last executing test programs: 4m46.810699603s ago: executing program 32 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 4m43.359624588s ago: executing program 33 (id=457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0xfffffffc}, 0x80, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="66b9800100400f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x3b, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x8, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffff7fffffff7, 0x0, 0x13f, 0x1, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f00000006c0)={{0x0, 0x0, 0x80}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000280)={&(0x7f000002d000/0x4000)=nil, 0x4000}) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xff, 0xf2, 0x3, '\x00', 0xaf}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x6, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0xc9}, {0x7, 0x5, 0x93, '\x00', 0xfd}, {0xfd, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x6, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x5, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0x7}, {0x2, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x3, 0x10101}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r9, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x1}) io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380), 0x80) 4m17.490917605s ago: executing program 34 (id=543): r0 = socket$kcm(0x29, 0x8, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x9, 0x0, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x800010d, &(0x7f00000000c0)={0x0, 0x1e7d, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000000)=0xfffffffffffff895) r7 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r7, r7, &(0x7f0000000080)=0x7fffffff, 0x1) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x204}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m35.962264143s ago: executing program 35 (id=733): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x3, 0x1e, 0x2, 0x9, 0x8, 0x0, 0x3, 0x0, 0x5, 0x81, 0xe, 0x9, 0x2}, 0xe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="75899b166ef465ebdf3985d305c82df3806ad9922917ca929f6a4bf1cda392e0a041dc6133af6fcd6c232805d9af87535e796adbada01cbd73bf446315e8ad07d64cb17cbfacd81381c880c373a19b898201e80e0f48e26d0ece", 0x5a}, {&(0x7f0000000980)="35d141df804fa269d5af2383cb9f41003dd63924be096c8a80d3e2422de820e311e5d03071c91caa7a6ec1bfb3daf9c19e4ec468da48fbc1f529d2052e0b6a96c26b9750db3d2da4e7a064ad205122408f2de4e007c56b657733c67f9a4db5e23fabe5e98bbb7fba590c5fd3ebfb082900ec364cef4b", 0x76}], 0x2, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x3b, 0x6, 0x0, {0x4, 0x0, 0x12, 0x0, '/proc/vmallocinfo\x00'}}, 0x3b) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "7bf3f490b6683ceff93703f58d9a255d54b1c66cc21ddbf86f26d9df37f37398aa96dc53fee7438ce37bdec9bd6b7cb5b12226c591965b504ed2310fcc914e7f", 0x36}, 0x48, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000001280)='ceph\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffffb) keyctl$instantiate(0xc, r3, &(0x7f00000001c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '/proc/vmallocinfo\x00'}, 0x2a, r4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000011c0)={0x0, 0x100f, 0x1, @discrete={0x9, 0xfffffffe}}) lseek(r0, 0x0, 0x1) 3m33.966557386s ago: executing program 36 (id=683): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149803, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5839, &(0x7f0000000380)={0x20, 0x1, 0x0, 0x1ffe000000000000}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0xffff0000, 0x107440) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, 0x9, 0x1}, &(0x7f00000003c0)=0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @local, 0xffffffff}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000300)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x803, 0x0, 0x3, 0x7}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r9, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000340)) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12015002020000102505a1a44000010203010902580001010050000904000000020600000524060000d41e0001040d240f0100000000a1f51f00"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x440, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r7], 0x29, 0xfffffffffffffffd) 3m32.139800048s ago: executing program 37 (id=746): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0xffffffffffffffee, 0x4, 0x1, 0x0, 0x83}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r0, 0x0) (async) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e5, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) (async) write$char_usb(r4, 0x0, 0x0) (async) syz_usb_disconnect(r3) (async) socket$nl_route(0x10, 0x3, 0x0) 3m27.698542271s ago: executing program 38 (id=754): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10) 3m7.619984183s ago: executing program 39 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="05000600010000000f0007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 2m41.030530629s ago: executing program 40 (id=788): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000140)=0x6, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe4) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2902420, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@allow_other}], [{@euid_gt={'euid>', r4}}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x6}, 0x4}, 0x1c) 2m40.172387066s ago: executing program 3 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 2m39.685575207s ago: executing program 3 (id=797): clock_gettime(0x60ffffffffff, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x9d, 0x51, 0x46, 0x10, 0x13b1, 0x42, 0x5a8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x2, 0x1, 0xf9, 0x51, 0x73, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) 2m37.160716639s ago: executing program 3 (id=801): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x6f30, 0x4, 0x40000003, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x48, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0xa, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141121) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x809, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) recvmmsg(r9, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/181, 0xb5}], 0x1, &(0x7f0000000640)=""/205, 0xcd}, 0x2}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)=""/244, 0xf4}], 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/17, 0x11}], 0x2}, 0x1}], 0x3, 0x40000002, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) r13 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r13}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) dup(r4) 2m36.011559035s ago: executing program 41 (id=801): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x6f30, 0x4, 0x40000003, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x48, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0xa, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141121) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x809, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) recvmmsg(r9, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/181, 0xb5}], 0x1, &(0x7f0000000640)=""/205, 0xcd}, 0x2}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000880)=""/244, 0xf4}], 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/17, 0x11}], 0x2}, 0x1}], 0x3, 0x40000002, 0x0) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) r13 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r13}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) dup(r4) 2m26.38429026s ago: executing program 8 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) (async) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x4044850, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0xc0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x12) (async) sendto$packet(r1, 0x0, 0x0, 0x4044850, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0xc0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0xfffffff5, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x2, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x4044004) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x2, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x4044004) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x3c}}, 0x24044094) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x3c}}, 0x24044094) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r8) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r8) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x4000) sendmsg(r7, &(0x7f0000000440)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0xa0, @local, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)="4c08fbd0272d8b141807fb3901de6deafeeeb0ab617da63d1b7dd3942e952ad8947a27fd8ad95239a941af1b839649b7ca70cef56f95b55338cc503a50bfe1a6fee45da7cd8205c61468d75f", 0x4c}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000000000)="fc0f747f211879af1d052f", 0xb}, {&(0x7f0000000380)="c692befd14f1a9ab335ba7cc26b22e1678555d40238c731f5255ef1c63d862d81c714ea4e5895d3e161ca7f3de1b3c28d77f41154ae4db4af37f58f0eca25384c720077479e8de608ea2352659dbc627c4e1f9755d49e6c1ec66af30b6dd835574657fba96b1710f022092745d73670983aac0358315920791f941526334c3db530873443f5cb4fbde72f7283df6abaab16f02d52a1c29b5f842b799b36fe8254b1b12124494e9bdcd5fc4c3915d5fb950b7af9b4627daf2", 0xb8}, {&(0x7f0000000540)="199df1ee94f33e390836c51a8524fd1ab331434d40b1a616268d85ab32cdb94004687da259d5732e0d22d2abb47accf647022c6593f3282df8e5c3ff985fa5fad869989d908b9a888664ed0a188fde26230095992690da47f060e54df1f90fc6b8bc39530a28759425c6577576c4072945caed6470d80858a33ebc039a72b8d1a914085a9db38d53b71addda1c311401717a62e29d7e603ca8cf9dd71e73c80b67090be884bcf241094c1f6321455b18dbfcbf5dccc5741a5b609b783b84cf719382f107658245087b91ae02ba573079b826c2cc30198b537bdf8706b2d82b883faec889", 0xe4}, {&(0x7f00000000c0)="9d067c51d3dd713433a160a11b7310", 0xf}], 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x220}, 0xc8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) write$tun(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000700bc04db672e2f1bce0e8f29425c51fbefbf78978cf1246e4992a81b7448bd2aa9aa2c05c3df2ea0e0f9d4c1a94bdfe29e7bbea41b207fc6285e5f13b97bafaf4911fac770e64fe44e5d0e7c53505e89f0b5f068a1f89b29af90951f34a80f4c7d1737b14b82b10e4e7fbd0c8c44141c5af17f4d1faf64fcf6b63092a59f2a4a413f577b89f972eeb2133761809aecb8647cc3137c61d25f6fb622bb"], 0xa6) (async) write$tun(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000700bc04db672e2f1bce0e8f29425c51fbefbf78978cf1246e4992a81b7448bd2aa9aa2c05c3df2ea0e0f9d4c1a94bdfe29e7bbea41b207fc6285e5f13b97bafaf4911fac770e64fe44e5d0e7c53505e89f0b5f068a1f89b29af90951f34a80f4c7d1737b14b82b10e4e7fbd0c8c44141c5af17f4d1faf64fcf6b63092a59f2a4a413f577b89f972eeb2133761809aecb8647cc3137c61d25f6fb622bb"], 0xa6) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x4000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000003300)=ANY=[@ANYBLOB="4700b8bc2e1fc322a435c11680a3869acce5ab19cc2dd176e7ea65f9602b278072144850bc8a6a59dd8697253fab92f4cc80a5e82674a9215df467215e1b746237f5ed59676f4e18aa6dabd8cdceb86203019e2404eccdeffd7d72afc7705dc7c0b73c90ee3d8d8e4de54e10c0bac6d30f3e2eca3fec9cdb8b8e0d24185adb012aac77402a19eed9cc2c601dbcfb888f216c3eb11f00"/164, @ANYRES16=r11, @ANYBLOB="000126bd7000fddbdf25700000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x50}}, 0x20000000) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000003300)=ANY=[@ANYBLOB="4700b8bc2e1fc322a435c11680a3869acce5ab19cc2dd176e7ea65f9602b278072144850bc8a6a59dd8697253fab92f4cc80a5e82674a9215df467215e1b746237f5ed59676f4e18aa6dabd8cdceb86203019e2404eccdeffd7d72afc7705dc7c0b73c90ee3d8d8e4de54e10c0bac6d30f3e2eca3fec9cdb8b8e0d24185adb012aac77402a19eed9cc2c601dbcfb888f216c3eb11f00"/164, @ANYRES16=r11, @ANYBLOB="000126bd7000fddbdf25700000000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000"], 0x50}}, 0x20000000) openat$thread_pidfd(0xffffff9c, &(0x7f0000001280), 0x4083, 0x0) 2m25.697836759s ago: executing program 42 (id=793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22000600) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x6f02, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0xfffffffd) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x30, r8, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendto$packet(r7, &(0x7f0000000180)="f12b294e50427d72502c57077f2c3f5b648bf41ab34001e207183d49a0fbe364401120916817f619b4de401180cb50b0394f3a6ef9787b22787088eb7abd780e18b76b089eef6547737e098a890adae827a7d5ba24f3ad52ce487a2d8e7e32b9432ea21008e0a9e8bfc720534eba02133e3a7e0e32d90ce254f0c771b6f6bf7b18a20247c5f1019f5a7f7c63d4e3e5a6c571e6d6b56f07615724be353b4054897085d38b6096", 0xa6, 0x8894, &(0x7f0000000300)={0x11, 0x14, r9, 0x1, 0x8, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffefffc}) syz_usbip_server_init(0x4) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setattr(r10, &(0x7f0000000080)={0x38, 0x6, 0xa, 0x7, 0xe, 0xe27, 0x7e2fee4c, 0x80000001, 0x2}, 0x0) 2m23.305656153s ago: executing program 8 (id=815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r3, 0x4001af72, &(0x7f0000000080)=0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x21, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x6000, 0x3, &(0x7f00007f0000/0x6000)=nil) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 2m22.273883752s ago: executing program 8 (id=819): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000180)={0x0, 0xb, 0x2, '5A'}, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 2m19.8975684s ago: executing program 8 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 2m19.744012215s ago: executing program 8 (id=823): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000100), 0x7a, 0x101301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"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"}) write$binfmt_aout(r1, 0x0, 0xffffffffffffff80) 2m17.282590193s ago: executing program 8 (id=825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000074657221000080"]) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x29}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000012c0)={0x2004}) poll(&(0x7f0000000000)=[{r10, 0x8}], 0x1, 0x1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x40840) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0xfffffffffffff637, 0x8, 0x5, 0x1, 0x5, 0x7000000000000, 0x9}, &(0x7f00000001c0)={0x1e9, 0xb, 0x800, 0x0, 0x0, 0x0, 0x1000, 0x13c}, &(0x7f0000000200)={0x9, 0x1ff, 0x1, 0x8000000000000000, 0xa83, 0x2, 0xfffffffffffff800, 0x8}, &(0x7f0000000300)={r5, r6+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x500, 0x5]}, 0x8}) r12 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r15 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000081b000/0xc000)=nil, 0xc000}}) syz_io_uring_complete(r15) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r12, 0x75fa, 0xe475, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 2m16.032465706s ago: executing program 43 (id=825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000074657221000080"]) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x29}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000012c0)={0x2004}) poll(&(0x7f0000000000)=[{r10, 0x8}], 0x1, 0x1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x40840) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0xfffffffffffff637, 0x8, 0x5, 0x1, 0x5, 0x7000000000000, 0x9}, &(0x7f00000001c0)={0x1e9, 0xb, 0x800, 0x0, 0x0, 0x0, 0x1000, 0x13c}, &(0x7f0000000200)={0x9, 0x1ff, 0x1, 0x8000000000000000, 0xa83, 0x2, 0xfffffffffffff800, 0x8}, &(0x7f0000000300)={r5, r6+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x500, 0x5]}, 0x8}) r12 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r15 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000081b000/0xc000)=nil, 0xc000}}) syz_io_uring_complete(r15) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r12, 0x75fa, 0xe475, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 1m40.392669928s ago: executing program 2 (id=874): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x10f202) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf256a00000008000300", @ANYRES32=r4], 0x24}}, 0x20044040) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f923a4f09fae490bdf6790a660999f14a3d5da580a0f15de72a9b5a7334de09c631704f3880fb4", 0x27}, {&(0x7f0000000080)="eac4996e6fbcb20cdaa2e9841b8326d414981c55a417d26043d663024a1487033d919bec3d219c37725c6348d2aa9dd2ca67ebe084056118da7aac5b77e15e56358ee8fcd74de197e6ffeade6436b1736deaca25ada46931bd766e5700c422383254465fccd1b9fe4c43b5e849b4fc304aadd21b6a4b3edd0dc87308c0048b34963fec1d072bdb04e523f5e4abf25cc85990e14e642cc652f635cf455bc38ae5ec304437513d31aa2f9e6d197a8e981c986ea88ff02279c74580ec23232054c17c5429c139bd86e3ee09ea28d9d085c006dc2e260373d8ae81f029d2ade2be1bf607c8d0ff", 0xe5}, {&(0x7f0000000600)="653adb6ce124c9141d10158221dc131484a08d3d6b448b13543937d1d5c1824f8b1442d402e399f8abff61cfe661e5530a2d9a4ec7a2f879fa71211c9e7b9e628627e0d4764e1497f849346ccee29d8cfd17dd2585ef04c2a7e157fbab4ca1322be7b9b43b634a502ddef30ff3a9e0908982aa7887f7b553c5157d7bda35cae72f3bc7126ad0d488e556baa0c8ba2ef92117ad3b622646f41a926ee3201c2e56212726b9decada2e4d294e0c4b151604d78bfddacf8bb06ac14daba567d77643839e7f1d009a11073daa00000000000000", 0xd1}, {&(0x7f00000001c0)="92ff52a39b8fbe314eb73a45e4dbcb27f5b93626f49ae1d4ee7d90aa999a6f44cef4c388755ffb96a908d5fa", 0x2c}, {&(0x7f0000000500)="7ce5281d3250584beb946b52aa09ae26da9f99a0aa70851bf4b224c8a4bd3307ddf463d1b433c1d11cb61a2bb14e98004b4c6c1215500829ed74133c0f1c949d187768c7af6ef81f99c6a69b0ed6f31968071cf42355e71df35bbd42c128ce9a50bac0da469d7a32a6697874de18d011a4567aefadd05f1203974c3e69feb4bdaba4dc6f42061e9e789b6b8090f800d08eb607fdaf526fea2e17b3cab57773f24bea8588c5782e8ba3f68565f517d60a8db9e9b32b0a3ae7845155822443cf0fba53826fc1974bff4c5e", 0xca}, {&(0x7f0000000300)="732845a302d5597637601eba9fef70b79811dc5873100b33e4de95751861a59ba3ddf1faefc1c996ff0f7698183a9f60822919cc728937d11903c8a0e4e3dd82f3a8501c43bc65764efa4ed523ab79073a17e6b494c7c89d7f153e16f2d2d67b6adbf41ffc537e43b641210fff1f6bf7ff15a2985d31c6480000000033fa8e9bc40715743ede78fc0000000000000000", 0x90}, {&(0x7f0000000480)="1cb31ba4f760e6830a307c5a79338432e323655ead110465132b6fd98db9927d6d1b37d946e25e470edae42dd650fd9f9c10db8ee2aff1e9c4253fd4b14d6e6e278f7b2a36e2a7b54afbe96cc801bb28da949f82b80f26", 0x57}], 0x7, 0xa) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1586dd6001044800183aff2a59d1a80000000000000000800000bbfe8000000000000000000000000000aa8800907800000000001bbb"], 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80104132, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000180)) 1m40.127441705s ago: executing program 2 (id=877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) r5 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x83) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m39.025656519s ago: executing program 2 (id=880): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000040)={0x0, 0xfffffe3a}) r1 = socket(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) memfd_create(&(0x7f0000000300)='#bny\xa833p\xf0r\x01\xcc\xc7@\xe8\x8a\xe4}\xcf\xf0e\xb68\xa0\xcf?\">\x02\x90\xfbt\xec\xb8[\x13\x80I\xcc\x87\x9c\xe09M&U\v\xf0\xa5\x88[\x06i\f>0!\xa4q\'tdaZ\xcfc\xc0\x0e=\xf2\x1a\x11^*\t\x82\x92^,\x1c\xd1G\xc9\xbc\xc7m\x8b=\x81\x06c\x81{\xc6;2\xa8G\xb4?\xe6\xf65\t\x87\xd9\xa6x\xc3u\xd0y\xff\x87\x11f\x98\xdf9\x1b\xa9\xf6\xec\x9a\xd6b\xe3\x9e\xfa\t>\xa1%\xfboH\f/\xb3Z]g\xf0\xc6\xea\x00\xb5hd8\"\x82\x8d\xff>\xd4\xfc\xdc\xdaA\x9a\x9b\xe0E\x03\xcd%\xdeXW\x913\x10\xa2\xa4\xea\x8d\x1f0\xc2\x93\xc58XO.\xcd\x00\xcc\xd9\xfa\x96Mw,oI\x15\x95e%\xed2)$\xe8\xc7\x81\x1e\xf9\x87}\x1fg\xbf<\xca\xca\x1f\xffSl3B4\xac\xaaeS\xdf\x02\x85\xd3\xce\xac\xfb\xc5\x8b)m\xe7z\x18\x81\xd5\t\x8d\x1e\xc9\a\xc1\xc3,\x94\x88\x1c\xeb67\xe3\x1c%E[\x1e\x90\xf2\xc2\xd0wiy\x81\x17\x01Y\xcd\xf3B&\xf9\xc6\x88BN\x12\xb3\xd9\xcb-m\x90\xf3\x12\xb7\x81\xee\xa0c\xe2\xe9\xdb\x83\x00@V\x90\x9fFq\x179A\vlt\xcd\xb5\xb6a\xf2#Ci\xeba]!Ib\x944\xf5`a\x03\xee|\x00\xdd\xfd\xbd\x12<\x7fK\x8f\x19\xb8\xadm\xee\x94y\xc7vY\x9e\xaaEDI\x11\xeb\x88\x8c\xbf\xc96L\xa2V\xf9\x00\x82\xab+\x9eb\xc3\xee\xfd\x90Q\xa1\x9a\x85\xe8h\xbb7\x82\x8e(\xeb#\xea`\t\x99\x9a\x19\x02f\x96\x9e\xd6?\xdaZ6\xc5\xd7AP\xe6Q\x89\xfb\x8d\x1d0\xa3\xc9Fie\x81\xbb:\xf4\x95!\xb6Z\x91\xa3\xb0\xdb\x81EMm\xd7\x9cxz\xd0\x15\vA\xa2E\x93\x8e\xa9\xec\x01B\xd5\x81\x12\xb8f\xea\x1cZ\xd0\xeb\x03\xd4\x9b|\x04S', 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) readlinkat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1m35.344721135s ago: executing program 2 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1m35.238524936s ago: executing program 2 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000600)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8}, {0x8, 0x0, 0xe716}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (fail_nth: 2) 1m34.64891934s ago: executing program 2 (id=895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [{0xc}, {0x0, 0x4}, {}, {}, {0x0, 0x1}, {0x0, 0x20000000}], 0x8, 0x0, 0x0, 0x1}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00010500ffff"], 0x32) 1m33.482710859s ago: executing program 44 (id=895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [{0xc}, {0x0, 0x4}, {}, {}, {0x0, 0x1}, {0x0, 0x20000000}], 0x8, 0x0, 0x0, 0x1}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00010500ffff"], 0x32) 1m1.260153126s ago: executing program 6 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1m0.57645655s ago: executing program 6 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f000000a500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ea12efe60c00000094020000060000000c0000008400000005100000"], 0x18}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@newtaction={0x2c24, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x2c10, 0x1, [@m_pedit={0x2c0c, 0x1, 0x0, 0x0, {{0xa}, {0x2be0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x403, 0x10000}, {0x15, 0x9, 0x7, 0xfffffffc, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0xa, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x3, 0x6, 0x200}, {0x47, 0x204, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdda2, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x5, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x7f, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x4, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1c, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2dc, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x20040}, {0x73d, 0x81, 0x4, 0xc, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa4, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0xb, 0x1, 0x8f6, 0x5}, 0x4, 0x6, [{0x8, 0x9f1, 0x5, 0x5, 0x8000, 0x8}, {0x7, 0x8, 0x3ff, 0x9, 0x7, 0x69b}, {0x9, 0x6, 0xce, 0x81, 0xfffffff6, 0x4}, {0x649, 0x2, 0x9, 0x0, 0x1}, {0x78f88892, 0x5c5, 0x4, 0x3, 0x2, 0x7fffffff}, {0x2, 0x4, 0xff, 0x845, 0xff, 0x2}]}, [{0x9, 0x1ff, 0x1, 0x8, 0x7, 0x7f}, {0x388e, 0x8, 0x81, 0x1, 0x0, 0x1}, {0xdfe, 0xffff, 0x1, 0x0, 0x7, 0x7}, {0x7fffffff, 0x401, 0x80000000, 0x7, 0x2000000, 0x1}, {0x3, 0x7fff, 0x400, 0x8, 0x1, 0x26eb}, {0xee59, 0x1, 0x9, 0x8c5, 0x100, 0x8001}, {0x0, 0x1, 0xfffffffa, 0x80000001, 0xf, 0x8a0c}, {0x4e6, 0x10, 0x3, 0x401, 0xfffffffa}, {0x8000, 0x1, 0xffff0000, 0x800, 0xc4, 0xff}, {0x3, 0x8, 0x4, 0x101, 0xaf21, 0x2}, {0xc8d0, 0xf, 0x3, 0x9, 0x1d5, 0x8000}, {0x4, 0x6d2, 0x7fff, 0x3, 0x2}, {0x4, 0x1a6, 0xfffff589, 0x1, 0x3ff, 0x7fff}, {0x40100000, 0xfffffff7, 0x8001, 0x2, 0x5}, {0x0, 0x400, 0x7, 0x10000}, {0x9, 0x4, 0x9, 0x9, 0x400, 0x5}, {0x7, 0x2, 0x401, 0x8, 0x50000, 0x10001}, {0x0, 0x2, 0x5, 0x9, 0x2aa, 0x3}, {0x6, 0x6c8, 0x7f, 0x3, 0x6c, 0x2}, {0x80000000, 0xd, 0x1, 0x9, 0x2, 0x3}, {0xffff, 0xa4, 0xc210, 0x10001, 0x7, 0x7}, {0x6e, 0x46, 0x89, 0x1, 0x2, 0x7}, {0x5, 0x985, 0x6, 0x3, 0x6, 0x200}, {0x83e5, 0x1, 0x401, 0xfff, 0xdfd, 0x6}, {0xba, 0x6, 0x400, 0x81, 0xa40, 0x8}, {0x34, 0x7df, 0x7, 0x800, 0xf, 0xb}, {0x4, 0x621, 0x7, 0xff, 0x7fff, 0xe}, {0x8, 0x9, 0x4, 0x81, 0x1, 0x7}, {0x5, 0xec51, 0x7, 0x9, 0x101, 0x8}, {0x8, 0xffff, 0x34f, 0x7, 0x4, 0x6}, {0x6, 0x6, 0x0, 0x8000, 0x4, 0x6}, {0x7, 0x6da3, 0x3, 0x81, 0x2b48505, 0x9}, {0x4, 0x5, 0x2, 0x1, 0xc, 0x8}, {0xfffffffa, 0x4, 0x2, 0x5, 0x3ff, 0x8001}, {0x7fffffff, 0xdd3, 0x5, 0x5, 0x1, 0x4}, {0x9, 0x8, 0x9, 0x47f5, 0x8000, 0x96e}, {0x2, 0xfb12, 0x1000, 0x3a, 0x8, 0x2}, {0x3ff, 0x1, 0x40, 0xfffffffe, 0xa643, 0x29}, {0x8001, 0xb, 0xf, 0x80000000, 0xecc2, 0x8}, {0x2, 0x800, 0x0, 0x1a5, 0x35a, 0x4}, {0xe, 0xffffffff, 0x9b, 0x6, 0x9, 0x5}, {0x5, 0x7, 0x7ff, 0x8, 0x9}, {0x3, 0x6, 0x4, 0xdd93, 0x3, 0x8}, {0xbe6, 0x5, 0x7fffffff, 0x32c, 0x8, 0x7}, {0x6, 0x2, 0x3, 0x77a, 0x4a, 0x9}, {0xe, 0x2, 0x80, 0x1, 0x5, 0x7f}, {0x4, 0x7ff, 0xc7b, 0x9, 0x50f0, 0x5}, {0x169c, 0x7fffffff, 0x9, 0x100, 0xa, 0xfffffff7}, {0x5, 0x4828, 0xed, 0x6, 0xc7af, 0x6}, {0x2, 0x6, 0x3, 0x5, 0x3ff, 0x6}, {0x9, 0x80000001, 0x6, 0x401, 0xfffffffc}, {0x3, 0x10, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x80000001, 0x3, 0x1, 0x8, 0x7}, {0x6, 0x5, 0x9, 0x800, 0x3ff, 0x8af8}, {0x2, 0xffff, 0x5, 0x7fff, 0x6, 0x3}, {0x6b4, 0x3, 0x87, 0xf8b, 0x9, 0x7}, {0x400, 0x7ff, 0x2, 0x4, 0xd348, 0xff}, {0x4, 0x631, 0x0, 0x9, 0x80000001, 0xc4e}, {0x4, 0xff, 0x9, 0x40, 0x0, 0x2}, {0x101, 0x4, 0x7, 0xb0b6, 0x3, 0x83}, {0x2, 0x7931, 0x40, 0x9, 0x8, 0x7}, {0x2, 0x1, 0x20b5, 0x0, 0xfffffffc, 0x6}, {0xffffffe1, 0x0, 0x1, 0xc20, 0x2cf, 0x4}, {0x2, 0xde5, 0x5f, 0x3, 0x0, 0x4}, {0x5, 0x2, 0x5188, 0x8, 0x10}, {0x5, 0xc, 0xf39, 0x8000, 0x60, 0xffff}, {0xfffffff7, 0x1, 0x8, 0xcf6, 0x0, 0x1ff}, {0x2, 0x9, 0xffff8000, 0x7, 0x6, 0xd19}, {0xffff, 0x401, 0x0, 0xffffffff, 0x40, 0xffffff3b}, {0x6e9, 0xff, 0x2, 0x6, 0xa0000000, 0xfe4a}, {0xe, 0x0, 0xffffb8d3, 0x2, 0x3, 0x1}, {0x3, 0x3a4, 0x5, 0x6, 0x6, 0x30}, {0xe, 0xffff, 0x7, 0x1, 0xffffffc0, 0x3}, {0x9, 0x0, 0x5, 0xe000000, 0xff, 0x352}, {0x40, 0x5, 0x200, 0x3c66, 0x80000000, 0x10000}, {0xfff, 0x0, 0xb5, 0x2, 0xe, 0x7f}, {0x10, 0x9, 0x8, 0x6, 0x2, 0x241}, {0x8, 0xdec0, 0x10001, 0x57db0296, 0x9, 0x4}, {0xd21, 0x6, 0x8, 0x2, 0x2, 0x6}, {0xfcd6, 0x4, 0x4, 0x7, 0x6, 0xd613}, {0x1, 0x0, 0xa, 0x1000, 0x4, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x800, 0xffff0271}, {0x6, 0x1, 0x3, 0x1000, 0x5, 0x5}, {0x3, 0xfffffffe, 0x4b, 0x2, 0x3f2b, 0x101}, {0x7, 0x2, 0xea84, 0x7, 0x7, 0x1}, {0x5, 0x3, 0x6, 0x8, 0x9, 0xc149}, {0x2, 0x4b0d, 0xa, 0xf, 0x1, 0x4}, {0x401, 0x8, 0x8, 0xb, 0x3, 0x6}, {0xfff, 0x5, 0x4, 0x3, 0x5}, {0x2, 0x3, 0x3, 0x3, 0x6a80000, 0x3}, {0x7f, 0x0, 0x0, 0xf1, 0xffffff21}, {0x3, 0x80, 0xd, 0x7af9, 0x3, 0x7ff}, {0x401, 0x0, 0x0, 0x0, 0x1, 0xc}, {0x4, 0x5, 0x1000, 0x3, 0x9, 0x5}, {0x3, 0x0, 0x6, 0x4, 0x1, 0xc}, {0x3aff, 0x28000000, 0x9b, 0x6, 0xd, 0x5}, {0x7fffffff, 0x10000, 0xe0000000, 0x5, 0xe, 0x3ff}, {0x10000, 0x0, 0x10, 0x6, 0x100, 0xb}, {0x7, 0x2, 0xd80, 0x81, 0x0, 0x866}, {0x4, 0x5, 0xffffffff, 0x2, 0x5, 0x10000}, {0x7, 0x0, 0x8, 0x40, 0x7, 0x5}, {0x7, 0xc0, 0x7ff, 0x3ff, 0xf3, 0x1}, {0x8, 0x4, 0x0, 0x6, 0x7, 0x2}, {0x7c, 0x2, 0x5, 0xf, 0x6, 0x9}, {0x3, 0x1, 0x7fffffff, 0x4f}, {0x4916, 0x10000, 0x14, 0x200, 0x8001, 0x3}, {0x6, 0x8, 0x1, 0x8, 0x7fff, 0x7}, {0x54f, 0x4, 0x81, 0x7, 0x4, 0x7}, {0x9, 0x80, 0x4, 0xfffff801, 0x0, 0x80000001}, {0xf, 0x0, 0x2bd, 0xe, 0x70, 0xf}, {0xdd, 0x3, 0x9, 0x4, 0x0, 0x3}, {0x5a, 0x8, 0x4, 0x6, 0x8, 0x1}, {0x8, 0x3, 0x9, 0x4, 0x4, 0xffffffff}, {0xffff, 0xfffffff8, 0x5, 0x5, 0x9, 0x100}, {0x1, 0x7f, 0x6, 0x2, 0xffff, 0x8}, {0x101, 0xa0000, 0x2b, 0x0, 0x0, 0x10}, {0x2124, 0xb6, 0x7, 0x7, 0x1, 0x1}, {0x1797, 0x8000, 0x1ff, 0x80000001, 0x91a, 0x3}, {0x7, 0x5, 0x0, 0x6, 0xa, 0xfff}, {0x0, 0x50c, 0xbdb, 0x0, 0x4, 0x5}, {0x2, 0xfff, 0x3, 0xffffffff, 0x0, 0x3}, {0x58, 0x7, 0xfd, 0x5, 0x1, 0x401}, {0x1, 0x0, 0x800, 0xf8000000, 0x8, 0x101}, {0x3, 0x8, 0x6, 0xd327, 0x8, 0xdd}, {0x9, 0x8, 0x743, 0x4, 0x3, 0xd6d9}, {0xe67, 0xd, 0x5, 0x100, 0xe7, 0x8}, {0x3, 0x8, 0x9, 0x63c, 0x1000, 0x2}, {0xf48e, 0x4, 0xd000000, 0x7, 0x44b, 0x7}], [{0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x8}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {}, {0x3173f6319f87980, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5}, {0x5}, {0x7}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x7}, {0x2}, {0x7}, {}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x2, 0xffff, 0x6, 0x10001, 0xfffffff8}, 0xa, 0x8a, [{0x9, 0x4, 0x3, 0xa16b37de, 0xe}, {0xe621, 0x1, 0x9422, 0x362, 0x1e0, 0x4}]}, [{0x5, 0x6, 0x1, 0xfffffffe, 0xb, 0x3}, {0x6, 0x4, 0x0, 0x6, 0xa97, 0x7}, {0x8000, 0xffffffff, 0x1000, 0xffff, 0x800}, {0x1, 0x2, 0x5, 0x9, 0x90f9, 0xf516}, {0x0, 0x7, 0x9, 0x2, 0x5, 0x6}, {0x5, 0x3000000, 0x4da7, 0x1, 0x80000000, 0xd}, {0x7a87d363, 0x98a3, 0x10001, 0x4, 0x1, 0x10000}, {0xa, 0x40, 0x7, 0xf167, 0xd, 0x3ff}, {0x10000, 0x8, 0x2, 0x9, 0xffffffff, 0x1}, {0x4, 0x9, 0x2, 0x7, 0x1, 0x2}, {0x2, 0x4, 0x4, 0x6, 0x3, 0x4}, {0xb, 0x8, 0x77954180, 0xfffff001, 0x2, 0xd}, {0xe, 0x5, 0x6, 0xff, 0x10000, 0xfffffffc}, {0xf2, 0x8, 0x5, 0x7, 0x1, 0xff}, {0xa, 0x9, 0x3, 0xffffffff, 0xff, 0xfff}, {0x400, 0xe910, 0x4, 0x3, 0x0, 0x3}, {0x0, 0x677ec74e, 0x7f, 0x7fffffff, 0x0, 0x80000000}, {0x2ea29b0c, 0x6b0b, 0x6, 0x3, 0x1, 0x3}, {0xd, 0x7, 0x4d, 0x101, 0x10001, 0x3}, {0x6, 0x7, 0x928, 0xa2, 0x1, 0x5}, {0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0xdcf7}, {0x1, 0x200000, 0x3, 0x10000, 0x2, 0x5e}, {0x2, 0x4, 0x53b, 0x3, 0x7fff, 0x6}, {0x8, 0x2, 0x6, 0xffffffff, 0x8, 0x8be}, {0x40, 0x2f6, 0x81, 0x9, 0x6, 0x7}, {0x7, 0x3, 0xfffffff7, 0x3cfc5895, 0x80, 0x1}, {0x7, 0x4, 0x80000000, 0x9, 0x6, 0x101}, {0xe, 0x1, 0x3, 0x1, 0xdd, 0xcc}, {0x3, 0x0, 0x7, 0x8, 0x8, 0x75}, {0x6, 0x3, 0x6, 0x1, 0xdd3, 0x941}, {0xa, 0x80000001, 0x4, 0x401, 0x5, 0x2}, {0x2, 0x8001, 0xfffffeff, 0x1, 0x7, 0x100}, {0x1000, 0x5, 0x6, 0x1ff, 0x0, 0x4}, {0x4, 0x1ff, 0xfff, 0x0, 0x597a, 0x9}, {0x1a, 0x7, 0xa, 0xfffffff9, 0x6, 0xbf6}, {0x3e218170, 0xfffffffb, 0x8, 0x6, 0x4, 0x4}, {0xc, 0x400, 0x3ff, 0x3, 0x8, 0x1}, {0x38000, 0x0, 0xfffffffb, 0x8, 0xc7e, 0x2}, {0x9, 0x9, 0xfffffff8, 0x3, 0x0, 0x1}, {0x7, 0x1000000, 0x3, 0x3ff, 0x4d8badc3, 0x1000}, {0x7fffffff, 0x42a, 0x4, 0x8, 0x6}, {0xb, 0x3, 0x2, 0x10000, 0x5, 0x4}, {0x0, 0x1, 0xffffffff, 0x9, 0x3, 0xe}, {0x9, 0x1, 0xb9, 0x5, 0x4, 0x32}, {0x1400, 0xa, 0xfff, 0xd2b, 0xfffffffe, 0x8}, {0x8000, 0x4, 0x8, 0x10001, 0x1ff, 0x6}, {0x1, 0x6186, 0x2, 0x8, 0x9, 0x5}, {0xf, 0x4a1e, 0x9, 0x101, 0x9, 0xd81d}, {0x10000, 0x2b0a4a3e, 0xffff0001, 0x699, 0x2029, 0x10000}, {0x4, 0x7, 0x2, 0xffff, 0x101, 0x6}, {0xe9, 0x400, 0x2, 0xf, 0x1, 0x3}, {0x0, 0x20082, 0x0, 0x7, 0x3, 0x2}, {0xc0, 0x0, 0x10, 0x1, 0x8, 0x5}, {0x2, 0x200, 0xfffffff9, 0x8000, 0x2, 0x8}, {0x8, 0xd470, 0x7, 0x0, 0xfffffffe, 0x8}, {0x9, 0x2, 0x6, 0x6, 0xf4bfd702, 0x1}, {0x6, 0x7, 0x3, 0x6, 0x1, 0xb8}, {0x9, 0x9, 0x2, 0x3, 0x6, 0x6}, {0x9a4, 0x2, 0x39dec57a, 0xffffbcad, 0x30000000, 0x3}, {0x3eb97d68, 0x0, 0x6, 0x3, 0x6, 0x1}, {0x0, 0x8, 0xa, 0x4, 0x0, 0x1f}, {0x1, 0x4, 0x8, 0x7fff, 0x3, 0x6}, {0x6de3, 0xc, 0xd91c, 0x6}, {0x14, 0x51cc, 0x100, 0x2, 0x6, 0xf}, {0x6, 0xfffffffe, 0xe7ad, 0x0, 0x4, 0x7}, {0x7, 0x5, 0xeb, 0x3, 0x0, 0x7a58}, {0x10, 0x9, 0x100, 0x80000000, 0x0, 0x7}, {0x6, 0x1, 0x139, 0x1b91, 0x5, 0x5}, {0x7f, 0xac39, 0x40, 0x280000, 0x8, 0x9}, {0x3, 0x4, 0xfff, 0x80000000, 0x0, 0x101}, {0xfde000, 0x2, 0x6da7, 0xfffffffb, 0xfff, 0x8}, {0x0, 0x2, 0x6, 0xd21, 0xe1, 0x5}, {0xffff, 0x7, 0x8, 0x8, 0x9, 0xa}, {0x180, 0x6, 0x8, 0x3, 0x5, 0xb}, {0x8001, 0x3, 0x101, 0x6, 0xc903, 0x7f}, {0x5, 0x8, 0xfd7, 0xffffffff, 0x7f, 0xa}, {0x4, 0x400, 0xba, 0x60c, 0x7ff, 0x6}, {0x3, 0x8, 0x3ff, 0xfdfc, 0xffffffff, 0x6}, {0x320, 0xd, 0x9, 0x0, 0x4d, 0xa}, {0x3, 0x2, 0xef03, 0x1, 0x2e9e}, {0x51cb, 0x1ff, 0x5c, 0x80, 0x3, 0x5}, {0x7ff, 0x7, 0x101, 0x0, 0x8, 0xffff}, {0x8, 0x2, 0xff, 0x1, 0x39, 0x9}, {0x0, 0x9, 0x10, 0x3, 0x9, 0x40}, {0x6, 0x9d2c, 0x6c, 0x5, 0xb, 0x1}, {0xfe, 0x1, 0xf2, 0xb, 0x1, 0x5}, {0x9, 0x7, 0x9, 0x2, 0x8, 0x7}, {0xfffffc00, 0x9, 0x3ff, 0xfffff000, 0xe0, 0x2}, {0x80, 0x9, 0x5dff, 0x8b, 0x4, 0xfffffff8}, {0x10000000, 0x9, 0x1, 0xffffffff, 0x86, 0x4}, {0x2d5, 0x8, 0x80000000, 0x0, 0x7, 0x2}, {0x5, 0x80, 0x1, 0x4, 0x5, 0x8}, {0x2, 0x9, 0x66ad, 0x5, 0x5, 0x7}, {0x0, 0x9, 0x5, 0x400, 0x7, 0x5}, {0x2, 0x3d9, 0x1fec5ace, 0xf, 0x2, 0x10000}, {0x7, 0x9, 0x9, 0x4, 0x0, 0x10}, {0xffffff81, 0xfffffc00, 0x1, 0xd, 0x2, 0xffff}, {0x8, 0x40, 0x9, 0x7, 0x3, 0x7f}, {0x18fa, 0x9, 0x4b, 0x7, 0x63, 0x3}, {0x40, 0xf, 0x844, 0x5, 0xf, 0xf}, {0x0, 0x401, 0x3, 0xffff, 0x89c, 0xfffffffa}, {0x0, 0x5, 0x661, 0x2b, 0xe6, 0x9}, {0x4, 0x9, 0x8, 0x5, 0x9, 0x8000}, {0x80000001, 0x4, 0x0, 0x200, 0x0, 0x80000000}, {0x3, 0x0, 0x400, 0x0, 0x7, 0x5}, {0x6, 0x9, 0x6, 0x4, 0x82f, 0x7ff}, {0x4, 0x60e, 0x1, 0x1, 0x4}, {0x78, 0x3, 0x3, 0x4, 0xffff4766, 0x7}, {0x2, 0x10001, 0x7, 0x3, 0x1, 0x5}, {0x1, 0x41a2, 0xffff4a66, 0x0, 0x6, 0x1}, {0xfffffff9, 0x0, 0x8, 0x400, 0xb5, 0x101}, {0x7, 0x0, 0x6, 0x1ff, 0x11, 0x3}, {0x1, 0x0, 0x9, 0x0, 0x7, 0xc57}, {0x7fffffff, 0x5, 0xffffffff, 0x7f, 0x1, 0x1}, {0x3, 0x9, 0x3, 0x50013bd6, 0x0, 0x4}, {0x80000000, 0x3, 0x4, 0x8, 0x4, 0x4}, {0x3, 0x7, 0x0, 0x1000, 0x6, 0x1}, {0xa02d, 0x4, 0xe, 0xd, 0x0, 0x400}, {0x6, 0xfffffffe, 0x400, 0xffffffff, 0x4, 0x9}, {0x9, 0x3, 0x8, 0x4, 0x9, 0x2}, {0x9, 0x6, 0xb23b, 0x7, 0x3, 0x97af}, {0xfffffff9, 0x2, 0x0, 0x8, 0x6}, {0x1, 0x5, 0x8001, 0x3, 0x7fffffff, 0x3}, {0x8, 0x3ff, 0x10001, 0xb, 0x2, 0x9c5}, {0xe9d, 0x8, 0xe9, 0x400, 0x4, 0x5cf}, {0x8, 0xb8, 0x8, 0x71, 0xd, 0xff}, {0xf9, 0x7, 0x7, 0x1, 0xe, 0x2}, {0x3, 0x400, 0x9, 0x1, 0x3, 0x6}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x61d023cdbd907091}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3, 0xef997b81e6ed93d}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x1}, {}, {0x2}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x34de7a0c42b6c7f0}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x8}, {0x4}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x7f5a86033e25656e}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0xcd8209ae31843148}, {0x7, 0x1}, {0x2}], 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2c24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r7 = inotify_init1(0x80800) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) mlockall(0x2) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) 58.732653946s ago: executing program 0 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) 58.104836979s ago: executing program 0 (id=1005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009900004000000000009ceed33326b70000000033378b0497bcff0000303c0d2ec816386b"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x4a42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfc}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x28, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 56.677724104s ago: executing program 6 (id=1009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x5) 56.468105996s ago: executing program 6 (id=1011): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) (fail_nth: 4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 55.80551676s ago: executing program 6 (id=1012): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x7}) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000100)) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 55.268884713s ago: executing program 6 (id=1014): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r1 = dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x24040884) 54.725380569s ago: executing program 0 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x2) (async) inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x407fff) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006) (async) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADDIR(r2, &(0x7f0000000340)={0x10e3, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x5}, 0x2e4, 0x33, 0x7, './file1'}, {{0x80, 0x3, 0x7}, 0x8d7a, 0x26, 0x7, './file1'}, {{0x80, 0xac}, 0x2, 0x8, 0x7, './file0'}, {{}, 0x1, 0xf, 0x1006, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, {{0x8, 0x1, 0x2}, 0xfffffffffffffff6, 0xf, 0x7, './file2'}, {{0x40, 0x2, 0x7}, 0x5, 0x9, 0x7, './file1'}, {{0x4, 0x4, 0x8}, 0x9, 0x0, 0x7, './file2'}]}}, 0x10e3) read$FUSE(r2, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, r3}, 0x10) (async) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, r3}, 0x10) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can_delroute={0x14, 0x19, 0x1}, 0x14}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) 54.6682592s ago: executing program 7 (id=1018): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77218}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x400c110) readv(r0, &(0x7f0000000140)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fsopen(&(0x7f0000000440)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='\\/', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x8eb6, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x62, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1002}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 54.067438781s ago: executing program 0 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, 0x0, 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 53.572733489s ago: executing program 7 (id=1020): unshare(0x6a040000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="5c0000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000079800200300012800e000100697036677265746170"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="5c0000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000079800200300012800e000100697036677265746170"], 0x5c}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x1000006, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000001740)) ftruncate(0xffffffffffffffff, 0xc17a) (async) ftruncate(0xffffffffffffffff, 0xc17a) r2 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) openat$sndseq(0xffffff9c, 0x0, 0x0) (async) openat$sndseq(0xffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRESOCT=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x4018040) socket(0x10, 0x803, 0x8) (async) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) preadv2(r9, 0x0, 0x0, 0x2, 0x5, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r10, 0x1000000, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 53.221315617s ago: executing program 0 (id=1023): mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @multicast1, 0x15, 0x3, 'sh\x00', 0x1, 0xe, 0x10006d}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r4, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r6, &(0x7f0000005e00)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)="f5", 0x1}], 0x1, &(0x7f0000002940)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$set_timeout(0xf, 0x0, 0x7443) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x1e}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 52.50233429s ago: executing program 0 (id=1027): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, 0xffffffffffffffff, 0xdd0bb000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000002000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000001c091b8c36c309411b2663b78b300"/42], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r7 = dup2(r6, r5) read$FUSE(r7, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000340)={0x1, r7}) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x38415261}}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 51.320025204s ago: executing program 45 (id=1027): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, 0xffffffffffffffff, 0xdd0bb000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000002000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000001c091b8c36c309411b2663b78b300"/42], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r7 = dup2(r6, r5) read$FUSE(r7, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000340)={0x1, r7}) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x38415261}}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 51.276138623s ago: executing program 7 (id=1030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r3, &(0x7f00000014c0)=[{0x0}], 0x1) unshare(0x28020480) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsmount(r4, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r5, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x1}, {0x2, 0x2, 0x9, 0x8}, {0x2, 0x2, 0xd, 0x9}, {0x0, 0x3, 0xe, 0xa}, {0x1, 0x1, 0x4, 0x4}], 0x10, 0x9}, 0x94) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 48.652671838s ago: executing program 7 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x500}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbdd2d932e4d38f0c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20010010) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mkdirat(r3, 0x0, 0x48) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x5}]}, 0x18}}, 0xc000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x196f, 0x100, 0x819ef, 0x5c2f460d, 0x1, 0x27fd, 0x2, 0x3, 0x40bb6, 0x16, 0x10, {0x81, 0xfffffff8}, 0xd0, 0x9}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 48.304203874s ago: executing program 7 (id=1035): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x6, 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) close(r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000240)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0x1000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) bind$can_raw(r4, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@delqdisc={0x220, 0x25, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0x1, 0xd}, {0x9, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x5, 0xffff, 0xfffffff7, 0xffffffff, 0x8, 0xff}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0xeca}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x9, 0x4, 0x9, 0xfffffffffffffffd, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x5}]}}}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0xfe, 0x5, 0x8, 0x2, 0x1, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x7fff, 0xa5de, 0x0, 0x2]}}, {{0x1c, 0x1, {0x9, 0x2, 0xe000, 0x4, 0x2, 0x2, 0x1, 0x2}}, {0x8, 0x2, [0x3, 0x2]}}, {{0x1c, 0x1, {0x0, 0xb, 0xfff8, 0x21, 0x2, 0x2bf4, 0xfffffffe}}, {0x4}}, {{0x1c, 0x1, {0x40, 0x0, 0x7, 0x2, 0x1, 0x4, 0x3}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x2, 0x800, 0x3ff, 0x2, 0x2d46, 0x9, 0x9}}, {0x16, 0x2, [0x80, 0x2, 0x5, 0x1, 0xa10, 0x2, 0xe04, 0x100, 0x1ff]}}, {{0x1c, 0x1, {0x1e, 0x0, 0x6, 0x4, 0x2, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0xe, 0x100, 0x8, 0x1, 0x6, 0x2, 0x3}}, {0xa, 0x2, [0x5, 0xc, 0x5]}}, {{0x1c, 0x1, {0xde, 0x9, 0x10, 0xfffff801, 0x2, 0x81, 0xfffffffd, 0xa}}, {0x18, 0x2, [0x4, 0xffff, 0x0, 0x100, 0x7, 0x0, 0xf800, 0x40, 0x6, 0x4]}}, {{0x1c, 0x1, {0x4, 0x0, 0x1, 0xfffffffd, 0x0, 0xf, 0x1000, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x0, 0x8001, 0x4, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0xff, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0xc, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x4041080) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0x10006576, 0x4f2}) socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0xa39}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000140)={0x0, 0xfffffec7, &(0x7f0000000300)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x40040d4) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) 46.128954232s ago: executing program 7 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (fail_nth: 9) 45.335375245s ago: executing program 46 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) (fail_nth: 9) 39.528916543s ago: executing program 47 (id=1014): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r1 = dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x24040884) 12.779580004s ago: executing program 3 (id=1041): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8002, 0xffffffb2, 0x7, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x20a, 0x4, 0x0, r0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r0, @in6={{0xa, 0x4e22, 0x6, @loopback, 0x6}}, 0xa0b6, 0x58e, 0x8, 0xa, 0x20, 0x3, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0x8) (async) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xc}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4014) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x449}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x693a}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r3, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0xe}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) (async) r8 = openat$vsock(0xffffff9c, &(0x7f0000000800), 0x20002, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r8, 0xc030128a, &(0x7f00000008c0)={&(0x7f0000000840)=""/75, 0x4b}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x18c, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f00000012c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000000d00)={0x554, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x34, 0xb, "b7ef244afdf0562d0bd0d1feab6843bdd6694201d75bd233c8999b30b9d17bc65f41532d19aa269cb5cfc694c1025b17"}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x260, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xb}, @NL80211_NAN_SRF_BF={0x103, 0x2, "5d369013500223bb7a12e74ee632481739912cad1fc56c467dec524056f1ab104c77e7818559cb96f37b19970985ea9d79f4364050f56f3777923237744ba5ec9b72caf9161d8a6dba07037e72232ffc4038282e2f4b1be7e732398cc116d46c1412cfca38179c4d00d58447a3f815e151d23d70fc8a903662bec053657c03a847b3a2c3a3d47348dd471ef6833ddc97de7655475d4b65249bae6188ca1885b5bda36d1df27017ef4b3ad6292c5f60f5ab6ee42d7133b0db5bcc5daf76a9f5874af7ee8ac3e084fac45f133347b65e61da31c7cd86024e2881a51fdd4f4fdb30b4938d516a71b060888cfc4990d84c7451e75b871176417f1a53d73a082caa"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2a}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x27c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SRF={0x38, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x238, 0xe, 0x0, 0x1, [{0x33, 0x0, "a16c28e0f01c736735b65e30efba8d85ca478ca3fbf66d9c4b707f6330d3468d0d15ca3ebfc2b72fa85d5753c34988"}, {0x5e, 0x0, "d73850a823ced7668cb6d83dec0af439c59977a2016a06da50a1ec84ac5d5cddea18fcce0767200e08e7e476a793925c8a89898e52633cedca2cfa9fdec515decdbfc4a23f02db2104ccdea951f8ca28122f13811c6af6608798"}, {0xc5, 0x0, "cef6324dbe5ce09a9ecd8946a3fc748c06e2f1865d1cf22763215e95aa481c6e5a797984afd7e2c8cb5e7fd7dc1e0f401e8c2e959a14f89d7ab5774ca83e97f41ddcbf0882612a4baf3db07ac631d686e36226d2cfdc2fc9c188742ee3edc773f2237472257b2b56d10a384de130c03492e64fd328be8ace90b2744a6bc1ce1947a65c62f15388f7b4229acbdafdb1c812fcc68d6018650888e91b71bf8144561b332ff92fc2da95cc9f693623fd572d4e7762a50ab0264d4a8abbb21876153923"}, {0xd8, 0x0, "3bf7c7f1240d01967b2795f58765fda38caec4071dc83548e5038ee71bbfec4c12b6a269ced541538188b8b24108a2ea5ef85f5fe063bc1fa74027737853ae307ef2c0790d4ec8cb7107b33f0e2298f83209c6fe2e7ff111e1a1fe3993cde1297aa19d0d16e5dfa137a6323afe74480eeb151082bde1b20ee6ddc620da57163f34d5edca91a8003bcce95f8f8c1f910f5d73db878925ccad8d5d985aa4a6ed22b36ad1ed329981a2ff0dd15ff620c5f43a71d461d9d578fc3eba8ae4c1ce60d6990bb8a69f8edc6ab13c1b948673cf0bf5abfe9f"}]}]}]}, 0x554}, 0x1, 0x0, 0x0, 0x40080}, 0x20044080) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001300)={r1, @in={{0x2, 0x4e22, @multicast1}}, [0xfffffffffffffffc, 0x3f2, 0x5, 0x3, 0x0, 0x5, 0x3, 0x0, 0x1, 0x7, 0x4, 0x4, 0x8, 0x3, 0x4]}, &(0x7f0000001400)=0xfc) (rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff01}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcb69}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff7f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) open(&(0x7f0000001580)='./file0\x00', 0x8000, 0x130) (async, rerun: 64) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f00000015c0)=0x1, 0x4) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001600)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000001700)=0xe4) (async) sendmsg(r11, &(0x7f0000003e40)={&(0x7f0000001740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x0, @private2, 0xffff}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000017c0)="70e5c03e03e138cdd357c12b3d81e725a215637e1944429485bf2cb4e4bdcc888d35eac4da65037d21118f9b172d61de52d8f382985dbe5ea5fa2d18326e322d72d5e64a076a5c72e1266816f628048a929ab1c29bb63fa3ada4c8cfac4b0436a6a6f901d3df04b8e277992366de1090f87ca3925d5fba7a23f972f691eb0b8764ca8497db636adf4050a82d18ed03ad16a8ea077eafb0be0ceaf9a7100577a32946885a99f3fb3f78d1e097f4f837890b2a1dd5335c2876602ef96121fcf77fc91146af4d957049a89ee2a7a3a78e7594db4d63012f4d83c492aff9139775f4c29601be94218e60cc9f26114dd6c860a41890e299bcf0c16e82", 0xfa}, {&(0x7f00000018c0)="4bb75974fdcec4ad6de57d15cbde755dee8d1edc140c46e1410dbf90f5760691a4edb22d58da083530b834932673779ff2d7a9e8f368959ce955f9b27d8511d1ad8ae7b40c84de7f333d503bf1769fc22eaf98fc9ef726849baae652e2e947600eb4350d6f7c4ed3f53d8a87539d6f8cb21b596f5b9a813e3026be323e5af2977ba040833f4818f22c7894172cce6c4d36d3bba10044915cf3a1ea5b34936660b44d05de37439475c26634c1e75cd2d7e5d247232edaadd46d15a478c69db3efde5125", 0xc3}], 0x2, &(0x7f0000001a00)=[{0x7c, 0x84, 0x9, "098a79cd23b9d0c084b25a636cdbf81e5080897ea10869052f8640ce92a0f2d8839d5817d8eeba606d7451f8d93978cf59250829f4adf5e2d023d704ba702f0cc0951ec8db2645126ab160af4f4b95243b36bd95f40218d0146654064063a8019975295176621f36a4f96d2f34b1"}, {0x8c, 0x1, 0x9, "9c6cbc42940a7885c9bbf5bb5291a2d1300d2c05b135241a32281f7dbcdcfa08bc687d3e140d26c84834564a71ed96931689c249b307822d593aa88e5a1f74e641ae47cfc2da7220f859f21977c1e175b18b1e8f454500da7f634590884a4cfbb9658210c34a8a8f653edfa08ffade4ab56614d989b6091edc1c78ee1c30ae8d"}, {0x7c, 0x103, 0x8, "4aa1f4c534a02e941da78c415c247a91ee4351bb94342b63f3ab0b99f3e622fd973169a88718b6ee922ac73ab1f74f26c79f9f3388ae5baced22d8712d7106e3303346c9e0520a478306fd1b922b03405f2f0f8b73db83b359fe92f7ef3db2b0cb99e25803481d982be7b539764076"}, {0xd4, 0x108, 0x9, "0d5645ff5b834904ea79e713ff715ddb3ee190cdc43c2230f28a173e0fb7ad22f7e4269313a85004348903be3b157bf973b51a9fcbb6fa61af257922c74b4b1ce9bc2ba6750402239cf7efbc5e3b3a60c555d3ac1faae00eff9d564115b301c61005e5082e8a185fe487aecee8a5a0b765fa0bab98439a4c4f1ddecdd3883fed6776f942bb39358bd4889e6edeb39757367603817f3240f289ea0cb86119c3ac4a75f88e92f83533ee88e21787d515be273e72faa73327dccf75fd1e4a7febb079879a1297"}, {0x100c, 0x114, 0x6, "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"}, {0x20, 0x10d, 0x9, "061c87b90f181d86c0b76ff87d0db80c9db1"}, {0xf8, 0x101, 0x4, "7bf9e775178f1848b6e9d3b9ea73f0305bbe2bc6e669424b0f4634b3bd9c8b190c39ef2d961776375a4a25edef9fa3fe1ac5f0b683d1f450ab1d8e7ed13e546e7cf6d9a5cf974a29e54ac88e967eec1631df3cb8816d053bf8e0b263d2f558aaadfc3bd053cff36359521984eb12afc9e5b261df8d8867ebf9aadb619e6ad437116691625b5f1198c18dacfa1371fa98e5fdca8caaf6e6fb44155454d6a9b50b153ce1ba7347bf5a877cc959929ea125d18230817f60c029a458653ce2f7f364b7a0dd70232e04af7e630022177dad06d887e03aa7404744d67cda0f6ef6b8a43b1dd903ed8eca2733802c"}, {0x7c, 0x118, 0x5, "ee668afcab317832044a64196ad91dc0571d0dbfc2f405de1eba0b5d5a7b5e24bba98ade708c21feff2e7c30a30f2adaae824a8f2528f1c3f2170a9d7d72327b342c110357d0f5a0a20403dd356b8302a3fb3d95ba80b9ce7ad87ee0fcfe724d6cabe213b3a353807427fe709279"}, {0x100c, 0x10c, 0x7, "440b8e080b03efa7c2e7ff9a3ff7ba95f788b5dfcdc521641295ad18d26a64362a4ccd4d25458f3ce1e1fbe99e32f3f1a7c29ff30dbef6cc4305ecf1453eef91e8c8a1f5c9e5bbf05827728e100e56ea2f45e1a47d47bec45d39b36719d6e7b46768c538d3eaaade852e43d06dcb27fc5bee2981211f121f37645f9dc0a0d23b8cd641a8c2a9f2f1e88059792c5e8828cfbb74414453ab93f3390813bc02fa336f92474be63fa971d235561be296cbea00b4425b70fcaac0446955474d64f82ad7ae44a7512c37d64d31f292e4780a663ffe127c0c90794e02ee3c2920dd90ad0f9b811196410935f2c20c1940d2bfebfc665478c772150166b462cbe66d8ec771a482bc9c595f0169879db1872d086b025e18c7f73999061dfa424abf2ce75a39f5a27acf8348f2586240cba7503ca28b99c9c326ca1426870bc746b12dc971debef47e30c64063d17ffecda4a811e4e993759e309a388ae3bb80c4a894f9689af92b93055dd4472c49325e427a7551899f7a2bca36450af01df0d17d68de98f7f4d3264caec9080633a974f214777cf098ec7e8a7c1c39b14307d64385f127caf58df672c5d20c541dde6179f8e5f127d34ae8285663d87582b4b91b04ae4997068dc93caba4ea07893fd2215dd3efe37ce96181551ac6a1746573be67f78c8bbd82bd6789fe67b48debe75a981094f774b4ebeab3026052ff82ce0d46b0dea607c3aef32696d1abf092d358086b8ef5edd425ccc6330d84b317c3da78f1fb830dfc953a2ab4ce332efd9a1ab5cd895e3dd3d8e55386ebed96f7fb4c601eb67b0a79c6c2991880d2691e7be905ad3d99dc2e87f7c9ed7cf23cd17819741f56ef779c80a22041fb72e356c0bc632af1f04fd8f85926c2e7dcda6105c8a7b1a09e56eca070597327eceb068e03705a865b96e8e1e5427a0c0ef225eeb3e1a55f44928eb563456d756023d218e59a70206cab990b3e318a30450884f83760ac4c5aec0c1ed2d335e807b952218442010a37c088aee84ecadc4f6626ff72f4985fc62424ac0a73470346fbee92d14790c748ffffc610121df2a0bda1a7ea55cc7f273fbf9b2b9425d496a91b6465d931b093e86334ab9de6db3a0037df375133433c39952652039d813e7746fb3be4de30fa96890825b378b7bd6f571e77ab62dc24df4f6919ee8878aefaaf38cd0c4c1b1ccf824139d89b7e34343505e878cc1fe21b99cbe057cb570390ee58a622df21b4073f94b93b265ef5b42d16eda3bd64e793c9a87ba1191b491da60955054a3c39681a136a8580fa32b431b8bccce238444f1518a725a64b8b0cc0ca97c4c58ff3b930bf4f9bd05031e1e87bacde020b19983f9e691378b6797866c773adb136ecd418d65418dd2505f78bcf8963dbf9fe0be7d45cb257d10ff9db1914e97088f8b2a2ae2927acf8464ed13118c26e5abcd5f5718be31e710f7f1e1a9fcf47f3537127e8f28e6d9b564a6236691322c8b720b2a0df4f88ee647ad3583c0a4016bf269b167c6cc93ff6a4ea0563337069ee7c53f092241a2d44a857b2b688405a51d9cb3a1d1b4fdb7830c8bd7f7deaf222e07e7567d0a9466ec7078d0e5406c20db641659114644f0b1a53c8d1971d632eb09d79be6e0a5a8cf34e48cbba2d1ca2ba6baffb028d07b14018f26974bbc546b32edcac82065263512f1bbe6a0a7b1573d60de295a198885d84d93eb71ab5079039d2df9197433487a1a4ded6d0f35af29099c52bfa5491db7d2f6e244d508cd8758930c73fca100c868f40e4e93690e6eccc16d6bf65c435e78efaba49b41b866706f4969c0d1c1966b6cb89e2db0655e033a2161363799377567b4c1ca1e05f8ffabb27767454a86ce7796b1d59893fcf9befaa2bd7558a7a454dd56a063ae4d2a58ac370103ae436bb4cf3fab969ed426403af17bbeae64f4108820767991075f7ce42f0e68493952e96b02e7edb861429134dabe447a5a73fde419843fca2dd93692f96a3c651158eacafc818f9b8b9c32c3625c7c9e411c6f32e9652fcf124859e847a3b016179e5feb690d894c9f567b547013b87985717938a89ec97af3eb764adeca42977b62afb1ed9cfbd4624f30e06ef8cf8629d8e489c3bb786249a0c3ade46437237e4d334b86087b8a7ebe00fb0c1727e42c5425b231d2e86a5ff94f2bd224b7284ff7f53c04a3d6e4b46b7a2c4e7ceee05941395ce94fc7346f449461bcd8ddbe05bea032d820876f936e412994c7c6be078f64a55641c6571142b4e467b3bd130a38e2fbd5d63b8dd93fbcd36bbb65f0b164e7ebb4eb78e5e5ece482120263b0901ef1150765bd9c1f867863cdd4630e7cafe42b879e69e8e26f4799c3b0f5e1afee44a1f58576997b95900326e8c48b05678c21d19b6954da94be747646a702197c74f3488e72cc72b41a0ed60f36cc91ef863e9a8b2b8123e5c385e8e6f028f26656c994d96a3d815d0ccc9fcf7bf7c3f87c2198108805abfe36119607b7f46aa694875b8dd71f2d3960ec8e6f8838a294e48ef7ea73be7849863150325c4ad5d83ac669e32a15db2e12a9456aba8f75e3d366e7651cda81e254839071b5590a973e965c1eeee03dfba7440705e68590fc90f507d0fe1ec8267ab52645d88f16fb8da348cf402523e2b020dac3f70b9be9e49787279e920e387926a43d8d0c5c2e2d86196550d6f9201e45c859abab25f7c3c2df157ba69bbb48efcb032ef9cce436a5f1202266d2a159fa574909ad8604bb9b425933c3c3d431c7043a8717e6ca36cbdd682a3d7b2acfafe034e50bf629f4a579c22f8a1bffa8390d3e58601f8b5a892678439cc3c52aae342d515aacf04a704dc4939806c7eff626cc349d50bec378a317bc0391dec1a87e12a60900d9e97dfc7b4ce9577721a8904e759fc702804d8c71270304f39e064508bbe1bc5f10d355236e2df14178e17397f225f22595c0f3e3398f29b2d2b38c6ff7df31ef20f251c4813890f1a99bb84e2954d2d438270d736b6cccc91186dc4e29f4d34cbdbf763129a01e730e825581fc46f38125f94b5e0c42fd8854b793832dd64d857b16c5d0a9b02b8d91db1e9617a159d63a9be366850f14dcd4edb791c1267921998cf7c78743a99785c1be045c13e678f091718de70cf380a7ad827a2b487cdeb5eba7465e102a6fbce1a253e5752af73efc1b275e3f108453660d704cc50003a6e2178051360c1b5eee6f2a0f0138e1923ff5c46e1f2da6db16defb5749f4ecd095140c6c96a8505337ef1514bf7585dd21fc7f47cf9d6185f7b7c70b178f5d311ad8b8025af8c87976ed3521ae480318a5accf60ef7afe1e08b0ff8fc62e7e473dd18be8d58d5fd468cb44546285c6768c7028d3ae61f1ee27fb4086cbf9c75330017121d3a652fa61b938890fdd0e0317a2a046f4de311c53ed1011622ad6f80d5e58288e35521bf53958dc287d8c2bc735b4c0e7bbc2d1a8d1052bb89dfacb326ce1754d258f91fb239010e81206d4e25c47ecab2659c86095a50fe80dcb0077b9001ff5456ca74beb0f868766aa54cf51082d474048b5754b5dff1b7ceeba1e1186cdf9ea69742e792c6a19b946b9980249e733d75605a63778c79505f48ce499298831e35f7def4166033e042ba8ae0d4e49e7c177f0337cc4211ae97a3b46f41bf953bf45aa833600272a92d9d667932c44d6202366ada44e9fce9e9273667a405777b75af434d4e58cd074e1f6ea559d8f8ab44ef8527b714d654c7f346307cd023b2593aa7e6660d05dce7a04efa1388426c744593f7a751a455eede1684b00ce484647129febef361387c097fbe087e742410815985531381e179e7e7d8bb6ed51e9655e99e6fa59fe8cd611d8b5c85e420647067e494d94e424cfb64b1375e80b1e34ec1de281fc036923b44bd5c5531d7daa244adf08e5d41cd1b12aaffab848c4d213d40b62ff58e1a77aad74a685e2d6bf473bb03a52e34b52d3a16f898d90cb5d27b3ba838cbe0df685fe6270268bb29afcf0697cae801cba175ff45b5e74577e59a29752495c022876466e524b19e812aba80382d5373e39cbfde7e45250e18f11c5d7a34fc8b030c2792ae85f751e8271d3202c2f81bd55770af6c23437db0786d7779020c2fb199120d24f8cafacab9b523571786fab0f94ed97b3937cff30bb4674ac13524877939e37abf03946645fc39f6ba55481cefe7977d96d64a22570d0ecb9a3bdd48e2afea66f655f53c78d49da6dc653b5d0061359e7ac0494f0b8cfa6d25d61f237d768fb6a7ab63c3a88d92e03e416ea513102a40e43886f999f6d93ab31535048a8e6df60e2741ba67af4d9271b9d43bce9e78ee9f3bb6268ba6acbc12264ea10452fe94c34b3fa93bdbd68ca6b8a791e7e4f0e82757bf869e6d80feff4152a618968582192aebd0ce3a4f0866dc63acc4687dd3c4c35736c3114d46d9c9e7df7d1de47df2829a6f735493eaf4845cd3d156b92b31a42d48c71c339336a33bd6603845930aa05afcb4b03aba8ab1a3d3660854cdba34be5473ec1625cac0b4981672809ec89b3a055ee5f85047ab1e4cbee1dde8f13b7943a9934b92c3c2a4688b94417075411b3aa77ec423a2ee02d08f122bba8aa9ae2fe35f3bababb84cdcacfb75bde1e6348fe302334c117bc5fd3a02279b9a2c10d5eda64b864277be7724d219a9b5094908531e49ecbb948f1dec634adccc2cbd97a3061ef232598635595afbfdd3c0a0278e703b850b55734a06b5895d15742f8e6a1a03f64ddd4be3d6a4404619ff3162ca4b5e0f5b400e6eb9c2963106a6770d0d0ff07ffdf5f6db569bb3e631f12e4ba97f15f2750d7e141993167d56ff386debaefccbb5d464c533b77ebc93eccddd18cdb3fe7b376fdc4b607dfb7a4f174097dd255f4f4bd42a38cced797e58b5e80ff32543783ea35058f5f1c5c3d6b32b22bb602c4dd2ae2b74518f63e04324a061dc950d8adf98fbd83a0064b3f2f294a71ff8c72fd2a09ce39c362484847367e506b75331a669462a8576aef5b0da40434a4cf58136033f361e7ce79f2f9255d2269d05dc8b94ad5fbc4faf80ff2ba01561eae42799dc71cdd6c94131c168366b40adfa586eb787978ef875be1c0fabb388dd605c2a79f1c0956c31087838d71bfdfb4238bb835ef400e4257fa0f8cb58a3861124914599fd26b9a4594860dfbc5aa26239d131c57acf8a5221e818baf1563b2819c3af82661827d9c996a87448c23aa2845c654ba923a0a51352736b4a99ccb23fcdde8773d1e29625661fe67ae7e68c3bb2f89893b5a0b23cd58f79fa5c3aff0c601d216d3c72e3485e45267fb5a555b1a9a680812d7cc0070d8bebbc956fccb1c6b5f8331ece0b050defa644e2d98379d2a506a5386af05842d8e754fc2c8213e63e7fb8aa243e492fb638253b9a93a0a083c12114066e2218723ce91db861c880f31f41a02cc4f09c39d31fda848cd22a696b84f89053eae0f14c96a7eb59b3a44b63820c4bda5cf2acf3aee6d4efdb2228b3f3e731075e194e257e67843db9f633a8300daa992ec8a84beaa28f42a5b4ae31fc470286d016df03e6db4dd5bbc0078a1f75cc5d12c10fa72a2cdc477d8c0db538f0753d4ef824138e4cb88880cf403bf0e969b9a445b43db6a9a827f34e3c974a0902e93d9c732df56a66e482328e4e33469bd1a46b2039f8104faf0c8b7437b483bac9e280cb31d57b815a29156ed93800ea10add5eba4b96f93ea0420a30159b119495a1c4d86846a4228cf4dfdded393b1e8490e2be7db7940a5c0b7369674a970e715"}], 0x2404}, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000004500)={0xc, &(0x7f0000004400)={0x20, 0x10, 0xa0, {0xa0, 0x0, "a7f7db493ca726a5a8fcbbad51029b10c742a56bb5cc6917e6ce224551b3ee0d72f073435fa11a6d78ed3a556cc54615186a110806a218f8e55802fb522a41d925cffa6b15c0ee08422aa70252c9e9416d55be76368b9e5f61fae549d74d046f3ca122abd8dbc7a35bc8308f0b9ed153560ac37e090d3da34f16e26ac540d47209bc22b2f2bee30a37985234008856e2053a986fd9d3dd996a45d6398352"}}, &(0x7f00000044c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004780)={0x24, &(0x7f0000004540)={0x40, 0x10, 0x78, "34cdbaeeaffa824ca368c4ba5f04fe89d4c36ebef11df41d6dc90bcf2f0d2f25efb9b42e222983308c939ab2882ba213e9a35fe3194c723e511a9c8bf5031e1ff320ad99e4a0132f1d44ca23376ec953343a4667eda8062f7df9e08ce170fb1539a4842c0635a74b834e341ffbb7f0c0dd51e9a35ed6e2c3"}, &(0x7f00000045c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000004600)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000004640)={0x20, 0x80, 0x1c, {0xe6, 0x5, 0x5, 0x7, 0x8, 0x9, 0x3, 0x9, 0x5, 0x548, 0xa, 0x6}}, &(0x7f0000004680)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000046c0)={0x20, 0x83, 0x2}, &(0x7f0000004700)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000004740)={0x20, 0x89, 0x2}}) 12.500811852s ago: executing program 3 (id=1088): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0x1d, @private=0xa010102, 0x4e22, 0x1, 'dh\x00', 0x20, 0x7}, 0x2c) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000fcffffff000200000004000180180002801400010800000000000002000000000000001980080001000400100008000200000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000007, 0x11, r6, 0x2000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f00000001c0)={0x1000000, 0x9, 0x2, {0x1, @win={{0xfffffffd, 0x0, 0x4, 0x3}, 0x1, 0x12000000, 0x0, 0x1000004, 0x0, 0xa}}}) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x238, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d, 0x0, r5}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RRENAME(r10, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) io_uring_enter(r7, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r11, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='(', 0x1}], 0x1}}], 0x1, 0x40000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) unshare(0x6020480) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 12.39727103s ago: executing program 9 (id=1089): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x4e20, 0x8, @mcast1}}}, 0x88) 11.387859811s ago: executing program 4 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r1, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 10.9476286s ago: executing program 4 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) unlinkat(r5, &(0x7f00000000c0)='./bus\x00', 0x200) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x102) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) shutdown(0xffffffffffffffff, 0x3b3ec04e0e1636c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.63289283s ago: executing program 9 (id=1093): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000040)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 10.108007564s ago: executing program 9 (id=1095): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 9.812865666s ago: executing program 1 (id=1096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x83) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9.251535282s ago: executing program 3 (id=1097): unshare(0x2a020400) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) io_pgetevents(r4, 0x8, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7, 0x3]}, 0x8}) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0004570000005706a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400966293b0a2b103dd93f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000100080000d97d8e7b919f7ffd7d36cb3f898dfe4e4bf6ab7b0e4212dbeb287eb8e3d30137a789a6c3edc7d0d6511ff01a5dd9ada2f46f33d7e5bcdfd438ff1c0e2bc182c180f22a115962f73c9ecdc524a40bce7dd537f5930d404f6fb6be50e12e048f4e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x1, 0x17, "b1acc69fa1621fd7e7ed5e205124d400a70599ddcb48a4"}, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x5, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x40, 0x5, 0x7, 0x0, 0x7, 0x3c1b, 0x1, 0x7, 0xd, 0x1, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x90, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x3, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x6, 0xffffffff, 0xd, 0xffff8001, 0x47, 0x8000, 0x8, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x2, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x40000b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1000016, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x10000a1f, 0xf44, 0x7, 0xfffffffe, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x8800, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x45c, 0x40103) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000340), 0x240401, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x4f, 0x7, 0x7, 0x958, 0x2, 0x9, 0x4, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0xc3, 0x784a, 0x4, 0xb4aa, 0x81}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000a40)={r8, 0x800000, 0x7, 0xfff8, 0x4, 0x9, 0x8002, 0x2, {0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0x7f}}, 0x0, 0x9, 0x100, 0x1, 0x6}}, &(0x7f0000000940)=0xb0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.122326461s ago: executing program 9 (id=1098): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r3, 0x800, 0x1, "e9"}, 0x9) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0xb, 0x1, 0x0, 0x9, 0x0}) 9.003400897s ago: executing program 1 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000280)=[{}], &(0x7f0000001900)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x65) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000100000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) r8 = syz_open_dev$vcsa(0x0, 0x4, 0x80401) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000100)="d1c59f27b960e60ea0384d1ddda5a362e9815c7c99edf92aa42385a4214ce87a9a47076a068e28e8b6b1cdd413fba55c1c3a9fb4f533dfb638071343ef5387642438677f73e5c27db41d7900a8cce063263c4b4a3476a35e5ecacdc1a964ce17feb790ee0eeb62a14a0e315741953f81b82f3149b346cdae442ba4916072181d5b13d68d3f6cd2e92f4240e762b426f6c39e9541c14c9b2299fb5cf3437167abec65726d19b63d15a7b951a9a131ade75f5252151e95fabc31ca2ffa17c93c88ebf589fd1c54dd8fb943a655129a4e7e8785403f9f8bdf1bd28ddac22035b9a10564", 0xe2, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000040)={r9, 0xb8, &(0x7f0000000200)=""/184}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="185600"], 0x0, 0xd577, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB], 0x4c}}, 0x0) 8.76998194s ago: executing program 9 (id=1100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffe1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x8040) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05", @ANYRESDEC], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000240001082dbd964d2270e4192c7bf8ad7f6e743291b8de45ba809f68fd2a95507000fadbdf250c00000006000400fd000000"], 0x1c}}, 0x40050) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x1d, 0x4, @tid=r5}, 0x0) sendfile(r9, r7, &(0x7f0000002080)=0x64, 0x21c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 8.493019291s ago: executing program 1 (id=1101): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)) getdents64(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 8.489153249s ago: executing program 5 (id=1102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) r6 = fsopen(&(0x7f0000000780)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x83) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 8.157135029s ago: executing program 5 (id=1103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r3, &(0x7f00000014c0)=[{0x0}], 0x1) unshare(0x28020480) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsmount(r4, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r5, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x1}, {0x2, 0x2, 0x9, 0x8}, {0x2, 0x2, 0xd, 0x9}, {0x0, 0x3, 0xe, 0xa}, {0x1, 0x1, 0x4, 0x4}], 0x10, 0x9}, 0x94) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5.786369824s ago: executing program 1 (id=1104): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$6lowpan_control(r0, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 5.704791453s ago: executing program 4 (id=1105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) 5.326373134s ago: executing program 4 (id=1106): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c0000001000a436e258e8a2e3e4e780e0069ef703041ec09c57b6e10314caf21f00002f080000002500007400", @ANYRES32=r1, @ANYBLOB="00000000075005000a0001000180c200000e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000900000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r5, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) 5.037261015s ago: executing program 5 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x100}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x300, 0x0, 0x24008085}, 0x0) 4.803798284s ago: executing program 4 (id=1108): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2c16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xe55}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xfe, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x2, 0x1, 0x4, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x80, 0x200, 0x2}, {0x6, 0x24, 0x1a, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0xffff, 0x1, 0x8, 0x2, 0x7}, @mdlm_detail={0x78, 0x24, 0x13, 0x8, "4dd9caa97677a55a2c6a2a370be51be929fd5f74f9cf366b2cc407ff51e2e13e91b1b7db4e307601e8ad98f804c9fa23351a3dfdaf8324c2327c9e7de269c4b687d82c0a06b88787979b4f86c54338dbb5746c5a746fb8b8bb1ea5d0f345a9505ec18aee10163105b15b1e3cdcd86d683cb8b1af"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x40, 0x30}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xab, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x18, 0x0, 0x0, 0xc}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xa0, 0xdc, 0x3, 0x20, 0x4b}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x75, 0x4d, 0xb, 0x4, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x5c, 0xfe, 0x550}, @ptm_cap={0x3}]}, 0xa, [{0x5c, &(0x7f0000000340)=@string={0x5c, 0x3, "b4237d69ab62b46e7f7330128816ccb2393590d5e2085a65a5ab34444b0d9ccedd106b9b6ca7bfe41e538b798f7c07579980b0a54a10ccec4d42dd44892572d09587cbbeb2a6d32a8bbfa745d5de9251e408a08b764daf7c5327"}}, {0x44, &(0x7f00000003c0)=@string={0x44, 0x3, "404f423b48b3e523ce63f9a1aa9507a45a50a4db95a9eb5e61929a1954093fc453b5b453652e17676d6911cfa45de48f13a68709678b1c3fc05a1ea334def0289dfc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}, {0xc8, &(0x7f00000004c0)=@string={0xc8, 0x3, "013befe40983c5f076a76ed1c24fa1c699e22f71d118694d0706a3dabd7e7daf5a0d6985ea11436ac6a45d85298aa27653aa1edb6ad7966cd1017dc6960fa87fda31cdcb4266cc81b6c7121e6b614edbc81d8170f0193de0d8aae8065f8b7aae46b283e96064f1a336638f2694ae1bfeeb17ad0e13611e2c32cbdf9b94611115ec200fd8013354d60b4797354cfa9c43d00f66d4fedc027e478e9fa8614ea802ef08766355657eefa7703b129e60186b074154ddaaa2fd855570a3b4560cde0dc9d1341ae30c"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x94b5}}, {0xad, &(0x7f0000000600)=@string={0xad, 0x3, "d409d61c79a4de07ca78c60d976e07fab1a534398fd8a548daabe33abbb0ff1d80e0526fdfcbedbc34e034c4dbbc5685749809de7699205fe7539aaaf719e44b46680de266c9d724956b7c6963db44055be6d0bfb75ac968dbb75ffa419d972bddddf6361f063dcfb246072143c2daec0c355e2f01823ef87e3be6add4e0b0bf8e3f42090ec83824a9fb2a870115d2fef17842fcd90e2dd9d7f43fcd2ae35df85219e557ef7bd54c7fef24"}}, {0x76, &(0x7f00000006c0)=@string={0x76, 0x3, "842914892431e269b3c4b9b5f526591671266c9b6a2ad2d5d9af022f8707c5d895a841e949ae434f4d31c9a17d3f82331d4aa83679f3ff015f6b89f958435935621b4409d0df62b73d7b7ad319dc61663bccb9a9933d39ae77f3f2677c168efcae75944c6a2820322f5e2c7efec1af563cedeee7"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) 4.676680794s ago: executing program 1 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x141}]}]}, 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0000783aa000"}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6, 0x0, 0x1ffffffff}, 0x18) 2.793845736s ago: executing program 4 (id=1110): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c000000d4000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x11, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 2.792676652s ago: executing program 5 (id=1120): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0x4001}, 0xc) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) r2 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) syz_emit_ethernet(0xae, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, [{0x1f, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0) renameat2(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000300)='./file7\x00', 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0x1, 0x3, 0x1, r4, 0x7}, 0xc) r5 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r1], 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3}, 0x80) 2.071153262s ago: executing program 9 (id=1111): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x7, '?c'}, @local=@item_012={0x2, 0x2, 0xa, "dbf6"}, @global=@item_4={0x3, 0x1, 0x6, "18803558"}]}}, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d793000000000000000000000632f3a76f83a492d667970d863d5b8768d3812b2ed499e5b37893b8367520da5c5486f0e3f61b32fefa0f66c5eb267870796671b934826cc48fe38cbf276773d60971a8c5d5ec3f8a3ac7ee64c91ee1b74fc0c0d715fd4958b6ebda85ae82dcb05db2fb747d7ecfd65030db8b0ab7b16051a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb0800450000c8fffc000000019078ac1e0001ac1414aa04009078030000004b00000000000000002f0000ac1414bbe000000201440c02016401010000000005862100000003020684924d890602020fd109567cb50ec760777fb80755000206028606000000008661000000000608c14949e873ac000e7a58629a75468a0652d584f3070943ff5ea03861ce0011b9dad4de6def45abdda7044ddeee3b0508bafeb41ca1400202000c2fa900000000bffef5e3000970c984115c66b1060a35741f636c3157080502000000"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x40, 0x400901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x6, &(0x7f0000000140)=[{0x6, 0x7f, 0x2, 0xffffff22}, {0x4f, 0xd4, 0x40, 0x5}, {0x5, 0xd, 0xf7, 0x5}, {0xc, 0x7, 0x7c, 0x9}, {0xf, 0xdb, 0x8, 0x3a4e}, {0xd27c, 0x5, 0xad, 0x6}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) unshare(0x22020600) statx(r6, 0x0, 0x1000, 0x10, 0x0) r7 = memfd_secret(0x80000) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES64=r1], 0x32) 2.070065035s ago: executing program 5 (id=1122): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x11, 0x0, @tid=r1}, &(0x7f0000000140)) r2 = fanotify_init(0x40, 0x400) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) sendfile(r2, r3, &(0x7f0000000000)=0x2b5, 0x1) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x400100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r10 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r13, 0x41045508, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r14 = socket$inet(0x2, 0x1, 0x7ff) sendto$inet(r14, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 489.171µs ago: executing program 5 (id=1112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg(r0, &(0x7f0000003600)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'ip6_vti0\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="56526690f45efec91f994e17740e2870feeda30e87df953ac8159a57c1a8ecc539eb8d07b876802d68e8d2cb38597b1488cdf9b799c0e3200038295d2b39d156c0cc854863203c48da7b61f61e5eba8b203ee9377b4c92f184628a98ef58f554ec166f2debf4a19455d8453f1559375e37878142922e98b1aa153e1dd6cf38b0ba058a3f2c07326d7c09b97d134337212b690c41568962bbe210132fa1dda53cdc1187e4d8b2c301f98d74d16fb2bccf80974681d855133aadf897b3b1015ae14283aff9e369f58db5d79b43d9e2e8ae4eb1390b183bffe87fbf1c8b1b60b68f5e8ea7e31cc8", 0xe6}, {&(0x7f00000003c0)="1921e6cdec33df2c39f654ab4d7bf772a8abe5e93632d76cbd58c5586706bab215b7ee1689517c99c01a8e6ad761325852434e25c63cb2dcfa38e52835d9796d033fe23341a2edd871ceff46b94101609b4326e9f3bc7bf3b06dbd94debbe7d5aa6f680f9359be7baf5fe1526906c1f41a1aa9ee2f994a54f00e7b58516e28ac6397790f8079809e5b1f0baf31eed7605bb59fe3df548df08f59f3d4ad0e794b76d9f8271a86a31c8604247e5c37b9d03c477af8fdfdc02f487bb6a0cd3d892387", 0xc1}, {&(0x7f0000000100)="e28769a99615fe40d8dac4c36de7d8da75261e5148369c064b6695794ac6164cc5cb4e0869eeee6a63c7a33ae112bd5c6eea5639541288e0ceede418df6cf261fba0dcf7e33546bf8d0ffa4e40dff33010e47045de4aeb5b2aae216d56ced312a69acf2de92d0ffd61f96b4613e960d4e65fbb", 0x73}, {&(0x7f00000001c0)="150a636fd24a720fec9aa3be88c3af828a20c89bfa3302cd7978b4d74396034dcfdf44a7e06203d87f3868c0118ee290", 0x30}, {&(0x7f00000004c0)="be3b979b18f370ef79af11e13f54405032265b42318eb816a09737f8fe955aee8b363e46ba5921fc45b26b2b63d782305f56bf3326edf95ff3dd5aea46f3b3b8cd0fb174d30532f870476fa1cf6744baa51235323365d8b3881efe1980f60232bfc2ebae208af36936748019c300f3e26c2f9d08acfc3212d35ea5d28ac8cb9ffd11abb7689ce68476855493a81af59cd143adf45e2600938f15bf469569114289cff42c0e0ed007387ded", 0xab}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="d463fd786963b0bbcf76cf5dbaf32d9cf32f798120ae2d78a7553227e6f5ca264e8e68942b3db1981b01e1080cfcc88a90f0449027e014a9f23326a95c0fa112af7bc7176f82e308df1ba6553a1793763e93e65def6e3a068fd94470c020f2987990db382925c5a980c9fba642cae251b82500c387f0d3cecf03196e0e207f64b602c5c9724cd7e01b10b9f041748b4d22d791f8d02e5ce598eed4cc8adc0feb4f5f3cc721c191f524cc19555884f236a020cd198e376585a989e224faedae", 0xbf}, {&(0x7f0000001640)="d9595b46585116041cfcbf0b700eafb59713a54647bd875707658d0e9c743cad215b3a50792e0537d95ab988e26359fe4c64c278ce2e54ae945d8dcbac31970c66dcbeb38381bd78", 0x48}], 0x8, &(0x7f00000016c0)}}, {{&(0x7f0000001700)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)="b5e7aa9a6d8102f6dda4bbec8142f7726d6a36197c998d4a7cfa86c092473acdb704ec48e444d54e644aca7552a1333e3388afa030e5623dfb9987ea766faaf8d18a6f4a4ff3223414ee2975caf22663d4c2a4c73453d1f3791a6f8cad05e56640811f39086361a001554b48916ffae58997ca385a03689360860942c9c7a0f6a8e7d9eec6cb82bcd182fc24d6223d09fd0ad4f0", 0x94}, {&(0x7f0000001840)="27d9938fcc7079b2a2b2d0e937f09c07371232e6eb15f720c301eb0ffb0002ca313ee9b3c7fdb94645826d5896bc11bbc07adaa06c1be7297e85f92273fcae1a628447bbdbb4652113534f52bb55a11af2f6b19ad2994f31c2cd9d17a17edfa70bd6af74b7d403beaba3d759a4d57642aacaf117fdf791e598977e23bb607461be934dc733640df72d1152baa1e972bfe32ae69b33e2c3edf0b9a14f39ee67", 0x9f}, {&(0x7f0000001900)="9a841739f76108a230001904e1a132b3cbf742dea30c9e284b0b8ff97c6bca8a46160f6a951974f13c57cf05e6ececf55b237b89768f75578411471a1d0d54d428ffa7573282aa6150af39bb3d0b48af06dc43595d3dde8a8f45c85c00d1129616f3bc45c9bab69ad943fe168af220f1d539d19752cb6ac7b2947128c36ad73a2ca1f40b955bd7c5c7", 0x89}], 0x3, &(0x7f0000001a00)=[{0x14, 0x11, 0x3, "691d136528c5"}, {0x100c, 0x27, 0x1c0, "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"}, {0x48, 0x107, 0x3, "5a5ca5288422fe5824273ca46d6f9a03cfaedf7e392a9214c54649d6768b11d5ef9e6133951038fcc704d2a0f3cbde0c2455a32ac1270f04a3afe8"}, {0x4c, 0x88, 0xffffff81, "7228f762313b07f361675f776fdc13d99a06f4c4177f8c52d32fc9dbb26e258a78985611f6578c03a08c2e2dd0e42a5dc8a3ddd55dea21e99025449070425cd0"}, {0xd4, 0x104, 0x800, "75d7b12ba79d09252b05e9947e6f533b610554172a6e7f3ea30b6b3315c58a62d6d81fcdad2d7f9418f53c8c842764a2c909a31a23d8edf71f4bdd3a42f8a913d0fc8e8784af996d35b5ecc20a3fe8da398d4e6ed59d08c8ffdf33d68717a699ce3f48480193999ba4062edb26a145bb3a4ff9bcaafd747688f55df32e00177dd01dd5fb4c44227a04402f02ef4580e3aadbdc82b1c8634e90deb4392d844e6c4ad5cc941a094c6294909a8a8bf668629c9fc18134f7ef14440734e8c4a1f1144a8eb17246aff9aa"}, {0x40, 0x0, 0x2, "d20874caa2f3cf1b4923fdc92b0ef970b5e260eb9a45d2e7eca9572d226c6c5600a36b05bae2ac74f29816e0da2b4a9d99e3"}, {0x74, 0x113, 0x4, "e6433d96748f2b8a89137a0debddba3080dca9de24b1631c749ad01795619bd2aabdac99ca35f8c01edeec6475330603a4619d811a8ed749c5efa0c0d99fd9ffb84f768e1902dfd7a6ae833b9f5270602c0651c1def425085d8483810c48049b9a0c3a2b93c604d3"}], 0x123c}}, {{&(0x7f0000002c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x4, {0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)="2b66e314b54e92dcd53df962155d157904f1438f456ac9763648e6d69a835466195026e47e6dab6b675546984fbda1197ee0f139c15ffcc11e316d7ce6328b8e11b0f311fffa57e4947c5ba35353edea4e4247641a03043044a7dd0b0be611543fba4c1c208b99d3f67bbfdd438b39a7aa17dbe6aad7c68f28550b54423535a8bba8783a5c45", 0x86}, {&(0x7f0000002d80)="fc07854f779f93e3e1086e12a906a44860752d1a0e2c9cfee9befd3de8a214b0b0e3f714973f2de5c13b2cf38fdab475b44430bf411c973074909a480c6f1eddbb67ba68aa27def90f011b9e384076e98bf28964f7b64f34ce4b7cc56a88f38a484ca5831a5309bb6db425d62885e14cbb31ced686d8ba4afbfc9a56a5ad82", 0x7f}, {&(0x7f0000002e00)="3c0a585f618d594109b6fa09cd2bcefaa3", 0x11}, {&(0x7f0000002e40)="9e6f62e5718f5de89a930c43331abcfd58a74953152afe51554743d7f861b20c32f732191fbe10cb4697ebc587853395201eab3a7f07685cf38455fe8f9b426832f1832b0b060c174ebef61924bb0590c776548ada4952c85c05c88434a8e57e08c3f43bd9afd6e5c000dd386b3fdd7b088fa852cf677fb130887fa0738b0a594c08d57a1f4fedd45041e24364dd3d12e0f6b9a1ea1fa1020afaf4ed7a6ba3c3c9b6f83c4818d0490a35525e235571a4390cca44a72faaa742c99b6801849ea3e8fdd7fc6691d13f441b4a2873a4f3cf001523", 0xd3}, {&(0x7f0000002f40)="644387abdabfdabe85f92ab069f1efc42999e60e520df2accaace118cf7f7da79faa491c9b023ccfd05c32d524d015a763daf2a4915a04629072c4aeaa2ea6e6b1eaa25eb4e0c418eec37e4ac2df93c0d1bdbe18407c", 0x56}], 0x5, &(0x7f0000003000)=[{0xc4, 0x145, 0x7, "13edb0bc6c2335127176cf824e96a5cdb4a70f6caa189d380847f4be2fb24c61d3f249fefde8b42efc38ab9704f26d591f9eca6b8cb983b952c9bf6346ace323f3c778f4a78f4f3a9522531e19f81eee4f4bef91519b42d5c175b974f886bad13106a44b6ee192dfe61fde60716040a6a1588b1a60e18404a1ecf3dd273fd121b778243186c905460f0f977588a590784382d090cde9d421acf4f879f3388fd1d372fdb3dfeceb96e47f9fdd0f9b5383cd33c962dc55a8"}, {0x78, 0x10b, 0x2, "e7f7af5642d73f6e4de8dac37d961bbefb19e0a692fa27f4106ea575eaab5963de6bf77fecffe7b6bb46b3097a490e52dde0d667d054a5c8bde1f4ee13210e6cddaaa3471ac70b76ead76770002b20179ec04f2cce09a6a2ce5e6a165adad9e771a46813f36bb2620799"}, {0x104, 0x109, 0x6, "2f01d3ed0c03f22eefb8f5df5333eb8938f402c0ba26b2e79baa73be362faae62abb5b40a13aa1dd101242a954dbb708a5261d1f143d167ac10aee7a1685ad0e631c6b8ebc049f604e98ace67ed394a90834536c209e2365a7e044acc1d1713a5c442496fce3e8b76ae9f5568094b186868abe404ef70373e8250a3d7736c76ad82833aeb5c8a91261f976d93ed8026ea69a509972315987236d85da088adfac2e3f3dd1408c2df50ea60abfb1cb19f5ca01067e5953f55050a98618e8d896a7e8ddefacdf552cc15c883cbb1d89c1ee364fd24c67672b108a165edd3d3add796cebdcb3dac5c90b015b2f83a81185fed6fdaf8c54b9"}, {0xe0, 0x116, 0x0, "ff7234c4586345efe14ddea2d3d400a11a075f6c4e0200513d40220df4718bf8e4cf5bfe58e36453be606ff39cce1b3c2cd11024883882ddc6eab9c185cfa5de2f6514d26cc9c722dde0c4158295c29119a43a530891cda8b84ab1e9604d2cc1861c2b83e4cf49cad40c24b679018997d946e91bfde0d55838404512e64cc85c4c33fac3f0892eba5710e2c2a4a9fcb70e538d15390a53089ace645938e4f2ab3b3d8c4f5899584425feff3a11a8b1754e4c68b614d28587e98d8f419802c9ebaefa76d2472ee0227df9169bb882937fc26e4b"}, {0x24, 0x115, 0xfffffffe, "97a0185c6425ef3094e08145d4ed902050ab592a9cb488"}, {0x104, 0x29, 0x4, "fef2c0fbf92eeb74259d7d5dcdb310b2bc89bbb9e8ced2ad5442be2db40aa429a66ad8e9535b62230fbe1aebc5550f39976fcfa7c26e590e856b5c21be1f6bd7c1defa307a3be2135cc4378e21d4793b574136fe5ed7df540ce562df400bb297967e25a82d82f849c3880b7e9c7399412f824043dd6b807abc880a3bcf9ca3bce5d77b808bf80df218028d1cfc1a8c73e57b6171113db1931d346d958fd007c56846ca572c7587a2ffee19a2f803401846175cdbb0b500799df0e6cf70756eedd60b4b30506d7fbb7bdd692141c71f8d882cfcf17a462f53ea5ff42fde0590aac72d7736f5d0c6c18bb9944986ed0cb2e73a8a8ebeac129d"}, {0xc4, 0x29, 0x1, "c9a997ecacdbcbf6b67e8219fe7c4b14f1497f95fa3d8656f4759ceda1696810e5a92a5bea0f5f48efa341f4fcf3d2401464e67882ecfc55c93ec1fa154a4a9470cd70b43e08136da6bdf669874e32b33144071db24e9a6cb2d5a94c3bca76fa56c21dcf355ac305b3140c54b19ddd92f72f834a8703aa19720efe9225ffdd3f9bc1cfd3381cf8fdd89db7e0e9b7e8a008c47aeab802bb4ea2ccc06aa24b8f33deda05d471fdf88218259399de0d801e60be43305b4a"}, {0xcc, 0x53a636028ef552a5, 0x10000, "7ffeca4da9149d4872ff05c61cf4662d3043d8f4bb227c088e907bdabb26bfe10375eaaafa42b7d4870247b91abb8c6fff23cf5c5a1eed826be0b7ed24c6dae7570456c218bac5e25c4b34aedae550cb9c2f1ed6396b0d8eb8476dc7f9f31e5b1f2aa112f354220e77091bb010b42575adbe0ab05a94deae073ae10c5957f82f44f9c6f9c7c1e9e6e98e6d5440e6fe1db7708dce69a59b25bdb5f55b48492ce21cb82cbb30ac6820c28766d5f6835ec8296f7111f488780f573eb2be8a8631ed"}, {0x10, 0x108, 0xe1, "f4a6"}], 0x5e8}}], 0x3, 0x400440c0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/bus/container', 0x492003, 0x2e) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) shutdown(r0, 0x1) 0s ago: executing program 1 (id=1113): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f00000000c0)=0x7, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x20044041) r5 = socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c00148008"], 0x28}], 0x1}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x3}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xa94be3a2fda8bd67, 0x0) kernel console output (not intermixed with test programs): TU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.152961][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.441778][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.478013][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.539574][ T5866] Bluetooth: hci0: command tx timeout [ 362.567293][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.736837][ T36] bridge_slave_1: left allmulticast mode [ 362.748461][ T36] bridge_slave_1: left promiscuous mode [ 362.778156][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.859255][ T36] bridge_slave_0: left allmulticast mode [ 362.890839][ T36] bridge_slave_0: left promiscuous mode [ 362.897155][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.977449][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.628670][ T5866] Bluetooth: hci0: command tx timeout [ 364.676869][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.727069][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.769652][ T36] bond0 (unregistering): Released all slaves [ 365.147039][ T9523] hsr_slave_0: entered promiscuous mode [ 365.182287][ T9523] hsr_slave_1: entered promiscuous mode [ 365.200557][ T9523] debugfs: 'hsr0' already exists in 'hsr' [ 365.206323][ T9523] Cannot create hsr debugfs directory [ 365.470912][ T9380] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.502701][ T9380] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.545822][ T9380] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.585108][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 365.701181][ T9693] team0: Device gtp0 is of different type [ 365.767612][ T9380] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.345430][ T9706] 8021q: VLANs not supported on ipvlan1 [ 366.457120][ T36] hsr_slave_0: left promiscuous mode [ 366.507807][ T5951] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.525596][ T36] hsr_slave_1: left promiscuous mode [ 366.539092][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.568042][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.599850][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.619974][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.681633][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 366.711913][ T5866] Bluetooth: hci0: command tx timeout [ 366.721971][ T5951] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 366.739586][ T36] veth1_macvtap: left promiscuous mode [ 366.757294][ T5951] usb 6-1: config 0 has no interface number 0 [ 366.788135][ T36] veth0_macvtap: left promiscuous mode [ 366.798307][ T5951] usb 6-1: config 0 interface 12 has no altsetting 0 [ 366.828117][ T36] veth1_vlan: left promiscuous mode [ 366.833584][ T36] veth0_vlan: left promiscuous mode [ 366.869978][ T5951] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 366.889824][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.903699][ T5951] usb 6-1: Product: syz [ 366.925491][ T5951] usb 6-1: Manufacturer: syz [ 366.944007][ T5951] usb 6-1: SerialNumber: syz [ 366.975572][ T5951] usb 6-1: config 0 descriptor?? [ 367.304618][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.338585][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.039772][ T5951] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 369.077878][ T5951] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 369.095893][ T5951] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 369.154409][ T5951] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 369.236853][ T5951] usb 6-1: USB disconnect, device number 6 [ 369.435811][ T36] team0 (unregistering): Port device team_slave_1 removed [ 369.584800][ T36] team0 (unregistering): Port device team_slave_0 removed [ 371.657034][ T9419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.724214][ T9767] netlink: 'syz.5.839': attribute type 3 has an invalid length. [ 371.796175][ T9767] netlink: 716 bytes leftover after parsing attributes in process `syz.5.839'. [ 371.807106][ T9419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.029670][ T9419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.127600][ T9419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.311210][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.329263][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.356301][ T9606] bridge_slave_0: entered allmulticast mode [ 372.375885][ T9606] bridge_slave_0: entered promiscuous mode [ 372.402801][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.434518][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.459601][ T9606] bridge_slave_1: entered allmulticast mode [ 372.484468][ T9606] bridge_slave_1: entered promiscuous mode [ 372.675986][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.737796][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.175512][ T9790] netlink: 100 bytes leftover after parsing attributes in process `syz.5.841'. [ 373.197647][ T9606] team0: Port device team_slave_0 added [ 373.222138][ T9606] team0: Port device team_slave_1 added [ 373.265902][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.308685][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.488216][ T5951] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 373.610713][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.630012][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.667179][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.690650][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.697634][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.726150][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.747405][ T5951] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.777827][ T5951] usb 6-1: config 179 has no interface number 0 [ 373.788690][ T5951] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 373.834296][ T5951] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 373.886455][ T5951] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 373.899426][ T5951] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 373.914930][ T5951] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.956110][ T5951] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.976910][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.016658][ T9791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.028192][ T9791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.146021][ T9606] hsr_slave_0: entered promiscuous mode [ 374.163455][ T9606] hsr_slave_1: entered promiscuous mode [ 374.176415][ T9606] debugfs: 'hsr0' already exists in 'hsr' [ 374.199817][ T9606] Cannot create hsr debugfs directory [ 374.264005][ T5950] usb 6-1: USB disconnect, device number 7 [ 374.264067][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 374.278808][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 374.953537][ T9380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.894096][ T9380] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.127952][ T9523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.186407][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.193577][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.331802][ T9523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.385291][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.555524][ T9523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.629576][ T9523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.669958][ T9826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.734745][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.741973][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.952248][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.144626][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.151875][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.400769][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.407972][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.026423][ T9380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.128433][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 378.272181][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.327021][ T9380] veth0_vlan: entered promiscuous mode [ 378.351728][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.371132][ T9606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.401171][ T9606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.417940][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.437100][ T9606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.467795][ T5854] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 378.482068][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.499448][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.522359][ T9380] veth1_vlan: entered promiscuous mode [ 378.550120][ T5854] usb 6-1: config 0 descriptor?? [ 378.552339][ T9606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.769099][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.781570][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799345][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.935150][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.942338][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.991988][ T5854] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 379.022130][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.029327][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.042938][ T5854] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 379.065672][ T9380] veth0_macvtap: entered promiscuous mode [ 379.079905][ T9419] veth0_vlan: entered promiscuous mode [ 379.127424][ T9380] veth1_macvtap: entered promiscuous mode [ 379.170755][ T5854] cp2112 0003:10C4:EA90.000D: error requesting version [ 379.186306][ T5854] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -5 [ 379.281967][ T9419] veth1_vlan: entered promiscuous mode [ 379.391516][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.406333][ T9844] netlink: 52 bytes leftover after parsing attributes in process `syz.5.845'. [ 379.476038][ T9380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.509641][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.518136][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.552398][ T5950] usb 6-1: USB disconnect, device number 8 [ 379.585815][ T7053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.681956][ T7053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.711524][ T7053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.772520][ T7053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.985772][ T9523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.040955][ T9419] veth0_macvtap: entered promiscuous mode [ 380.246190][ T9419] veth1_macvtap: entered promiscuous mode [ 380.441466][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.483095][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.522097][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.653970][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.687151][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.733838][ T9523] veth0_vlan: entered promiscuous mode [ 380.774444][ T5929] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 380.778704][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.923166][ T7051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.928289][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.965431][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.983576][ T7051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.995875][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 381.076168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.083321][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.112678][ T7051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.123279][ T5929] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 381.133789][ T4393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.177205][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.184452][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.224772][ T9523] veth1_vlan: entered promiscuous mode [ 381.297950][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.408784][ T5929] usb 6-1: config 0 descriptor?? [ 381.459408][ T9871] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 381.514576][ T9523] veth0_macvtap: entered promiscuous mode [ 381.903001][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.911500][ T9606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.957119][ T9606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.035345][ T5929] arvo 0003:1E7D:30D4.000E: item fetching failed at offset 2/5 [ 382.065935][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.078452][ T9523] veth1_macvtap: entered promiscuous mode [ 382.100840][ T5929] arvo 0003:1E7D:30D4.000E: parse failed [ 382.119829][ T5929] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -22 [ 382.325972][ T9888] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 382.359441][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.438665][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.587154][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.866155][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.928955][ T9523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.313771][ T7051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.362123][ T7051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.409788][ T7051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.755600][ T7051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.784853][ T9900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 383.930938][ T9902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 383.984838][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 384.364626][ T9909] veth0_to_bond: entered allmulticast mode [ 384.373533][ T7051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.391457][ T7051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.451453][ T9606] veth0_vlan: entered promiscuous mode [ 384.603453][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.619881][ T9606] veth1_vlan: entered promiscuous mode [ 384.634482][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.719320][ T9] usb 6-1: USB disconnect, device number 9 [ 384.813765][ T9916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.026999][ T9606] veth0_macvtap: entered promiscuous mode [ 385.093691][ T9606] veth1_macvtap: entered promiscuous mode [ 385.169178][ T9924] VFS: Mount too revealing [ 385.312389][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.407222][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.434284][ T3519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.513949][ T3519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.660307][ T3519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.718920][ T3519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.858235][ T5854] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.908161][ T6886] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 386.058616][ T5854] usb 8-1: Using ep0 maxpacket: 32 [ 386.087930][ T6886] usb 6-1: Using ep0 maxpacket: 32 [ 386.133192][ T6886] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 386.155186][ T6886] usb 6-1: config 0 has no interface number 0 [ 386.162070][ T5854] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 386.171276][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.181802][ T6886] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 386.194376][ T5854] usb 8-1: config 0 descriptor?? [ 386.200262][ T6886] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 386.211292][ T6886] usb 6-1: config 0 interface 126 has no altsetting 0 [ 386.222782][ T6886] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 386.232301][ T6886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.242159][ T6886] usb 6-1: Product: syz [ 386.246471][ T6886] usb 6-1: Manufacturer: syz [ 386.251562][ T6886] usb 6-1: SerialNumber: syz [ 386.263564][ T6886] usb 6-1: config 0 descriptor?? [ 386.270523][ T9936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 386.278691][ T9936] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 386.507143][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 386.603131][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.659751][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 386.689786][ T5854] usb 8-1: media controller created [ 386.712372][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.911358][ T6886] ir_usb 6-1:0.126: IR Dongle converter detected [ 386.958444][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.048772][ T7052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.088299][ T7052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.090075][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.216783][ T9949] netlink: 'syz.5.854': attribute type 6 has an invalid length. [ 387.274992][ T5854] az6027: usb out operation failed. (-71) [ 387.300181][ T6886] usb 6-1: IRDA class descriptor not found, device not bound [ 387.319679][ T5854] az6027: usb out operation failed. (-71) [ 387.325475][ T5854] stb0899_attach: Driver disabled by Kconfig [ 387.340124][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.358341][ T6886] usb 6-1: USB disconnect, device number 10 [ 387.375262][ T5854] az6027: no front-end attached [ 387.375262][ T5854] [ 387.392585][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.422605][ T5854] az6027: usb out operation failed. (-71) [ 387.450776][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 387.574688][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input13 [ 387.675964][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 387.709261][ T5854] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 387.835359][ T5854] usb 8-1: USB disconnect, device number 3 [ 387.876972][ T9959] FAULT_INJECTION: forcing a failure. [ 387.876972][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 388.003334][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.2.826 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 388.003364][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.003377][ T9959] Call Trace: [ 388.003385][ T9959] [ 388.003394][ T9959] dump_stack_lvl+0x189/0x250 [ 388.003424][ T9959] ? __pfx____ratelimit+0x10/0x10 [ 388.003450][ T9959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.003472][ T9959] ? __pfx__printk+0x10/0x10 [ 388.003506][ T9959] ? __pfx___might_resched+0x10/0x10 [ 388.003524][ T9959] ? fs_reclaim_acquire+0x7d/0x100 [ 388.003559][ T9959] should_fail_ex+0x414/0x560 [ 388.003588][ T9959] should_failslab+0xa8/0x100 [ 388.003618][ T9959] kmem_cache_alloc_noprof+0x73/0x3c0 [ 388.003644][ T9959] ? skb_clone+0x212/0x3a0 [ 388.003667][ T9959] skb_clone+0x212/0x3a0 [ 388.003682][ T9959] ? nfnetlink_rcv+0x486/0x2520 [ 388.003706][ T9959] nfnetlink_rcv+0x4b4/0x2520 [ 388.003732][ T9959] ? __dev_queue_xmit+0x1d79/0x3b50 [ 388.003764][ T9959] ? __dev_queue_xmit+0x27b/0x3b50 [ 388.003797][ T9959] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 388.003837][ T9959] ? ref_tracker_free+0x63a/0x7d0 [ 388.003861][ T9959] ? __asan_memcpy+0x40/0x70 [ 388.003883][ T9959] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.003904][ T9959] ? __skb_clone+0x63/0x7a0 [ 388.003946][ T9959] ? __skb_clone+0x483/0x7a0 [ 388.003983][ T9959] ? skb_clone+0x246/0x3a0 [ 388.004005][ T9959] ? __netlink_deliver_tap+0x807/0x850 [ 388.004031][ T9959] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.004076][ T9959] netlink_unicast+0x82c/0x9e0 [ 388.004109][ T9959] ? __pfx_netlink_unicast+0x10/0x10 [ 388.004134][ T9959] ? netlink_sendmsg+0x642/0xb30 [ 388.004157][ T9959] ? skb_put+0x11b/0x210 [ 388.004188][ T9959] netlink_sendmsg+0x805/0xb30 [ 388.004224][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.004253][ T9959] ? __import_iovec+0x5d4/0x7f0 [ 388.004269][ T9959] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.004297][ T9959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.004316][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.004341][ T9959] __sock_sendmsg+0x21c/0x270 [ 388.004368][ T9959] ____sys_sendmsg+0x505/0x830 [ 388.004402][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.004448][ T9959] ___sys_sendmsg+0x21f/0x2a0 [ 388.004480][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.004549][ T9959] ? __fget_files+0x2a/0x420 [ 388.004577][ T9959] ? __fget_files+0x3a0/0x420 [ 388.004617][ T9959] __sys_sendmsg+0x164/0x220 [ 388.004648][ T9959] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.004705][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.004733][ T9959] __do_fast_syscall_32+0xb6/0x2b0 [ 388.004758][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.004787][ T9959] do_fast_syscall_32+0x34/0x80 [ 388.004812][ T9959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.004835][ T9959] RIP: 0023:0xf707e539 [ 388.004852][ T9959] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 388.004870][ T9959] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 388.004892][ T9959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 388.004906][ T9959] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.004925][ T9959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.004937][ T9959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 388.004949][ T9959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.004981][ T9959] [ 388.005728][ T9569] udevd[9569]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 388.626169][ T5854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 388.897817][ T92] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 389.601447][ T9980] FAULT_INJECTION: forcing a failure. [ 389.601447][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 389.682682][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.7.862 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 389.682704][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.682712][ T9980] Call Trace: [ 389.682717][ T9980] [ 389.682730][ T9980] dump_stack_lvl+0x189/0x250 [ 389.682750][ T9980] ? __pfx____ratelimit+0x10/0x10 [ 389.682766][ T9980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.682780][ T9980] ? __pfx__printk+0x10/0x10 [ 389.682800][ T9980] ? __pfx___might_resched+0x10/0x10 [ 389.682811][ T9980] ? fs_reclaim_acquire+0x7d/0x100 [ 389.682833][ T9980] should_fail_ex+0x414/0x560 [ 389.682851][ T9980] should_failslab+0xa8/0x100 [ 389.682869][ T9980] __kmalloc_cache_noprof+0x70/0x3d0 [ 389.682885][ T9980] ? vlan_vid_add+0x313/0x760 [ 389.682902][ T9980] vlan_vid_add+0x313/0x760 [ 389.682916][ T9980] ? alloc_netdev_mqs+0xc59/0x1170 [ 389.682934][ T9980] register_vlan_dev+0x9e/0x800 [ 389.682950][ T9980] ? lockdep_rtnl_is_held+0x26/0x40 [ 389.682960][ T9980] ? vlan_changelink+0x4ac/0x560 [ 389.682976][ T9980] ? vlan_check_real_dev+0x148/0x380 [ 389.682994][ T9980] vlan_newlink+0x4b2/0x610 [ 389.683006][ T9980] ? __pfx_vlan_newlink+0x10/0x10 [ 389.683019][ T9980] rtnl_newlink_create+0x30d/0xb00 [ 389.683036][ T9980] ? __pfx___nla_validate_parse+0x10/0x10 [ 389.683052][ T9980] ? __lock_acquire+0xab9/0xd20 [ 389.683072][ T9980] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 389.683091][ T9980] ? __pfx___mutex_lock+0x10/0x10 [ 389.683113][ T9980] ? ns_capable+0x8a/0xf0 [ 389.683128][ T9980] rtnl_newlink+0x16d6/0x1c70 [ 389.683144][ T9980] ? netlink_sendmsg+0x805/0xb30 [ 389.683168][ T9980] ? __pfx_rtnl_newlink+0x10/0x10 [ 389.683198][ T9980] ? kasan_quarantine_put+0xdd/0x220 [ 389.683212][ T9980] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.683229][ T9980] ? nlmon_xmit+0xb0/0x100 [ 389.683245][ T9980] ? kmem_cache_free+0x18f/0x400 [ 389.683265][ T9980] ? __local_bh_enable_ip+0x12d/0x1c0 [ 389.683277][ T9980] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.683291][ T9980] ? __local_bh_enable_ip+0x12d/0x1c0 [ 389.683303][ T9980] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 389.683316][ T9980] ? __dev_queue_xmit+0x27b/0x3b50 [ 389.683328][ T9980] ? __dev_queue_xmit+0x27b/0x3b50 [ 389.683338][ T9980] ? __dev_queue_xmit+0x27b/0x3b50 [ 389.683350][ T9980] ? __dev_queue_xmit+0x1d79/0x3b50 [ 389.683364][ T9980] ? __lock_acquire+0xab9/0xd20 [ 389.683396][ T9980] ? __pfx_rtnl_newlink+0x10/0x10 [ 389.683410][ T9980] rtnetlink_rcv_msg+0x7cc/0xb70 [ 389.683428][ T9980] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 389.683442][ T9980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.683456][ T9980] ? ref_tracker_free+0x63a/0x7d0 [ 389.683469][ T9980] ? __asan_memcpy+0x40/0x70 [ 389.683482][ T9980] ? __pfx_ref_tracker_free+0x10/0x10 [ 389.683494][ T9980] ? __skb_clone+0x63/0x7a0 [ 389.683518][ T9980] netlink_rcv_skb+0x208/0x470 [ 389.683534][ T9980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.683549][ T9980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.683572][ T9980] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.683592][ T9980] netlink_unicast+0x82c/0x9e0 [ 389.683611][ T9980] ? __pfx_netlink_unicast+0x10/0x10 [ 389.683625][ T9980] ? netlink_sendmsg+0x642/0xb30 [ 389.683638][ T9980] ? skb_put+0x11b/0x210 [ 389.683656][ T9980] netlink_sendmsg+0x805/0xb30 [ 389.683691][ T9980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.683719][ T9980] ? __import_iovec+0x5d4/0x7f0 [ 389.683736][ T9980] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.683764][ T9980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.683777][ T9980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.683793][ T9980] __sock_sendmsg+0x21c/0x270 [ 389.683809][ T9980] ____sys_sendmsg+0x505/0x830 [ 389.683830][ T9980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.683858][ T9980] ___sys_sendmsg+0x21f/0x2a0 [ 389.683877][ T9980] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.683917][ T9980] ? __fget_files+0x2a/0x420 [ 389.683934][ T9980] ? __fget_files+0x3a0/0x420 [ 389.683958][ T9980] __sys_sendmsg+0x164/0x220 [ 389.683982][ T9980] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.684010][ T9980] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.684026][ T9980] __do_fast_syscall_32+0xb6/0x2b0 [ 389.684042][ T9980] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.684058][ T9980] do_fast_syscall_32+0x34/0x80 [ 389.684073][ T9980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.684088][ T9980] RIP: 0023:0xf709e539 [ 389.684099][ T9980] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 389.684110][ T9980] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 389.684124][ T9980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 389.684132][ T9980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.684139][ T9980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.684145][ T9980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 389.684152][ T9980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.684170][ T9980] [ 390.173608][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.479574][ T92] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.491041][ T92] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.501257][ T92] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.510784][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.868876][ T9982] VFS: Mount too revealing [ 390.920790][ T9971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 391.181415][ T92] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.781630][T10001] FAULT_INJECTION: forcing a failure. [ 391.781630][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.876115][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.7.868 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 391.876145][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.876156][T10001] Call Trace: [ 391.876164][T10001] [ 391.876172][T10001] dump_stack_lvl+0x189/0x250 [ 391.876200][T10001] ? __pfx____ratelimit+0x10/0x10 [ 391.876233][T10001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.876256][T10001] ? __pfx__printk+0x10/0x10 [ 391.876280][T10001] ? __might_fault+0xb0/0x130 [ 391.876316][T10001] should_fail_ex+0x414/0x560 [ 391.876343][T10001] _copy_from_iter+0x1db/0x16f0 [ 391.876379][T10001] ? policy_nodemask+0x27c/0x720 [ 391.876403][T10001] ? __pfx__copy_from_iter+0x10/0x10 [ 391.876436][T10001] ? set_page_refcounted+0xa0/0x1e0 [ 391.876461][T10001] ? page_copy_sane+0x4e/0x280 [ 391.876487][T10001] copy_page_from_iter+0xdd/0x170 [ 391.876519][T10001] tun_get_user+0x1d7b/0x3e20 [ 391.876553][T10001] ? tun_get_user+0x6f6/0x3e20 [ 391.876586][T10001] ? aa_file_perm+0x44d/0x1550 [ 391.876612][T10001] ? __pfx_tun_get_user+0x10/0x10 [ 391.876637][T10001] ? _parse_integer_limit+0x1ae/0x1f0 [ 391.876677][T10001] ? __lock_acquire+0xab9/0xd20 [ 391.876710][T10001] ? ref_tracker_alloc+0x318/0x460 [ 391.876731][T10001] ? __lock_acquire+0xab9/0xd20 [ 391.876757][T10001] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.876784][T10001] ? tun_get+0x1c/0x2f0 [ 391.876815][T10001] ? tun_get+0x1c/0x2f0 [ 391.876839][T10001] ? tun_get+0x1c/0x2f0 [ 391.876868][T10001] tun_chr_write_iter+0x113/0x200 [ 391.876896][T10001] vfs_write+0x548/0xa90 [ 391.876925][T10001] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 391.876951][T10001] ? __pfx_vfs_write+0x10/0x10 [ 391.876985][T10001] ? __fget_files+0x2a/0x420 [ 391.877023][T10001] ksys_write+0x145/0x250 [ 391.877052][T10001] ? __pfx_ksys_write+0x10/0x10 [ 391.877081][T10001] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.877110][T10001] __do_fast_syscall_32+0xb6/0x2b0 [ 391.877137][T10001] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.877163][T10001] do_fast_syscall_32+0x34/0x80 [ 391.877187][T10001] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 391.877209][T10001] RIP: 0023:0xf709e539 [ 391.877228][T10001] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 391.877246][T10001] RSP: 002b:00000000f548e520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 391.877268][T10001] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000880 [ 391.877283][T10001] RDX: 0000000000000056 RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 391.877295][T10001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.877307][T10001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 391.877318][T10001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.877349][T10001] [ 392.017853][ T6619] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 392.018014][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.171196][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.297405][ T6619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.376152][T10009] netlink: zone id is out of range [ 392.381906][T10009] netlink: zone id is out of range [ 392.390546][T10009] netlink: zone id is out of range [ 392.395702][T10009] netlink: zone id is out of range [ 392.419023][T10009] netlink: zone id is out of range [ 392.424187][T10009] netlink: zone id is out of range [ 392.441048][T10009] netlink: zone id is out of range [ 392.446309][T10009] netlink: zone id is out of range [ 392.451520][ T6619] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.453013][T10009] netlink: zone id is out of range [ 392.467497][T10009] netlink: zone id is out of range [ 392.516226][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 392.572650][ T6619] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.676059][ T6619] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 392.707858][ T6619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 392.716009][ T6619] usb 7-1: Product: syz [ 392.729935][ T45] usb 6-1: USB disconnect, device number 11 [ 392.794904][ T6619] usb 7-1: Manufacturer: syz [ 392.816637][ T6619] usb 7-1: SerialNumber: syz [ 393.119615][ T6619] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 393.349584][T10031] netlink: 'syz.0.875': attribute type 15 has an invalid length. [ 393.430247][T10031] netlink: 666 bytes leftover after parsing attributes in process `syz.0.875'. [ 393.542701][T10035] VFS: Mount too revealing [ 393.645595][T10040] FAULT_INJECTION: forcing a failure. [ 393.645595][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 393.753454][ T6619] usb 7-1: USB disconnect, device number 6 [ 393.771171][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.5.878 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 393.771203][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.771214][T10040] Call Trace: [ 393.771222][T10040] [ 393.771230][T10040] dump_stack_lvl+0x189/0x250 [ 393.771260][T10040] ? __pfx____ratelimit+0x10/0x10 [ 393.771286][T10040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.771310][T10040] ? __pfx__printk+0x10/0x10 [ 393.771345][T10040] ? __pfx___might_resched+0x10/0x10 [ 393.771371][T10040] should_fail_ex+0x414/0x560 [ 393.771399][T10040] should_failslab+0xa8/0x100 [ 393.771430][T10040] kmem_cache_alloc_noprof+0x73/0x3c0 [ 393.771455][T10040] ? mas_alloc_nodes+0x2e9/0x8e0 [ 393.771484][T10040] mas_alloc_nodes+0x2e9/0x8e0 [ 393.771518][T10040] mas_preallocate+0x3ad/0x6f0 [ 393.771546][T10040] ? __pfx_mas_preallocate+0x10/0x10 [ 393.771582][T10040] ? __mas_set_range+0x12f/0x3c0 [ 393.771612][T10040] __split_vma+0x2fa/0xa00 [ 393.771647][T10040] ? __pfx___split_vma+0x10/0x10 [ 393.771694][T10040] ? mas_find+0xb0e/0xd30 [ 393.771723][T10040] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 393.771769][T10040] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 393.771816][T10040] do_vmi_align_munmap+0x25d/0x420 [ 393.771836][T10040] ? __lock_acquire+0xab9/0xd20 [ 393.771885][T10040] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 393.771940][T10040] do_vmi_munmap+0x253/0x2e0 [ 393.771969][T10040] mremap_to+0x236/0x7a0 [ 393.772000][T10040] ? __pfx_mremap_to+0x10/0x10 [ 393.772028][T10040] ? check_prep_vma+0x724/0xb00 [ 393.772063][T10040] __se_sys_mremap+0xca4/0xf10 [ 393.772085][T10040] ? ksys_write+0x1cb/0x250 [ 393.772133][T10040] ? __pfx___se_sys_mremap+0x10/0x10 [ 393.772163][T10040] ? fput+0xa0/0xd0 [ 393.772184][T10040] ? ksys_write+0x22a/0x250 [ 393.772221][T10040] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.772241][T10040] ? __ia32_sys_mremap+0x20/0xc0 [ 393.772265][T10040] __do_fast_syscall_32+0xb6/0x2b0 [ 393.772291][T10040] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.772319][T10040] do_fast_syscall_32+0x34/0x80 [ 393.772345][T10040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.772368][T10040] RIP: 0023:0xf7f68539 [ 393.772387][T10040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 393.772404][T10040] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 393.772427][T10040] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000003000 [ 393.772441][T10040] RDX: 0000000000001000 RSI: 0000000000000003 RDI: 0000000080ffc000 [ 393.772453][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.772481][T10040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 393.772493][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.772525][T10040] [ 394.060364][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.359270][ T6619] usblp0: removed [ 395.367888][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 395.587895][ T10] usb 3-1: device descriptor read/64, error -71 [ 395.877831][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 396.048144][ T10] usb 3-1: device descriptor read/64, error -71 [ 396.099973][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.883'. [ 396.160964][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.527066][ T10] usb usb3-port1: attempt power cycle [ 396.927892][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 396.948587][T10109] block device autoloading is deprecated and will be removed. [ 396.969790][ T10] usb 3-1: device descriptor read/8, error -71 [ 396.998761][T10109] syz.7.885: attempt to access beyond end of device [ 396.998761][T10109] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 397.227846][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 397.316615][ T10] usb 3-1: device descriptor read/8, error -71 [ 397.358170][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.887'. [ 397.440317][ T10] usb usb3-port1: unable to enumerate USB device [ 397.448032][T10121] tipc: Started in network mode [ 397.469592][T10121] tipc: Node identity 3aa6430d4ea3, cluster identity 4711 [ 397.497567][T10121] tipc: Enabled bearer , priority 0 [ 397.534916][T10124] syzkaller0: entered promiscuous mode [ 397.550315][T10124] syzkaller0: entered allmulticast mode [ 397.748520][T10127] netlink: 'syz.6.889': attribute type 1 has an invalid length. [ 397.765841][T10121] tipc: Resetting bearer [ 397.932914][T10120] tipc: Resetting bearer [ 398.145512][T10120] tipc: Disabling bearer [ 398.268816][T10136] IPVS: set_ctl: invalid protocol: 576 60.0.0.0:0 [ 398.997662][T10071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.411234][T10071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.729858][T10071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.952637][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.209151][T10071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.131445][T10172] FAULT_INJECTION: forcing a failure. [ 401.131445][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 401.144449][T10172] CPU: 1 UID: 0 PID: 10172 Comm: syz.7.901 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 401.144477][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.144488][T10172] Call Trace: [ 401.144495][T10172] [ 401.144503][T10172] dump_stack_lvl+0x189/0x250 [ 401.144533][T10172] ? __pfx____ratelimit+0x10/0x10 [ 401.144557][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.144581][T10172] ? __pfx__printk+0x10/0x10 [ 401.144614][T10172] ? __pfx___might_resched+0x10/0x10 [ 401.144639][T10172] should_fail_ex+0x414/0x560 [ 401.144669][T10172] should_failslab+0xa8/0x100 [ 401.144698][T10172] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 401.144725][T10172] ? __alloc_skb+0x112/0x2d0 [ 401.144754][T10172] __alloc_skb+0x112/0x2d0 [ 401.144782][T10172] netlink_sendmsg+0x5c6/0xb30 [ 401.144818][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.144858][T10172] ? __import_iovec+0x5d4/0x7f0 [ 401.144874][T10172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.144902][T10172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.144922][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.144947][T10172] __sock_sendmsg+0x21c/0x270 [ 401.144973][T10172] ____sys_sendmsg+0x505/0x830 [ 401.145007][T10172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.145052][T10172] ___sys_sendmsg+0x21f/0x2a0 [ 401.145081][T10172] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.145145][T10172] ? __fget_files+0x2a/0x420 [ 401.145172][T10172] ? __fget_files+0x3a0/0x420 [ 401.145210][T10172] __sys_sendmsg+0x164/0x220 [ 401.145240][T10172] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.145285][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.145313][T10172] __do_fast_syscall_32+0xb6/0x2b0 [ 401.145339][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.145367][T10172] do_fast_syscall_32+0x34/0x80 [ 401.145392][T10172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.145415][T10172] RIP: 0023:0xf709e539 [ 401.145434][T10172] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 401.145451][T10172] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 401.145474][T10172] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 401.145487][T10172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.145499][T10172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.145509][T10172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 401.145521][T10172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.145552][T10172] [ 401.589059][T10071] bridge_slave_1: left allmulticast mode [ 401.594761][T10071] bridge_slave_1: left promiscuous mode [ 401.612181][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.716084][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.736741][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.746036][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.747411][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.749161][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.795933][T10071] bridge_slave_0: left allmulticast mode [ 401.795964][T10071] bridge_slave_0: left promiscuous mode [ 401.796213][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.021924][T10191] VFS: Mount too revealing [ 403.482104][T10071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.526652][T10071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.582304][T10071] bond0 (unregistering): Released all slaves [ 403.817949][ T5863] Bluetooth: hci0: command tx timeout [ 403.909406][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.993016][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.107789][ T92] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 404.242130][T10225] FAULT_INJECTION: forcing a failure. [ 404.242130][T10225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.297781][ T92] usb 8-1: device descriptor read/64, error -71 [ 404.388166][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.5.911 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 404.388198][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.388210][T10225] Call Trace: [ 404.388218][T10225] [ 404.388227][T10225] dump_stack_lvl+0x189/0x250 [ 404.388256][T10225] ? __pfx____ratelimit+0x10/0x10 [ 404.388280][T10225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.388304][T10225] ? __pfx__printk+0x10/0x10 [ 404.388332][T10225] ? __might_fault+0xb0/0x130 [ 404.388371][T10225] should_fail_ex+0x414/0x560 [ 404.388400][T10225] _copy_from_user+0x2d/0xb0 [ 404.388419][T10225] __sys_connect+0x123/0x440 [ 404.388443][T10225] ? count_memcg_event_mm+0x21/0x260 [ 404.388470][T10225] ? __pfx___sys_connect+0x10/0x10 [ 404.388520][T10225] __ia32_sys_connect+0x7a/0x90 [ 404.388590][T10225] __do_fast_syscall_32+0xb6/0x2b0 [ 404.388618][T10225] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.388647][T10225] do_fast_syscall_32+0x34/0x80 [ 404.388672][T10225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.388693][T10225] RIP: 0023:0xf7f68539 [ 404.388708][T10225] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 404.388723][T10225] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 404.388742][T10225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 404.388756][T10225] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 404.388777][T10225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.388789][T10225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 404.388800][T10225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.388830][T10225] [ 404.878643][ T92] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 405.068147][ T92] usb 8-1: device descriptor read/64, error -71 [ 405.179549][ T92] usb usb8-port1: attempt power cycle [ 405.302834][T10238] VFS: Mount too revealing [ 405.637836][ T92] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 405.777906][ T92] usb 8-1: device descriptor read/8, error -71 [ 405.899303][ T5863] Bluetooth: hci0: command tx timeout [ 405.933214][T10071] hsr_slave_0: left promiscuous mode [ 405.953424][T10243] syz.6.918 (10243): drop_caches: 1 [ 406.036422][T10243] syz.6.918 (10243): drop_caches: 1 [ 406.046355][T10071] hsr_slave_1: left promiscuous mode [ 406.054398][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.064445][T10071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.084021][ T92] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 406.119242][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.127166][T10071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.143963][ T92] usb 8-1: device descriptor read/8, error -71 [ 406.302969][ T92] usb usb8-port1: unable to enumerate USB device [ 406.393880][T10071] veth1_macvtap: left promiscuous mode [ 406.409172][T10071] veth0_macvtap: left promiscuous mode [ 406.427137][T10249] syz.6.918 (10249): drop_caches: 1 [ 406.439934][T10071] veth1_vlan: left promiscuous mode [ 406.470715][T10071] veth0_vlan: left promiscuous mode [ 406.667049][T10258] FAULT_INJECTION: forcing a failure. [ 406.667049][T10258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.715893][T10258] CPU: 0 UID: 0 PID: 10258 Comm: syz.6.919 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 406.715915][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.715923][T10258] Call Trace: [ 406.715928][T10258] [ 406.715934][T10258] dump_stack_lvl+0x189/0x250 [ 406.715954][T10258] ? __pfx____ratelimit+0x10/0x10 [ 406.715970][T10258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.715984][T10258] ? __pfx__printk+0x10/0x10 [ 406.716001][T10258] ? __might_fault+0xb0/0x130 [ 406.716025][T10258] should_fail_ex+0x414/0x560 [ 406.716042][T10258] _copy_from_user+0x2d/0xb0 [ 406.716055][T10258] kstrtouint_from_user+0xc4/0x170 [ 406.716073][T10258] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 406.716099][T10258] proc_fail_nth_write+0x88/0x200 [ 406.716113][T10258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.716130][T10258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.716145][T10258] vfs_write+0x27e/0xa90 [ 406.716166][T10258] ? __pfx_vfs_write+0x10/0x10 [ 406.716183][T10258] ? __fget_files+0x2a/0x420 [ 406.716203][T10258] ? __fget_files+0x3a0/0x420 [ 406.716220][T10258] ? __fget_files+0x2a/0x420 [ 406.716243][T10258] ksys_write+0x145/0x250 [ 406.716260][T10258] ? __pfx_ksys_write+0x10/0x10 [ 406.716277][T10258] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.716294][T10258] __do_fast_syscall_32+0xb6/0x2b0 [ 406.716315][T10258] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.716336][T10258] do_fast_syscall_32+0x34/0x80 [ 406.716352][T10258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.716366][T10258] RIP: 0023:0xf709e539 [ 406.716377][T10258] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 406.716388][T10258] RSP: 002b:00000000f546d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 406.716403][T10258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d620 [ 406.716412][T10258] RDX: 0000000000000001 RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 406.716419][T10258] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 406.716426][T10258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.716433][T10258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.716451][T10258] [ 407.708587][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.926'. [ 407.908287][ T6619] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 407.978493][ T5863] Bluetooth: hci0: command tx timeout [ 408.347785][ T6619] usb 6-1: Using ep0 maxpacket: 8 [ 408.363242][ T6619] usb 6-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 408.384168][ T6619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.474837][ T6619] usb 6-1: Product: syz [ 408.493130][ T6619] usb 6-1: Manufacturer: syz [ 408.510086][ T6619] usb 6-1: SerialNumber: syz [ 408.528538][ T6619] usb 6-1: config 0 descriptor?? [ 408.545880][ T6619] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 408.748257][ T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 408.931376][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 408.952939][ T9] usb 7-1: config 7 has an invalid interface number: 109 but max is 0 [ 408.966799][T10071] team0 (unregistering): Port device team_slave_1 removed [ 408.975522][ T9] usb 7-1: config 7 has no interface number 0 [ 408.986570][ T9] usb 7-1: config 7 interface 109 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 409.011483][ T9] usb 7-1: No eUSB2 isoc ep 7 companion for config 7 interface 109 altsetting 254 [ 409.039219][ T9] usb 7-1: config 7 interface 109 has no altsetting 0 [ 409.078851][ T6619] gspca_zc3xx: reg_w_i err -110 [ 409.088270][T10071] team0 (unregistering): Port device team_slave_0 removed [ 409.828204][ T6619] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 409.842376][ T6619] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 410.057959][ T5863] Bluetooth: hci0: command tx timeout [ 410.486674][T10278] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 410.553652][ T45] usb 6-1: USB disconnect, device number 12 [ 410.650526][T10288] tap0: tun_chr_ioctl cmd 2148553947 [ 411.051068][T10185] chnl_net:caif_netlink_parms(): no params data found [ 411.581503][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 411.731809][ T9] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=1f.2b [ 411.778694][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.818167][ T9] usb 7-1: can't set config #7, error -71 [ 411.828019][ T9] usb 7-1: USB disconnect, device number 7 [ 412.446050][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.479494][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.552854][T10185] bridge_slave_0: entered allmulticast mode [ 412.571343][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.7.938'. [ 412.580777][T10185] bridge_slave_0: entered promiscuous mode [ 412.597455][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.648512][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.656013][T10185] bridge_slave_1: entered allmulticast mode [ 412.699438][ T92] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 412.731444][T10185] bridge_slave_1: entered promiscuous mode [ 412.867792][ T92] usb 7-1: device descriptor read/64, error -71 [ 413.251488][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.275957][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.327921][ T92] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 413.523034][ T92] usb 7-1: device descriptor read/64, error -71 [ 413.655603][ T92] usb usb7-port1: attempt power cycle [ 413.685563][T10185] team0: Port device team_slave_0 added [ 413.736793][T10185] team0: Port device team_slave_1 added [ 413.826707][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.842263][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.879720][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.974986][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.987188][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.085657][ T92] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 414.120548][ T92] usb 7-1: device descriptor read/8, error -71 [ 414.157974][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.360959][ T92] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 414.412413][ T92] usb 7-1: device descriptor read/8, error -71 [ 414.473774][T10185] hsr_slave_0: entered promiscuous mode [ 414.486352][T10185] hsr_slave_1: entered promiscuous mode [ 414.517096][T10185] debugfs: 'hsr0' already exists in 'hsr' [ 414.532439][T10185] Cannot create hsr debugfs directory [ 414.540023][ T92] usb usb7-port1: unable to enumerate USB device [ 416.660907][T10185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.689983][T10377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.944'. [ 416.762726][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.771490][T10185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.843239][T10185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.915446][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.934526][T10185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.232917][ T92] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 417.640071][ T92] usb 8-1: Using ep0 maxpacket: 32 [ 417.652283][ T92] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.690310][ T92] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.830496][ T92] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 417.857983][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.874548][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.892156][ T92] usb 8-1: config 0 descriptor?? [ 418.613577][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.651781][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.659033][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.805369][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.822885][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.990174][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.997378][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.149110][ T92] usbhid 8-1:0.0: can't add hid device: -32 [ 419.180845][ T92] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 419.217853][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 419.428433][ T9] usb 8-1: USB disconnect, device number 8 [ 419.551074][ T92] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 419.710425][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.748181][ T92] usb 7-1: Using ep0 maxpacket: 16 [ 419.790482][ T92] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.847881][ T92] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 419.904181][ T92] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.944463][ T92] usb 7-1: config 0 descriptor?? [ 420.044249][T10185] veth0_vlan: entered promiscuous mode [ 420.125020][T10185] veth1_vlan: entered promiscuous mode [ 420.404419][ T92] cypress 0003:04B4:07B1.000F: item fetching failed at offset 2/5 [ 420.460237][ T92] cypress 0003:04B4:07B1.000F: parse failed [ 420.491641][ T92] cypress 0003:04B4:07B1.000F: probe with driver cypress failed with error -22 [ 420.643650][T10427] VFS: Mount too revealing [ 420.702926][T10185] veth0_macvtap: entered promiscuous mode [ 420.754047][T10185] veth1_macvtap: entered promiscuous mode [ 420.932463][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.099461][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.185375][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.230546][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.293120][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.338098][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.700813][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 421.771181][T10071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.804882][T10071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.881402][ T9] usb 6-1: config 0 has no interfaces? [ 422.383256][ T45] usb 7-1: USB disconnect, device number 12 [ 422.416259][T10081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.440949][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 422.530052][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.539351][T10081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.568689][ T9] usb 6-1: config 0 descriptor?? [ 422.783559][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 422.937939][ T45] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 423.127889][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 423.140353][ T45] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 423.207603][ T45] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.251914][ T45] usb 7-1: config 1 has no interface number 1 [ 423.282440][ T45] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 423.386185][ T45] usb 7-1: string descriptor 0 read error: -22 [ 423.398935][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.443731][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.492258][ T45] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 423.495965][ T9] usb 6-1: USB disconnect, device number 13 [ 423.528262][ T5950] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 423.730304][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 423.775007][ T5950] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 423.795435][ T5950] usb 2-1: config 150 has no interface number 0 [ 423.809863][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.847024][ T5950] usb 2-1: config 150 interface 204 has no altsetting 0 [ 423.862955][ T5950] usb 2-1: config 150 interface 1 has no altsetting 0 [ 423.891362][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.946796][ T5950] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 423.966816][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.982191][ T5950] usb 2-1: Product: syz [ 423.997200][ T5950] usb 2-1: Manufacturer: syz [ 424.007588][ T5950] usb 2-1: SerialNumber: syz [ 424.275043][ T5950] xr_serial 2-1:150.204: xr_serial converter detected [ 424.282117][ T10] usb 7-1: USB disconnect, device number 13 [ 424.388761][T10477] VFS: Mount too revealing [ 424.698544][ T5950] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 424.737840][ T5950] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 424.833323][ T5950] usb 2-1: USB disconnect, device number 23 [ 424.835837][ T5950] xr_serial 2-1:150.204: device disconnected [ 425.027912][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 425.028809][T10486] loop9: detected capacity change from 0 to 7 [ 425.117482][T10486] loop9: [ 425.128474][T10486] loop9: partition table partially beyond EOD, truncated [ 425.231218][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 425.264507][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.293941][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.318881][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.328259][ T45] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 425.388922][ T9] usb 8-1: config 0 descriptor?? [ 425.508303][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 425.532662][ T45] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.569805][ T45] usb 7-1: config 179 has no interface number 0 [ 425.589186][ T45] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.610777][ T45] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 425.622814][ T45] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.636457][ T45] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 425.654177][ T45] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.687954][ T45] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 425.704217][ T9] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 425.725957][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.810098][T10493] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 425.952375][ T9] usb 8-1: USB disconnect, device number 9 [ 426.125492][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input14 [ 426.252706][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.972'. [ 426.388040][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.438742][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.785406][ T5950] usb 7-1: USB disconnect, device number 14 [ 426.785462][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 426.799903][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 426.931107][T10513] bond0: option packets_per_slave: invalid value (18446744071562067969) [ 426.967790][T10513] bond0: option packets_per_slave: allowed values 0 - 65535 [ 427.131940][ T45] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 427.326281][ T45] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 427.368899][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.417883][ T45] usb 8-1: Product: syz [ 427.422119][ T45] usb 8-1: Manufacturer: syz [ 427.426915][ T45] usb 8-1: SerialNumber: syz [ 427.484950][ T45] usb 8-1: config 0 descriptor?? [ 427.789120][ T5854] usb 8-1: USB disconnect, device number 10 [ 427.891749][ T5929] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 428.113271][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 428.145514][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 428.182188][ T5929] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 428.197865][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.216318][ T5929] usb 7-1: Product: syz [ 428.236401][ T5929] usb 7-1: Manufacturer: syz [ 428.250789][ T5929] usb 7-1: SerialNumber: syz [ 428.267519][ T5929] usb 7-1: config 0 descriptor?? [ 428.294490][ T5929] option 7-1:0.0: GSM modem (1-port) converter detected [ 428.549031][ T5929] usb 7-1: USB disconnect, device number 15 [ 428.572773][ T5929] option 7-1:0.0: device disconnected [ 430.050290][T10559] netlink: 128 bytes leftover after parsing attributes in process `syz.0.985'. [ 430.088586][ T5929] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 430.274369][ T5929] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.321597][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.346806][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.375761][T10565] VFS: Mount too revealing [ 430.401022][ T5929] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.424938][ T5929] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.501084][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.541484][ T5929] usb 7-1: config 0 descriptor?? [ 430.992668][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.000412][ T5937] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 431.071597][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.126227][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.148029][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.155487][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.175923][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.189806][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.218799][ T45] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 431.222640][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 431.254205][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.267389][ T5937] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 431.280931][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.303236][ T5937] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.326779][ T5929] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 431.351251][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.376129][ T5929] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 431.389014][ T5937] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 431.399831][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 431.427894][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.442593][ T45] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 431.467934][ T5929] usb 7-1: USB disconnect, device number 16 [ 431.477087][ T5937] usb 6-1: config 0 descriptor?? [ 431.480522][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.547735][ T45] usb 8-1: Product: syz [ 431.551782][T10589] program syz.0.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.562152][ T45] usb 8-1: Manufacturer: syz [ 431.582440][ T45] usb 8-1: SerialNumber: syz [ 431.664435][ T45] usb 8-1: config 0 descriptor?? [ 431.699403][ T45] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 432.072515][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 432.187447][T10588] fido_id[10588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 432.408008][ T5937] usbhid 6-1:0.0: can't add hid device: -71 [ 432.414108][ T5937] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 432.494724][ T5937] usb 6-1: USB disconnect, device number 14 [ 432.980030][T10609] VFS: Mount too revealing [ 433.033901][T10613] binder: 10606:10613 ioctl 40043311 800000c0 returned -22 [ 433.052376][ T5937] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 433.242164][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 433.252471][ T5937] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 433.271450][ T5937] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.386845][ T5937] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.466125][ T5937] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.499151][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.517260][ T5937] usb 6-1: config 0 has no interface number 0 [ 433.525391][ T5937] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 433.544012][ T5937] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 433.560474][ T5937] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 433.604174][ T5937] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.633577][ T5937] usb 6-1: config 0 interface 125 has no altsetting 2 [ 433.674677][ T5937] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 433.689691][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.702597][ T5937] usb 6-1: Product: syz [ 433.706866][ T5937] usb 6-1: Manufacturer: syz [ 433.711959][ T5937] usb 6-1: SerialNumber: syz [ 433.719416][ T5937] usb 6-1: config 0 descriptor?? [ 433.727263][ T5937] usb 6-1: selecting invalid altsetting 2 [ 433.935648][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.011294][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.023295][T10625] loop8: detected capacity change from 0 to 7 [ 434.058881][T10625] Dev loop8: unable to read RDB block 7 [ 434.082584][T10625] loop8: AHDI p1 p3 p4 [ 434.096113][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.096940][T10625] loop8: partition table partially beyond EOD, truncated [ 434.137410][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.174341][ T10] usb 6-1: USB disconnect, device number 15 [ 434.210585][T10625] loop8: p1 start 975770946 is beyond EOD, truncated [ 434.238107][T10625] loop8: p3 start 6514546 is beyond EOD, truncated [ 435.168139][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 435.327768][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 435.364854][ T10] usb 6-1: config index 0 descriptor too short (expected 38436, got 36) [ 435.411583][ T10] usb 6-1: config 202 has too many interfaces: 209, using maximum allowed: 32 [ 435.462923][ T10] usb 6-1: config 202 contains an unexpected descriptor of type 0x2, skipping [ 435.504172][ T10] usb 6-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 435.554291][ T10] usb 6-1: config 202 has 0 interfaces, different from the descriptor's value: 209 [ 435.602583][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 435.622451][T10646] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1005'. [ 435.623763][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.672061][ T10] usb 6-1: Product: syz [ 435.674044][T10646] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1005'. [ 435.678309][ T10] usb 6-1: Manufacturer: syz [ 435.746992][ T10] usb 6-1: SerialNumber: syz [ 435.997734][ T10] usb 8-1: USB disconnect, device number 11 [ 436.098423][ T5937] usb 6-1: USB disconnect, device number 16 [ 436.820765][T10672] FAULT_INJECTION: forcing a failure. [ 436.820765][T10672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.839661][T10672] CPU: 0 UID: 0 PID: 10672 Comm: syz.6.1011 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 436.839691][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.839703][T10672] Call Trace: [ 436.839711][T10672] [ 436.839720][T10672] dump_stack_lvl+0x189/0x250 [ 436.839751][T10672] ? __pfx____ratelimit+0x10/0x10 [ 436.839776][T10672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.839800][T10672] ? __pfx__printk+0x10/0x10 [ 436.839843][T10672] should_fail_ex+0x414/0x560 [ 436.839870][T10672] _copy_to_user+0x31/0xb0 [ 436.839891][T10672] simple_read_from_buffer+0xe1/0x170 [ 436.839925][T10672] proc_fail_nth_read+0x1b3/0x220 [ 436.839952][T10672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.839977][T10672] ? rw_verify_area+0x2a6/0x4d0 [ 436.840000][T10672] ? __lock_acquire+0xab9/0xd20 [ 436.840024][T10672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.840047][T10672] vfs_read+0x200/0x980 [ 436.840070][T10672] ? fdget_pos+0x247/0x320 [ 436.840092][T10672] ? __pfx___mutex_lock+0x10/0x10 [ 436.840118][T10672] ? __pfx_vfs_read+0x10/0x10 [ 436.840144][T10672] ? __fget_files+0x2a/0x420 [ 436.840177][T10672] ? __fget_files+0x3a0/0x420 [ 436.840204][T10672] ? __fget_files+0x2a/0x420 [ 436.840240][T10672] ksys_read+0x145/0x250 [ 436.840267][T10672] ? __pfx_ksys_read+0x10/0x10 [ 436.840296][T10672] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.840323][T10672] __do_fast_syscall_32+0xb6/0x2b0 [ 436.840348][T10672] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.840387][T10672] do_fast_syscall_32+0x34/0x80 [ 436.840413][T10672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.840436][T10672] RIP: 0023:0xf709e539 [ 436.840453][T10672] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 436.840472][T10672] RSP: 002b:00000000f548e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 436.840494][T10672] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f548e620 [ 436.840508][T10672] RDX: 000000000000000f RSI: 00000000f7404ff4 RDI: 0000000000000000 [ 436.840520][T10672] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 436.840531][T10672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 436.840543][T10672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.840576][T10672] [ 437.078712][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.108216][T10682] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 438.147816][ T92] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 438.317787][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 438.342250][ T92] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 438.368989][ T92] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 438.405868][ T92] usb 2-1: Product: syz [ 438.437949][ T92] usb 2-1: Manufacturer: syz [ 438.472970][ T92] usb 2-1: SerialNumber: syz [ 438.547957][ T92] usb 2-1: config 0 descriptor?? [ 438.760310][T10682] fuse: Bad value for 'rootmode' [ 438.801219][ T92] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 438.831943][ T92] gspca_zc3xx: reg_w_i err -71 [ 438.836858][ T92] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 438.927095][ T92] usb 2-1: USB disconnect, device number 24 [ 439.076090][T10694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1015'. [ 439.768731][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.858455][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.007885][ T5937] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 440.222852][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.232554][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.355317][T10717] netlink: 'syz.1.1025': attribute type 13 has an invalid length. [ 440.406707][T10717] netlink: 'syz.1.1025': attribute type 27 has an invalid length. [ 441.245638][ T7052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.680243][ T7052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.910003][ T7052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.207164][ T7052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.475820][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.639850][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.688024][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.717983][ T7052] bridge_slave_1: left allmulticast mode [ 443.724162][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.768077][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.838509][ T7052] bridge_slave_1: left promiscuous mode [ 443.847459][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.178952][ T7052] bridge_slave_0: left allmulticast mode [ 444.184940][ T7052] bridge_slave_0: left promiscuous mode [ 444.199684][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.673725][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 445.673749][ T30] audit: type=1326 audit(1754739024.907:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 445.784021][T10752] netlink: 'syz.5.1037': attribute type 10 has an invalid length. [ 445.792080][ T30] audit: type=1326 audit(1754739024.907:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 445.815860][ T30] audit: type=1326 audit(1754739024.907:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 445.840245][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'. [ 445.871302][ T30] audit: type=1326 audit(1754739024.907:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 445.971506][ T30] audit: type=1326 audit(1754739024.907:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.001486][ T5866] Bluetooth: hci3: command tx timeout [ 446.049434][ T30] audit: type=1326 audit(1754739024.907:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.072360][ T30] audit: type=1326 audit(1754739025.007:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.111602][ T30] audit: type=1326 audit(1754739025.007:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.137557][ T30] audit: type=1326 audit(1754739025.007:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10753 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.178371][ T30] audit: type=1326 audit(1754739025.027:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.5.1037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 446.607221][ T7052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.634094][ T7052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.660972][ T7052] bond0 (unregistering): Released all slaves [ 446.896652][T10752] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.903973][T10752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.911497][T10752] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.918748][T10752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.954943][T10752] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 447.008121][T10754] bridge_slave_1: left allmulticast mode [ 447.014221][T10754] bridge_slave_1: left promiscuous mode [ 447.021942][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.124450][T10754] bridge_slave_0: left allmulticast mode [ 447.154106][T10754] bridge_slave_0: left promiscuous mode [ 447.198341][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.313611][T10754] bond0: (slave bridge0): Releasing backup interface [ 448.058079][ T5866] Bluetooth: hci3: command tx timeout [ 448.228001][ T7052] hsr_slave_0: left promiscuous mode [ 448.257789][ T7052] hsr_slave_1: left promiscuous mode [ 448.264177][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.348039][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.466158][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.487937][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.758124][ T7052] veth1_macvtap: left promiscuous mode [ 448.784132][ T7052] veth0_macvtap: left promiscuous mode [ 448.789825][ T5854] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 448.911774][ T7052] veth1_vlan: left promiscuous mode [ 448.948160][ T7052] veth0_vlan: left promiscuous mode [ 449.059538][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 449.117328][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.224022][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.234027][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.242137][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.253921][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.277850][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.292046][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 449.308824][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.323747][ T5854] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 449.333061][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.361332][ T5854] usb 6-1: config 0 descriptor?? [ 450.138488][ T5863] Bluetooth: hci3: command tx timeout [ 450.467792][ T5937] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 450.617878][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 450.640678][ T5937] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 450.667594][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.829019][ T5937] usb 2-1: config 0 descriptor?? [ 451.418139][ T5863] Bluetooth: hci6: command tx timeout [ 451.700372][ T7052] team0 (unregistering): Port device team_slave_1 removed [ 451.954742][ T7052] team0 (unregistering): Port device team_slave_0 removed [ 452.171322][ T5854] usbhid 6-1:0.0: can't add hid device: -71 [ 452.186369][ T5854] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 452.220070][ T5863] Bluetooth: hci3: command tx timeout [ 452.238847][ T5854] usb 6-1: USB disconnect, device number 17 [ 453.497786][ T5863] Bluetooth: hci6: command tx timeout [ 453.557790][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1046'. [ 453.719408][ T5937] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 453.776354][ T5937] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 453.785846][ T5937] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 454.129416][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 455.058094][T10741] chnl_net:caif_netlink_parms(): no params data found [ 455.202880][ T5866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 455.212757][ T5866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 455.221858][ T5866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 455.231052][ T5866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 455.239001][ T5866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 455.548120][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 455.582441][ T5863] Bluetooth: hci6: command tx timeout [ 455.630127][ T7052] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.733062][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 455.748451][ T10] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 455.770564][ T10] usb 6-1: config 0 has no interface number 0 [ 455.817468][ T10] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 455.850985][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.878283][ T10] usb 6-1: Product: syz [ 455.887730][ T10] usb 6-1: Manufacturer: syz [ 455.898625][ T10] usb 6-1: SerialNumber: syz [ 455.956466][ T10] usb 6-1: config 0 descriptor?? [ 455.994689][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 456.044604][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 456.101441][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 456.154186][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 456.167207][ T7052] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.206962][T10801] cxusb: i2c rd: len=133 is too big! [ 456.206962][T10801] [ 456.238582][ T10] usb 6-1: media controller created [ 456.351401][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.410648][T10775] chnl_net:caif_netlink_parms(): no params data found [ 456.551807][ T10] cxusb: set interface failed [ 456.572311][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 456.721687][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 456.739913][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 456.784498][ T7052] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.912345][ T10] rc_core: IR keymap rc-dvico-portable not found [ 456.923511][ T10] Registered IR keymap rc-empty [ 456.983927][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 456.995214][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.001295][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input15 [ 457.020871][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.027555][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 457.042546][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 457.052762][T10741] bridge_slave_0: entered allmulticast mode [ 457.068040][T10741] bridge_slave_0: entered promiscuous mode [ 457.076148][ T10] usb 6-1: USB disconnect, device number 18 [ 457.335059][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 457.348275][ T5863] Bluetooth: hci7: command tx timeout [ 457.454834][ T7052] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.515664][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.534201][T10821] FAULT_INJECTION: forcing a failure. [ 457.534201][T10821] name failslab, interval 1, probability 0, space 0, times 0 [ 457.559188][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.566560][T10741] bridge_slave_1: entered allmulticast mode [ 457.612933][T10821] CPU: 0 UID: 0 PID: 10821 Comm: syz.5.1054 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 457.612966][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.612978][T10821] Call Trace: [ 457.612987][T10821] [ 457.612996][T10821] dump_stack_lvl+0x189/0x250 [ 457.613027][T10821] ? __pfx____ratelimit+0x10/0x10 [ 457.613054][T10821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.613078][T10821] ? __pfx__printk+0x10/0x10 [ 457.613102][T10821] ? netlink_unicast+0x82c/0x9e0 [ 457.613125][T10821] ? ___sys_sendmsg+0x21f/0x2a0 [ 457.613152][T10821] ? __do_fast_syscall_32+0xb6/0x2b0 [ 457.613191][T10821] should_fail_ex+0x414/0x560 [ 457.613221][T10821] should_failslab+0xa8/0x100 [ 457.613251][T10821] kmem_cache_alloc_noprof+0x73/0x3c0 [ 457.613282][T10821] ? skb_clone+0x212/0x3a0 [ 457.613315][T10821] skb_clone+0x212/0x3a0 [ 457.613346][T10821] __netlink_deliver_tap+0x404/0x850 [ 457.613386][T10821] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.613413][T10821] netlink_deliver_tap+0x19c/0x1b0 [ 457.613440][T10821] netlink_sendskb+0x68/0x140 [ 457.613466][T10821] netlink_unicast+0x397/0x9e0 [ 457.613485][T10821] ? __asan_memcpy+0x40/0x70 [ 457.613516][T10821] ? __pfx_netlink_unicast+0x10/0x10 [ 457.613550][T10821] netlink_rcv_skb+0x28c/0x470 [ 457.613576][T10821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.613604][T10821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.613642][T10821] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.613677][T10821] netlink_unicast+0x82c/0x9e0 [ 457.613710][T10821] ? __pfx_netlink_unicast+0x10/0x10 [ 457.613734][T10821] ? netlink_sendmsg+0x642/0xb30 [ 457.613756][T10821] ? skb_put+0x11b/0x210 [ 457.613787][T10821] netlink_sendmsg+0x805/0xb30 [ 457.613823][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.613852][T10821] ? __import_iovec+0x5d4/0x7f0 [ 457.613869][T10821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.613897][T10821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.613919][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.613945][T10821] __sock_sendmsg+0x21c/0x270 [ 457.613972][T10821] ____sys_sendmsg+0x505/0x830 [ 457.614007][T10821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.614056][T10821] ___sys_sendmsg+0x21f/0x2a0 [ 457.614087][T10821] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.614158][T10821] ? __fget_files+0x2a/0x420 [ 457.614186][T10821] ? __fget_files+0x3a0/0x420 [ 457.614227][T10821] __sys_sendmsg+0x164/0x220 [ 457.614258][T10821] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.614315][T10821] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.614344][T10821] __do_fast_syscall_32+0xb6/0x2b0 [ 457.614370][T10821] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.614398][T10821] do_fast_syscall_32+0x34/0x80 [ 457.614424][T10821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.614447][T10821] RIP: 0023:0xf7f68539 [ 457.614465][T10821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 457.614482][T10821] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 457.614505][T10821] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 457.614519][T10821] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.614531][T10821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.614543][T10821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.614553][T10821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.614585][T10821] [ 457.680885][T10741] bridge_slave_1: entered promiscuous mode [ 457.711641][ T5863] Bluetooth: hci6: command tx timeout [ 457.731614][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 458.267444][T10741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.630138][T10741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.915743][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.922964][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.930975][T10775] bridge_slave_0: entered allmulticast mode [ 458.939808][T10775] bridge_slave_0: entered promiscuous mode [ 459.316518][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.324720][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.348705][T10775] bridge_slave_1: entered allmulticast mode [ 459.404636][T10775] bridge_slave_1: entered promiscuous mode [ 459.420807][ T5866] Bluetooth: hci7: command tx timeout [ 459.486763][T10741] team0: Port device team_slave_0 added [ 459.501979][T10741] team0: Port device team_slave_1 added [ 459.928640][ T7052] bridge_slave_1: left allmulticast mode [ 459.934710][ T7052] bridge_slave_1: left promiscuous mode [ 459.942378][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.979261][ T7052] bridge_slave_0: left allmulticast mode [ 460.010475][ T7052] bridge_slave_0: left promiscuous mode [ 460.031070][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.961162][ T7052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.982314][ T7052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.012342][ T7052] bond0 (unregistering): Released all slaves [ 461.107559][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.121812][T10741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.145469][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.186982][T10741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.245941][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.270783][ T7052] tipc: Left network mode [ 461.276643][T10741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.293795][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.325646][T10741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.498350][ T5866] Bluetooth: hci7: command tx timeout [ 461.585707][T10805] chnl_net:caif_netlink_parms(): no params data found [ 461.727280][T10775] team0: Port device team_slave_0 added [ 461.727622][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 461.813126][T10741] hsr_slave_0: entered promiscuous mode [ 461.819703][T10741] hsr_slave_1: entered promiscuous mode [ 461.830766][T10741] debugfs: 'hsr0' already exists in 'hsr' [ 461.836832][T10741] Cannot create hsr debugfs directory [ 461.843088][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1060'. [ 461.862273][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 461.871651][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 461.961472][T10775] team0: Port device team_slave_1 added [ 462.504836][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 462.532070][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.562206][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.637856][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.701848][T10859] PKCS7: Unknown OID: [5] (bad) [ 462.706760][T10859] PKCS7: Only support pkcs7_signedData type [ 462.742048][ T7052] hsr_slave_0: left promiscuous mode [ 462.759057][T10860] delete_channel: no stack [ 462.765141][ T7052] hsr_slave_1: left promiscuous mode [ 462.783092][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.821892][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.851039][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.864831][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.909180][ T7052] veth1_macvtap: left promiscuous mode [ 462.917991][ T7052] veth0_macvtap: left promiscuous mode [ 462.923713][ T7052] veth1_vlan: left promiscuous mode [ 462.941265][ T7052] veth0_vlan: left promiscuous mode [ 463.587771][ T5866] Bluetooth: hci7: command tx timeout [ 463.662827][T10862] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1066'. [ 464.155397][ T7052] team0 (unregistering): Port device team_slave_1 removed [ 464.276558][ T7052] team0 (unregistering): Port device team_slave_0 removed [ 465.490050][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.518862][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.585888][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.144312][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.152568][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.171174][T10805] bridge_slave_0: entered allmulticast mode [ 466.201456][T10805] bridge_slave_0: entered promiscuous mode [ 466.278234][ T5854] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 466.416660][T10775] hsr_slave_0: entered promiscuous mode [ 466.457886][T10775] hsr_slave_1: entered promiscuous mode [ 466.479149][T10775] debugfs: 'hsr0' already exists in 'hsr' [ 466.482218][ T5854] usb 6-1: device descriptor read/64, error -71 [ 466.484919][T10775] Cannot create hsr debugfs directory [ 466.523961][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.537850][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.548755][T10805] bridge_slave_1: entered allmulticast mode [ 466.558156][T10805] bridge_slave_1: entered promiscuous mode [ 466.578169][T10074] bond0: (slave bond_slave_0): interface is now down [ 466.600932][T10074] bond0: (slave bond_slave_1): interface is now down [ 466.668068][ T12] bond0: (slave bond_slave_0): interface is now down [ 466.691324][ T12] bond0: (slave bond_slave_1): interface is now down [ 466.744675][T10071] bond0: (slave bond_slave_0): interface is now down [ 466.756534][ T5854] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 466.810365][T10071] bond0: (slave bond_slave_1): interface is now down [ 466.843381][ T49] bond0: (slave bond_slave_0): interface is now down [ 466.853119][ T49] bond0: (slave bond_slave_1): interface is now down [ 466.921441][ T13] bond0: (slave bond_slave_0): interface is now down [ 466.947813][ T5854] usb 6-1: device descriptor read/64, error -71 [ 466.977920][ T13] bond0: (slave bond_slave_1): interface is now down [ 466.998164][T10071] bond0: (slave bond_slave_0): interface is now down [ 467.011723][T10071] bond0: (slave bond_slave_1): interface is now down [ 467.068194][ T49] bond0: (slave bond_slave_0): interface is now down [ 467.074912][ T49] bond0: (slave bond_slave_1): interface is now down [ 467.088160][ T5854] usb usb6-port1: attempt power cycle [ 467.168468][T10071] bond0: (slave bond_slave_0): interface is now down [ 467.175358][T10071] bond0: (slave bond_slave_1): interface is now down [ 467.228129][T10071] bond0: (slave bond_slave_0): interface is now down [ 467.261098][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.270265][T10071] bond0: (slave bond_slave_1): interface is now down [ 467.299813][ T12] bond0: (slave bond_slave_0): interface is now down [ 467.347803][ T12] bond0: (slave bond_slave_1): interface is now down [ 467.408428][T10071] bond0: (slave bond_slave_0): interface is now down [ 467.415937][T10071] bond0: (slave bond_slave_1): interface is now down [ 467.478078][ T5854] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 467.484408][T10071] bond0: (slave bond_slave_0): interface is now down [ 467.487055][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.508047][T10071] bond0: (slave bond_slave_1): interface is now down [ 467.529072][ T5854] usb 6-1: device descriptor read/8, error -71 [ 467.557905][ T49] bond0: (slave bond_slave_0): interface is now down [ 467.564642][ T49] bond0: (slave bond_slave_1): interface is now down [ 467.637963][ T49] bond0: (slave bond_slave_0): interface is now down [ 467.667717][ T49] bond0: (slave bond_slave_1): interface is now down [ 467.696033][ T13] bond0: (slave bond_slave_0): interface is now down [ 467.716069][ T13] bond0: (slave bond_slave_1): interface is now down [ 467.788364][ T5854] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 467.789888][ T49] bond0: (slave bond_slave_0): interface is now down [ 467.812983][ T49] bond0: (slave bond_slave_1): interface is now down [ 467.848761][ T49] bond0: (slave bond_slave_0): interface is now down [ 467.853464][ T5854] usb 6-1: device descriptor read/8, error -71 [ 467.876190][ T49] bond0: (slave bond_slave_1): interface is now down [ 467.910962][T10805] team0: Port device team_slave_0 added [ 467.934885][ T7052] bond0: (slave bond_slave_0): interface is now down [ 467.955711][ T7052] bond0: (slave bond_slave_1): interface is now down [ 467.964688][T10805] team0: Port device team_slave_1 added [ 467.978033][ T5854] usb usb6-port1: unable to enumerate USB device [ 467.998128][ T7052] bond0: (slave bond_slave_0): interface is now down [ 468.044404][ T7052] bond0: (slave bond_slave_1): interface is now down [ 468.089836][T10071] bond0: (slave bond_slave_0): interface is now down [ 468.167759][T10071] bond0: (slave bond_slave_1): interface is now down [ 468.201230][ T49] bond0: (slave bond_slave_0): interface is now down [ 468.225406][ T49] bond0: (slave bond_slave_1): interface is now down [ 468.248069][T10071] bond0: (slave bond_slave_0): interface is now down [ 468.254807][T10071] bond0: (slave bond_slave_1): interface is now down [ 468.313526][ T49] bond0: (slave bond_slave_0): interface is now down [ 468.337755][ T49] bond0: (slave bond_slave_1): interface is now down [ 468.357918][ T13] bond0: (slave bond_slave_0): interface is now down [ 468.376522][ T13] bond0: (slave bond_slave_1): interface is now down [ 468.376757][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.411268][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.424463][ T13] bond0: (slave bond_slave_0): interface is now down [ 468.467438][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.471531][ T13] bond0: (slave bond_slave_1): interface is now down [ 468.503440][ T13] bond0: now running without any active interface! [ 468.693976][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.717747][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.804771][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.510075][T10805] hsr_slave_0: entered promiscuous mode [ 469.561532][T10805] hsr_slave_1: entered promiscuous mode [ 469.569089][T10805] debugfs: 'hsr0' already exists in 'hsr' [ 469.583588][T10805] Cannot create hsr debugfs directory [ 470.669357][T10741] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.842646][T10741] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 470.903734][T10741] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.091094][T10741] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.932621][T10741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.063246][T10741] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.104211][T10775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.219278][T10775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.521750][T10805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.693324][T10775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.745291][T10775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.842223][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.849468][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.978971][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 473.034355][T10805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.096215][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.103519][T10074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.158136][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 473.198518][ T10] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 473.221376][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.247205][T10805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.258128][ T10] usb 6-1: Product: syz [ 473.271548][ T10] usb 6-1: Manufacturer: syz [ 473.303739][ T10] usb 6-1: SerialNumber: syz [ 473.348612][ T10] usb 6-1: config 0 descriptor?? [ 473.375027][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 473.524404][T10805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.646287][T10741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.324561][ T10] gspca_ov534_9: reg_w failed -71 [ 474.380865][T10741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.561424][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.658230][T10805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.688170][ T10] gspca_ov534_9: Unknown sensor 0000 [ 474.688281][ T10] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 474.737554][T10805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.788114][ T10] usb 6-1: USB disconnect, device number 23 [ 474.896623][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.960711][T10949] netlink: 'syz.1.1078': attribute type 4 has an invalid length. [ 474.978849][T10805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.043341][T10805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.074375][T10950] netlink: 'syz.1.1078': attribute type 4 has an invalid length. [ 475.211488][T10956] QAT: Stopping all acceleration devices. [ 475.289290][T10077] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.296589][T10077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.344632][T10077] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.351965][T10077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.496714][T10741] veth0_vlan: entered promiscuous mode [ 475.642399][T10741] veth1_vlan: entered promiscuous mode [ 475.814786][T10775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.877829][T10775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.347101][T10741] veth0_macvtap: entered promiscuous mode [ 476.401394][T10741] veth1_macvtap: entered promiscuous mode [ 476.534962][T10775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.551413][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 476.714518][T10741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.728148][ T9] usb 6-1: device descriptor read/64, error -71 [ 476.839613][T10741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.901945][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.002435][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.019857][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 477.028121][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.037113][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.105600][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.197919][ T9] usb 6-1: device descriptor read/64, error -71 [ 477.232619][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.302671][T10775] veth0_vlan: entered promiscuous mode [ 477.309668][ T9] usb usb6-port1: attempt power cycle [ 477.392350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.399617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.455131][T10775] veth1_vlan: entered promiscuous mode [ 477.573298][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.580552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.697909][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 477.749023][ T9] usb 6-1: device descriptor read/8, error -71 [ 477.789971][T10775] veth0_macvtap: entered promiscuous mode [ 477.886324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.890712][T10775] veth1_macvtap: entered promiscuous mode [ 477.930404][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.037764][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 478.110429][ T9] usb 6-1: device descriptor read/8, error -71 [ 478.192346][T10077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.224763][T10775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.238576][T10077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.249033][ T9] usb usb6-port1: unable to enumerate USB device [ 478.287269][T10775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.358640][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.395063][T10077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.450818][T10077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.566395][T10077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.584537][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 478.584565][ T30] audit: type=1326 audit(1754739057.817:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 478.670254][T10077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.780520][T10992] syzkaller1: entered promiscuous mode [ 478.798249][ T30] audit: type=1326 audit(1754739057.817:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 478.853335][T10992] syzkaller1: entered allmulticast mode [ 479.020907][ T30] audit: type=1326 audit(1754739057.817:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.086416][ T30] audit: type=1326 audit(1754739057.837:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.147989][ T30] audit: type=1326 audit(1754739057.837:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.250219][ T30] audit: type=1326 audit(1754739057.837:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.283955][ T30] audit: type=1326 audit(1754739057.837:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.313278][ T30] audit: type=1326 audit(1754739057.837:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.347524][ T30] audit: type=1326 audit(1754739057.837:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.380904][ T30] audit: type=1326 audit(1754739057.837:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.9.1028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 479.518052][T10805] veth0_vlan: entered promiscuous mode [ 479.587843][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1084'. [ 479.610661][T10805] veth1_vlan: entered promiscuous mode [ 479.767785][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 479.842064][ T7052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.914302][ T7052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.984550][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 480.007551][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 480.040509][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 480.089520][ T9] usb 6-1: can't read configurations, error -22 [ 480.145172][T10805] veth0_macvtap: entered promiscuous mode [ 480.174735][T10077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.193158][T10805] veth1_macvtap: entered promiscuous mode [ 480.238179][T10077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.260496][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 480.321737][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.411381][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.487875][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 480.499812][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 480.532079][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 480.564136][ T9] usb 6-1: can't read configurations, error -22 [ 480.598166][ T9] usb usb6-port1: attempt power cycle [ 480.622165][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.714529][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.751366][ T7052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.828376][ T7052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.867013][T11027] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20002 [ 480.977789][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 481.030571][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 481.113593][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.160948][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 481.176925][ T9] usb 6-1: can't read configurations, error -22 [ 481.249206][ T5929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 481.350192][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 481.398363][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 481.405320][ T7052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.440443][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 481.446743][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.470411][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.482719][ T7052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.500238][ T9] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 481.519433][ T9] usb 6-1: can't read configurations, error -22 [ 481.519685][ T5929] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 481.540302][ T9] usb usb6-port1: unable to enumerate USB device [ 481.571088][ T5929] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 481.612807][ T5929] usb 4-1: config 7 has no interface number 0 [ 481.642408][ T5929] usb 4-1: config 7 interface 187 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.661774][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.702165][ T5929] usb 4-1: config 7 interface 187 has no altsetting 0 [ 481.710171][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.791100][ T5929] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 481.822893][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.850537][ T5929] usb 4-1: Product: syz [ 481.854768][ T5929] usb 4-1: Manufacturer: syz [ 481.896750][ T5929] usb 4-1: SerialNumber: syz [ 482.175389][ T5929] usb 4-1: Not enough endpoints found in device, aborting! [ 482.201389][T11043] VFS: Mount too revealing [ 483.854333][ T5929] usb 4-1: USB disconnect, device number 22 [ 484.436616][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 484.449596][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 484.648882][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.684800][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 484.741140][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 484.763549][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.867338][ T9] usb 4-1: config 0 descriptor?? [ 484.896450][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1100'. [ 484.949905][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1100'. [ 485.025794][T11091] VFS: Mount too revealing [ 486.084055][T11093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1101'. [ 488.086870][T11118] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 488.185549][T11119] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 488.475857][T11124] macsec1: entered promiscuous mode [ 488.511524][T11124] macsec1: entered allmulticast mode [ 488.711350][T11128] loop2: detected capacity change from 0 to 7 [ 488.737763][ T5929] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 488.757940][T11128] loop2: p1 p4 [ 488.777471][T11128] loop2: partition table partially beyond EOD, truncated [ 488.823496][T11128] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 488.966153][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.995432][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 489.016411][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.092775][ T5929] usb 5-1: config 0 descriptor?? [ 489.548475][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.578422][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.621295][ T5929] wacom 0003:056A:00B2.0011: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 489.677288][ T5929] wacom 0003:056A:00B2.0011: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 489.788360][ T5929] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0011/input/input16 [ 490.011116][ T5929] usb 5-1: USB disconnect, device number 18 [ 490.220630][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 490.226648][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 490.824616][T11089] syz.9.1100 (11089): drop_caches: 2 [ 491.897959][ T5952] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 492.327775][ T5952] usb 10-1: Using ep0 maxpacket: 16 [ 492.353655][ T5952] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.408251][ T5952] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.439276][ T5952] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.484389][ T5952] usb 10-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 492.606507][ T5952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.659262][ T5952] usb 10-1: config 0 descriptor?? [ 493.338490][ T31] INFO: task syz.4.793:9355 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.384513][ T31] Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 [ 493.446473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.511744][ T31] task:syz.4.793 state:D stack:24168 pid:9355 tgid:9352 ppid:9126 task_flags:0x400140 flags:0x20004004 [ 493.626302][ T31] Call Trace: [ 493.684201][ T31] [ 493.843576][ T31] __schedule+0x1798/0x4cc0 [ 494.032087][ T31] ? __pfx___schedule+0x10/0x10 [ 494.087583][ T31] ? schedule+0x91/0x360 [ 494.150414][ T31] schedule+0x165/0x360 [ 494.197866][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.214204][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 494.307686][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 494.313561][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 494.377719][ T31] ? blkdev_write_iter+0x50b/0x710 [ 494.382978][ T31] down_read+0x98/0x2e0 [ 494.387208][ T31] blkdev_write_iter+0x50b/0x710 [ 494.497736][ T31] vfs_write+0x548/0xa90 [ 494.502138][ T31] ? __pfx_blkdev_write_iter+0x10/0x10 [ 494.583143][ T31] ? __pfx_vfs_write+0x10/0x10 [ 494.597874][ T31] ? __fget_files+0x2a/0x420 [ 494.602624][ T31] ksys_write+0x145/0x250 [ 494.607178][ T31] ? __pfx_ksys_write+0x10/0x10 [ 494.647726][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.653125][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 494.677794][ T31] do_fast_syscall_32+0x34/0x80 [ 494.685177][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.737680][ T31] RIP: 0023:0xf705e539 [ 494.741875][ T31] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 494.790300][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 494.828247][ T31] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 494.836443][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.928117][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.936303][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.020382][ T31] [ 495.047900][ T31] INFO: task syz.4.793:9358 blocked for more than 145 seconds. [ 495.067712][ T31] Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 [ 495.075169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.187783][ T31] task:syz.4.793 state:D stack:29416 pid:9358 tgid:9352 ppid:9126 task_flags:0x400040 flags:0x20004004 [ 495.259401][ T31] Call Trace: [ 495.262743][ T31] [ 495.265706][ T31] __schedule+0x1798/0x4cc0 [ 495.286145][ T31] ? __pfx___schedule+0x10/0x10 [ 495.291458][ T31] ? schedule+0x91/0x360 [ 495.298732][ T31] schedule+0x165/0x360 [ 495.302975][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.358192][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 495.363889][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 495.427532][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 495.453293][ T31] ? blkdev_read_iter+0x2f8/0x440 [ 495.506954][ T31] down_read+0x98/0x2e0 [ 495.511286][ T31] blkdev_read_iter+0x2f8/0x440 [ 495.516377][ T31] vfs_read+0x4cd/0x980 [ 495.537962][ T31] ? __pfx_vfs_read+0x10/0x10 [ 495.542735][ T31] ? __fget_files+0x2a/0x420 [ 495.547394][ T31] ksys_read+0x145/0x250 [ 495.573982][ T31] ? __pfx_ksys_read+0x10/0x10 [ 495.606616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.633777][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 495.650132][ T31] do_fast_syscall_32+0x34/0x80 [ 495.655056][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.696427][ T31] RIP: 0023:0xf705e539 [ 495.702221][ T31] RSP: 002b:00000000f4fe955c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 495.713672][ T31] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001740 [ 495.722011][ T31] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.744483][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.758087][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.766164][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.827901][ T31] [ 495.858053][ T31] [ 495.858053][ T31] Showing all locks held in the system: [ 495.898919][ T31] 1 lock held by khungtaskd/31: [ 495.903844][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.072982][ T31] 3 locks held by kworker/u8:8/4524: [ 496.078762][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.091201][ T31] #1: ffffc9000cf07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.116357][ T31] #2: ffffffff8f534988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 496.157836][ T31] 2 locks held by getty/5620: [ 496.198259][ T31] #0: ffff88814e2c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.258106][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 496.308111][ T31] 6 locks held by kworker/0:5/5937: [ 496.313493][ T31] #0: ffff888020af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.405353][ T31] #1: ffffc9000447fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.468632][ T31] #2: ffff888027805198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 496.544224][ T31] #3: ffff88807fbea198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 496.607774][ T31] #4: ffff888023afd160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 496.617094][ T31] #5: ffffffff8dfe0310 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 496.727808][ T31] 5 locks held by kworker/1:5/5952: [ 496.768058][ T31] #0: ffff888020af9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.847922][ T31] #1: ffffc90004587bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.887763][ T31] #2: ffff888146340198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 496.915729][ T31] #3: ffff888032380198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 496.954500][ T31] #4: ffff8880202f3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 496.967086][ T31] 3 locks held by kworker/1:7/6886: [ 497.002916][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 497.038382][ T31] #1: ffffc9001e4efbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 497.095265][ T31] #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 497.167783][ T31] 4 locks held by syz.0.683/8777: [ 497.172869][ T31] 1 lock held by udevd/9274: [ 497.177503][ T31] 2 locks held by udevd/9275: [ 497.217707][ T31] #0: ffff88807aee4260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 497.227041][ T31] #1: ffff888031c1bc28 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x100/0x670 [ 497.267951][ T31] 1 lock held by syz.4.793/9355: [ 497.272968][ T31] #0: ffff888148c107a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 497.317844][ T31] 1 lock held by syz.4.793/9358: [ 497.322928][ T31] #0: ffff888148c107a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 497.359000][ T31] 3 locks held by kworker/u8:12/10071: [ 497.364526][ T31] 1 lock held by syz.6.1014/10684: [ 497.397742][ T31] #0: ffff888148c10948 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x318/0xd40 [ 497.418099][ T31] 3 locks held by syz-executor/10786: [ 497.428030][ T31] #0: ffff888027c68dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 497.457743][ T31] #1: ffff888027c680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 497.488150][ T31] #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 497.507923][ T31] 1 lock held by syz-executor/10805: [ 497.513440][ T31] #0: ffffffff8f534988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 497.522997][ T31] 1 lock held by syz.3.1097/11074: [ 497.528920][ T31] #0: ffff888148c107a8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 497.553660][ T31] 4 locks held by syz.9.1111/11156: [ 497.570512][ T31] #0: ffff888031a08dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 497.596267][ T31] #1: ffff888031a080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 497.618952][ T31] #2: ffffffff8f699648 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 497.654065][ T31] #3: ffff888026d92338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 497.702232][ T31] 3 locks held by syz.1.1113/11173: [ 497.707474][ T31] #0: ffff8880768e4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 497.767679][ T31] #1: ffff8880768e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 497.777528][ T31] #2: ffffffff8f699648 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 497.817718][ T31] 3 locks held by syz.5.1112/11170: [ 497.823006][ T31] #0: ffff88807c9f8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 497.878019][ T31] #1: ffff88807c9f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 497.905758][ T31] #2: ffffffff8f699648 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 497.915992][ T31] 2 locks held by sed/11195: [ 497.974923][ T31] [ 497.977296][ T31] ============================================= [ 497.977296][ T31] [ 498.003752][ T31] NMI backtrace for cpu 0 [ 498.003774][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 498.003799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.003811][ T31] Call Trace: [ 498.003820][ T31] [ 498.003829][ T31] dump_stack_lvl+0x189/0x250 [ 498.003863][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.003888][ T31] ? __pfx__printk+0x10/0x10 [ 498.003930][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 498.003954][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.003987][ T31] ? __pfx__printk+0x10/0x10 [ 498.004019][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.004052][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.004077][ T31] watchdog+0xf93/0xfe0 [ 498.004110][ T31] ? watchdog+0x1de/0xfe0 [ 498.004144][ T31] kthread+0x70e/0x8a0 [ 498.004173][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.004199][ T31] ? __pfx_kthread+0x10/0x10 [ 498.004226][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.004248][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.004270][ T31] ? __pfx_kthread+0x10/0x10 [ 498.004296][ T31] ret_from_fork+0x3fc/0x770 [ 498.004321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.004348][ T31] ? __switch_to_asm+0x39/0x70 [ 498.004372][ T31] ? __switch_to_asm+0x33/0x70 [ 498.004396][ T31] ? __pfx_kthread+0x10/0x10 [ 498.004436][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.004479][ T31] [ 498.004487][ T31] Sending NMI from CPU 0 to CPUs 1: [ 498.010043][ T5952] usbhid 10-1:0.0: can't add hid device: -32 [ 498.020580][ C1] NMI backtrace for cpu 1 [ 498.020599][ C1] CPU: 1 UID: 0 PID: 5952 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 498.020620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.020631][ C1] Workqueue: usb_hub_wq hub_event [ 498.020654][ C1] RIP: 0010:stack_trace_consume_entry+0x10f/0x280 [ 498.020677][ C1] Code: 8d 3c cb 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 aa dd 76 00 49 89 e8 4c 89 e2 48 89 de <49> 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b [ 498.020692][ C1] RSP: 0018:ffffc90000a086f8 EFLAGS: 00000046 [ 498.020706][ C1] RAX: 1ffff9200014111a RBX: ffffc90000a08880 RCX: d3f9c0affa891400 [ 498.020719][ C1] RDX: dffffc0000000000 RSI: ffffffff8b78af06 RDI: ffffc90000a08800 [ 498.020731][ C1] RBP: 1ffff92000141102 R08: ffffc90000a08810 R09: 000000000000000a [ 498.020742][ C1] R10: ffffc90000a08798 R11: ffffffff81ac3890 R12: 0000000000000000 [ 498.020753][ C1] R13: 1ffff92000141101 R14: ffffc90000a08808 R15: ffffc90000a088d0 [ 498.020765][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 498.020779][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.020790][ C1] CR2: 000055689a2ced10 CR3: 000000007d8e0000 CR4: 00000000003526f0 [ 498.020807][ C1] Call Trace: [ 498.020814][ C1] [ 498.020820][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 498.020841][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.020860][ C1] arch_stack_walk+0x110/0x150 [ 498.020881][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 498.020900][ C1] stack_trace_save+0x9c/0xe0 [ 498.020918][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 498.020939][ C1] kasan_save_stack+0x3e/0x60 [ 498.020957][ C1] ? kasan_save_stack+0x3e/0x60 [ 498.020975][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 498.020990][ C1] ? insert_work+0x3d/0x330 [ 498.021012][ C1] ? __queue_work+0xbaf/0xfb0 [ 498.021027][ C1] ? call_timer_fn+0x17e/0x5f0 [ 498.021048][ C1] ? __run_timer_base+0x646/0x860 [ 498.021065][ C1] ? run_timer_softirq+0xb7/0x180 [ 498.021084][ C1] ? handle_softirqs+0x283/0x870 [ 498.021099][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 498.021112][ C1] ? irq_exit_rcu+0x9/0x30 [ 498.021146][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 498.021162][ C1] insert_work+0x3d/0x330 [ 498.021185][ C1] __queue_work+0xbaf/0xfb0 [ 498.021202][ C1] ? __queue_work+0x102/0xfb0 [ 498.021227][ C1] call_timer_fn+0x17e/0x5f0 [ 498.021247][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 498.021264][ C1] ? call_timer_fn+0xbe/0x5f0 [ 498.021284][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 498.021309][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 498.021328][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 498.021345][ C1] __run_timer_base+0x646/0x860 [ 498.021363][ C1] ? ktime_get+0x3e/0x1f0 [ 498.021385][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 498.021403][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 498.021429][ C1] run_timer_softirq+0xb7/0x180 [ 498.021449][ C1] handle_softirqs+0x283/0x870 [ 498.021465][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 498.021483][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 498.021500][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 498.021520][ C1] __irq_exit_rcu+0xca/0x1f0 [ 498.021534][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 498.021553][ C1] irq_exit_rcu+0x9/0x30 [ 498.021567][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 498.021585][ C1] [ 498.021591][ C1] [ 498.021597][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.021615][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 498.021632][ C1] Code: 85 32 01 00 00 e8 e1 86 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 d0 86 1f 00 eb 06 e8 c9 86 1f 00 fb 48 c7 c7 80 e1 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 498.021646][ C1] RSP: 0018:ffffc90004586920 EFLAGS: 00000283 [ 498.021659][ C1] RAX: ffffffff81a024e7 RBX: ffffffff81a023a4 RCX: 0000000000100000 [ 498.021671][ C1] RDX: ffffc90018585000 RSI: 0000000000062e1f RDI: ffffffff8e12e180 [ 498.021682][ C1] RBP: ffffc90004586a30 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 498.021693][ C1] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: dffffc0000000000 [ 498.021705][ C1] R13: 1ffff920008b0d28 R14: 0000000000000200 R15: 000000000000002a [ 498.021718][ C1] ? vprintk_emit+0x444/0x7a0 [ 498.021735][ C1] ? vprintk_emit+0x587/0x7a0 [ 498.021753][ C1] ? vprintk_emit+0x444/0x7a0 [ 498.021769][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 498.021787][ C1] ? __pfx_snprintf+0x10/0x10 [ 498.021801][ C1] ? kasan_save_free_info+0x46/0x50 [ 498.021817][ C1] ? hid_add_device+0x125/0x540 [ 498.021839][ C1] ? usb_probe_interface+0x665/0xc30 [ 498.021856][ C1] ? really_probe+0x26d/0x9e0 [ 498.021870][ C1] ? __driver_probe_device+0x18c/0x2f0 [ 498.021896][ C1] dev_vprintk_emit+0x337/0x3f0 [ 498.021915][ C1] ? __device_attach_driver+0x2ce/0x530 [ 498.021931][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 498.021949][ C1] ? process_scheduled_works+0xade/0x17b0 [ 498.021971][ C1] dev_printk_emit+0xe0/0x130 [ 498.021991][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 498.022011][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 498.022031][ C1] ? usbhid_parse+0x6ef/0xb80 [ 498.022045][ C1] ? kfree+0x18e/0x440 [ 498.022065][ C1] ? __dev_printk+0x131/0x190 [ 498.022081][ C1] _dev_err+0x10a/0x160 [ 498.022101][ C1] ? __pfx__dev_err+0x10/0x10 [ 498.022124][ C1] ? hid_add_device+0x13c/0x540 [ 498.022146][ C1] usbhid_probe+0xea6/0x12a0 [ 498.022166][ C1] usb_probe_interface+0x665/0xc30 [ 498.022189][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 498.022206][ C1] really_probe+0x26d/0x9e0 [ 498.022230][ C1] __driver_probe_device+0x18c/0x2f0 [ 498.022254][ C1] driver_probe_device+0x4f/0x430 [ 498.022271][ C1] __device_attach_driver+0x2ce/0x530 [ 498.022288][ C1] bus_for_each_drv+0x24e/0x2e0 [ 498.022307][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 498.022322][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 498.022344][ C1] __device_attach+0x2b8/0x400 [ 498.022368][ C1] ? __pfx___device_attach+0x10/0x10 [ 498.022391][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 498.022411][ C1] bus_probe_device+0x185/0x260 [ 498.022431][ C1] device_add+0x7b6/0xb50 [ 498.022453][ C1] usb_set_configuration+0x1a87/0x20e0 [ 498.022482][ C1] usb_generic_driver_probe+0x8d/0x150 [ 498.022499][ C1] usb_probe_device+0x1c1/0x390 [ 498.022518][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 498.022535][ C1] really_probe+0x26d/0x9e0 [ 498.022552][ C1] __driver_probe_device+0x18c/0x2f0 [ 498.022575][ C1] driver_probe_device+0x4f/0x430 [ 498.022592][ C1] __device_attach_driver+0x2ce/0x530 [ 498.022608][ C1] bus_for_each_drv+0x24e/0x2e0 [ 498.022627][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 498.022643][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 498.022665][ C1] __device_attach+0x2b8/0x400 [ 498.022688][ C1] ? __pfx___device_attach+0x10/0x10 [ 498.022712][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 498.022732][ C1] bus_probe_device+0x185/0x260 [ 498.022752][ C1] device_add+0x7b6/0xb50 [ 498.022775][ C1] usb_new_device+0xa39/0x16f0 [ 498.022802][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 498.022824][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.022842][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.022861][ C1] hub_event+0x2958/0x4a20 [ 498.022899][ C1] ? __pfx_hub_event+0x10/0x10 [ 498.022914][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 498.022932][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.022948][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 498.022961][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 498.022977][ C1] process_scheduled_works+0xade/0x17b0 [ 498.023004][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.023026][ C1] worker_thread+0x8a0/0xda0 [ 498.023052][ C1] kthread+0x70e/0x8a0 [ 498.023072][ C1] ? __pfx_worker_thread+0x10/0x10 [ 498.023086][ C1] ? __pfx_kthread+0x10/0x10 [ 498.023105][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.023121][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.023138][ C1] ? __pfx_kthread+0x10/0x10 [ 498.023157][ C1] ret_from_fork+0x3fc/0x770 [ 498.023174][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 498.023191][ C1] ? __switch_to_asm+0x39/0x70 [ 498.023210][ C1] ? __switch_to_asm+0x33/0x70 [ 498.023236][ C1] ? __pfx_kthread+0x10/0x10 [ 498.023254][ C1] ret_from_fork_asm+0x1a/0x30 [ 498.023281][ C1] [ 498.024562][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 498.024580][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 498.024603][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.024615][ T31] Call Trace: [ 498.024624][ T31] [ 498.024633][ T31] dump_stack_lvl+0x99/0x250 [ 498.024657][ T31] ? __asan_memcpy+0x40/0x70 [ 498.024679][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.024701][ T31] ? __pfx__printk+0x10/0x10 [ 498.024738][ T31] vpanic+0x281/0x750 [ 498.024763][ T31] ? __pfx_vpanic+0x10/0x10 [ 498.024784][ T31] ? preempt_schedule+0xae/0xc0 [ 498.024806][ T31] ? preempt_schedule_common+0x83/0xd0 [ 498.024834][ T31] panic+0xb9/0xc0 [ 498.024856][ T31] ? __pfx_panic+0x10/0x10 [ 498.024879][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 498.024912][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 498.024933][ T31] watchdog+0xfd2/0xfe0 [ 498.024971][ T31] ? watchdog+0x1de/0xfe0 [ 498.025002][ T31] kthread+0x70e/0x8a0 [ 498.025028][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.025053][ T31] ? __pfx_kthread+0x10/0x10 [ 498.025078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.025098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.025118][ T31] ? __pfx_kthread+0x10/0x10 [ 498.025142][ T31] ret_from_fork+0x3fc/0x770 [ 498.025164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.025189][ T31] ? __switch_to_asm+0x39/0x70 [ 498.025212][ T31] ? __switch_to_asm+0x33/0x70 [ 498.025234][ T31] ? __pfx_kthread+0x10/0x10 [ 498.025257][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.025302][ T31] [ 498.033885][ T31] Kernel Offset: disabled