acfc0657fbf61a64cad281fd82d136aed1be294c5ca5efb29cda"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.517072278s ago: executing program 9 (id=6854): syz_usb_connect(0x5, 0xe4, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020"], 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x6]}, 0x8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00020b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = syz_open_dev$dri(0x0, 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x2c0842, 0x21) read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 2.430825083s ago: executing program 7 (id=6855): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) fchdir(r0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) mq_notify(r1, &(0x7f0000000000)={0x0, 0x12, 0x1, @tid=0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f00000023c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r7, r8, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, 0x0, 0x0) dup2(r9, r5) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000140)) 951.947603ms ago: executing program 7 (id=6856): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) bind$rds(r4, &(0x7f0000000340)={0x2, 0x3, @multicast2}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x360, 0x360, 0x1a0, 0x1a0, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 552.971449ms ago: executing program 1 (id=6857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0x8, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 302.316061ms ago: executing program 1 (id=6858): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xb0c4, 0x20000, 0x0, 0x10a}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) r7 = syz_open_pts(r0, 0x101) r8 = dup3(r7, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r10 = fanotify_init(0x200, 0x0) r11 = dup(r9) fanotify_mark(r10, 0x1, 0x48001059, r11, 0x0) r12 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r12, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) 0s ago: executing program 1 (id=6859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x38}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x3, 0x0, 0x5, 0x40004, 0xffffffff}, {0x0, 0x0, 0x0, 0xfd}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x34ff, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x7f, 0x6, 0x8, 0x77, 0x5, 0x2, 0x0, 0xd, 0xd1, 0x7, 0x2, 0x6, 0xcb, '\x00', 0x5, 0x8}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000001080)={0x81, 0x0, 0x3}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xba1, 0x8c5f, 0x0, [{0x46, 0x8, 0x1}, {0x2, 0x29, 0x6, '\x00', 0xf8}, {0x60, 0x3, 0x0, '\x00', 0xbd}, {0x7, 0x4, 0x9, '\x00', 0xd}, {0x5, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x40, 0x71, '\x00', 0x2}, {0x7, 0x7, 0xfd, '\x00', 0x34}, {0x9, 0xc5, 0x1, '\x00', 0x5}, {0x7, 0xfb, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xd, '\x00', 0x4}, {0x1, 0x4e, 0x0, '\x00', 0x2}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0xfa, 0x0, 0x8, '\x00', 0x7}, {0x80, 0x2, 0x80, '\x00', 0x4}, {0x6, 0x8, 0x3, '\x00', 0x4}, {0x9, 0xf1, 0x8, '\x00', 0x4}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x4, 0x6, 0x9, '\x00', 0x48}, {0x90, 0x0, 0x81, '\x00', 0x6}, {0xb, 0xff, 0x5}, {0x0, 0x4, 0x3, '\x00', 0x6a}, {0x7, 0x35, 0x7a, '\x00', 0x8}, {0x4, 0x7, 0x5, '\x00', 0xf}, {0x8, 0x2, 0x62, '\x00', 0x1}]}}) kernel console output (not intermixed with test programs): 1.0: nonzero urb status received: -71 [ 2011.997285][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2012.003654][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2012.010292][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2012.016622][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2012.023249][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2012.036900][T28956] usb 2-1: USB disconnect, device number 29 [ 2012.043131][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2012.497302][T28956] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 2012.647173][T28956] usb 2-1: device descriptor read/64, error -71 [ 2012.897669][T28956] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 2013.037257][T28956] usb 2-1: device descriptor read/64, error -71 [ 2013.157467][T28956] usb usb2-port1: attempt power cycle [ 2013.507439][T28956] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 2013.529127][T28956] usb 2-1: device descriptor read/8, error -71 [ 2013.622000][T29014] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6118'. [ 2013.766937][T28956] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 2013.820938][T28956] usb 2-1: device descriptor read/8, error -71 [ 2013.957117][T28956] usb usb2-port1: unable to enumerate USB device [ 2015.953068][T29063] No such timeout policy "syz1" [ 2016.023845][T29063] xt_TCPMSS: Only works on TCP SYN packets [ 2017.490224][T29077] netlink: 'syz.6.6135': attribute type 17 has an invalid length. [ 2017.504554][T29077] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6135'. [ 2017.761195][T29092] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6136'. [ 2017.862368][T29094] program syz.0.6139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2018.327325][T17132] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2018.478547][T17132] usb 2-1: device descriptor read/64, error -71 [ 2018.727177][T17132] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2018.867610][T17132] usb 2-1: device descriptor read/64, error -71 [ 2018.977071][T17132] usb usb2-port1: attempt power cycle [ 2019.097391][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6145'. [ 2019.326910][T17132] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2019.348922][T17132] usb 2-1: device descriptor read/8, error -71 [ 2019.587433][T17132] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2019.607886][T17132] usb 2-1: device descriptor read/8, error -71 [ 2019.726782][T17132] usb usb2-port1: unable to enumerate USB device [ 2019.814131][T29124] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6148'. [ 2020.222842][T29131] netlink: 'syz.7.6150': attribute type 1 has an invalid length. [ 2020.254748][T29131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2020.271643][T29131] bond1: (slave dummy0): making interface the new active one [ 2020.283723][T29131] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2020.475959][T29138] netlink: 'syz.7.6152': attribute type 9 has an invalid length. [ 2020.484026][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6152'. [ 2020.498814][T29138] macvlan2: entered promiscuous mode [ 2020.504171][T29138] hsr0: entered promiscuous mode [ 2020.509567][T29138] macvlan2: entered allmulticast mode [ 2020.515003][T29138] hsr0: entered allmulticast mode [ 2020.520265][T29138] hsr_slave_0: entered allmulticast mode [ 2020.525933][T29138] hsr_slave_1: entered allmulticast mode [ 2020.838475][T29147] program syz.7.6154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2021.482719][T29149] ip6gre1: entered promiscuous mode [ 2021.488712][T29149] ip6gre1: entered allmulticast mode [ 2021.536949][T28956] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2021.649317][T29160] sctp: [Deprecated]: syz.6.6160 (pid 29160) Use of int in maxseg socket option. [ 2021.649317][T29160] Use struct sctp_assoc_value instead [ 2021.696813][T28956] usb 2-1: device descriptor read/64, error -71 [ 2021.811954][T29162] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6161'. [ 2021.956941][T28956] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2021.982531][T29164] geneve2: entered promiscuous mode [ 2021.988084][T29164] geneve2: entered allmulticast mode [ 2022.076301][T29167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2022.086672][T28956] usb 2-1: device descriptor read/64, error -71 [ 2022.206945][T28956] usb usb2-port1: attempt power cycle [ 2022.247155][T28955] IPVS: starting estimator thread 0... [ 2022.347641][T29170] IPVS: using max 29 ests per chain, 69600 per kthread [ 2022.546676][T28956] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2022.577591][T28956] usb 2-1: device descriptor read/8, error -71 [ 2022.818201][T28956] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2022.838821][T28956] usb 2-1: device descriptor read/8, error -71 [ 2022.949038][T28956] usb usb2-port1: unable to enumerate USB device [ 2024.756763][T28956] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2024.906941][T28956] usb 2-1: Using ep0 maxpacket: 16 [ 2024.914605][T28956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.925336][T28956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.941197][T28956] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2024.951499][T28956] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2024.966055][T28956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2024.975477][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2024.983751][T28956] usb 2-1: SerialNumber: syz [ 2024.995421][T28956] hub 2-1:1.0: bad descriptor, ignoring hub [ 2025.005311][T28956] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2025.013833][T28956] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2025.395324][T29187] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 2025.459857][T29196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.470363][T29196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.521151][T29199] program syz.6.6172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2025.531176][ T6022] usb 2-1: USB disconnect, device number 42 [ 2026.163272][T29203] could not allocate digest TFM handle sha384-ce [ 2026.696771][T28956] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2026.856746][T28956] usb 2-1: Using ep0 maxpacket: 32 [ 2026.864048][T28956] usb 2-1: config 0 has no interfaces? [ 2026.869934][T28956] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2026.880029][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.890430][T28956] usb 2-1: config 0 descriptor?? [ 2027.098807][T29209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.108123][T29209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.179322][T28956] usb 2-1: USB disconnect, device number 43 [ 2027.329426][T29217] ip6gretap1: entered promiscuous mode [ 2027.335097][T29217] ip6gretap1: entered allmulticast mode [ 2027.448555][T29218] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 2028.410380][T29226] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6182'. [ 2028.628137][T29234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2029.152000][T29245] syzkaller0: entered promiscuous mode [ 2029.178188][T29245] syzkaller0: entered allmulticast mode [ 2029.261980][T29247] loop6: detected capacity change from 0 to 524287999 [ 2034.013335][T29275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2035.381881][T29298] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6205'. [ 2035.426617][ T30] audit: type=1326 audit(1764789912.147:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.517962][ T30] audit: type=1326 audit(1764789912.147:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.563999][ T30] audit: type=1326 audit(1764789912.147:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.609394][ T30] audit: type=1326 audit(1764789912.147:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.644291][ T30] audit: type=1326 audit(1764789912.147:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.678246][ T30] audit: type=1326 audit(1764789912.147:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.705716][ T30] audit: type=1326 audit(1764789912.147:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.784948][ T30] audit: type=1326 audit(1764789912.147:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.816958][ T30] audit: type=1326 audit(1764789912.147:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2035.879757][ T30] audit: type=1326 audit(1764789912.147:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29297 comm="syz.6.6205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2036.269514][T29320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2036.570831][T29330] bond8: option lacp_active: invalid value (7) [ 2036.587970][T29330] bond8 (unregistering): Released all slaves [ 2037.818193][T29361] kvm: pic: non byte write [ 2038.360849][T29373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2039.158238][T29388] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 2039.747559][ T6022] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2039.926684][ T6022] usb 2-1: device descriptor read/64, error -71 [ 2040.079566][T27657] Buffer I/O error on dev loop4, logical block 159, async page read [ 2040.230011][T29410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2040.238539][ T6022] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2040.289863][T29409] netlink: 'syz.0.6235': attribute type 15 has an invalid length. [ 2040.342046][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 2040.437019][ T6022] usb 2-1: device descriptor read/64, error -71 [ 2040.567047][ T6022] usb usb2-port1: attempt power cycle [ 2040.926778][ T6022] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2040.960778][ T6022] usb 2-1: device descriptor read/8, error -71 [ 2040.967242][T29427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6240'. [ 2041.246963][ T6022] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2041.323799][ T6022] usb 2-1: device descriptor read/8, error -71 [ 2041.340764][T29432] bond2 (unregistering): Released all slaves [ 2041.450005][ T6022] usb usb2-port1: unable to enumerate USB device [ 2042.612888][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2042.612903][ T30] audit: type=1800 audit(1764789919.337:6220): pid=29444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6245" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2042.875378][T29447] netlink: 'syz.8.6245': attribute type 1 has an invalid length. [ 2042.965171][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.979031][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.915201][T29456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2044.581381][ T3451] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.638151][ T30] audit: type=1326 audit(1764789921.347:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29464 comm="syz.8.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2044.765154][ T30] audit: type=1326 audit(1764789921.347:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29464 comm="syz.8.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2044.862059][ T30] audit: type=1326 audit(1764789921.347:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29464 comm="syz.8.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2044.917040][ T30] audit: type=1326 audit(1764789921.347:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29464 comm="syz.8.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2044.940693][ T30] audit: type=1326 audit(1764789921.347:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29464 comm="syz.8.6251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2045.003298][T29475] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 2045.009890][T29475] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2045.031135][T29475] vhci_hcd vhci_hcd.0: Device attached [ 2045.172249][T29476] vhci_hcd: connection closed [ 2045.172484][T27732] vhci_hcd: stop threads [ 2045.199926][T27732] vhci_hcd: release socket [ 2045.225126][T27732] vhci_hcd: disconnect device [ 2046.300794][T29499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2046.501341][T29501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6260'. [ 2046.511982][T29502] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6260'. [ 2048.996332][T29532] fuse: Bad value for 'user_id' [ 2049.001666][T29532] fuse: Bad value for 'user_id' [ 2049.938327][T29548] netlink: 774 bytes leftover after parsing attributes in process `syz.1.6274'. [ 2049.948937][T29548] netlink: 'syz.1.6274': attribute type 1 has an invalid length. [ 2050.009372][T29548] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6274'. [ 2050.034263][T29551] sctp: [Deprecated]: syz.8.6275 (pid 29551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2050.034263][T29551] Use struct sctp_sack_info instead [ 2051.136455][T29570] vti0: entered promiscuous mode [ 2051.475845][T29582] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6284'. [ 2051.476070][T29581] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6285'. [ 2051.714388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024762400: rx timeout, send abort [ 2051.813319][T29581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2051.827566][T29581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2051.841049][T29581] bond0 (unregistering): Released all slaves [ 2052.214498][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024762800: rx timeout, send abort [ 2052.722854][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024762800: abort rx timeout. Force session deactivation [ 2054.361421][T29638] netlink: 'syz.1.6303': attribute type 21 has an invalid length. [ 2054.659139][T29645] netem: change failed [ 2055.218506][T27657] Buffer I/O error on dev loop4, logical block 159, async page read [ 2055.333846][T12107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2055.346301][T12107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2055.356487][T12107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2055.371294][T12107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2055.385183][T12107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2055.606773][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.012456][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.221380][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.412994][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.966983][T29663] chnl_net:caif_netlink_parms(): no params data found [ 2057.053867][ T30] audit: type=1326 audit(1764789933.777:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.077006][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.124086][ T30] audit: type=1326 audit(1764789933.807:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.179189][ T30] audit: type=1326 audit(1764789933.807:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.229143][ T30] audit: type=1326 audit(1764789933.807:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.255886][ T30] audit: type=1326 audit(1764789933.807:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.286754][ T30] audit: type=1326 audit(1764789933.807:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.309404][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.318724][ T30] audit: type=1326 audit(1764789933.807:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.327893][ T1083] dummy0: left allmulticast mode [ 2057.341210][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.348801][ T30] audit: type=1326 audit(1764789933.807:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.374725][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.403636][ T30] audit: type=1326 audit(1764789933.807:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.426155][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.437765][T12107] Bluetooth: hci2: command tx timeout [ 2057.440804][ T30] audit: type=1326 audit(1764789933.817:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29684 comm="syz.1.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2057.476700][ T1083] dummy0: left promiscuous mode [ 2057.481948][ T1083] bridge0: port 3(dummy0) entered disabled state [ 2057.496115][ T1083] bridge_slave_1: left allmulticast mode [ 2057.503551][ T1083] bridge_slave_1: left promiscuous mode [ 2057.509763][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.547146][ T1083] bridge_slave_0: left allmulticast mode [ 2057.558700][ T1083] bridge_slave_0: left promiscuous mode [ 2057.582763][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.381737][ T1083] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2059.392142][ T1083] .` (unregistering): Released all slaves [ 2059.535376][T12107] Bluetooth: hci2: command tx timeout [ 2059.589930][ T1083] bond1 (unregistering): Released all slaves [ 2059.772453][ T1083] bond2 (unregistering): (slave veth3): Releasing active interface [ 2059.789160][ T1083] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2059.799853][ T1083] bond2 (unregistering): Released all slaves [ 2059.814508][ T1083] bond3 (unregistering): Released all slaves [ 2059.980818][ T1083] bond4 (unregistering): Released all slaves [ 2059.994807][ T1083] bond5 (unregistering): Released all slaves [ 2060.019832][T29706] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.6316'. [ 2060.056791][T29722] netlink: 'syz.1.6320': attribute type 43 has an invalid length. [ 2060.161140][ T1083] tipc: Left network mode [ 2060.358387][T29663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.395301][T29663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.418808][T29663] bridge_slave_0: entered allmulticast mode [ 2060.440157][T29663] bridge_slave_0: entered promiscuous mode [ 2060.465994][T29663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.479716][T29663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.495313][T29663] bridge_slave_1: entered allmulticast mode [ 2060.516808][T29663] bridge_slave_1: entered promiscuous mode [ 2061.202210][T29768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6328'. [ 2061.341997][T29663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.488428][T29663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2061.597886][T12107] Bluetooth: hci2: command tx timeout [ 2061.791106][ T1083] hsr_slave_0: left promiscuous mode [ 2061.822030][ T1083] hsr_slave_1: left promiscuous mode [ 2061.837640][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.163294][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2062.163316][ T30] audit: type=1326 audit(1764789938.877:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29774 comm="syz.1.6330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x0 [ 2062.170519][ T1083] team0 (unregistering): Port device batadv1 removed [ 2062.599978][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6336'. [ 2062.862479][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 2062.925127][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 2063.480936][T29663] team0: Port device team_slave_0 added [ 2063.683015][T29820] netlink: 'syz.8.6339': attribute type 10 has an invalid length. [ 2063.688902][T12107] Bluetooth: hci2: command tx timeout [ 2063.869241][T29663] team0: Port device team_slave_1 added [ 2063.882059][T29816] syzkaller1: entered promiscuous mode [ 2063.935087][T29816] syzkaller1: entered allmulticast mode [ 2064.167862][T29663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2064.181981][T29663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2064.214105][T29663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2064.254373][T29663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2064.266095][T29663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2064.298785][T29663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2064.431993][ T1083] IPVS: stop unused estimator thread 0... [ 2064.500117][T29835] libceph: resolve 'c' (ret=-3): failed [ 2064.505544][T29663] hsr_slave_0: entered promiscuous mode [ 2064.527990][T29663] hsr_slave_1: entered promiscuous mode [ 2064.542933][T29663] debugfs: 'hsr0' already exists in 'hsr' [ 2064.555936][T29663] Cannot create hsr debugfs directory [ 2066.278714][T28956] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2066.420777][T29663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2066.478764][T28956] usb 2-1: Using ep0 maxpacket: 8 [ 2066.485963][T29663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2066.494854][T28956] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2066.506378][T28956] usb 2-1: config 179 has no interface number 0 [ 2066.520514][T29663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2066.531814][T28956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2066.546358][T29663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2066.562451][T28956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2066.583060][T28956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2066.595311][T28956] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2066.609475][T28956] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2066.626021][T28956] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2066.640636][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.671856][T29864] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2066.812379][T29663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.860631][T29663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.883979][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.891312][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.923222][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.930483][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2067.103783][T29891] input: syz1 as /devices/virtual/input/input121 [ 2067.132865][T29864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.173202][T29663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2067.186080][T29864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.296106][T29671] usb 2-1: USB disconnect, device number 48 [ 2067.296106][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2067.296162][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2067.429064][T29663] veth0_vlan: entered promiscuous mode [ 2067.471226][T29663] veth1_vlan: entered promiscuous mode [ 2067.582791][T29663] veth0_macvtap: entered promiscuous mode [ 2067.600688][T29663] veth1_macvtap: entered promiscuous mode [ 2067.665061][T29663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2067.758235][T29663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2067.859291][ T6562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2067.902579][ T6562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2067.978192][ T6562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.030531][ T6562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.233516][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2068.251493][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.311223][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2068.332063][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.421712][T29936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2069.048219][T29963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6361'. [ 2071.112518][T30002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2072.756696][T25432] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2072.906816][T25432] usb 2-1: Using ep0 maxpacket: 32 [ 2072.918151][T25432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2072.929880][T25432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2072.940284][T25432] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2072.952539][T25432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2072.966001][T25432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2072.979553][T25432] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2072.989445][T25432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.997686][T25432] usb 2-1: Product: syz [ 2073.002144][T25432] usb 2-1: Manufacturer: syz [ 2073.007286][T25432] usb 2-1: SerialNumber: syz [ 2073.015191][T25432] usb 2-1: config 0 descriptor?? [ 2073.026213][T25432] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input122 [ 2073.411013][T17132] usb 2-1: USB disconnect, device number 49 [ 2074.115847][ T30] audit: type=1326 audit(1764789950.837:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2074.139911][ T30] audit: type=1326 audit(1764789950.837:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2074.188170][ T30] audit: type=1326 audit(1764789950.867:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2074.211982][ T30] audit: type=1326 audit(1764789950.867:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2074.236972][ T30] audit: type=1326 audit(1764789950.867:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2074.269509][ T30] audit: type=1326 audit(1764789950.867:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30032 comm="syz.8.6376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9b27f8f749 code=0x7ffc0000 [ 2076.113920][T30056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2076.158912][T30057] netlink: 'syz.7.6384': attribute type 1 has an invalid length. [ 2076.290560][T18251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2076.330898][T18251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2076.360226][T18251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2076.369613][T18251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2076.387952][T18251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2077.184983][T30060] chnl_net:caif_netlink_parms(): no params data found [ 2077.578638][T30084] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6389'. [ 2077.696857][T25432] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 2077.909080][T25432] usb 2-1: not running at top speed; connect to a high speed hub [ 2077.933959][T30090] fuse: Unknown parameter '' [ 2077.941155][ T6562] gretap0 (unregistering): left promiscuous mode [ 2077.944757][T25432] usb 2-1: config 1 has an invalid interface number: 54 but max is 0 [ 2077.998747][T25432] usb 2-1: config 1 has no interface number 0 [ 2078.004931][T25432] usb 2-1: config 1 interface 54 has no altsetting 0 [ 2078.068962][ T6562] tipc: Disabling bearer [ 2078.106840][T25432] usb 2-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 2078.126834][T25432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.143754][T25432] usb 2-1: Product: syz [ 2078.148333][T25432] usb 2-1: Manufacturer: syz [ 2078.153480][T25432] usb 2-1: SerialNumber: syz [ 2078.154129][ T6562] bond1 (unregistering): (slave gre1): Releasing backup interface [ 2078.190328][ T6562] gre1 (unregistering): left promiscuous mode [ 2078.426478][T25432] usb 2-1: USB disconnect, device number 50 [ 2078.476841][T12107] Bluetooth: hci0: command tx timeout [ 2078.577552][ T6562] bond0 (unregistering): (slave 3A): Releasing backup interface [ 2078.612501][ T6562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.623035][ T6562] bond0 (unregistering): Released all slaves [ 2078.870218][ T6562] bond1 (unregistering): Released all slaves [ 2079.090274][ T6562] bond2 (unregistering): Released all slaves [ 2079.293124][ T6562] bond3 (unregistering): (slave veth5): Releasing active interface [ 2079.301414][ T6562] veth0_to_bond: entered promiscuous mode [ 2079.309317][ T6562] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2079.319209][ T6562] bond3 (unregistering): Released all slaves [ 2079.499024][ T6562] bond4 (unregistering): Released all slaves [ 2079.515377][ T6562] bond5 (unregistering): Released all slaves [ 2079.530467][ T6562] bond6 (unregistering): Released all slaves [ 2079.546098][ T6562] bond7 (unregistering): Released all slaves [ 2079.752526][T18665] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2079.764891][ T6562] tipc: Disabling bearer [ 2079.772806][ T6562] tipc: Left network mode [ 2079.797787][T18665] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2079.805757][ T6562] IPVS: stopping backup sync thread 29388 ... [ 2079.819487][T18665] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2079.828680][T18665] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2079.925973][T30060] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.948656][T30060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.956139][T30060] bridge_slave_0: entered allmulticast mode [ 2079.964976][T30060] bridge_slave_0: entered promiscuous mode [ 2079.993532][T30060] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.016632][T30060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.024727][T30060] bridge_slave_1: entered allmulticast mode [ 2080.035672][T30060] bridge_slave_1: entered promiscuous mode [ 2080.170844][T30060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.232008][T30060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.318319][T30060] team0: Port device team_slave_0 added [ 2080.371149][T30060] team0: Port device team_slave_1 added [ 2080.476080][ T6562] dummy0: left promiscuous mode [ 2080.554585][ T6562] hsr_slave_0: left promiscuous mode [ 2080.560095][T12107] Bluetooth: hci0: command tx timeout [ 2080.584433][ T6562] hsr_slave_1: left promiscuous mode [ 2080.598506][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2080.615460][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.639768][ T6562] batman_adv: batadv0: Removing interface: vlan2 [ 2082.637198][T12107] Bluetooth: hci0: command tx timeout [ 2083.209421][T30171] binder: 30170:30171 ioctl 89f1 200000000300 returned -22 [ 2083.525818][T30060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2083.533228][T30060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2083.565298][T30060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2083.694228][T30060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2083.721325][T30060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2083.755491][T30060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2084.016072][T30060] hsr_slave_0: entered promiscuous mode [ 2084.040324][T30060] hsr_slave_1: entered promiscuous mode [ 2084.065386][T30060] debugfs: 'hsr0' already exists in 'hsr' [ 2084.078695][T30060] Cannot create hsr debugfs directory [ 2084.280027][ T6562] IPVS: stop unused estimator thread 0... [ 2084.716781][T12107] Bluetooth: hci0: command tx timeout [ 2085.177917][T28953] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2085.387710][T28953] usb 2-1: Using ep0 maxpacket: 16 [ 2085.396110][T28953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.416432][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.416971][T28953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.439564][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.440114][T28953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2085.455256][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.463582][T28953] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2085.480979][T28953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.487502][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.504041][T28953] usb 2-1: config 0 descriptor?? [ 2085.522219][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.546135][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.555717][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.564785][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.574129][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.583474][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2085.841131][T30060] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2085.864535][T30060] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2085.879527][T30060] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2085.901774][T30060] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2086.122785][T30060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2086.162687][T30060] 8021q: adding VLAN 0 to HW filter on device team0 [ 2086.164249][T30199] random: crng reseeded on system resumption [ 2086.195034][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.202304][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.280683][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.288046][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.314655][T28953] usbhid 2-1:0.0: can't add hid device: -71 [ 2086.330046][T28953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2086.358047][T28953] usb 2-1: USB disconnect, device number 51 [ 2086.497620][T30060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2086.582572][T30060] veth0_vlan: entered promiscuous mode [ 2086.621397][T30060] veth1_vlan: entered promiscuous mode [ 2086.702129][T30060] veth0_macvtap: entered promiscuous mode [ 2086.724092][T30060] veth1_macvtap: entered promiscuous mode [ 2086.771835][T30060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.805783][T30060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.864799][T18665] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.884162][T18665] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.915750][T18665] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.961221][T18665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2087.049048][T30241] netlink: 'syz.0.6413': attribute type 1 has an invalid length. [ 2087.200085][T30245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2087.409424][T30245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2087.737443][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.784317][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2088.048183][T18665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2088.088509][T18665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2088.507889][T30266] xt_cgroup: invalid path, errno=-2 [ 2088.531025][ T30] audit: type=1800 audit(1764789965.257:6261): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6381" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=18 res=0 errno=0 [ 2089.827369][T28952] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2089.996921][T28952] usb 2-1: Using ep0 maxpacket: 8 [ 2090.011780][T28952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2090.037587][T28952] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2090.086761][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2090.117579][T28952] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2090.148865][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2090.173929][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2090.188308][T28952] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2090.203386][T28952] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2090.219493][T28952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2090.229689][T28952] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2090.246424][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2090.259211][T28952] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2090.273372][T30313] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 2090.284504][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2090.300685][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2090.315091][T28952] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2090.337060][T28952] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2090.345418][T28952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2090.354235][T28952] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2090.365859][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2090.378020][T28952] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2090.397200][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2090.417008][T28952] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2090.430146][T28952] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2090.444522][T28952] usb 2-1: config 168 interface 0 has no altsetting 0 [ 2090.455947][T28952] usb 2-1: string descriptor 0 read error: -22 [ 2090.476057][T28952] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2090.495337][T28952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.515649][T28952] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2090.717862][T24884] usb 2-1: USB disconnect, device number 52 [ 2091.708450][T30342] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 2091.733375][T30342] bond1: entered promiscuous mode [ 2091.740682][T30342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2091.767556][T30342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2091.774906][T30342] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2091.786164][T30342] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 2091.798914][T30342] bond1: (slave ip6gre1): making interface the new active one [ 2091.806810][T30342] ip6gre1: entered promiscuous mode [ 2091.813173][T30342] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 2092.399209][T30346] __nla_validate_parse: 37 callbacks suppressed [ 2092.399231][T30346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6433'. [ 2092.757480][T24884] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2092.896669][T24884] usb 2-1: device descriptor read/64, error -71 [ 2093.105754][T30353] netlink: 'syz.8.6435': attribute type 21 has an invalid length. [ 2093.136735][T24884] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2093.153612][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6435'. [ 2093.176340][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6435'. [ 2093.210612][ T37] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2093.219756][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6435'. [ 2093.237887][ T37] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2093.247128][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6435'. [ 2093.256128][ T37] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2093.267408][T24884] usb 2-1: device descriptor read/64, error -71 [ 2093.268228][ T37] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2093.387067][T24884] usb usb2-port1: attempt power cycle [ 2093.727035][T24884] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2093.747379][T24884] usb 2-1: device descriptor read/8, error -71 [ 2093.986702][T24884] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2094.007507][T24884] usb 2-1: device descriptor read/8, error -71 [ 2094.119501][T24884] usb usb2-port1: unable to enumerate USB device [ 2094.834355][T30378] input: syz1 as /devices/virtual/input/input123 [ 2096.371977][T30402] erspan0: entered promiscuous mode [ 2096.688123][T30412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6453'. [ 2096.700693][T30412] fuse: Unknown parameter '' [ 2097.657392][T24884] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2097.806960][T24884] usb 2-1: Using ep0 maxpacket: 16 [ 2097.814968][T24884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2097.822819][T24884] usb 2-1: can't read configurations, error -61 [ 2097.957095][T24884] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2098.116667][T24884] usb 2-1: Using ep0 maxpacket: 16 [ 2098.124488][T24884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2098.132275][T24884] usb 2-1: can't read configurations, error -61 [ 2098.139252][T24884] usb usb2-port1: attempt power cycle [ 2098.476901][T24884] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2098.497507][T24884] usb 2-1: Using ep0 maxpacket: 16 [ 2098.504768][T24884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2098.514175][T24884] usb 2-1: can't read configurations, error -61 [ 2098.647398][T24884] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2098.667415][T24884] usb 2-1: Using ep0 maxpacket: 16 [ 2098.675060][T24884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2098.683545][T24884] usb 2-1: can't read configurations, error -61 [ 2098.690305][T24884] usb usb2-port1: unable to enumerate USB device [ 2100.397875][T30443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2100.407441][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2100.726661][T28955] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 2100.837444][ T6022] IPVS: starting estimator thread 0... [ 2100.907199][T28955] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.926833][T30452] IPVS: using max 38 ests per chain, 91200 per kthread [ 2100.938462][T28955] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2100.956349][T28955] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2100.975847][T28955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.991219][T28955] usb 2-1: config 0 descriptor?? [ 2101.040373][T30456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6465'. [ 2101.152074][T30462] bond0: option all_slaves_active: invalid value (8) [ 2101.607842][T28955] usbhid 2-1:0.0: can't add hid device: -71 [ 2101.623497][T28955] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2101.651498][T28955] usb 2-1: USB disconnect, device number 61 [ 2102.190640][T30489] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6475'. [ 2102.214200][T30489] netlink: 'syz.7.6475': attribute type 7 has an invalid length. [ 2102.223764][T30489] netlink: 'syz.7.6475': attribute type 8 has an invalid length. [ 2102.232330][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6475'. [ 2102.429158][T30496] kvm: kvm [30495]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2103.609862][T30529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.669627][T30529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2104.162382][T30546] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6488'. [ 2104.402729][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.409347][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.908725][T30576] delete_channel: no stack [ 2107.297469][T30592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6501'. [ 2107.477948][T30596] netlink: 'syz.6.6503': attribute type 1 has an invalid length. [ 2107.534576][T30599] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6503'. [ 2107.590939][T30599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2107.710969][T30596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2107.755887][T30596] bond2: (slave geneve2): making interface the new active one [ 2107.808354][T30596] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2107.848256][ T3451] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2107.884193][ T3451] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2107.925720][ T3451] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2107.952088][ T3451] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2108.849160][T30624] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6508'. [ 2109.470172][T30640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2109.716688][T28956] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2109.918678][T28956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.938196][T28956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2109.986454][T28956] usb 2-1: config 1 has no interface number 0 [ 2110.018998][T28956] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.083740][T28956] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2110.127490][T28956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2110.138866][T28956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.151477][T28956] usb 2-1: Product: syz [ 2110.155767][T28956] usb 2-1: Manufacturer: syz [ 2110.174429][T28956] usb 2-1: SerialNumber: syz [ 2110.437251][T28956] usb 2-1: USB disconnect, device number 62 [ 2110.852896][T30657] vivid-007: ================= START STATUS ================= [ 2110.879869][T30657] vivid-007: Enable Output Cropping: true [ 2110.899054][T30657] vivid-007: Enable Output Composing: true [ 2110.928485][T30657] vivid-007: Enable Output Scaler: true [ 2110.950379][T30657] vivid-007: Tx RGB Quantization Range: Automatic [ 2110.977378][T30657] vivid-007: Transmit Mode: HDMI [ 2111.006289][T30657] vivid-007: Hotplug Present: 0x00000000 [ 2111.029826][T30657] vivid-007: RxSense Present: 0x00000000 [ 2111.067147][T30657] vivid-007: EDID Present: 0x00000000 [ 2111.086356][T30657] vivid-007: ================== END STATUS ================== [ 2113.214633][T30679] could not allocate digest TFM handle sha1-avx2 [ 2113.684657][T30696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6526'. [ 2113.797909][T30701] Cannot find set identified by id 0 to match [ 2113.861691][T30702] sctp: [Deprecated]: syz.1.6527 (pid 30702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2113.861691][T30702] Use struct sctp_sack_info instead [ 2115.246911][T30721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2115.291400][T30721] netlink: 'syz.8.6532': attribute type 2 has an invalid length. [ 2115.331909][T30721] : entered promiscuous mode [ 2115.353108][ T30] audit: type=1800 audit(1764789992.077:6262): pid=30723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6532" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2115.373522][ C0] vkms_vblank_simulate: vblank timer overrun [ 2117.095835][T30768] program syz.8.6543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2117.953523][ T30] audit: type=1326 audit(1764789994.677:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2117.975972][ C0] vkms_vblank_simulate: vblank timer overrun [ 2117.997929][ T30] audit: type=1326 audit(1764789994.677:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.022223][ T30] audit: type=1326 audit(1764789994.677:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.044838][ C0] vkms_vblank_simulate: vblank timer overrun [ 2118.071780][ T30] audit: type=1326 audit(1764789994.677:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.094239][ C0] vkms_vblank_simulate: vblank timer overrun [ 2118.110432][ T30] audit: type=1326 audit(1764789994.677:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.154334][ T30] audit: type=1326 audit(1764789994.677:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.176872][ C0] vkms_vblank_simulate: vblank timer overrun [ 2118.215169][ T30] audit: type=1326 audit(1764789994.677:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30777 comm="syz.0.6547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2118.721482][T30794] sctp: [Deprecated]: syz.7.6551 (pid 30794) Use of int in max_burst socket option deprecated. [ 2118.721482][T30794] Use struct sctp_assoc_value instead [ 2118.886645][T29671] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2119.037861][T29671] usb 2-1: Using ep0 maxpacket: 32 [ 2119.044882][T29671] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2119.055093][T29671] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2119.064469][T29671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.073121][T29671] usb 2-1: Product: syz [ 2119.077842][T29671] usb 2-1: Manufacturer: syz [ 2119.082737][T29671] usb 2-1: SerialNumber: syz [ 2119.092108][T29671] usb 2-1: config 0 descriptor?? [ 2119.099770][T29671] gs_usb 2-1:0.0: Required endpoints not found [ 2119.299477][T29671] usb 2-1: USB disconnect, device number 63 [ 2120.358268][T30803] syz.0.6555: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2120.388720][T28956] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2120.392036][T30803] CPU: 0 UID: 0 PID: 30803 Comm: syz.0.6555 Not tainted syzkaller #0 PREEMPT(full) [ 2120.392070][T30803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2120.392086][T30803] Call Trace: [ 2120.392099][T30803] [ 2120.392111][T30803] dump_stack_lvl+0x189/0x250 [ 2120.392149][T30803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2120.392177][T30803] ? __pfx__printk+0x10/0x10 [ 2120.392210][T30803] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2120.392248][T30803] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2120.392288][T30803] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2120.392328][T30803] warn_alloc+0x214/0x310 [ 2120.392363][T30803] ? __pfx_warn_alloc+0x10/0x10 [ 2120.392401][T30803] ? __get_vm_area_node+0x28f/0x300 [ 2120.392426][T30803] ? vb2_vmalloc_alloc+0xef/0x340 [ 2120.392461][T30803] __vmalloc_node_range_noprof+0x690/0x12d0 [ 2120.392521][T30803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2120.392552][T30803] ? __kasan_kmalloc+0x93/0xb0 [ 2120.392588][T30803] vmalloc_user_noprof+0xad/0xf0 [ 2120.392614][T30803] ? vb2_vmalloc_alloc+0xef/0x340 [ 2120.392645][T30803] vb2_vmalloc_alloc+0xef/0x340 [ 2120.392674][T30803] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2120.392704][T30803] __vb2_queue_alloc+0x9c2/0x15a0 [ 2120.392762][T30803] vb2_core_reqbufs+0xc31/0x1420 [ 2120.392811][T30803] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2120.392837][T30803] ? vb2_verify_memory_type+0x1fc/0x570 [ 2120.392867][T30803] ? vb2_reqbufs+0x3a9/0x630 [ 2120.392911][T30803] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 2120.392949][T30803] __video_do_ioctl+0xa59/0xc10 [ 2120.392992][T30803] ? __pfx___video_do_ioctl+0x10/0x10 [ 2120.393040][T30803] video_usercopy+0x82a/0x13f0 [ 2120.393083][T30803] ? __pfx___video_do_ioctl+0x10/0x10 [ 2120.393114][T30803] ? __pfx_video_usercopy+0x10/0x10 [ 2120.393165][T30803] ? __fget_files+0x3a0/0x420 [ 2120.393202][T30803] v4l2_ioctl+0x18d/0x1e0 [ 2120.393232][T30803] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2120.393260][T30803] __se_sys_ioctl+0xfc/0x170 [ 2120.393288][T30803] do_syscall_64+0xfa/0xf80 [ 2120.393319][T30803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.393344][T30803] ? clear_bhb_loop+0x60/0xb0 [ 2120.393374][T30803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.393399][T30803] RIP: 0033:0x7fd92858f749 [ 2120.393420][T30803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.393444][T30803] RSP: 002b:00007fd9294fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2120.393470][T30803] RAX: ffffffffffffffda RBX: 00007fd9287e5fa0 RCX: 00007fd92858f749 [ 2120.393489][T30803] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 2120.393504][T30803] RBP: 00007fd928613f91 R08: 0000000000000000 R09: 0000000000000000 [ 2120.393521][T30803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.393536][T30803] R13: 00007fd9287e6038 R14: 00007fd9287e5fa0 R15: 00007fd92890fa28 [ 2120.393575][T30803] [ 2120.393586][T30803] Mem-Info: [ 2120.586116][T28956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.600031][T30803] active_anon:8728 inactive_anon:0 isolated_anon:0 [ 2120.600031][T30803] active_file:20633 inactive_file:45646 isolated_file:0 [ 2120.600031][T30803] unevictable:768 dirty:54 writeback:0 [ 2120.600031][T30803] slab_reclaimable:7806 slab_unreclaimable:140080 [ 2120.600031][T30803] mapped:31622 shmem:1367 pagetables:1888 [ 2120.600031][T30803] sec_pagetables:0 bounce:0 [ 2120.600031][T30803] kernel_misc_reclaimable:0 [ 2120.600031][T30803] free:1229983 free_pcp:10887 free_cma:0 [ 2120.606806][T28956] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 2120.609188][T30803] Node 0 active_anon:34912kB inactive_anon:0kB active_file:82520kB inactive_file:182384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126476kB dirty:216kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14464kB pagetables:7404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2120.612282][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.619524][T30803] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2120.651642][T28956] usb 2-1: config 0 descriptor?? [ 2120.654085][T30803] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2120.874678][T30803] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 2120.882487][T30803] Node 0 DMA32 free:992980kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34912kB inactive_anon:0kB active_file:82520kB inactive_file:182384kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2564676kB mlocked:0kB bounce:0kB free_pcp:43152kB local_pcp:31252kB free_cma:0kB [ 2120.916351][T30803] lowmem_reserve[]: 0 0 0 0 0 [ 2120.921222][T30803] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2120.954241][T30803] lowmem_reserve[]: 0 0 0 0 0 [ 2120.966591][T30803] Node 1 Normal free:3911592kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2120.999051][T30803] lowmem_reserve[]: 0 0 0 0 0 [ 2121.003948][T30803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2121.021981][T30803] Node 0 DMA32: 1844*4kB (M) 1547*8kB (M) 1152*16kB (ME) 1272*32kB (UME) 962*64kB (UME) 428*128kB (UME) 182*256kB (UME) 81*512kB (UME) 23*1024kB (UME) 5*2048kB (UM) 165*4096kB (UM) = 992936kB [ 2121.046361][T30803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2121.062080][T30803] Node 1 Normal: 218*4kB (UM) 54*8kB (UME) 47*16kB (UME) 237*32kB (UME) 114*64kB (UME) 35*128kB (UME) 10*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 945*4096kB (UM) = 3911592kB [ 2121.081569][T30803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2121.091273][T30803] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2121.100916][T30803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2121.111063][T30803] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2121.120872][T30803] 67642 total pagecache pages [ 2121.125715][T30803] 0 pages in swap cache [ 2121.131201][T30803] Free swap = 124996kB [ 2121.135399][T30803] Total swap = 124996kB [ 2121.141323][T30803] 2097051 pages RAM [ 2121.145169][T30803] 0 pages HighMem/MovableOnly [ 2121.149949][T30803] 424240 pages reserved [ 2121.154233][T30803] 0 pages cma reserved [ 2121.207854][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 2121.225143][T28956] usbhid 2-1:0.0: can't add hid device: -71 [ 2121.232571][T28956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2121.253588][T28956] usb 2-1: USB disconnect, device number 64 [ 2121.733288][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6560'. [ 2122.017933][T30826] input: syz1 as /devices/virtual/input/input124 [ 2122.187496][T30834] kvm: pic: non byte write [ 2127.286842][T28952] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2127.438200][T28952] usb 2-1: Using ep0 maxpacket: 16 [ 2127.445418][T28952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.455832][T28952] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2127.469016][T28952] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 2127.478206][T28952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.492436][T28952] usb 2-1: config 0 descriptor?? [ 2127.509508][T28952] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2128.056309][T30900] fuse: blksize only supported for fuseblk [ 2128.425558][ T6022] usb 2-1: USB disconnect, device number 65 [ 2128.766826][ T6022] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2128.917540][ T6022] usb 2-1: Using ep0 maxpacket: 32 [ 2128.927789][ T6022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.938612][ T6022] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2128.948237][ T6022] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2128.982021][ T6022] usb 2-1: config 0 interface 0 has no altsetting 1 [ 2128.997681][ T6022] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 2129.006902][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.015000][ T6022] usb 2-1: Product: syz [ 2129.021234][ T6022] usb 2-1: Manufacturer: syz [ 2129.030164][ T6022] usb 2-1: SerialNumber: syz [ 2129.043232][ T6022] usb 2-1: config 0 descriptor?? [ 2129.052210][ T6022] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2129.073776][ T6022] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2129.102822][T27657] udevd[27657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2129.258733][T30903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.267790][T30903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.279351][T28952] usb 2-1: USB disconnect, device number 66 [ 2129.459921][T30914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6589'. [ 2129.524295][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6590'. [ 2129.538646][T30916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6590'. [ 2129.909207][T30921] binder: 30920:30921 ioctl c0306201 200000000640 returned -22 [ 2129.950989][ T30] audit: type=1326 audit(1764790006.677:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30925 comm="syz.1.6594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d5e18f749 code=0x0 [ 2130.242045][T30944] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6599'. [ 2130.301299][T30948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6600'. [ 2130.496798][ T6022] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2130.646730][ T6022] usb 2-1: Using ep0 maxpacket: 16 [ 2130.654092][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2130.666202][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.676399][ T6022] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2130.685701][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.698717][ T6022] usb 2-1: config 0 descriptor?? [ 2131.167838][ T6022] gt683r_led 0003:1770:FF00.0042: unbalanced delimiter at end of report description [ 2131.179957][ T6022] gt683r_led 0003:1770:FF00.0042: hid parsing failed [ 2131.187392][ T6022] gt683r_led 0003:1770:FF00.0042: probe with driver gt683r_led failed with error -22 [ 2131.368655][T28956] usb 2-1: USB disconnect, device number 67 [ 2131.947521][T30971] netlink: 'syz.1.6608': attribute type 5 has an invalid length. [ 2131.956750][T30972] netlink: 'syz.1.6608': attribute type 5 has an invalid length. [ 2132.025484][T30976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 2132.456714][ T9293] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2132.606726][ T9293] usb 2-1: Using ep0 maxpacket: 32 [ 2132.614844][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 2132.627230][ T9293] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2132.636296][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.650569][ T9293] usb 2-1: config 0 descriptor?? [ 2132.658836][ T9293] hub 2-1:0.0: USB hub found [ 2132.867612][ T9293] hub 2-1:0.0: 1 port detected [ 2132.964556][ T30] audit: type=1326 audit(1764790009.687:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2132.991228][T30994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6614'. [ 2133.000977][ T30] audit: type=1326 audit(1764790009.687:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.040514][ T30] audit: type=1326 audit(1764790009.687:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.064241][ T30] audit: type=1326 audit(1764790009.687:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.089747][ T30] audit: type=1326 audit(1764790009.687:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.126671][ T30] audit: type=1326 audit(1764790009.687:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.149526][ T30] audit: type=1326 audit(1764790009.687:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.172707][ T30] audit: type=1326 audit(1764790009.687:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.195543][ T30] audit: type=1326 audit(1764790009.687:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30993 comm="syz.0.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2133.324910][T31001] IPv6: NLM_F_CREATE should be specified when creating new route [ 2133.343467][T31001] IPv6: Can't replace route, no match found [ 2133.857783][T31018] random: crng reseeded on system resumption [ 2134.481349][ T9293] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 2134.507252][ T9293] usb 2-1: USB disconnect, device number 68 [ 2135.113004][T31029] tipc: Enabled bearer , priority 0 [ 2135.121350][T31029] syzkaller0: entered promiscuous mode [ 2135.127402][T31029] syzkaller0: entered allmulticast mode [ 2135.297246][T24884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2135.426726][T24884] usb 2-1: device descriptor read/64, error -71 [ 2135.676888][T24884] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2135.826984][T24884] usb 2-1: device descriptor read/64, error -71 [ 2135.937320][T24884] usb usb2-port1: attempt power cycle [ 2136.276928][T24884] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2136.297395][T24884] usb 2-1: device descriptor read/8, error -71 [ 2136.537904][T24884] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2136.557538][T24884] usb 2-1: device descriptor read/8, error -71 [ 2136.667282][T24884] usb usb2-port1: unable to enumerate USB device [ 2138.123659][T31028] tipc: Resetting bearer [ 2138.150346][T31028] tipc: Disabling bearer [ 2138.477855][ T6022] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2138.657955][ T6022] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2138.676443][ T6022] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2138.695803][ T6022] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.724452][ T6022] usb 2-1: config 220 has no interface number 2 [ 2138.739191][ T6022] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2138.771091][ T6022] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2138.786620][ T6022] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2138.801429][ T6022] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2138.819693][ T6022] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2138.838169][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.858899][ T6022] usb 2-1: Product: syz [ 2138.867857][ T6022] usb 2-1: Manufacturer: syz [ 2138.880164][ T6022] usb 2-1: SerialNumber: syz [ 2139.119760][ T6022] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2139.148051][ T6022] uvcvideo 2-1:220.0: No valid video chain found. [ 2139.173089][ T6022] usb 2-1: selecting invalid altsetting 0 [ 2139.219509][ T6022] usb 2-1: selecting invalid altsetting 0 [ 2139.245398][ T6022] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2139.290632][ T6022] usb 2-1: USB disconnect, device number 73 [ 2139.915853][T31075] fuse: Invalid rootmode [ 2139.932932][T31075] tap0: tun_chr_ioctl cmd 1074025677 [ 2139.939726][T31075] tap0: linktype set to 769 [ 2140.007044][ T6022] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2140.176613][ T6022] usb 2-1: Using ep0 maxpacket: 8 [ 2140.184402][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2140.208047][ T6022] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2140.238329][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.274845][ T6022] usb 2-1: config 0 descriptor?? [ 2140.532464][ T6022] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2140.645796][T31099] macvlan2: entered promiscuous mode [ 2140.681245][T31100] macvlan3: entered promiscuous mode [ 2140.719075][T28952] usb 2-1: USB disconnect, device number 74 [ 2140.894985][T31105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2140.905387][T31105] netlink: 'syz.0.6644': attribute type 6 has an invalid length. [ 2140.915711][T31105] netlink: 'syz.0.6644': attribute type 5 has an invalid length. [ 2140.923565][T31105] netlink: 'syz.0.6644': attribute type 4 has an invalid length. [ 2140.935095][T31105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6644'. [ 2142.171317][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2142.171337][ T30] audit: type=1800 audit(1764790018.897:6304): pid=31120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6649" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2144.760637][T31169] loop7: detected capacity change from 0 to 7 [ 2144.777465][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.786793][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.795557][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.804806][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.814761][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.823995][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.843855][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.853211][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.896711][T31170] support for cryptoloop has been removed. Use dm-crypt instead. [ 2144.906461][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.915814][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.925238][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.934432][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.942566][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.951866][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.952864][T31169] ldm_validate_partition_table(): Disk read failed. [ 2144.971612][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2144.980942][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2144.991206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2145.000445][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2145.009573][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2145.018822][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2145.027066][T31169] Dev loop7: unable to read RDB block 0 [ 2145.033511][T31169] loop7: unable to read partition table [ 2145.039605][T31169] loop7: partition table beyond EOD, truncated [ 2145.045980][T31169] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2146.764333][T31205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6673'. [ 2146.785692][T31205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6673'. [ 2147.068784][T31207] loop6: detected capacity change from 0 to 524288000 [ 2147.173557][T31209] netlink: 388 bytes leftover after parsing attributes in process `syz.6.6672'. [ 2147.266963][T28952] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2147.281198][T31207] bond3: option ad_user_port_key: invalid value (17217) [ 2147.298237][T31207] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 2147.341579][T31207] bond3 (unregistering): Released all slaves [ 2147.456974][T28952] usb 2-1: Using ep0 maxpacket: 8 [ 2147.471009][T28952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.484383][T28952] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2147.494478][T28952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.535866][T28952] usb 2-1: config 0 descriptor?? [ 2147.563405][T28952] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2148.180142][T31218] loop8: detected capacity change from 0 to 69 [ 2148.970057][T31211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.981209][T31211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2149.090389][ T6022] usb 2-1: USB disconnect, device number 75 [ 2149.644243][T31230] netlink: 'syz.1.6681': attribute type 1 has an invalid length. [ 2149.675972][T31230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2149.701239][T31230] bond2: (slave veth3): Enslaving as an active interface with a down link [ 2149.718423][T31231] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2149.725518][T31231] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 2150.107955][ T9293] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2150.266643][ T9293] usb 2-1: Using ep0 maxpacket: 8 [ 2150.273599][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2150.284685][ T9293] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2150.294480][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.305088][ T9293] usb 2-1: config 0 descriptor?? [ 2150.518766][ T9293] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2150.721689][ T9293] usb 2-1: USB disconnect, device number 76 [ 2151.818912][T31259] fuse: Unknown parameter 'group_id00000000000000000000' [ 2151.836802][T24884] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2152.017297][T24884] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 2152.026409][T24884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.073795][T24884] usb 2-1: Product: syz [ 2152.094209][T24884] usb 2-1: Manufacturer: syz [ 2152.100831][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.117567][T24884] usb 2-1: SerialNumber: syz [ 2152.128453][T24884] usb 2-1: config 0 descriptor?? [ 2152.140351][T31267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6693'. [ 2152.146960][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.168913][T24884] asix 2-1:0.0: probe with driver asix failed with error -22 [ 2152.190574][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.251151][T31272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6694'. [ 2152.276070][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.285316][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.294732][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.379934][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.400485][T31265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6692'. [ 2152.443373][T31278] netlink: 'syz.7.6695': attribute type 10 has an invalid length. [ 2152.463733][T31278] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2154.670273][T28956] usb 2-1: USB disconnect, device number 77 [ 2155.036802][T28956] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2155.187012][T28956] usb 2-1: Using ep0 maxpacket: 8 [ 2155.201593][T28956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2155.224504][T28956] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2155.234070][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.251985][T28956] usb 2-1: config 0 descriptor?? [ 2155.380816][T31290] Cannot find set identified by id 1 to match [ 2155.389743][ T30] audit: type=1326 audit(1764790032.117:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.413252][ T30] audit: type=1326 audit(1764790032.117:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.437487][ T30] audit: type=1326 audit(1764790032.117:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.473992][T28956] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2155.496719][ T30] audit: type=1326 audit(1764790032.117:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.531551][ T30] audit: type=1326 audit(1764790032.137:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.556261][ T30] audit: type=1326 audit(1764790032.147:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.587210][ T30] audit: type=1326 audit(1764790032.147:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.620873][ T30] audit: type=1326 audit(1764790032.147:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.643900][ T30] audit: type=1326 audit(1764790032.257:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2155.698913][T28956] usb 2-1: USB disconnect, device number 78 [ 2155.705058][ T30] audit: type=1326 audit(1764790032.277:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31287 comm="syz.0.6699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92858f749 code=0x7ffc0000 [ 2156.438948][T31305] bond3: option arp_interval: invalid value (18446744073608922383) [ 2156.472708][T31305] bond3: option arp_interval: allowed values 0 - 2147483647 [ 2156.495153][T31305] bond3 (unregistering): Released all slaves [ 2157.633288][T31317] __nla_validate_parse: 5 callbacks suppressed [ 2157.633309][T31317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6708'. [ 2157.681428][T31317] openvswitch: netlink: Flow key attr not present in new flow. [ 2157.701574][T31319] netlink: 'syz.7.6709': attribute type 8 has an invalid length. [ 2157.791391][T31321] netlink: 'syz.1.6710': attribute type 3 has an invalid length. [ 2159.371398][ T9293] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x4 [ 2159.395744][ T9293] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x2 [ 2159.413441][ T9293] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x3 [ 2159.446877][ T9293] hid-generic 0000:3000000:0000.0043: hidraw0: HID v0.00 Device [sy] on syz0 [ 2159.602546][T31353] fido_id[31353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2160.368759][T29671] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 2160.537490][T29671] usb 2-1: device descriptor read/64, error -71 [ 2160.796981][T29671] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 2160.946929][T29671] usb 2-1: device descriptor read/64, error -71 [ 2161.067611][T29671] usb usb2-port1: attempt power cycle [ 2161.349980][T31370] loop7: detected capacity change from 0 to 7 [ 2161.378646][ C1] blk_print_req_error: 10 callbacks suppressed [ 2161.378666][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.394248][ C1] buffer_io_error: 10 callbacks suppressed [ 2161.394269][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.411647][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.421283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.436758][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.445989][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.481593][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.486837][T29671] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 2161.490972][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.556692][T31372] support for cryptoloop has been removed. Use dm-crypt instead. [ 2161.564827][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.574052][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.586184][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.595536][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.605824][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.615043][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.617316][T29671] usb 2-1: device descriptor read/8, error -71 [ 2161.629205][T31370] ldm_validate_partition_table(): Disk read failed. [ 2161.630756][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.645688][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.654281][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.663471][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.676642][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2161.685830][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2161.695927][T31370] Dev loop7: unable to read RDB block 0 [ 2161.702424][T31370] loop7: unable to read partition table [ 2161.709914][T31370] loop7: partition table beyond EOD, truncated [ 2161.739727][T31370] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2161.766034][T31371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6724'. [ 2161.887036][T29671] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2161.917280][T29671] usb 2-1: device descriptor read/8, error -71 [ 2162.037209][T29671] usb usb2-port1: unable to enumerate USB device [ 2162.657607][T31382] netlink: 184940 bytes leftover after parsing attributes in process `syz.0.6727'. [ 2162.853680][T31385] netlink: 'syz.0.6728': attribute type 1 has an invalid length. [ 2162.920960][T31385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2162.936352][T31389] bond1: (slave veth0_to_bond): making interface the new active one [ 2162.950497][T31389] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2162.965752][T31385] veth0: entered promiscuous mode [ 2162.974044][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6728'. [ 2163.496961][T24884] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2163.648470][T24884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.667246][T24884] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2163.682086][T24884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2163.692467][T24884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.717449][T24884] usb 2-1: Product: syz [ 2163.721657][T24884] usb 2-1: Manufacturer: syz [ 2163.726351][T24884] usb 2-1: SerialNumber: syz [ 2163.953074][T31391] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2164.181652][ T5205] ldm_validate_partition_table(): Disk read failed. [ 2164.190001][ T5205] Dev loop7: unable to read RDB block 0 [ 2164.197411][ T5205] loop7: unable to read partition table [ 2164.203713][ T5205] loop7: partition table beyond EOD, truncated [ 2164.258413][T31397] netlink: 'syz.7.6732': attribute type 1 has an invalid length. [ 2164.299347][T31397] bond2: entered promiscuous mode [ 2164.307907][T31397] bond2: entered allmulticast mode [ 2164.314482][T31397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2164.380071][T31399] erspan1: entered allmulticast mode [ 2164.466820][T31399] bond2: (slave erspan1): making interface the new active one [ 2164.490680][T31399] erspan1: entered promiscuous mode [ 2164.518855][T31399] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 2164.664475][T31391] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2164.905006][T24884] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2164.927204][T24884] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2164.934742][T24884] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2165.117390][T24884] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 2165.173283][T24884] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2165.202771][T24884] usb 2-1: USB disconnect, device number 83 [ 2165.230451][T24884] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 2165.724934][T31419] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2165.728361][T31420] fuse: Invalid rootmode [ 2165.737881][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2165.737900][ T30] audit: type=1326 audit(1764790042.467:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31418 comm="syz.1.6739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d5e18f749 code=0x0 [ 2165.841739][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.850011][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.981199][ T30] audit: type=1326 audit(1764790042.707:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.005293][ T30] audit: type=1326 audit(1764790042.707:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.027895][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.041125][ T30] audit: type=1326 audit(1764790042.747:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.063585][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.073634][ T30] audit: type=1326 audit(1764790042.747:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.096102][ C1] vkms_vblank_simulate: vblank timer overrun [ 2166.103845][ T30] audit: type=1326 audit(1764790042.747:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.127723][ T30] audit: type=1326 audit(1764790042.747:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.150874][ T30] audit: type=1326 audit(1764790042.757:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.186638][T28956] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2166.195746][ T30] audit: type=1326 audit(1764790042.757:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.219199][ T30] audit: type=1326 audit(1764790042.757:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31427 comm="syz.6.6741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79a7f8f749 code=0x7ffc0000 [ 2166.337107][T28956] usb 2-1: Using ep0 maxpacket: 8 [ 2166.344386][T28956] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2166.363856][T28956] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 174, changing to 11 [ 2166.380673][T28956] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8503, setting to 1024 [ 2166.392444][T28956] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2166.403259][T28956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.626009][T28956] usb 2-1: string descriptor 0 read error: -71 [ 2166.698047][T28956] usb 2-1: USB disconnect, device number 84 [ 2167.514396][T31445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2167.522146][T31445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.624465][T31445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2167.644226][T31445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2167.901738][T31459] program syz.8.6747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2167.943737][ T1138] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.963258][ T1138] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.975902][ T1138] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.476880][T20468] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2168.640563][T20468] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2168.666638][T20468] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2168.691530][T20468] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 2168.703604][T20468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.715045][T20468] usb 2-1: Product: syz [ 2168.724691][T20468] usb 2-1: Manufacturer: syz [ 2168.732864][T20468] usb 2-1: SerialNumber: syz [ 2168.740226][T20468] usb 2-1: config 0 descriptor?? [ 2168.751494][T31468] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2168.761371][T31468] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2168.772316][T20468] option 2-1:0.0: GSM modem (1-port) converter detected [ 2168.784320][T20468] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2168.978173][T28952] usb 2-1: USB disconnect, device number 85 [ 2169.019241][T28952] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2169.053577][T28952] option 2-1:0.0: device disconnected [ 2170.293189][T31509] tipc: Enabled bearer , priority 0 [ 2170.301273][T31509] syzkaller0: entered promiscuous mode [ 2170.307105][T31509] syzkaller0: entered allmulticast mode [ 2170.556836][T28952] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2170.709248][T28952] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 2170.718145][T28952] usb 2-1: config 0 has no interface number 0 [ 2170.724284][T28952] usb 2-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2170.736627][T28952] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2170.747939][T28952] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 2170.757220][T28952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.767514][T28952] usb 2-1: config 0 descriptor?? [ 2170.773394][T31509] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2170.783727][T28952] cxacru 2-1:0.109: cxacru_bind: interface has incorrect endpoints [ 2170.792175][T28952] cxacru 2-1:0.109: usbatm_usb_probe: bind failed: -19! [ 2171.004491][T31509] tipc: Resetting bearer [ 2171.012455][T28952] usb 2-1: USB disconnect, device number 86 [ 2171.022812][T31508] tipc: Resetting bearer [ 2171.055716][T31508] tipc: Disabling bearer [ 2171.114835][T31463] ALSA: mixer_oss: invalid OSS volume '' [ 2171.764533][T31521] netlink: 'syz.1.6765': attribute type 9 has an invalid length. [ 2171.772674][T31521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 2171.831292][T31521] macvlan2: entered promiscuous mode [ 2171.837113][T31521] hsr0: entered promiscuous mode [ 2171.842476][T31521] macvlan2: entered allmulticast mode [ 2171.848117][T31521] hsr0: entered allmulticast mode [ 2171.853474][T31521] hsr_slave_0: entered allmulticast mode [ 2171.860245][T31521] hsr_slave_1: entered allmulticast mode [ 2171.936178][T31525] netlink: 'syz.0.6766': attribute type 9 has an invalid length. [ 2171.944456][T31525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6766'. [ 2171.961513][T31525] hsr0: entered promiscuous mode [ 2171.967800][T31525] macvlan0: entered promiscuous mode [ 2171.973316][T31525] macvlan0: entered allmulticast mode [ 2171.979025][T31525] hsr0: entered allmulticast mode [ 2171.984087][T31525] hsr_slave_0: entered allmulticast mode [ 2171.990876][T31525] hsr_slave_1: entered allmulticast mode [ 2172.755457][T31536] xt_hashlimit: size too large, truncated to 1048576 [ 2172.786326][T31537] netlink: 'syz.1.6769': attribute type 11 has an invalid length. [ 2172.832153][T31537] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.6769'. [ 2174.902570][T31572] kvm: kvm [31571]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 2174.930284][T31574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6776'. [ 2176.196775][T29671] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2176.348672][T29671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2176.360112][T29671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2176.371997][T29671] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2176.381217][T29671] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2176.389747][T29671] usb 2-1: Manufacturer: syz [ 2176.398976][T29671] usb 2-1: config 0 descriptor?? [ 2176.641430][T29671] uclogic 0003:256C:006D.0044: failed retrieving Huion firmware version: -71 [ 2176.670721][T29671] uclogic 0003:256C:006D.0044: failed probing parameters: -71 [ 2176.705568][T29671] uclogic 0003:256C:006D.0044: probe with driver uclogic failed with error -71 [ 2176.718220][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2176.718237][ T30] audit: type=1800 audit(1764790053.447:6330): pid=31593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6782" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2176.728932][T29671] usb 2-1: USB disconnect, device number 87 [ 2176.908430][T31598] netlink: 'syz.1.6784': attribute type 32 has an invalid length. [ 2176.917072][T31598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2176.943268][T31598] bond3: Setting coupled_control to off (0) [ 2176.955618][T31598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2176.965072][T31598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2176.974091][T31598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2177.096173][T31601] fuse: Unknown parameter 'rooode' [ 2178.161740][T18251] Bluetooth: hci2: command 0x0406 tx timeout [ 2178.456692][T28952] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2178.627938][T28952] usb 2-1: no configurations [ 2178.632577][T28952] usb 2-1: can't read configurations, error -22 [ 2178.784386][T28952] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2178.947509][T28952] usb 2-1: no configurations [ 2178.952212][T28952] usb 2-1: can't read configurations, error -22 [ 2178.959573][T28952] usb usb2-port1: attempt power cycle [ 2179.308439][T28952] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2179.337917][T28952] usb 2-1: no configurations [ 2179.342789][T28952] usb 2-1: can't read configurations, error -22 [ 2179.486763][T28952] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2179.510481][T28952] usb 2-1: no configurations [ 2179.515562][T28952] usb 2-1: can't read configurations, error -22 [ 2179.522778][T28952] usb usb2-port1: unable to enumerate USB device [ 2180.147185][T18666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2180.160717][T18666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.268828][T18666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2180.279740][T18666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.391698][T18666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2180.404821][T18666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.520216][T18666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2180.535461][T18666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.634994][T31586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2180.650336][T31586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2180.660493][T31586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2180.672156][T31586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2180.683462][T31586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2180.826376][T31651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2180.838372][T18666] bridge_slave_1: left allmulticast mode [ 2180.844097][T18666] bridge_slave_1: left promiscuous mode [ 2180.850335][T18666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.861267][T18666] bridge_slave_0: left allmulticast mode [ 2180.867938][T18666] bridge_slave_0: left promiscuous mode [ 2180.873680][T18666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.570373][T18666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2181.599156][T18666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2181.618350][T18666] bond0 (unregistering): Released all slaves [ 2181.690351][T18666] : left promiscuous mode [ 2182.136701][T29671] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2182.221609][T18666] hsr_slave_0: left promiscuous mode [ 2182.228576][T18666] hsr_slave_1: left promiscuous mode [ 2182.235417][T18666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2182.246059][T18666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2182.285648][T18666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2182.294992][T18666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2182.306709][T29671] usb 2-1: device descriptor read/64, error -71 [ 2182.390517][T18666] veth1_macvtap: left promiscuous mode [ 2182.406098][T18666] veth0_macvtap: left promiscuous mode [ 2182.422043][T18666] veth1_vlan: left promiscuous mode [ 2182.439077][T18666] veth0_vlan: left promiscuous mode [ 2182.548182][T29671] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2182.689796][T29671] usb 2-1: device descriptor read/64, error -71 [ 2182.797315][T31586] Bluetooth: hci0: command tx timeout [ 2182.807370][T29671] usb usb2-port1: attempt power cycle [ 2183.147226][T29671] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2183.170811][T29671] usb 2-1: device descriptor read/8, error -71 [ 2183.416961][T29671] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2183.467252][T29671] usb 2-1: device descriptor read/8, error -71 [ 2183.587094][T29671] usb usb2-port1: unable to enumerate USB device [ 2184.035090][T18666] team0 (unregistering): Port device team_slave_1 removed [ 2184.123803][T18666] team0 (unregistering): Port device team_slave_0 removed [ 2184.877076][T31586] Bluetooth: hci0: command tx timeout [ 2185.243258][T31652] chnl_net:caif_netlink_parms(): no params data found [ 2185.266940][T28952] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2185.426759][T28952] usb 2-1: Using ep0 maxpacket: 32 [ 2185.435128][T28952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.450016][T28952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.460703][T28952] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2185.469908][T28952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.497409][T28952] usb 2-1: config 0 descriptor?? [ 2185.506036][T28952] hub 2-1:0.0: USB hub found [ 2185.549217][T31709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 2185.670573][T31652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.699387][T31652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.709421][T31652] bridge_slave_0: entered allmulticast mode [ 2185.716005][T28952] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 2185.723039][T31652] bridge_slave_0: entered promiscuous mode [ 2185.769495][T31652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.787445][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.805168][T31652] bridge_slave_1: entered allmulticast mode [ 2185.827592][T31652] bridge_slave_1: entered promiscuous mode [ 2185.938824][T31652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.952642][T31652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.972493][T28952] hid-generic 0003:046D:C31C.0045: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2186.121487][T31652] team0: Port device team_slave_0 added [ 2186.193950][T31652] team0: Port device team_slave_1 added [ 2186.381673][T31652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.402298][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2186.444694][T28952] usb 2-1: USB disconnect, device number 96 [ 2186.456138][T31652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.479706][T31652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.490459][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2186.536172][T31652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.650791][T31652] hsr_slave_0: entered promiscuous mode [ 2186.659743][T31652] hsr_slave_1: entered promiscuous mode [ 2186.666274][T31652] debugfs: 'hsr0' already exists in 'hsr' [ 2186.698955][T31652] Cannot create hsr debugfs directory [ 2186.956765][T31586] Bluetooth: hci0: command tx timeout [ 2187.202356][ T30] audit: type=1326 audit(1764790063.917:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.1.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2187.287531][ T30] audit: type=1326 audit(1764790063.917:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.1.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2187.411680][T31762] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6820'. [ 2187.460615][T31762] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6820'. [ 2187.565564][T31652] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2187.591189][T31652] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2187.614395][T31652] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2187.624078][ T30] audit: type=1326 audit(1764790064.337:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31747 comm="syz.7.6817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5678f749 code=0x0 [ 2187.653390][T31652] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2187.708746][T31774] bond4: entered promiscuous mode [ 2187.721402][T31774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2187.782385][T31748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2187.795840][T31748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2187.818633][T31748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2187.824726][T31748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2187.844678][T31748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2187.862271][T31748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2187.875337][T31748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2187.888292][T31652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2187.897783][T31748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2187.904746][T31748] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2187.938711][T31748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2187.944807][T31748] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2187.957209][T31652] 8021q: adding VLAN 0 to HW filter on device team0 [ 2187.968470][T31748] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2187.981317][T13318] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.988586][T13318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2188.039768][T13318] bridge0: port 2(bridge_slave_1) entered blocking state [ 2188.047019][T13318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2188.154486][T31795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6824'. [ 2188.374935][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6824'. [ 2188.522925][T31652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2188.656283][T31652] veth0_vlan: entered promiscuous mode [ 2188.701551][T31652] veth1_vlan: entered promiscuous mode [ 2188.831373][T31652] veth0_macvtap: entered promiscuous mode [ 2188.869396][ T30] audit: type=1326 audit(1764790065.597:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2188.897408][T31652] veth1_macvtap: entered promiscuous mode [ 2188.965302][T31652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2188.981556][ T30] audit: type=1326 audit(1764790065.597:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.049633][T31652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2189.087613][ T30] audit: type=1326 audit(1764790065.637:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.116214][ T3451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.157123][ T30] audit: type=1326 audit(1764790065.637:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.162444][ T3451] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.211791][ T3451] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.256713][ T30] audit: type=1326 audit(1764790065.637:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.260669][ T3451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.338555][ T30] audit: type=1326 audit(1764790065.637:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.449950][ T30] audit: type=1326 audit(1764790065.637:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5e18f749 code=0x7ffc0000 [ 2189.630065][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.649108][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.680070][T31586] Bluetooth: hci1: command 0x0406 tx timeout [ 2189.755636][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.798161][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.837774][T31586] Bluetooth: hci3: command 0x0406 tx timeout [ 2189.916794][T31624] Bluetooth: hci4: command 0x0406 tx timeout [ 2189.923044][T31586] Bluetooth: hci2: command 0x0406 tx timeout [ 2189.997032][T31624] Bluetooth: hci0: command 0x0c1a tx timeout [ 2190.097106][T28956] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2190.287240][T28956] usb 2-1: Using ep0 maxpacket: 16 [ 2190.308432][T28956] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2190.361917][T28956] usb 2-1: config 0 has no interface number 0 [ 2190.386268][T28956] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2190.408757][T28956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.427361][T28956] usb 2-1: Product: syz [ 2190.431595][T28956] usb 2-1: Manufacturer: syz [ 2190.446550][T28956] usb 2-1: SerialNumber: syz [ 2190.454560][T28956] usb 2-1: config 0 descriptor?? [ 2190.490285][T28956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2190.610405][T31841] input: syz1 as /devices/virtual/input/input127 [ 2190.811765][T31848] binder: 31833:31848 ioctl c0306201 0 returned -14 [ 2191.314202][T31848] syz.7.6829 (31848): drop_caches: 2 [ 2191.759881][T31624] Bluetooth: hci1: command 0x0406 tx timeout [ 2191.858574][T28956] gspca_spca1528: reg_w err -110 [ 2191.869320][T28956] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 2191.917018][T31624] Bluetooth: hci3: command 0x0406 tx timeout [ 2191.996994][T31586] Bluetooth: hci2: command 0x0406 tx timeout [ 2192.004055][T31624] Bluetooth: hci4: command 0x0406 tx timeout [ 2192.077132][T28956] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2192.080281][T31624] Bluetooth: hci0: command 0x0c1a tx timeout [ 2192.236865][T28956] usb 10-1: Using ep0 maxpacket: 16 [ 2192.250255][T28956] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2192.266076][T28956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.279383][T28956] usb 10-1: Product: syz [ 2192.283693][T28956] usb 10-1: Manufacturer: syz [ 2192.290170][T28956] usb 10-1: SerialNumber: syz [ 2192.297128][T28956] usb 10-1: config 0 descriptor?? [ 2192.565735][T31456] usb 2-1: USB disconnect, device number 97 [ 2193.016880][T28956] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2193.252583][T31878] pim6reg: entered allmulticast mode [ 2193.339339][T29671] usb 10-1: USB disconnect, device number 2 [ 2193.997195][T31586] Bluetooth: hci3: command 0x0406 tx timeout [ 2194.077819][T31890] loop9: detected capacity change from 0 to 7 [ 2194.132076][T31890] Dev loop9: unable to read RDB block 7 [ 2194.147315][T29671] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2194.166685][T31624] Bluetooth: hci0: command 0x0c1a tx timeout [ 2194.173263][T31890] loop9: AHDI p4 [ 2194.198076][T31890] loop9: partition table partially beyond EOD, truncated [ 2194.341486][T29671] usb 2-1: Using ep0 maxpacket: 8 [ 2194.362545][T29671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2194.399466][T29671] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2194.424439][T29671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.467995][T29671] usb 2-1: config 0 descriptor?? [ 2194.702533][T29671] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2194.909933][T28952] usb 2-1: USB disconnect, device number 98 [ 2194.918426][T31888] iowarrior 2-1:0.0: Error -19 while submitting URB [ 2195.957059][T29671] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2196.136824][T29671] usb 2-1: Using ep0 maxpacket: 8 [ 2196.146346][T29671] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2196.172255][T29671] usb 2-1: config 64 has an invalid interface number: 146 but max is 0 [ 2196.202534][T29671] usb 2-1: config 64 has no interface number 0 [ 2196.234178][T29671] usb 2-1: config 64 interface 146 has no altsetting 0 [ 2196.298046][T29671] usb 2-1: New USB device found, idVendor=13d3, idProduct=3399, bcdDevice=2c.36 [ 2196.349764][T29671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.388588][T29671] usb 2-1: Product: 騁㛿⒟鿴 횼疓ໄ⻟ [ 2196.439200][T29671] usb 2-1: SerialNumber: syz [ 2197.006600][T31454] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2197.186656][T31454] usb 10-1: Using ep0 maxpacket: 32 [ 2197.204190][T31454] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2197.239502][T31454] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2197.256299][T31454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.285597][T31454] usb 10-1: Product: syz [ 2197.295682][T31454] usb 10-1: Manufacturer: syz [ 2197.307009][T31454] usb 10-1: SerialNumber: syz [ 2197.338721][T31454] usb 10-1: config 0 descriptor?? [ 2197.385912][T31454] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input128 [ 2197.422807][T31454] usbtouchscreen 10-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 2197.502040][T31454] usbtouchscreen 10-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2197.573095][T28956] usb 10-1: USB disconnect, device number 3 [ 2197.973606][T31913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6850'. [ 2198.255832][T31928] loop8: detected capacity change from 0 to 7 [ 2198.273161][T31928] Dev loop8: unable to read RDB block 7 [ 2198.286340][T31928] loop8: unable to read partition table [ 2198.299274][T31928] loop8: partition table beyond EOD, truncated [ 2198.335807][T31928] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2198.457608][T31934] QAT: failed to copy from user cfg_data. [ 2198.576817][T28956] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2198.744999][T28956] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 2198.770353][T28956] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.794633][T28956] usb 10-1: config 0 has no interface number 0 [ 2198.814177][T28956] usb 10-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2198.849353][T28956] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2198.879762][T28956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.911187][T28956] usb 10-1: config 0 descriptor?? [ 2198.979525][T28956] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2200.082670][T18255] usb 10-1: Failed to submit usb control message: -110 [ 2200.106748][T18255] usb 10-1: unable to send the bmi data to the device: -110 [ 2200.114115][T18255] usb 10-1: unable to get target info from device [ 2200.163769][T18255] usb 10-1: could not get target info (-110) [ 2200.170121][T29671] usb 2-1: USB disconnect, device number 99 [ 2200.186180][T18255] usb 10-1: could not probe fw (-110) [ 2200.857896][T31953] kvm: Disabled LAPIC found during irq injection [ 2201.357395][T28956] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 2201.437416][T10344] usb 10-1: USB disconnect, device number 4 [ 2201.537128][T28956] usb 2-1: Invalid ep0 maxpacket: 32 [ 2201.621479][T31891] ------------[ cut here ]------------ [ 2201.628349][T31891] WARNING: mm/list_lru.c:100 at lock_list_lru_of_memcg+0x30c/0x4c0, CPU#0: syz.6.6843/31891 [ 2201.638482][T31891] Modules linked in: [ 2201.643527][T31891] CPU: 0 UID: 0 PID: 31891 Comm: syz.6.6843 Not tainted syzkaller #0 PREEMPT(full) [ 2201.652911][T31891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2201.662980][T31891] RIP: 0010:lock_list_lru_of_memcg+0x30c/0x4c0 [ 2201.669176][T31891] Code: 42 80 3c 30 00 74 0b 48 89 fb e8 af 21 1d 00 48 89 df 48 8b 3f 48 8b 54 24 10 48 8b 74 24 28 e9 0a fe ff ff e8 75 95 b7 ff 90 <0f> 0b 90 eb be 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fe ff ff 48 [ 2201.688804][T31891] RSP: 0018:ffffc900033c6360 EFLAGS: 00010046 [ 2201.694917][T31891] RAX: ffffffff820985eb RBX: 0000000000000000 RCX: 0000000000080000 [ 2201.698017][T28956] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 2201.702906][T31891] RDX: ffffc9001af58000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2201.718510][T31891] RBP: 0000000000000001 R08: ffff88802e811e80 R09: 0000000000000002 [ 2201.726503][T31891] R10: 0000000000000406 R11: 0000000000000002 R12: ffffffff9986aba0 [ 2201.734505][T31891] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 2201.742633][T31891] FS: 00007f79a8e766c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 2201.751584][T31891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2201.758189][T31891] CR2: 00007f3829ae5000 CR3: 00000000340b8000 CR4: 00000000003526f0 [ 2201.766199][T31891] Call Trace: [ 2201.769490][T31891] [ 2201.772426][T31891] ? lock_list_lru_of_memcg+0x2e/0x4c0 [ 2201.777907][T31891] list_lru_add+0x58/0x270 [ 2201.782334][T31891] ? mem_cgroup_from_slab_obj+0x2ca/0x450 [ 2201.788081][T31891] ? list_lru_add_obj+0xbe/0x270 [ 2201.793062][T31891] list_lru_add_obj+0x191/0x270 [ 2201.797931][T31891] workingset_update_node+0x1d5/0x260 [ 2201.803315][T31891] ? __pfx_workingset_update_node+0x10/0x10 [ 2201.809223][T31891] xas_store+0xac4/0x1880 [ 2201.813575][T31891] __filemap_remove_folio+0x3c7/0x500 [ 2201.818965][T31891] ? __pfx___filemap_remove_folio+0x10/0x10 [ 2201.824871][T31891] ? __pfx_workingset_update_node+0x10/0x10 [ 2201.830782][T31891] ? workingset_eviction+0x541/0xdc0 [ 2201.836086][T31891] __remove_mapping+0xb06/0xe40 [ 2201.840972][T31891] shrink_folio_list+0x2896/0x4c50 [ 2201.846153][T31891] ? __pfx_shrink_folio_list+0x10/0x10 [ 2201.851635][T31891] ? __pfx_css_rstat_updated+0x10/0x10 [ 2201.857157][T31891] ? __pfx_css_rstat_updated+0x10/0x10 [ 2201.862662][T31891] ? _raw_spin_unlock_irq+0x23/0x50 [ 2201.867871][T31891] ? lockdep_hardirqs_on+0x98/0x140 [ 2201.873081][T31891] evict_folios+0x471e/0x57c0 [ 2201.877806][T31891] ? __pfx_evict_folios+0x10/0x10 [ 2201.882841][T31891] ? __css_rstat_lock+0x106/0x540 [ 2201.887887][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.892828][T31891] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 2201.898819][T31891] ? get_swappiness+0x358/0x3c0 [ 2201.903680][T31891] try_to_shrink_lruvec+0x8a3/0xb50 [ 2201.908913][T31891] ? blk_start_plug+0x6f/0x1b0 [ 2201.913689][T31891] shrink_lruvec+0x49c/0x2980 [ 2201.916989][T10344] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2201.918379][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.930884][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.935837][T31891] ? __pfx_shrink_lruvec+0x10/0x10 [ 2201.940972][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.945949][T31891] ? mem_cgroup_iter+0x3e7/0x460 [ 2201.950903][T31891] ? page_counter_calculate_protection+0x188/0x470 [ 2201.957419][T31891] ? mem_cgroup_iter+0x3b/0x460 [ 2201.962308][T31891] shrink_node+0xa50/0x3780 [ 2201.966856][T31891] ? __pfx_shrink_node+0x10/0x10 [ 2201.971801][T31891] ? stack_trace_save+0x9c/0xe0 [ 2201.976675][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.981616][T31891] ? vmpressure_prio+0x33/0x150 [ 2201.986492][T31891] do_try_to_free_pages+0x668/0x1960 [ 2201.991806][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.996764][T31891] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 2202.002590][T31891] try_to_free_mem_cgroup_pages+0x2ea/0x7a0 [ 2202.008510][T31891] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 2202.015017][T31891] ? cgroup_file_notify+0x110/0x190 [ 2202.020228][T31891] try_charge_memcg+0xa2d/0x1280 [ 2202.025189][T31891] ? __pfx_try_charge_memcg+0x10/0x10 [ 2202.030569][T31891] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2202.036300][T31891] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 2202.042116][T31891] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2202.047850][T31891] __memcg_kmem_charge_page+0xe1/0x240 [ 2202.053318][T31891] __alloc_frozen_pages_noprof+0x1b5/0x370 [ 2202.059144][T31891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2202.065514][T31891] __alloc_pages_noprof+0xa/0x30 [ 2202.070459][T31891] bpf_ringbuf_alloc+0x254/0x590 [ 2202.075407][T31891] ringbuf_map_alloc+0x1c8/0x2f0 [ 2202.080361][T31891] map_create+0xaa6/0x1640 [ 2202.084787][T31891] ? security_bpf+0x7e/0x300 [ 2202.089390][T31891] __sys_bpf+0x5f0/0x860 [ 2202.093644][T31891] ? __pfx___sys_bpf+0x10/0x10 [ 2202.098410][T31891] ? count_memcg_event_mm+0x21/0x260 [ 2202.103721][T31891] ? exc_page_fault+0x82/0x100 [ 2202.108513][T31891] __x64_sys_bpf+0x7c/0x90 [ 2202.113002][T31891] do_syscall_64+0xfa/0xf80 [ 2202.117517][T31891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.123590][T31891] ? clear_bhb_loop+0x60/0xb0 [ 2202.128278][T31891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.134179][T31891] RIP: 0033:0x7f79a7f8f749 [ 2202.138601][T31891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2202.158389][T31891] RSP: 002b:00007f79a8e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2202.166813][T31891] RAX: ffffffffffffffda RBX: 00007f79a81e6090 RCX: 00007f79a7f8f749 [ 2202.174795][T31891] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 2202.182776][T31891] RBP: 00007f79a8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2202.190758][T31891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2202.198750][T31891] R13: 00007f79a81e6128 R14: 00007f79a81e6090 R15: 00007f79a830fa28 [ 2202.206745][T31891] [ 2202.209782][T31891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2202.217072][T31891] CPU: 0 UID: 0 PID: 31891 Comm: syz.6.6843 Not tainted syzkaller #0 PREEMPT(full) [ 2202.226445][T31891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2202.236527][T31891] Call Trace: [ 2202.239830][T31891] [ 2202.242791][T31891] dump_stack_lvl+0x99/0x250 [ 2202.247389][T31891] ? __asan_memcpy+0x40/0x70 [ 2202.251994][T31891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2202.257199][T31891] ? __pfx__printk+0x10/0x10 [ 2202.261810][T31891] vpanic+0x237/0x6d0 [ 2202.265799][T31891] ? __pfx_vpanic+0x10/0x10 [ 2202.270305][T31891] ? is_bpf_text_address+0x292/0x2b0 [ 2202.275601][T31891] ? is_bpf_text_address+0x26/0x2b0 [ 2202.280818][T31891] panic+0xb9/0xc0 [ 2202.284546][T31891] ? __pfx_panic+0x10/0x10 [ 2202.288980][T31891] __warn+0x317/0x4b0 [ 2202.292971][T31891] ? lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.298528][T31891] ? lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.304084][T31891] __report_bug+0x288/0x500 [ 2202.308601][T31891] ? lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.314163][T31891] ? __pfx___report_bug+0x10/0x10 [ 2202.319206][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.324194][T31891] ? lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.329756][T31891] report_bug+0x16a/0x220 [ 2202.334098][T31891] ? lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.339651][T31891] ? lock_list_lru_of_memcg+0x30e/0x4c0 [ 2202.345209][T31891] handle_bug+0x98/0x200 [ 2202.349484][T31891] exc_invalid_op+0x1a/0x50 [ 2202.354069][T31891] asm_exc_invalid_op+0x1a/0x20 [ 2202.358937][T31891] RIP: 0010:lock_list_lru_of_memcg+0x30c/0x4c0 [ 2202.365272][T31891] Code: 42 80 3c 30 00 74 0b 48 89 fb e8 af 21 1d 00 48 89 df 48 8b 3f 48 8b 54 24 10 48 8b 74 24 28 e9 0a fe ff ff e8 75 95 b7 ff 90 <0f> 0b 90 eb be 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fe ff ff 48 [ 2202.384996][T31891] RSP: 0018:ffffc900033c6360 EFLAGS: 00010046 [ 2202.391088][T31891] RAX: ffffffff820985eb RBX: 0000000000000000 RCX: 0000000000080000 [ 2202.399082][T31891] RDX: ffffc9001af58000 RSI: 000000000007ffff RDI: 0000000000080000 [ 2202.407075][T31891] RBP: 0000000000000001 R08: ffff88802e811e80 R09: 0000000000000002 [ 2202.415064][T31891] R10: 0000000000000406 R11: 0000000000000002 R12: ffffffff9986aba0 [ 2202.423045][T31891] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 2202.431042][T31891] ? lock_list_lru_of_memcg+0x30b/0x4c0 [ 2202.436771][T31891] ? lock_list_lru_of_memcg+0x2e/0x4c0 [ 2202.442248][T31891] list_lru_add+0x58/0x270 [ 2202.446854][T31891] ? mem_cgroup_from_slab_obj+0x2ca/0x450 [ 2202.452779][T31891] ? list_lru_add_obj+0xbe/0x270 [ 2202.457905][T31891] list_lru_add_obj+0x191/0x270 [ 2202.462850][T31891] workingset_update_node+0x1d5/0x260 [ 2202.468237][T31891] ? __pfx_workingset_update_node+0x10/0x10 [ 2202.474229][T31891] xas_store+0xac4/0x1880 [ 2202.478578][T31891] __filemap_remove_folio+0x3c7/0x500 [ 2202.483968][T31891] ? __pfx___filemap_remove_folio+0x10/0x10 [ 2202.490221][T31891] ? __pfx_workingset_update_node+0x10/0x10 [ 2202.496123][T31891] ? workingset_eviction+0x541/0xdc0 [ 2202.501422][T31891] __remove_mapping+0xb06/0xe40 [ 2202.506289][T31891] shrink_folio_list+0x2896/0x4c50 [ 2202.511435][T31891] ? __pfx_shrink_folio_list+0x10/0x10 [ 2202.516911][T31891] ? __pfx_css_rstat_updated+0x10/0x10 [ 2202.522491][T31891] ? __pfx_css_rstat_updated+0x10/0x10 [ 2202.527973][T31891] ? _raw_spin_unlock_irq+0x23/0x50 [ 2202.533199][T31891] ? lockdep_hardirqs_on+0x98/0x140 [ 2202.538412][T31891] evict_folios+0x471e/0x57c0 [ 2202.543146][T31891] ? __pfx_evict_folios+0x10/0x10 [ 2202.548191][T31891] ? __css_rstat_lock+0x106/0x540 [ 2202.553245][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.558193][T31891] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 2202.564187][T31891] ? get_swappiness+0x358/0x3c0 [ 2202.569054][T31891] try_to_shrink_lruvec+0x8a3/0xb50 [ 2202.574282][T31891] ? blk_start_plug+0x6f/0x1b0 [ 2202.579060][T31891] shrink_lruvec+0x49c/0x2980 [ 2202.583755][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.588718][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.593762][T31891] ? __pfx_shrink_lruvec+0x10/0x10 [ 2202.598903][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.603894][T31891] ? mem_cgroup_iter+0x3e7/0x460 [ 2202.608882][T31891] ? page_counter_calculate_protection+0x188/0x470 [ 2202.615541][T31891] ? mem_cgroup_iter+0x3b/0x460 [ 2202.620434][T31891] shrink_node+0xa50/0x3780 [ 2202.624992][T31891] ? __pfx_shrink_node+0x10/0x10 [ 2202.629941][T31891] ? stack_trace_save+0x9c/0xe0 [ 2202.634813][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.639771][T31891] ? vmpressure_prio+0x33/0x150 [ 2202.644695][T31891] do_try_to_free_pages+0x668/0x1960 [ 2202.650001][T31891] ? __lock_acquire+0x6b6/0x2cf0 [ 2202.654970][T31891] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 2202.660717][T31891] try_to_free_mem_cgroup_pages+0x2ea/0x7a0 [ 2202.666641][T31891] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 2202.673136][T31891] ? cgroup_file_notify+0x110/0x190 [ 2202.678359][T31891] try_charge_memcg+0xa2d/0x1280 [ 2202.683323][T31891] ? __pfx_try_charge_memcg+0x10/0x10 [ 2202.688709][T31891] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2202.694440][T31891] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 2202.700250][T31891] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 2202.706006][T31891] __memcg_kmem_charge_page+0xe1/0x240 [ 2202.711474][T31891] __alloc_frozen_pages_noprof+0x1b5/0x370 [ 2202.717383][T31891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2202.723783][T31891] __alloc_pages_noprof+0xa/0x30 [ 2202.728734][T31891] bpf_ringbuf_alloc+0x254/0x590 [ 2202.733680][T31891] ringbuf_map_alloc+0x1c8/0x2f0 [ 2202.738818][T31891] map_create+0xaa6/0x1640 [ 2202.743429][T31891] ? security_bpf+0x7e/0x300 [ 2202.748124][T31891] __sys_bpf+0x5f0/0x860 [ 2202.752493][T31891] ? __pfx___sys_bpf+0x10/0x10 [ 2202.757265][T31891] ? count_memcg_event_mm+0x21/0x260 [ 2202.762573][T31891] ? exc_page_fault+0x82/0x100 [ 2202.767351][T31891] __x64_sys_bpf+0x7c/0x90 [ 2202.771773][T31891] do_syscall_64+0xfa/0xf80 [ 2202.776283][T31891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.782352][T31891] ? clear_bhb_loop+0x60/0xb0 [ 2202.787059][T31891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.792986][T31891] RIP: 0033:0x7f79a7f8f749 [ 2202.797420][T31891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2202.817048][T31891] RSP: 002b:00007f79a8e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2202.826087][T31891] RAX: ffffffffffffffda RBX: 00007f79a81e6090 RCX: 00007f79a7f8f749 [ 2202.834072][T31891] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 2202.842055][T31891] RBP: 00007f79a8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2202.850043][T31891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2202.858135][T31891] R13: 00007f79a81e6128 R14: 00007f79a81e6090 R15: 00007f79a830fa28 [ 2202.866136][T31891] [ 2202.869531][T31891] Kernel Offset: disabled [ 2202.873864][T31891] Rebooting in 86400 seconds..