last executing test programs: 6m19.991393117s ago: executing program 2 (id=2469): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000f90000000500000007000000000000", @ANYBLOB="02", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 6m18.558116037s ago: executing program 2 (id=2474): ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xd1a3, 0x22000) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc9a}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x33341000, 0xb000, 0xb, 0x6, 0x5, 0x8, 0x5, 0xc, 0x30, 0xc5, 0x5, 0x9e}, {0xdddd1000, 0x4, 0x0, 0x48, 0x4, 0xfa, 0xc, 0x2, 0x5, 0xfb, 0x16, 0xc1}, {0x54000, 0xb000, 0xc, 0x0, 0x1, 0x9, 0x4, 0x3, 0xc0, 0x7, 0xff, 0x3}, {0x7000, 0x200000, 0x9, 0xca, 0x7, 0x9, 0x3, 0x1, 0x1, 0xab, 0x3, 0x4}, {0x4000, 0x2, 0x0, 0x7, 0x4, 0x3, 0x4, 0x5, 0x1, 0x7, 0xff, 0x6}, {0x4000, 0x10000, 0x8, 0x9, 0x2, 0x8, 0x0, 0xff, 0x80, 0x7, 0x9, 0xc9}, {0x5000, 0x200000, 0xc, 0x2, 0x8, 0x4, 0x2, 0x4, 0x6, 0x9, 0x3, 0x5}, {0xe000, 0xfffb1fff, 0x0, 0xd, 0x5, 0x6, 0x6, 0x3, 0x1, 0x5, 0x1, 0x2d}, {0x58000, 0x100}, {0xeeee8000, 0x86}, 0x40000, 0x0, 0xc000, 0x404182, 0x1, 0x1, 0xffffd004, [0x59ced5d6, 0x3, 0xfffffffffffffffc, 0x8]}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) pwritev(r3, &(0x7f0000000700)=[{&(0x7f0000000300)="fe12125bcade060395967a048e25e3dbe60cc4eb8f44511c8d84692cdbad6ed9148203e4ccfe2b1864a612c1227d99cd9f894a400d12a2302bab4326f7d1af5f16da1814e35315b8cdcf0a2fd44a3822b4a02a0e8627f4882fc6f57bfa6f90c6ad2db69df55648530c0ed6c6db5ada3060d0adc1f06fd50fc9b1fad99b9e9d14eeb64cac0caa1dca94fa85191a6361ffc2ebfbeac92fb3514db5bb6c0549b57717dfded4d5f49a8101d9a322f0a2046e3f1ba9f622ee97743a64a593cb6e76fc1f511e137eb269e27ee0", 0xca}, {&(0x7f0000000400)="3d706b2be4671ee69a6b1134d4729e68a4cb612adb4433767e87d58c5978b4c590cc4fccf9705d713ce1fe908c553b3a3241c29d526e9c049cfca1fdfd030af69b184a03e6cb3844e611bccb840d886f889dee489f12b84f4734aac5cda988e586ce7ee07d388386c6a3b7bfecbc142448e6a5c4994412a3cb85086bc3fe21fcbc99704544e65f27c135235fc6a85726253207b0bef9813815eafb44b07e6f480e78d7625de4021bb986a165631bc2cf272030c5945442bd19dc8f3010f9c7a97984", 0xc2}, {&(0x7f0000000500)="fa431a28dc89cc1f577fdd6cb5362fe381002f34a8e97500d2289b9ef27e387a7ff854c8d81a1691c8ea09efc3cce9eb477f1d58f32fbab4e61bc8115ae983aff8e093ea94e1d9da0f171db647a150e48b74b87a00b461efc2bfe4bf8eb337242c453488baa87989280296eea79a341b76e436346a34f07b9ae823f385f67ad599d35b70d745fcbc0dad546455483dfc2deeee2029d92ff0b40422027974b0f00e3b78686aaa92c7d701bb620a6a3bda6417570799b966bda43eaf013c8b04d52d65801f452c00", 0xc7}, {&(0x7f0000000600)="277486988258a0b03d2ec5cabadaca367c0900181475aa89c58a31787faddc591cb7e78c5a6542b00147d1ea4878253d4069f4c0ba10d561546049073a7436f19959d89ba440dcdd9730e0a958d64f2bca158e6ad75af1082724bdd7b06b7bcd972c659facee17744f9d1ce528ec58a345e420249d97ad38eef268bde1b48d82ba652549a0d05b048ab0b429db5ff3297a7fb5098c4bce55a46ccb4d691c5bc8099936a69316f90239ce09bb811dac18a49b5de6b5de1198d3cda8a599960f665799efa54799e91785c5525526b49ccfebc5cf812ca41a138859325dada18f1ca8ed63a34ff52485ba003df6040a", 0xee}], 0x4, 0x7, 0x7313) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x8810) r6 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)="d53e824844ae28ca6614e6b9f1d96b51ca8198cdda7b37fc3e2f4d109a14752d6739804933dfd09630b5e5ec0d4c", 0x2e, r6) r8 = syz_open_dev$vcsa(&(0x7f0000000a00), 0xffffffffffffff5d, 0x200) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) (async) keyctl$negate(0xd, r7, 0x1, r6) (async) r9 = openat$cgroup_ro(r8, &(0x7f0000000c40)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) r10 = inotify_init1(0x140000) (async) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c80), 0x400000) sendmmsg$unix(r8, &(0x7f0000000f40)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="64970e1a3a37a97e511430b4d35aa0b44f8b9faf6589f77bc39d5d2d3f40f27affc086fa6e82ee91bf27cff68e532ecb9b", 0x31}], 0x1, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [r3, r9, r0, r8, r8, r3, r8]}}, @rights={{0x28, 0x1, 0x1, [r1, r10, r3, r0, r3, r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r1, r0]}}], 0x90, 0x4000000}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)="a220475ab32e0f9c9186ffb9672059b6306b595ab2fd66be49990664d32c1cf4e7d67d74f6c37699cd58e3cd2b99e846d1c8e62769e3b18ca8f0", 0x3a}, {&(0x7f0000000e40)="967991988a87b80816a17882ce1907800833509ef4a337794759f2ba5f2cf11778fa4f8092830eb0a50364c45e1a0833864249ad35878de6ed269398544f6bb53328693f56bbcdb8b4af0f45f7b7ea8717a2f151b8931effaa6deb0cbd5725736c65368db66af3f677ee202802b731970a969b23b3f59f9e662481fe46c10f4a8510367e75dbe24e18152ff2d52231642b3a16bd873e8cbeae3935f070521491e739205e203e548cce5896c76cb9744d4ee5cb6a471d82", 0xb7}], 0x2, 0x0, 0x0, 0x4000004}}], 0x2, 0x20008081) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa792a15c00dba276) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r12, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1000, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) (async) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, 0xfffffffffffffffe, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r8, 0x7aa, &(0x7f00000010c0)={{@host, 0x5}, 0x7fff, 0x81}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x80000001, 0x6, 0x49, 0x67f}, &(0x7f00000011c0)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001200)={r13, @in6={{0xa, 0x4e21, 0xb, @empty, 0xebe}}}, &(0x7f00000012c0)=0x84) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) 6m18.351360451s ago: executing program 2 (id=2478): syz_emit_ethernet(0xb8, &(0x7f0000000000)={@random="16713b0bbdda", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0xab, "b6f5", "77acce", 0x88f8, "b6e5b0fa112ae6cf5880dc836ac80185537b74fafc85c4b320acc629cf4d801c7c3c53b98424b570f4dfb36b2e52f312e51043800e007d3639a4261bbfdbf4f251526c1b79c3a1d4c6fd9263190bd23c9b0a3368e37511ac9602514f7de19dfdd2a004016a72e0552bb1ef6a861d20c12c54c2a7b9d3829cc1756c81b82b2fff01348cf143f6315e0f6fbf2d5d71f567183f21e27915536dbe"}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xc0d, 0xe0c, 0xe4a, 0x38c]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="79b29c1ea01292c84d6e66feb0741d1d886a9f319671663f36", 0x19}], 0x1, &(0x7f0000000240)}, 0x40) sendto$rxrpc(r0, &(0x7f00000002c0)="6e006e971ebf8c836a6840d640c24d9878ab0430c60c7f249eec040941e7093b973b914f9bfa49e019c221f6ab20107e053fcd98ac965c28156883abc2b4ec00bb13ec2ff75e8d5b74a00754a48a023e68a5", 0x52, 0x20000001, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xf4, @loopback, 0x7}}, 0x24) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x1a78, @local, 0x1000}}}, &(0x7f0000000500)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000540)={r1, @in={{0x2, 0x4e21, @remote}}}, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x2, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0x64}, @alu={0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffffc}], &(0x7f0000000640)='GPL\x00', 0x3d4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_device, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xd, 0xfffffffe, 0x45a}, 0x10, r2, r0, 0x1, &(0x7f0000000700)=[r0], &(0x7f0000000740)=[{0x5, 0x4, 0x9, 0x8}], 0x10, 0xd}, 0x94) connect$inet(r0, &(0x7f0000000840)={0x2, 0x4e21, @remote}, 0x10) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000880)={0x3, 0x9}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000008c0)={r1, 0x8, 0x5, [0xfffb, 0x2, 0x6, 0x9, 0xe]}, &(0x7f0000000900)=0x12) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000940)={r3, 0x80}, &(0x7f0000000980)=0x8) fsopen(&(0x7f00000009c0)='rpc_pipefs\x00', 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000a40)={0x0, @sliced={0x5, [0xfc2, 0x1, 0x1, 0xfff0, 0x4, 0x0, 0x9, 0x400, 0xb, 0x8, 0x7, 0x5, 0x1, 0x0, 0x4, 0xe, 0x752, 0xfffb, 0xc4, 0xff, 0xfff, 0xc3e6, 0x3, 0xa3c, 0xf0, 0x57, 0x5, 0xa1, 0x0, 0x9, 0x4, 0x9, 0x37b6, 0x7, 0x1, 0x101, 0x8, 0x800, 0x101, 0xf, 0x1f, 0x9, 0x8, 0xd, 0x692e, 0x3, 0x4e, 0xfffd]}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000b40)={'veth0_macvtap\x00', {0x2, 0x0, @loopback}}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000b80)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000c00)=@attr_other={0x0, 0x9, 0x80000001, &(0x7f0000000bc0)}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000c40)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x44}, @local}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@getneightbl={0x14, 0x42, 0x4, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000001) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000d80)={r1, @in6={{0xa, 0x4e20, 0x3, @mcast2, 0x2}}, 0x3ff, 0x8000, 0x8, 0x9, 0x40, 0x6a5, 0x7}, &(0x7f0000000e40)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000e80)={r7, 0xf1, "7ad176ef82aa99e5c36a5df5e2b89fe543dc6dc6b1488e3c94b13dd01fb6b68d27c00b76333c50e3c5e58fa40bf3410a298d169db0e9ba8911e3c23075f2e171e1ae6d4c0051f3e0116545baff3b9a0342648c366055c06d59c66992f4c475d957fc9cd013b7b00fccfe876a71adc2b3e05f63c6094254fa523c69437ee43c3312e89846b2f3a723fb2e6dd9a73f8098a7d4f4565ce112e154a390dabca727c2ac2b11dbf2cdaccb124b17a9d86dfe3fe1069ff0568fedee7688ec3abf5322b636c551d16686eee9a30c4da180534a18a7aa5f9fe03ad6613695703f5ff1734335a651e6d4bf0cbe8089c9340a3d443cb1"}, &(0x7f0000000f80)=0xf9) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, 0x140a, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000010c0)={r4, 0x49, "e41f9e5c26783035232377796d9bb5506fee298ba049526e0854a09874bb570c92ddd2381e2dcc1e1807b23d116891ba01c2315b968ba49111bfd4c350310722da9be23c9d88c1cfc9"}, &(0x7f0000001140)=0x51) close(r6) syz_emit_ethernet(0x12, &(0x7f0000001180)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@generic={0x890d}}}, &(0x7f00000011c0)={0x0, 0x1, [0x3bb, 0x784, 0xb13, 0x8c7]}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$inet6(r8, &(0x7f0000001200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000001240)=0x1c, 0x800) 6m18.132398507s ago: executing program 2 (id=2480): mlock(&(0x7f0000563000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) munlockall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001d00)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x4, 0x4, 0x1}}, 0x80, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x28000101, 0x2, 0x4, 0x0, 0xe3}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x800}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) 6m17.419994066s ago: executing program 2 (id=2486): socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000300)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0x2b2, 0x0, 0x0, 0x20, 0x18}) fsopen(&(0x7f0000000100)='bpf\x00', 0xdab231892815ee18) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000fed1df2503000000"], 0x14}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000039c0)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000036c0)=""/175, 0xaf}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/218, 0xda}], 0x6, &(0x7f0000000980)=""/113, 0x71}, 0xfffffffb}, {{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000000c80)=[{&(0x7f0000003780)=""/216, 0xd8}, {&(0x7f00000000c0)=""/31, 0x61}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/183, 0xb7}], 0x4, &(0x7f0000000cc0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000001cc0)=""/156, 0x9c}, {&(0x7f0000001d80)=""/122, 0x7a}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/206, 0xce}, {&(0x7f0000002f00)=""/189, 0xbd}, {&(0x7f0000002fc0)=""/18, 0x12}, {&(0x7f0000003000)=""/203, 0xcb}, {&(0x7f0000003100)=""/192, 0xc0}, {&(0x7f0000000b80)=""/12, 0xc}, {&(0x7f0000003500)=""/249, 0xf9}], 0xa}, 0x9}, {{&(0x7f0000003240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/255, 0xff}], 0x1, &(0x7f0000003880)=""/260, 0x104}}, {{0x0, 0x0, &(0x7f0000003940)}, 0xfffff801}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 6m16.760361152s ago: executing program 2 (id=2490): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x42) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010101, 0x4e20, 0x0, 'ovf\x00', 0xe, 0xe1, 0x25}, 0x2c) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fcntl$getown(r1, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 6m16.312743508s ago: executing program 32 (id=2490): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x42) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010101, 0x4e20, 0x0, 'ovf\x00', 0xe, 0xe1, 0x25}, 0x2c) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fcntl$getown(r1, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m39.078800192s ago: executing program 3 (id=3238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 2m38.725102453s ago: executing program 3 (id=3240): pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x5, 0x5) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000004c0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b801000000430f20d9c4033921820f47a753fd", 0x4a}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x27159a6a, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xea0e, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f00000000c0)={0xe, @vbi={0xffff, 0x1, 0x8, 0x50313134, [0x0, 0xfdaa], [0x0, 0x6], 0x108}}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettaction={0x38, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008000}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2f, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) 2m37.499486923s ago: executing program 3 (id=3245): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000000c0)=@arm64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r6, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, {0x0, @link_local}, 0xffffff6f, {0x2, 0x0, @broadcast}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 2m35.956479109s ago: executing program 3 (id=3247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x2000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x17, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @generic={0x46, 0x0, 0xc, 0xfff8, 0x9}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @ldst={0x0, 0x2, 0x0, 0x1, 0x5, 0x8, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x6, 0x1, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x3c, r7, 0x917, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x3c}}, 0x4) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x6}) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x30, r3, 0x24000) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x2000000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) dup(r3) (async) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x17, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @generic={0x46, 0x0, 0xc, 0xfff8, 0x9}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @ldst={0x0, 0x2, 0x0, 0x1, 0x5, 0x8, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x6, 0x1, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x3c, r7, 0x917, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x3c}}, 0x4) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x6}) (async) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x30, r3, 0x24000) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f00000001c0)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 2m35.008874897s ago: executing program 3 (id=3251): setpgid(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007'], 0x28}, 0x40c0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0xc, 0x8, 0x45, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x3, 0x9}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r2, 0x3, 0x810}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2m34.744081941s ago: executing program 3 (id=3252): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x1d00) (async) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x1d00) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x479}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = getpid() syz_pidfd_open(r4, 0x0) (async) syz_pidfd_open(r4, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) close(0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = socket(0xa, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) (async) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r7], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r7], 0x0) 2m19.720548107s ago: executing program 33 (id=3252): socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x80003, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x1d00) (async) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)=0x1d00) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x479}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = getpid() syz_pidfd_open(r4, 0x0) (async) syz_pidfd_open(r4, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) close(0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = socket(0xa, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) (async) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r7], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r7], 0x0) 1m51.81963836s ago: executing program 6 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000308010100000000000000000000000005000300840000003c0004"], 0x58}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0x5c, {0x5c, 0x23, "8f8b961bbd191be33e6333260b0ce8826f2f7be6f6324e0e638d8b047f11d094a66d33f93cf05070a5828069bc81f90b368cbd0f9bd72531b3b2863496efa0011a321c037847673c9e9152fb546a212b489729568c605e08ed3d"}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="aa0cf0f6236ebd7e0a48a9ea3335542c948416d98458be5bc4cc3331cc98eb8a5a0468884209b32e7a2737e352f14c8a574121d78a8a686a3ac8dd4fd2e643a9225fdaed2e29b57ec3381fbc864eb7974fff795d7c40d7b0342dd315c8c6f3"], &(0x7f0000000640)={0x0, 0xf, 0x88, {0x5, 0xf, 0x88, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0xf5, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "70c940aa975c0830463042f87198b6d3"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x7, 0x8}, @generic={0x54, 0x10, 0x4, "a599d199948e42e7c47db4b2e316ee59c5aacbec88e70736848f036c3561c44cd74b37ed28f744e64f2b30dde7e1b5c808f7f9c40ff150225d64914a19925bbd44943a446926910ae1d16cdb0f6e72bdfe"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x82, 0x5, 0x0, "0fe96fca", "b4378f82"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x28, 0x80, 0x9, 0x3, 0xff, 0x2, 0x6}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x20, 0xe, 0x4e, "34ba68dff85e6dab30c3503061a9b724eb91f54b8102e92224c7dfe24c3e36411eaae60f43d40af9b32e3b9f6f43cdf6cb3c54adea8310d330da58807f2f9d895131e3c5fe45074c65c2641d17ab"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000e80)=ANY=[@ANYBLOB="200010006913c0251c21862582f9c6d64498e94d5bd67726908b3f99a9ad75bbb2bf148677483cb9809f83d186568bc994f666a3682e199e63f13abe6d87db09623a3bb4a760c29c0852ae08d22101217386e0efc365f6edd3792774f8fc11774991ef183dbc7020deed8b535dc6d2e043187444408435fb545b79697b1be3c1ef2fd56cc92cf0b041bbebbed4f331ffb3357118aff70fda202e20a90259db9d417061ecb59805d56379b107cca376135071714d6c533f1ba46e6e3625241b52adc3a9874aec6435994c18087057414fc900568b37a612e0852ebbca8266f4b8952cb2c2f81a378a626294"], &(0x7f0000000980)={0x40, 0x7, 0x2, 0x6c}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0xb, 0x2}, &(0x7f0000000a40)={0x40, 0xf, 0xfffffffffffffe4c, 0x7}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="755a26e0130c"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "91ce"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x8}}) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r4, 0x79, "386a1dee3402de3d00000000e50007528e171dac78aae2bd5b349f5f3ef43f1ad034280da14208073612760763e571b390dec33bd6182fe767ec4a06007fd58bff4823b67581d18f401fcddd10cb1d4e51d4f557af860e1adda26b41eb5c98669d3f754732e99a7137f4fd953d0728bff251d6ef2f2f11f1ab"}, &(0x7f0000000140)=0x81) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x1, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x6b}, {0x0, 0x5, 0xd, '\x00', 0xf}, {0x7, 0x29, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x1a, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0xa7, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x3, 0x23, 0xef, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newtaction={0xdb8, 0x30, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{0xda4, 0x1, [@m_bpf={0xf0, 0x18, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0xc0, 0x6, "305027bbaf2c12a0481edaa43dc78ac947cee438410e4f4e92650cadfc36f3766c94ba7f4190c91d62f18dc9159d1395348858d0929c3b8a96440c8b192333bd649514e967c2e1a4836c20f55cc8080ece7ce9c492bccecf4820f1843bccbca488c1c88acc97fecc91487f9296ee9c21b16e0428595ffb712a301121dbdc2f5cb270264b28426548bf86a467cde6a97dff318ef6cd35594aa8125d0cb22e908971330a167fbb3924999172f626e927a9c17be9dff4b84d70c0d087cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x51c, 0x6, 0x0, 0x0, {{0xb}, {0x4ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x17b79493, 0x10, 0x7f, {0x6, 0x0, 0x1, 0x3, 0x3, 0x7}, {0x9a, 0x1, 0x4, 0x4, 0x4, 0x6e4ac531}, 0x9, 0xff, 0xa7c}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x20000000, 0x1, 0x5, 0x3, {0x2, 0x2, 0x3, 0xc7, 0x4, 0x9}, {0x1, 0x2, 0x2, 0x3, 0xf000, 0x7da}, 0x5, 0x0, 0xfffffffc}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x9, 0x1, 0x8, 0x4, 0x8000, 0x28b, 0xf2, 0x6, 0x4, 0x8000, 0x3, 0xfffffffd, 0x4, 0x0, 0x8, 0x401, 0x101, 0x9000, 0x101, 0x6, 0xdde, 0xfffffff7, 0xfffffff9, 0x1, 0x1, 0x1, 0x10, 0x8, 0x25, 0x9, 0x5, 0x9161, 0x9, 0x9001, 0x7, 0x5, 0x8397, 0x4, 0x10001, 0x6, 0x4, 0x0, 0xffffffff, 0x8, 0x17, 0x6, 0x8, 0x9, 0x4daa, 0x3ff, 0x9, 0x3, 0x2, 0xffffffff, 0x1, 0x6, 0x8000, 0x9, 0x0, 0x3, 0x9, 0x7, 0xfff, 0x68, 0xfc, 0x0, 0x100, 0x7d, 0x1, 0x6, 0x1, 0x80000001, 0xfff, 0x80, 0x3, 0x401, 0x6, 0x7, 0x0, 0x4, 0x40, 0xd734, 0x7fff, 0xd, 0x1, 0x3, 0x62f6, 0x7fff, 0x6, 0x8c01, 0x26, 0x2, 0x80000000, 0x0, 0xc, 0x36, 0x40, 0x0, 0x7, 0x5, 0x4, 0x1, 0x79, 0x10001, 0x8, 0xfffffffa, 0x18a42d5f, 0x1, 0x2, 0x4, 0x3ff, 0x7, 0x7, 0x8000, 0x7fffffff, 0x81c2, 0x9, 0x7, 0x5, 0xa, 0x4247, 0x4, 0x7, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x8, 0xa253, 0xb270, 0x8, 0x101, 0x81, 0xcd1, 0x4, 0xf, 0xfffff800, 0x6007, 0x2, 0xfffffff9, 0x7, 0x80, 0x7, 0x4, 0x101, 0x3, 0x81, 0x7, 0x10, 0x200, 0x4, 0x817b, 0x4, 0xfffffff6, 0x7fff, 0x8, 0x5d6, 0x2, 0x4, 0x6, 0x4, 0x100, 0x7, 0xf381c9c, 0x7, 0x101, 0x1, 0x8, 0x7, 0xffff0001, 0x80c, 0x2, 0x0, 0x80, 0xe, 0x9, 0x8, 0x0, 0x10001, 0x6, 0x0, 0x3, 0x1, 0x5, 0x958f, 0xa, 0x9, 0x8, 0x7fffffff, 0xa, 0x97f, 0x7fff, 0xafb, 0x23d1, 0x10000, 0x3, 0x5, 0x200, 0x800, 0x7, 0x5, 0xdb, 0x450, 0x9, 0xfda, 0x2, 0x7, 0x530c, 0x80, 0xc, 0x6, 0x4b74, 0x8a1, 0xc, 0x5, 0x0, 0xc, 0x4, 0x2, 0x6, 0x9, 0x3, 0x1, 0x5, 0x0, 0x1, 0xfffff801, 0xfffffffa, 0x8, 0x8, 0x1d7f, 0x5, 0xbad, 0x7, 0x7, 0xc, 0x6, 0xfff, 0x0, 0xc948, 0x8, 0x4, 0x9, 0x7fff, 0x99, 0x1, 0x7f, 0xffffff07, 0x8, 0x8, 0x5, 0xfffffff4, 0x68]}]]}, {0x47, 0x6, "9e2156157bb4c28c1c244e000e4f83bbcb2ff84d3363a38ae74350c98ccbae4dd01acc042df803222c8d35bbea6377b78717ea5d562f0733f1ee7245521fca5b6d0ebd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xac, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffff0, 0x6, 0x20000000, 0x120000, 0x6}}]}, {0x68, 0x6, "fd5c1184b17c59a98293dc4de6bd9e9fb3fbc598be125f9e2c55cdff35ff1e35a99d9545f046b266429f20e65c8036ecd13e0184f409e7cbd7beb27ec2df95026851cbea41fe17c0adc4fc675a9bef029f3f7fa7899800611fdae84f67696ec236be8d72"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x80, 0x19, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x41, 0x6, "4c41c12300cd68affe1a9a56368c367b95c2e4f0bb65ce0b44fdb97c308050a01ff6cf1fd9cf7a8d4d2b2433035062b1f0bfd2b03b830a64a1cbee07c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x11c, 0x12, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xf7, 0x20000000, 0x80000, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xb, 0xce}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x6, 0x1, 0x6, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x584e, 0x8, 0x4, 0x10000, 0x2b}, 0x400}}]}, {0x7b, 0x6, "0a6c6b1c3fd50a07af3b87f71e855654ba1aea82636f3374e5077c1107d15530150af91952a0e4c2f33f3e20993b3c4bede0d40a38e36fbf5cea871c4ba81930522c06738f3f257bbc13b33b917c8c294536c9af17263ce224ae8783e24ec487632cbd3c6cace16a0c32b3099054e19385c75bf636d9f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x15c, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6b90, 0x1, 0x957c, 0x101}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7d3, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x1, 0x8, 0x2}}]}, {0xf1, 0x6, "ae377125db373821a30b52f2bbd385ae9741c53cadedb6c578da27e21b93dc80fc67787cb4355175d366a9eb3dc0d7a9e977e808f595ada3ffdc1ede7de8ac47277c99f80284f7eedc0bce08700be602c92481863fa341ee796cd2f33e07fc59e75fe3f2173782fce91abeef6238d22f91d2267201be4e8d0d5ec40518fc162da91493b18da54d156ae73ea23f7f979250f222a81dac11cd248c1be7487e192723b06a354e91e5d0ba9f2761959e2960b70ca3d4ce13edb47edf379173a99f4e452273cb501521cc2120b333f711aab9bf3e949727f127fd8c46df38feacc3f1b68d1c13c3e37a0940c5b2f1c6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x160, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd8000000, 0x6, 0x8, 0x7, 0x7}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0xe3, 0x6, "86ed06ff1bced84e6745bc144515cebebc0e0d06d5e3af289df66ac3e59660a5550a485ff2b831e0aa581dcbe49e024b0bcbc43f56de5e67cf4704a79387aa82940828358bcb395ad50773fd81d9ca90eda0e452db062827ad56f769268788fee49ec4666ef12beda150323b4fe0bdb81778dc21d79fdf13833c833ae111c08154490085998ed4fc2eb2842eddece6c84d48b99b7367487b3196e0cde8169db1931d80725c5b8dab909f4b0c67461a829ccc6bb00b4c6a8f0decbee6e105f01bd30f0ba5240cae32f21e04028c2bff69437ceaf48b7fd2446aefb8da340caa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x128, 0x1, 0x0, 0x0, {{0x7}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x88, 0x6, {0x6, 'nat\x00', 0x88, 0x3, "02ec93b98db5ed3b77293a2ec9c5160d2e1c7031dcddf23640152dec752d0b09c08f9ed72ca99cdac231194ec4bd46153c01705de0e0c28c708717f64c3a71deb2a5a0b0219509f9b500d7fca7407794d0ed0a1e6f231cb1f0ea8d949163"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xe42}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0x68, 0x6, "8f4608787618cc95d98e68213a93363fd597ec55523cd3b7e60c28efeeff2e747148634240b01bf684cf8a520227345c286f00a2aed097a71cb93f0605f72207e4a39abce9d1a25b25272733dee8f76081bd5cd39ef35654f1bef8c88eafb8cad188d05f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x168, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0xffffffffffffffff, 0x4, 0x2}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8a, 0x90c, 0x10000000, 0x8, 0xc74}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0xfa, 0x6, "ba6af4fcb1e6e08255c40c5c32d33815ea336372904f515cdb950a079c580d4517efad48970e0885a8914ce791f07f843f6cdeb857eb8c3c9cffe29d9f5493be2d2d88a885622d77e71f91a11d906ffe850410c69e0e87f585e77d21c1db77d9198bd89bb50858562184d18cbc7d6f6a02f8a1785e6a8216397b8ad2e83f0db945a7a63a44840c125da7df063970d68e8a64799afc225ade748e4584d25a6094301d48ab4097c2cfedb4fe741afba15a7dfcca3e4d6a69d299e5ec1f5a9593a920a9b64e8e44c7432d4bef30d626c6d45bcfa33ae3952b0d4f32b44d46f841b756feedf75009190720bc4a2825d5aa76274b32aa586f"}, {0xc, 0x7, {0x1, 0x45e1db26d41ca82c}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xdb8}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) syz_usb_connect$uac1(0x4, 0xda, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x4, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0xfff, 0x3, "14"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0xf166, 0x60}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x0, 0x0, "2cb38d5d6242fe1c69"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x80, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x2, 0xf, {0x7, 0x25, 0x1, 0x80, 0xff, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x80, "8a36", "f5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0xb, 0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x3, 0x7f, 0x8, "113225719a"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x0, 0x1, "d1569efcd45b2624"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0x9, "067653"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x0, 0xaa, {0x7, 0x25, 0x1, 0x81, 0x2, 0x6}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0xe9, 0x3, 0xff, 0x3d}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0xe, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x412}}, {0xa0, &(0x7f0000000300)=ANY=[@ANYBLOB="a003ff52a4469bf90dfcef63f75b8bccb4f1399850eb308c71181cc159b585f6d03b0e207ca062ca06b85f2672ee89aa221e5dbaeedd87ac179f924589436c691c68afff14e9285872bb65182d01c9ea40323e5c21937e1cb133446f55e1aad26140e5c33d90b52fe53ce9b0bbed6303049dd02929705d34eb33ad12e1be67c913315eba2c06803c62293459d443992f7148157a628c917424484d9b94247596"]}, {0xa1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a1035a69ed5af0910883b7a09f00d188e80fa8df022453a4dfe233087bc6a5c67e6fa04e32d9b07bb2b39e5ebc088cd40fd125e62a674aec0ea1657cd884ba289c1d2934cba110e2f0f5a992501dd0212ff98ea743dbe3dea4365477551365890c6838290051b1baf118208e48a5134ca51d1c5761052c0200be20dfcce2378db898517ee68a65e30d65be0500bdf12b273ba94d41e380583437"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}]}) socket$inet_udp(0x2, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036c00e0ff640002", 0x9, 0x0, 0x0, 0x0) 1m49.224270685s ago: executing program 6 (id=3409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)={0x34, 0x0, 0xb, 0x6c0363a3f4a04a60, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0xc, 0x1, '%:)(.\\&\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 1m49.188099614s ago: executing program 6 (id=3410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000063b703000001000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) 1m49.111268143s ago: executing program 6 (id=3411): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x3, 0x0, '\x00', {0x0, @reserved}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}}, 0x4084) 1m48.655269879s ago: executing program 6 (id=3412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7ffffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000004b53445200", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m48.38820881s ago: executing program 6 (id=3413): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40800) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000300)={0x1, 0x0, @ioapic={0xe000, 0x800, 0x7, 0x1, 0x0, [{0x8, 0x0, 0x40, '\x00', 0x9}, {0x8, 0x28, 0x7, '\x00', 0xf7}, {0x42, 0xe, 0x4, '\x00', 0x38}, {0x0, 0xc, 0x8, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x7}, {0x9, 0x18, 0x0, '\x00', 0x2}, {0x7, 0x8, 0x9, '\x00', 0x7f}, {0xff, 0x0, 0xe, '\x00', 0x5}, {0x6, 0x3, 0xd, '\x00', 0x40}, {0x8, 0x7, 0x4, '\x00', 0x8}, {0x0, 0x6, 0xe0, '\x00', 0x3}, {0x7, 0x5, 0x1, '\x00', 0x40}, {0xe6, 0x6, 0x5, '\x00', 0x40}, {0x1, 0x5, 0xf, '\x00', 0x1}, {0xff, 0x4, 0x5b}, {0x9, 0x0, 0x3, '\x00', 0x55}, {0x9, 0x2, 0x8}, {0x5, 0x3, 0x0, '\x00', 0x7f}, {0x22, 0x5, 0x5, '\x00', 0x8}, {0x2, 0x9, 0x7f, '\x00', 0x6}, {0x1, 0x4, 0x25, '\x00', 0x1}, {0x5, 0x6, 0x8, '\x00', 0xa}, {0x40, 0x6, 0x8, '\x00', 0x2a}, {0xf, 0x0, 0x3, '\x00', 0x5}]}}) (async) bind$tipc(r4, 0x0, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x0, 0xc0, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba"}, 0x50) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r11, 0x9000aea4, &(0x7f0000000540)) (async) ptrace$getregs(0xc, 0x0, 0x4, &(0x7f0000000180)=""/224) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) accept4(r3, 0x0, &(0x7f0000000000), 0x80000) 1m47.472204451s ago: executing program 34 (id=3413): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40800) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000300)={0x1, 0x0, @ioapic={0xe000, 0x800, 0x7, 0x1, 0x0, [{0x8, 0x0, 0x40, '\x00', 0x9}, {0x8, 0x28, 0x7, '\x00', 0xf7}, {0x42, 0xe, 0x4, '\x00', 0x38}, {0x0, 0xc, 0x8, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x7}, {0x9, 0x18, 0x0, '\x00', 0x2}, {0x7, 0x8, 0x9, '\x00', 0x7f}, {0xff, 0x0, 0xe, '\x00', 0x5}, {0x6, 0x3, 0xd, '\x00', 0x40}, {0x8, 0x7, 0x4, '\x00', 0x8}, {0x0, 0x6, 0xe0, '\x00', 0x3}, {0x7, 0x5, 0x1, '\x00', 0x40}, {0xe6, 0x6, 0x5, '\x00', 0x40}, {0x1, 0x5, 0xf, '\x00', 0x1}, {0xff, 0x4, 0x5b}, {0x9, 0x0, 0x3, '\x00', 0x55}, {0x9, 0x2, 0x8}, {0x5, 0x3, 0x0, '\x00', 0x7f}, {0x22, 0x5, 0x5, '\x00', 0x8}, {0x2, 0x9, 0x7f, '\x00', 0x6}, {0x1, 0x4, 0x25, '\x00', 0x1}, {0x5, 0x6, 0x8, '\x00', 0xa}, {0x40, 0x6, 0x8, '\x00', 0x2a}, {0xf, 0x0, 0x3, '\x00', 0x5}]}}) (async) bind$tipc(r4, 0x0, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x0, 0xc0, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba"}, 0x50) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r11, 0x9000aea4, &(0x7f0000000540)) (async) ptrace$getregs(0xc, 0x0, 0x4, &(0x7f0000000180)=""/224) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000340)) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) accept4(r3, 0x0, &(0x7f0000000000), 0x80000) 1m34.211995942s ago: executing program 5 (id=3447): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000dd352171b4d4efa61414eaa2ab461512e8775e907aa0b615e3f53f27b8bc16cad9cc1ef05c92b9bab151eeac3fd231372a754783a6451494b66238aeea1f566f19a4a3deb5cd64b1e544f6688e809ab9472bee6efd65cfac5d896fbdc9da1b07918faf9b3abc473e96e17daa2e727bb04d5854f509aa26d71b3a8f"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000dd352171b4d4efa61414eaa2ab461512e8775e907aa0b615e3f53f27b8bc16cad9cc1ef05c92b9bab151eeac3fd231372a754783a6451494b66238aeea1f566f19a4a3deb5cd64b1e544f6688e809ab9472bee6efd65cfac5d896fbdc9da1b07918faf9b3abc473e96e17daa2e727bb04d5854f509aa26d71b3a8f"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) socket$netlink(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x11b, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x2, 0x1, 0xd7, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5b184478"}, {0x5, 0x24, 0x0, 0xbfb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x7f, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x15}, [@mdlm_detail={0x88, 0x24, 0x13, 0x8f, "2b26df61759c79f74edb611648be1164ef4769bafb929601d55cd24c6157dd28e16f05d742d555e4de653740e47fa2471e2cf24d289df8ab50814fe61466bee89fd7cb89faa42bf1b19825ae4a519e13d1f4094ba0af46880fb0b23d39d7e3d1daaf913b1430383925d15cfe1f48bf258802a388f45fc314c660119e696c4c319bd43ae5"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x38, 0x8, 0x8, 0x4f7d, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5c, 0xc, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0xfb, 0x4}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x5, 0x2, 0x3, 0x151, 0x9}, 0x3a, &(0x7f0000000280)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x94, 0x8, 0xb, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x8, 0x3, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ca486d13eb156e464211d20feed33972"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x7, 0x4, 0x8, 0x7}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0xe7, &(0x7f0000000640)=@string={0xe7, 0x3, "d1d959aaa1489f2832dbc244b796941ae8d3bad7a00acf3f0e98ec874342b79638a8321f0a5b215e2522069d9761971e0ce2596f9c0c526f0b995245aa72e846a4e1f5d7976e99b0b6dccfdf58f141d554a2daeff7785dd762bf2fb7eed98e048c437ac8ee85a19d72c65bc323ad2301f686f249d51300e2ff65f4dd7068f57eb63ca7b8b492c9010e5a534adc72fac62d917e7881ad15c90800180ae1ff26e415bb0aec373c305410057012ea3a2ac5ebf431c8bd07d3577be511dbbc5013d082d2149441fa0ddf47f00870ef1ed2347d2946570c1dc2f8c97ba687279075570c002cbfcd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x11b, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x2, 0x1, 0xd7, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5b184478"}, {0x5, 0x24, 0x0, 0xbfb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x7f, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x15}, [@mdlm_detail={0x88, 0x24, 0x13, 0x8f, "2b26df61759c79f74edb611648be1164ef4769bafb929601d55cd24c6157dd28e16f05d742d555e4de653740e47fa2471e2cf24d289df8ab50814fe61466bee89fd7cb89faa42bf1b19825ae4a519e13d1f4094ba0af46880fb0b23d39d7e3d1daaf913b1430383925d15cfe1f48bf258802a388f45fc314c660119e696c4c319bd43ae5"}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x38, 0x8, 0x8, 0x4f7d, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5c, 0xc, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0xfb, 0x4}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x5, 0x2, 0x3, 0x151, 0x9}, 0x3a, &(0x7f0000000280)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x94, 0x8, 0xb, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x8, 0x3, 0x2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ca486d13eb156e464211d20feed33972"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x7, 0x4, 0x8, 0x7}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0xe7, &(0x7f0000000640)=@string={0xe7, 0x3, "d1d959aaa1489f2832dbc244b796941ae8d3bad7a00acf3f0e98ec874342b79638a8321f0a5b215e2522069d9761971e0ce2596f9c0c526f0b995245aa72e846a4e1f5d7976e99b0b6dccfdf58f141d554a2daeff7785dd762bf2fb7eed98e048c437ac8ee85a19d72c65bc323ad2301f686f249d51300e2ff65f4dd7068f57eb63ca7b8b492c9010e5a534adc72fac62d917e7881ad15c90800180ae1ff26e415bb0aec373c305410057012ea3a2ac5ebf431c8bd07d3577be511dbbc5013d082d2149441fa0ddf47f00870ef1ed2347d2946570c1dc2f8c97ba687279075570c002cbfcd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}]}) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.196041467s ago: executing program 5 (id=3453): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xe2, 0x4f, 0x92, 0x20, 0x93a, 0x2622, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x26, 0x9d, 0x0, 0x2d, 0x26, 0xe6}}]}}]}}, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) syz_usb_connect(0x5, 0x586, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xf9, 0x65, 0x8d, 0xe6ca2f91aca4fa0f, 0xbda, 0x8178, 0x8f7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x574, 0x4, 0x9, 0x4, 0x90, 0x0, [{{0x9, 0x4, 0xc4, 0x1c, 0x7, 0x6d, 0x1c, 0xe4, 0x1a, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf4, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xf1, 0x9e, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2dd1}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x6, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x44}, @generic={0x4d, 0x23, "0cf620edcfd50bb0cfd452c745ecd8dcdb2996245bad2f966763e66b0d224c2bbbe4896550971ca023f27fa43f8d640d77f7366b38c7658430ff01c372f56b4de8960965ab27f476b38714"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0xd, 0x6, 0x1, [@generic={0x8a, 0x8, "1a944c5ae3749820078324fd38dc084e4525042230b61810a492b328e38bcfcfdadaf8d113a8cd6b6a537df8b9da9c73d8e38cdd2f23af6ae30c47dc930bc9c09f3db5d7048b7d5a3db4915526d8c282d039955a42e2841291cd8b886846597bdf0b4d5f27e2881f78c4ff46bb7a45d3b3957c80b71bb50fe468aace2bc4376c0980c0a9d3e7b138"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x200}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x7d, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x42, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xcc, 0x6}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xf0, 0x5, 0x8}}]}}, {{0x9, 0x4, 0x8d, 0x1, 0x0, 0xda, 0x6f, 0xa2, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x2, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x0, 0xfb}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x5, "dc11f2f3da"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x2, "61ccae5643d8"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x3, 0x5, 0xb3}]}]}}, {{0x9, 0x4, 0x6a, 0x8, 0xc, 0x24, 0xf8, 0x41, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x401, 0xf9}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0xc, "19a1824e"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x2, 0x2, [0x5, 0x8], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x2, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x1, "99ea"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x4, "e86afcee"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x0, 0x9, "2730dc"}]}, @uac_control={{0xa, 0x24, 0x1, 0x200, 0x5}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x1, 0xf7}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x0, 0x4, "90"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x7}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x2, "899fbb"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x5, 0x1, 0x1}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x6, 0xa, 0xa, 0x4, 0x0, 0x3], 0x90}]}], [{{0x9, 0x5, 0xe, 0x3, 0x2063289582d80e47, 0x2, 0x1, 0x6}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x1, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc5, 0x101}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3, 0x8, 0x18}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xd, 0x3, 0x8}}, {{0x9, 0x5, 0xf, 0x19, 0x3ff, 0xa, 0x8, 0x10}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xc5, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0x47, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x60, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0xfffc}, @generic={0x38, 0x23, "ff34d3fd26965d429226dd6e4b1d2cec19fdad3918cb5bf7dee4660d2339c51f47b3c8cd0b5333ce13fb6bf506f1ab189b4e0ba495e3"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x0, 0xfb, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x97}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x82, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0x0, 0xfb}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa9, 0x4, 0x1}}]}}, {{0x9, 0x4, 0x32, 0xba, 0xb, 0xde, 0x27, 0xed, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x9, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x6e}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x8, 0x4, 0x9, [@generic={0x13, 0x8, "63bf1a32b355297e2a5ab7efeecaee9fa2"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x7, 0x37}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x9, 0x4, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xe, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}, @generic={0x8d, 0x2c, "8e3629d59b27f5823f7d5a5fbc74460194ce1999078000e63207f0ff9b82cc5fc136a78258fde9e1621eb60de3c9f504e3bd917d441d42d22440ddcc242a091f05bd27b981e76ed831081821db1b668683b45c2198cbf6299f4bfd2c70b2d29f59e27a2ee2e6d38ec56a85be5653fdae58f28615eb6f153d3882637809299dd5f2c1ae55cde06e19678753"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x6, 0x12, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0xfa}, @generic={0xcd, 0xe, "f185b80b792cde78d8b163aad344de7f1698e166140e978a9d81a7156feffd3802c179fa28ceb98a6a64e92132b272dc098c09bccc0bd248880dddface6f4aaeb4ee82f53c6ec8c18442a2845033e48b9dd33e89d9b3890febb8a08b3520659575b5ed31b69db0960befc8642b667dab228f2b83167dc728fa2a954c86d7ae92fa7118943d2c026c0422cab49c8e6da014b0798554abb542561c7dc8537dafb8351b7545da8ae0446dd656b5b125c7ac4c59b4086609d04849fae01a1ff09d64559da3f50292ffcd8121fe"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x4, 0xbd, 0x6}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x8, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}, @generic={0x8e, 0x11, "c63f95c77c6900a78b27f9d55f8d30cdf17fddab2fe99514256d309554ea7cde19b29b20ea3eee38663128b2573056c09472d8476ceeb3e813a91e4ac79a854ad48ba0ef97d880819e75d2d9b3eca6ddf55283d3ca98c12eba49e6fcd78bbe86d35f8f4c72048a9b94bb65e5bcd00d3f89bf6c7fc663df3efa9e223bb9aeb7f9853addbc3255b7ff95b33ee6"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xf, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xcb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x81, 0x1, 0xff}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x55, 0x5, 0xa}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x9, 0x8, 0x5, 0xff, 0x6}, 0xfcf4, &(0x7f00000002c0)={0x5, 0xf, 0x128, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "703eedef709cadd59a2ce6cfacafddee"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x1, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x9, 0xfff9}, @ptm_cap={0x3}, @generic={0xf9, 0x10, 0x3, "b49b4de92a11df52f8eec3dfe58729612b14694db34f1360293bbb62a6e2d2d1f0cda4a35cb66647c82baf5799a79a432a651830f3107035813cf13c604e8cd254842a2713c2db48fdc0c63add37f65ff7cc38f8235a1fede01f1c591e9b994c7bf9f05e692d0c7bc690b1164ea726b9228aa17a17835cbefce2acc0e164803224d318776f2f0c57e2b982ab8d05f613b44183c671a8dc5cecedc4c75e184262f2c1a8d1f804fb8287570da3e004b9383aaa60b9d8e7508df56bf2027b37db3dffa07f51c6daee3393a771e5791769710c63cafad84e895b0dd7ccc9e06112c17ada05bf613c2dc692574789658a3391c14a2aff5abb"}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 1m30.062918211s ago: executing program 5 (id=3456): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x200, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x44}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x21}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xaabb}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}]}, @NL80211_ATTR_IE={0x130, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x6, 0x7}}, @rann={0x7e, 0x15, {{0x1, 0x7d}, 0x3, 0x8, @device_a, 0x7fff, 0xdf, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0xc, 0x20}}, @challenge={0x10, 0x1, 0x7a}, @ht={0x2d, 0x1a, {0xa, 0x2, 0x0, 0x0, {0xfffffffffffffc01, 0x3, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x6, 0xc0}}, @random={0x5, 0x1, "1c"}, @fast_bss_trans={0x37, 0xdc, {0x2, 0x5, "9e4a93b74a5272974a6ced07eb58a3a8", "936948ba6e8225ee2f61ddcff041c0f0d570c454da4ced7702bc8bdf669718a5", "498de4f2df672f68ababd15c096384b15f321871d8da545b1471970ce2d47a36", [{0x2, 0x11, "5eb5bff309e3b34e638ac57e32fb825943"}, {0x4, 0x1e, "91f08ffd0ae4568a2e487ca7abd0bbcd1f5b0747a44c4cbff86ffa32d507"}, {0x1, 0x19, "839210af9a926bcd41a640032698c80ef49edbe9783d0280ea"}, {0x2, 0x14, "596a83ed96af2e908406309c03a9ca7f8e87cdb1"}, {0x4, 0x24, "83089bb339b61797473603ba2fa2f3dec0cd53ccc24e9cc9437972e26a155f1623faa748"}]}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x1, 0x0, {0x1ff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xffffff5c, 0x5}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x16}, {0x24}, {0x6c}, {0x36, 0x1}, {0x60, 0x1}, {0x30}, {0x16, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x16}, {0x60, 0x1}, {0x60}, {0x30, 0x1}, {0x1}, {0x4}, {0x6c}, {0x60}, {0x0, 0x1}, {0xc}, {0x12}, {0x9}, {0x24, 0x1}, {0x36}, {0xc}, {}, {0x4, 0x1}, {0x4}, {0x60, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ce4e402b71b2"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xe5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2cc0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5dbf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) (async) r6 = dup(r0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x17, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1b3c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xbf}, @jmp={0x5, 0x1, 0x3, 0x7, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x4, 0x7, 0x8, 0x9, 0x1ff}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0x3b, &(0x7f0000000500)=""/59, 0x41000, 0x40, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xd, 0x0, 0xf}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000740)=[r3, r4, r5, r6], &(0x7f0000000780)=[{0x1, 0x2, 0xd, 0x2}, {0x4, 0x5, 0xa, 0x4}, {0x2, 0x5, 0x10, 0x2}, {0x0, 0x3, 0x8}, {0x3, 0x5, 0x8, 0x7}], 0x10, 0xfffffff8}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r8}, &(0x7f0000000980), &(0x7f00000009c0)=r7}, 0x20) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x9, 0x7cd, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x7800, 0x8000, 0xd, 0x12}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) getpeername$packet(r6, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000c40)={'vcan0\x00', 0x0}) (async, rerun: 32) getpeername$packet(r6, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000cc0)=0x14) (rerun: 32) getsockname$packet(r6, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000e40)={'tunl0\x00', 0x0, 0x20, 0x8, 0x3, 0x9, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x84, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x21, 0x1, [{0x7, 0xc, "8f0962a58293ee111a00"}, {0x5, 0xf, "f0bec839aa7f16dff91eb8682c"}]}]}}}}}) (async) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000f00)={@empty, @rand_addr, 0x0}, &(0x7f0000000f40)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000001180)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1bc, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) (async, rerun: 32) sendmsg$AUDIT_GET(r6, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x3e8, 0x100, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) (async, rerun: 32) memfd_secret(0x80000) (async) r21 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r21, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, 0x0, 0x512, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x22}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x41) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44, 0x0, 0x0, 0x0, 0x1}) 1m28.570377675s ago: executing program 5 (id=3458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000000280)={0x7ff, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/146, 0x92}], &(0x7f0000000240)=[0x850, 0xfffffffffffffffe, 0x7fffffff, 0x4, 0xfffffffffffffffa, 0x800, 0x57d, 0x401], 0x1}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) linkat(r4, &(0x7f00000002c0)='./file0/../file0\x00', r4, &(0x7f0000000340)='./file0\x00', 0x1400) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="3e0f0966bad104b00eeec4e35d02b1fa0f000000dad3c4e2c9ae0b36f30fc777720f01c566b862000f00d8360fc75b0066b83e018ee8"}], 0x1, 0x4498bda7e2139f51, 0x0, 0xffffffffffffff60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SG_BLKTRACESTART(r7, 0x1274, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m27.23194164s ago: executing program 5 (id=3463): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000080)=0x45, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="0000004001"], 0x48}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x14, 0x0) 1m26.469203945s ago: executing program 5 (id=3464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0) r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x105000, 0x88) 1m25.131271736s ago: executing program 35 (id=3464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc0541, 0x0) r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x105000, 0x88) 9.472309719s ago: executing program 0 (id=3665): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x644, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x61c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x2a8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0xffffffffffffff5a}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x644}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_enter(r0, 0x4c01, 0x430b, 0x0, &(0x7f0000000040)={[0xe]}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) 9.088530505s ago: executing program 7 (id=3666): syz_usb_connect(0x3, 0xf5, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000772aed408680030bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f070d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e2a09444c03003a92a2010a240109000102010205240401050c24020000000000cab8e672420e061c80d5f2547ddca6ace511a70de5f46ed52b0589ead3"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0xc0, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x3ff, 0x2, 0x1, 0x29}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0xf, 0x5, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffef3) 7.001381959s ago: executing program 0 (id=3673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000000000000010002", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 6.895274166s ago: executing program 1 (id=3674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180b0000a9000000000000000000000000000000000000000000000000000000000600000200000000000000000000000000000000000000000000000080ffffff000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00001000000000ffffffff0000000000000000000090e299666e6c4b000000"], 0xfc}}, 0x0) 6.804392763s ago: executing program 1 (id=3675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x4e21, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x80, 0x89}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000080ffffff000000000000000000000000000000000000ffffffffffffffff07"], 0xb8}}, 0x10) 6.709926342s ago: executing program 1 (id=3676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$null(0xffffffffffffff9c, 0x0, 0x309040, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}, 'sit0\x00'}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x9, 0x4) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x29, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6.498508101s ago: executing program 0 (id=3677): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000000)={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, 0x0}}], 0x2, 0x448c0) 5.824281262s ago: executing program 7 (id=3678): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "4df58a881cbac78c", "890f374bee1468a38a1a985261fbfddd1b22800e828cebe882b6677020e26137", "1c138bdb", "95a47435adb99537"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x80000001, 0x81, 0x7a, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="274211074376353d63115f00000000000d00000000000000950000000000000080565abb96e4178f759d14f7d0b648b23bc11db130e82b8d4d2ff17652fddf577f3cfb0720987f"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 5.520065916s ago: executing program 0 (id=3679): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x4000, 0x5, 0x1}, 0x18, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x6, 0x9, 0x6, 0x7d, 0x2, 0x3f45, 0xc05, 0x6, 0xd, 0x1000, 0x0, 0x0, r5, 0xe6f, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x14a0, &(0x7f0000000800)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_appraise}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}]}}, 0x0, 0x0, &(0x7f0000000980)="5abb19") landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r7 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xa) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = semget$private(0x0, 0x1, 0x399) semtimedop(r10, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r10, &(0x7f00000000c0)=[{}], 0x1) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000080)) syz_pidfd_open(0x0, 0x0) fstat(r9, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 5.180034102s ago: executing program 8 (id=3681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000a40)={'\x00', 0x2, 0x5, 0x3, 0x78, 0x8001, 0x0}) sendmmsg$unix(r1, &(0x7f0000000400)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000880)="09ea676054ffae694f9567009e76f45a4fabafef3713d5af3d636433d5e74c263c58ff1a564f2bc9d15ebe89c6ef3938a0c47810bf8399e651a494c2390d85f32fac20a2517a27a53bb4ee5642141f5663adbc341f8fd0177280fd002ff5cb316e044bf1637266bc60f05c423ad6543926dd49a5be996986ae501f28a77d7b310b2fe15d1d9c23cb503f5c77e3fa363bc9774ef3aa12c1dd7e1888aa00366a8f940e8a559cff63869abb6bb94a7121767f82d86e526549038bf7ca894fc25dfc", 0xc0}, {&(0x7f0000000940)="20ef98501d2af0d5dba7b8e683242c31466b756b0ca1de615a69a6c4f1164d3b809117ef4a34ce103d686b9a80cd1fdcdc6db29b7a69f58bde5960b12712c1702cf58eec1c34954e98077733201395fc5afc0b828346fb76712273a6317acb77a7c3e86e1d8c95e81f879b081f5f61cbe1cb07baa6be95585062c344040194950063c0ae558fa204f31307b2befe7f2562b4d1ec8599a74704cc3c4ce930c57f3fbdd214496c100853bbbd01b387a98b136f10d4cc49387602cea708b89dc96647f1a493262b6b34a65f65e3e3eaff0bb1780dde50d3df7ed6322f3bd8d6e1691d88a8af0d02a2d9d031e2597ad711c5f30bc760e9df1a34d4f0", 0xfa}], 0x2, &(0x7f0000000ac0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x50}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80601) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0xb, 0xbe, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x202, 0x0, 0x6}, 0x10) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x48480}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="080000000020000000000000086efb90b006000035c409a432cba3c012bd922465162bac10d3834918e75888f8783baf80df478b05eba45a7970672aa2eae75937d3e1bf8420d2a3c34f2e6fb27b822daecc1812861ae869cca8161112c20000f07e6adb0b806f313fa92cf2f545fe7a2b42694ea8047f314a2f4cbea94513a20e9a15cc12a1830fb14dbbeb00477801e92c6aa669caae3eb0abec8624e75875e6da6bebbb087265f68124699998a97b5cbdde30f023b779f5f2e1cf25ea00000f92ee644ba35349d631dcc26293fb15255ddee827ff8564ad83c3ae59f650407bb7d6c168a9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000000d40)={0x2, 0x183, "dcc392e6bb9f10f7ba469f98335ff55323c2a0870d118c4ceaedc16660836200f774d47be23d9737d7dd5ae5112bee98f88e3ab920ef3d0ff31be2f0923ec9ab757baeacea270438d9d0b1d90d26c5bc63691da41b11f41cb600104864110bdcc1deb1782dca228ed42d583847ad2c967385eb4875d371745e706b4e95eebf246e853f4421d20d6b4ddca1869d71ff50f26ea27826da000074720d940000008d4f65c2d764b38576dc44ab425f7c7f20f91b6699a1606615ba8dd9e480d512eb6294830b838d7303f170269ac4c37d01a4f3cf6e93761b86f4d8fe70234a673a8c375aafddfb440500000000000000bac32370021e549aca2a8fa2bf3303614ac1c9524739cf39005741b3a329c6e6a0e9cb4ac04626f9ca22733b00e6f1da0600000000ee933fc1f027349810f8b672fb9f48538f2ab1cb39be02ed0c9994d87e7208a466c4e2004609d9306cc15bbb605c18d4164b5083a7aeb77aad92d121b34850b4e8d4af03ee8a12b696f5a5b4dbeb100cede54343b2c4c09a69fb91f07a31cd"}) r11 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) pwrite64(r11, &(0x7f0000000040)="a6", 0x1, 0xa) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(r0, r10, 0x0) 4.770064946s ago: executing program 7 (id=3683): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) setrlimit(0x8, &(0x7f0000000000)) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013dce1, &(0x7f00000000c0)=0x8adb}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x7f, 0xfd, 0xff, 0x2, 0xfe, 0x7f, 0x5, 0x9, 0x0, 0xfb, 0xc, 0x7}, {0xc, 0x6, 0xd, 0x3, 0x1, 0x21, 0x6, 0xc3, 0xff, 0xd8, 0x2, 0x4, 0x5}, {0x5, 0x7, 0x83, 0x0, 0x5d, 0xf, 0x73, 0x6, 0x81, 0x4, 0x4, 0xab, 0xfffffffffffffff7}], 0xfffffeff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x216001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000200)={0x3, 0x7, 0x2}) setrlimit(0x3, &(0x7f0000000280)={0x8, 0x1}) syz_usb_connect(0x3, 0xe3d, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xf7, 0x3e, 0x9a, 0x40, 0x5ac, 0x253, 0xa5ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2b, 0x4, 0x6, 0x6, 0x40, 0xd1, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x3, 0x4d, 0x2, 0x5, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x1, 0x7, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x26, 0xfc, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x8000}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm_detail={0xf3, 0x24, 0x13, 0x2, "6919d0cd48ff745822ac9280a2526d3c5bbe673ed97cb532df9dfd232c652c9ff2bb130e92d08e870ef826d4ba882f3857fe86cbfcd0716c0bfbc56887ac535e5dfe881d8501324d853c86e8a42671c65c2e216fb5aaeb8ea78138538755c3288d2e3af0b4d1ee36267ed165ec6da5da0cb98c4a1a444d53bcf1e0c31d8549377b279f04549bda81c5a7903d0cbe173100df45b3908aa7da5e798d53d03d32c61179ed85387b5056d4976a9b94d6272cf6af3aeb5a3cb8b9766ec9e65e11c5c3d4ebf85443614e999bd8806ffd91cb9443f3a9a8e37f76ae94632591cc1044bd82ae53ad0acc225e278c7a75e45885"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x1}]}, @uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x4, 0x4, 0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0xb, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6cf, 0x6, 0x4, "f006d78b8597d587"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x7, "053d2e629e36208f12"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7, 0x7, "8d56", "54b6a1"}]}]}}, {{0x9, 0x4, 0xb3, 0x2, 0xd, 0x8b, 0xe6, 0xd4, 0x96, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x2}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x2, 0x2, [0x4, 0x2], 0x10}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x9, 0xff, "f7a2403f1b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x6, 0x60}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0xf, 0x6, 0x13, 0x49}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0xa], 0x9}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x40, "96cfc00e736a"}]}], [{{0x9, 0x5, 0xb, 0x11, 0x40, 0x56, 0x1, 0x2}}, {{0x9, 0x5, 0x80, 0xa, 0x40, 0xd, 0x6, 0xf3}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0x3}}, {{0x9, 0x5, 0x84, 0x0, 0x3ff, 0x9, 0x4, 0x60, [@generic={0xb, 0xd, "614f022ed597b2ed87"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xfa, 0x3, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xfd, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4b, 0x9}, @generic={0x4, 0x23, "deb7"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x2, 0x0, 0x8, [@generic={0x3, 0x22, "81"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}]}}, {{0x9, 0x5, 0xa, 0xc, 0x210, 0x0, 0x5, 0x7, [@generic={0xb3, 0x24, "98ae157da12691a71cbb6c02217646b58f8914c483016caa30731b755d3666ec7b9a1c6a1b0a7ad30fbf7cdd0df1bd978b48c1e83a2378ce0a319e936696281af726736839c873e43101323c076d03b5e34113e7387cb3a74f063c438bcfcb77ce0a204a3d90473a3026726d72d3f6c3c77f9a3a5a673eab3b917285d09af801cb1d20cd918ab324243d7a9c48bff216325728cf4f69b2c3fa31778f2811e36317eca5d53d63746568ea00d79d64f04519"}, @generic={0x6a, 0xe, "4119f2c5f2291ab900b05e478cd38c5630132a4b8853b64bb7ef18bb50402e4496bfdbcf1dfcc5ba95789bf9cf746818ace726b9dc7b4a0c5f67952f34e33eebb4244c2891efaabacb961f65f8a761ea4424e1dde5972352e1219008c22c05a12884dd53b42b67d4"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x8c, 0x7, 0xf, [@generic={0xa7, 0x1, "74de4fea97078d39d2f24665fbc4c0561c12c22df185c92221a705df66d73a59d3a120f880d7fdbd0f546fa3d60e7052303e869305a8aa8832fb0d82b2d49d2fe99ee00eecedb76952b335fd7c07fcd57426be036ad592d759feb7bc0254b0b9b5f2d0c82a7cafacfba7aab1ff7d8e827c985717fe55456bb5fe342d9df70e235557ded174cf21127d0f4d063604f9a0f3f118a847094a7379caa71ef64e8af02b4abacea0"}, @generic={0xc4, 0x8, "f38686ea24e9110e36a3ebf12ca73e1f60d4ade3959cf778914a48b56ab653b77c700dd6efc9f5e8a04be72cc9b67d2594245dae413cd1bfff85a3a972bef0fd2105fe2a2f865defcf28176f8be22c3ee233b9d9134aebe88e2d2d1c443a4dc688b25ca54a2b4f63169378d28108c30622556873d87fc54e68cc7fb1abbcc9636843e58a46bd9556b63eea39a971d9bee0894462f0ba64a0f66641137abdf5bdd64c6c3a1a3d74758215d26179279e36457ae0067559fb0ad7d847bb9a119ef47f08"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x5, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x2}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x4, 0x8, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x38, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa4, 0x5}, @generic={0xc6, 0x2, "5c180293345481cd9225872a39cade9b81bd19064b0ccac906645bc586b58ef81bd64b0b0ec0222266dd2e8ec04a8a04d57c03bce8c4a7de2362f79c97f2c9a34b80d4f9faefc07978752fd8dcfa28b4aeeb50b7577ce9a99e035fe2f6073935106d35597e0440b84b43263520583ff5b65159781ad61397ad2194962b448335d68a83de555f5d8df5cb1e18b540bb24ecc6a65e218e3be9e131fddce48346ed2216f4dedce7390d28fe4d331b0987f6235edf7e38744fbc501994e444ee7db049fc8be4"}]}}]}}, {{0x9, 0x4, 0x14, 0x6, 0x8, 0xc2, 0x45, 0x25, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "71e14d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x6, 0xfff8, 0x3}, {0x6, 0x24, 0x1a, 0x40, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x780, 0x400, 0x2, 0x3, 0x1091, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x3, 0x7ff}]}, @hid_hid={0x9, 0x21, 0x1ff, 0xc, 0x1, {0x22, 0x9f4}}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0xad, 0x8, 0xc8, [@generic={0x1f, 0x4, "a344e7c29dd607d3776df9c23675218f926f3a96b46a39672bd994feb1"}, @generic={0x78, 0x3, "21716ecf77e50fcdd8275631d871f6c68e878f0a78f462fc111180a8962e34079202d3eb983126025cd2a46a5411d0b2a9755a32a150f8ec8a3ebf516f0f1e11525c5fa50953810ae77f6aefe03cb65b4256b6c396980aa2bb1c2bd24d239ee2c9cdb6cf431be2c3c4e85db3d6d72722300e050320c7"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0xe, 0xb, 0x0, [@generic={0xe6, 0x31, "2bd2968d5a27dc610e2f5523a71ea4d21f7a8307b19ac747420c6636af961369aacccea7f44681a82c743eaf640af3df42be397a246b7546bacaf327c2441359d3dfdd732112e138901b2814a4b050dcf93f6b306df54ff080722214c58f33676744e8ff14a75dbb5a69e972b14eb07149251dbbc89d674ac2d0f5343754eccdc7bda078ad4ee00152c9cbebbc635560d2f7893df1aa41d8706a528ce8a8fcf62caa30bc242f4e4ce8ccb51d8e28d3510e814b6bafb2a29822684c20de189adf8843d8da8b76e68af52a53d09b57baeb50c4d92d22991a3814a5aecd6abb6b10adbe4f00"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xff, 0xc0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8, 0x800}, @generic={0x5d, 0xb, "25a7e3fed13180e27548c973d49427d594b1af18e82a459a8428bb9e40f2d9ea5f5c307e4a8a6054e14c35b1d3dbbfd6e2ad594dc087789a3a3533000317a42fe55c53d3a75740ea83b8beeb5868cc259ea4d9f6369b4c69530467"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x4, 0x2}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x2, 0x6e, [@generic={0x67, 0x7, "3dbee44e2af2054945c0def9317a7d8bcaee5440bd16a4a7216e93bccd3d8788f80a9dc08205a3e9bcbe3b5c0b5325f6eddc7ef9c09d1c64e16be05fa0f999364e068f31f88c3ef86041c860933a3b351fda2fcfaf71282e20e063aa3fecb0cbf524f1a100"}, @generic={0xb3, 0x10, "a1afe1437cb3209a536aa433ade71e99d3fb4534821ade13976c9cd74f0d25e1822d9e01b928fbd83c72898bdd2ed1a226b9a927169c034f8ac98f0e7fefdb1aae54fb49648823ab36480204d6d6da59f10831c6c4242207fee08e4970a79d2ae2ce127f79a693aad51ea5f393628154ee5a4948332aadfab9d4346cb36dd9b5ba2d5c4cf5ec9ce39dcc2bcdcf61b6cfb8f40d0548f935fed45cc4ace27daa00857dab22a7a8560078a376926add99c1cf"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xfe, 0x4b, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x6}]}}, {{0x9, 0x5, 0x80, 0xf, 0x200, 0xff, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x33, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x400}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x2}]}}]}}, {{0x9, 0x4, 0x64, 0x3, 0xf, 0xa5, 0xfa, 0xb6, 0x1, [], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xf, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}, {{0x9, 0x5, 0x82, 0x4, 0x200, 0x4, 0xe, 0xb8}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x50, 0x3}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x3, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x6, 0x8, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8d, 0x66, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x34, 0xe3}, @generic={0x4b, 0xb, "6ead287184eb23ed3affe561d0f786b95cf9e5c311793fb2cfbe8d4890035a1b24e677ff3a21ba2c4d596b5f423bfd102e7e9d8d90551f42a73540f66ac3dd0c85578aa29947198d1c"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x9, 0x9, 0x2e}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x9, 0x8, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xf4, 0x2d, 0x4, [@generic={0x9e, 0x3f0d4085f1b0bdd0, "3e9d2466ea0439987011df6a77ae435adcdae257dc7c4860dd142131124d1b74b1f883417212ea6a032b5ec5ad1a47d2efccdcc49679fb89a65dd50b1150e53d0ba95e86f474f01dcb17220963bb4977b452082e7d1b418ee8eefc991f808da08431ee9faea016d2ff63ff7967e77b70e73f40f8e4f875262f15f09f00be45305331c0b1ba91a0fd343ddde1d8bc34c219c0db3189bada96ab8efc61"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x2, 0xb, [@generic={0xed, 0xf, "60acef1a2a9eb8da6a2b3a862a699383c4be128e6ff7aebd463eb7990e9af548433b8ba94bf736f0920a09b3248116074ee5d267384ad338965101f2e118bba2b16f18e593c126931272cfb9265219b82fd34b04f9d5aba010afad0723d592a4b36f9179b53c1fa57ad6dcf90bf686b1d4b3882516c8abe7392b8cae23fa56b8f814ff5e553ba4076c326dcd6b3f914627e84d3d7446d1670197eb173eaa9dd9c2260059a293688d07a5c4a5af93e08b79c90e6bf7cba1ffbff08a03303643fc92a2637603e53d7939a25c30b7ed5db2087c9ea6c4ddb19bded57090587f74e4129d1cbacd325fa8ae3303"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xfd, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x1}]}}, {{0x9, 0x5, 0x7, 0x11, 0x200, 0xc0, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcf, 0x1}, @generic={0xcc, 0x22, "976cf8c3914161977b1ee21939f7c54d8371e3e0b127481a749d0464969e515af29814e4078befa2211a3438eac3a5bfc652b4c00c789e60bc4f10430af49d28770bd14070403bdfa28287165394cffd5f829d5ea5a86b4065e08597e035accbad34fd55fd30dcb06283c13e328dcd965e21151a7f0d660ebc6c26b59545f45028a42759bf0b4f129cce6bd5a75a42c34bfdd482a182f4fcd355d65dc283d6e719b753d6d64cdfd11d681d7145a11b32fd51d9701a4db50a6c7ac171ffc6d206ebcaeeba57bc4380b3de"}]}}, {{0x9, 0x5, 0x2, 0x18, 0x408, 0x7, 0x8, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x9}, @generic={0xa8, 0x0, "7ae913e96eeba5a9fc0449ea37c8adfb1d5960f6419d070341004a47e9095e6b49f26aa2461b08dc1d935691acaeee26e34b3a9c2faecb02fe503470d8365ad39f8461a2977f636b97f3d7b782e56c8f38d66992f06acae53ab1684e2ec30b260714cd45201493a8ceb67288831ae0c5f55a9d04e6bbc912eef288867b91ac60e7f40f182e2a8af54f4ca53f32e2d98d97bbfdee5a05398fdfa6054ff47d229f3471c5ef27e4"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xb}, @generic={0x9e, 0x0, "3e28ed736b1f8b7c49bb98f804258fd2840b2c8d829e2c7033088a5d79e25651d0cf21ccb4c75cda13e09b8d0c750c491b30377a2e0a835d3c4418e8aad1cabfd219dcf328c21ad07577dd0b5037f15a6628c0c5021212bad0bbdd32dcbc484d73a1921200ae4f6cb3c4625d80faade12a27a0834befd1a7c16dde8685bcad52c4f2336872ab4298c986864a885effe1599f6bc5d5f2cf2c568676a9"}]}}]}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x110, 0xd, 0x3, 0x7, 0x8, 0xab}, 0x2f, &(0x7f0000001140)={0x5, 0xf, 0x2f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x7, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x7fffffd, 0xf, 0xf454, [0x3f00, 0x30, 0xc0, 0xff60, 0xc0]}]}, 0x7, [{0x8c, &(0x7f0000001180)=@string={0x8c, 0x3, "db7af3dfdec2a2b44836c333fd0e33d4b7d2c0c953f92d8521239d6cb7d4b26158f5642060450cd1bcca4cfc49827eb6fb8b3db28aea7aa5d3134af53876112fab4fea9cf3fd3203be17a1807d55b093c2d1bf59dc0090f532b9a71b1acf235926cfe9019760bc0a02b9aca95112c215af7ff3892e0517e5e7573793b64ff2fabae33828c6d7d9cde3c1"}}, {0xa3, &(0x7f0000001240)=@string={0xa3, 0x3, "7c5a66ac64cdb314e77348800c11048b8e0e1f9a3faa7f69fa2553ef74627ea619ab04494fae8c2993cce3c95567755e98bdb47995af2ae99e9de28d6fd8b85482019a456a1f9d26f4b97e099b7686a183c70ecd6479f4f9ce7d922415e3a37cd3772963187ea587d67744849a254a1d7405d7dc46441d09ac5c24d9cdd129b4800b54c6b9cf826254b9ac19be7dff72cdc7220e48087ce6a0f041ae1ab6736dab"}}, {0x6e, &(0x7f0000001300)=@string={0x6e, 0x3, "6c729a545bf6bc30510ddb30dde18f83590c47599b70240819119f3c205c34b72334ad32c89affbdc26d983e939c7f2cf6dd831ef5d4779092ad2faa5dc14368c021820d15cb67790deff4f26bc840fcd0972ae695a7a4467ab14f7bb4911a52ee785c18d3921f6d379e6101"}}, {0xd0, &(0x7f0000001380)=@string={0xd0, 0x3, "e77d591e8b18d6988bd6176d1e7c9949ea2fcf17231ccae8f44fa3a342e49cae3acf62116b553c3c282d039f5a3cdad53ff4a4c029326a8e1d5f9162813db5f4237dec3f147d79a5adcc0eee8922447ec90018b3c1c1e16fb7c61fd87deb078392c49b7db87cd61ed26028ab5f22018cfa29541078bae3dc2a8ae4461eecf0d972b7112c89bf2ac6c8a96da557388a9e6117930e3f979002d53f5b1099bf76b4b198fc114a3b6ed8ca14c492af6e585820455c82a73b1e57e8ed192fff3bf65ad87de3f6fc980ef197256afe5df0"}}, {0x1f, &(0x7f0000001480)=@string={0x1f, 0x3, "bc618b4c43f405250e7e22897492de4c5a1114eaf8c4ea7f2f1e522b77"}}, {0x37, &(0x7f00000014c0)=@string={0x37, 0x3, "e01a58aa5d9f6550841785f23673b95410751dcb6033c170f0ffb9b51936013aa5e8faf1b1a5006eb6dc5554ede87cc0752e8cfda4"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "b49422269aa421a42e36e3113cc82014b3a223b51d6cf3f3450b77c63dc74ef0cadb96c56c4b26820534bceba82e33a2ad78ef530827233f878863ca69272c"}}]}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001600), 0x10040, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, 0x0, &(0x7f0000001640)='./file0\x00') mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001a00)={0x0, &(0x7f0000001680)=[@wr_crn={0x67, 0x20, {0x0, 0x40}}, @nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xbd10, 0x1, 0x6}}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xf7}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x200}, @nested_load_code={0x12e, 0x51, {0x3, "36f365f20f302ed8f1470fc7b50000c0fec46375460a00410f784f0067470f23b4b8010000000f01d93ef3460f09470fc77550c4e16d5e6877"}}, @nested_load_code={0x12e, 0x7d, {0x1, "410f72e70a3e430f011dcf0b0000c4a13cc69d4f702b7703dc8b92da0000450f01d148b80f000100000000000f23d00f21f8350000000a0f23f8b961020000b87d251a8bba7588c3270f300f01df66baf80cb854198c84ef66bafc0c66b8000066ef460f09"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x498, 0x8, 0x0, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x1a, 0x4, 0x3, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x3c004, 0x2a08}}, @nested_load_code={0x12e, 0x62, {0x0, "66440f38f51b36470fc79fa0000000c402dd8c72a9b94f0300000f3266b820008ec8640f01c0c441cc5c63b744df8e0e0000003667450f01c266baf80cb8b850308def66bafc0cb000ee"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x690}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x81}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x876, 0x81}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x368}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000001a40)=@x86={0x5, 0x9, 0x4, 0x0, 0xa5, 0x5, 0x9, 0x9b, 0x7, 0x2, 0x7, 0x6, 0x0, 0xd, 0x6000000, 0x2, 0x3, 0x5, 0x9, '\x00', 0x5, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001a80)=0x0) sendmsg(r1, &(0x7f00000022c0)={&(0x7f0000001ac0)=@nfc_llcp={0x27, r5, 0x1, 0x5, 0xed, 0xe, "7d7aa8026e7100f9e93c9d5cc0b857ea8df451ffd0b4bd4496174e129e7fde41a6dd29a05399d8f797376a45032f7844faaaacd931272225d98d2575f28cda", 0x10}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001b40)="ab11edd6622bc57d468a110c19ff1870f6d73d9ea37978cc4ff713f502a54a274f51d3058331c79273c759f843e17024c35dbfd5d8f73f8cc0a4361846e64748b5c5cfc57d8c11078b26805effdd7c42fc39ebe30358d5cb43d67ce0a27f0fbdbed6f525fad2d0a8d2adb79e73edcdef4b1fbcfb8f7c499d27cca3697748f13b65ab8a585e65e79ae6587261d49fc24832f5cb62b97ad7a0b774c2889e4b42ae5243545086ea3fbf37f55f", 0xab}, {&(0x7f0000001c00)="07386cc89014f4cc286f2074c85a9e95f75b735fb940dd1aef91437735b67a00191826a1fd76a47596d1a2aa431667db5b7e3ebdb29e4362b6f136dc974a8bb3c59602a5efc720f77beaa11af5e1e6a471714e2793c407a0d4b43a062ba5c70a0d8e2ae2895dab893ed9b2a5c8a30b8ef610ffe9a6c44e39663ef55727fdfd60d3a01ba882e24add587e048e0e33a8c6e21e99c35a87bbb086fa1b7932526de344945bd827811ae7188bbc7cddc54601f5399c0dfd95029a93e1ffa742319d2367fb5c16c66b8141ad565cd65840", 0xce}, {&(0x7f0000001d00)="dc5f2a742da9afc2e8414e40948bd95286703466efc2d0f38b8eeb6ada62ccd922b38e6ecaaaa2cb79c707b9855efb3d41fa482d66637bff0e36753e215dee6856f09ae17fe311068ff8b5f3c6e1bd90e70d8b29", 0x54}, {&(0x7f0000001d80)="81c1e8733f3cf24a62f7e8bcdd5cfc974196a8492f7e4398f60d700e7985c406f3e54d61724549725fd531b4bed66020812aa5d01d3b2fb38d02df862889f7841a7db6a9772b9eb047aaebea9ae148387e90d9825a85e7a1a544229d698406f51690de48f000f494983de61fd7fa264488045835b63158825407938b4f3497a8ff39a6b767979ac88ff0a549ae8aacdf655f15cd88f7c45f71eb10daaca10f7b66e3d9129d45d7e84bb74c301c499d48d3211eb5cf9b22ff7a17391eff4c25e83c828d7766867ad322074b40f9e37bd3d77eb10f496ab7df0ed55b9f717123806d0f5044e85c056eb8fc18ef6d28383423d2bced", 0xf4}, {&(0x7f0000001e80)="2addb375ac9670fc2daf2d5c9c1f6b", 0xf}, {&(0x7f0000001ec0)="f59397e38779178f671a5ad413dbb59394edb41e97d6d337f90a6ad2cec986464950c45fff7003c52adbadf6101451abcc9dc2c9b3a2888fa19f6e2bbcd1260f006299c605a3e6165ef5eb60f12cb8c86d4ce9613f56de09213b1d99c1614320e301d43cace6bde64c6c76937cb3ba2b9be3d5e6f8f2a22f2a1f4d179cd5caf3a32f275057d46b5d3a3fd25c2fa2a856bad22fa75913ebb91704de709485ba6f71d4b69efbda75b95b3a00109aa5ab88665fce126727f5c7d7b02de97762041d14db94a5bbfdabe257fcc0cad36abe677ee072c114cb935f93fa8fd4906bac18aae35834740bb7616db69276867f6d691513de5bef6ae68b7f", 0xf9}, {&(0x7f0000001fc0)="a30963063cdee9da3f1fbe16f07b9c30aa4460596a29f986a5576ca21d53853537dfb4d746235c7fc93aa24cff00", 0x2e}, {&(0x7f0000002000)="c906c741917e2ac27b7012fba01ace54fe7ca79b667e42adc5a917885693340c79620e1c8b8bacf6f924a8ffd2342852", 0x30}, {&(0x7f0000002040)="b1292a455dd69875b26a6a9bdc5a575090f27b5a00b2daa234aedfbcdcef138f5c4fa2ac461873cdd5fa3c89465062cdd32957b047dbefe914e3b6fefbdfe95241a46d11ef92927c939a5f6358362aff920e3d3ba5f0f10598a42b00042f3ee96e8637c939abb0fa1f0d665e41fab60cb1a02bc93c63fce4890f6457649bf9ae0dc78efc6ef430f27561838699f0dd98298490fa44f0729a3a8053d74e6eca24b6452f28f9373d08a93578b050a3847b", 0xb0}, {&(0x7f0000002100)="3600285c41a468e222aa7d6768a4aa23dd02792eeb542c9defec17ed8a33e695cea249a7b19d43e920f69e8103e030ffa663f79e42cee9b4ccde7edb301c48fdef3eda74d6732476fe42e07357a1b36f12260d888cc35aa7470308cf239d6648c21c300d917f1d3d386463a0a1a155517bca0477057de1a5f0d02e9adf2d1e18554fcfa8146d4325f95b6c5f632f6cf05c542ef24edf0043a82bb3a8579f2a06ac68ce9cb3b7b03321c59b560e00664bea2263d73e720f37a8b4bf5ad9cc446c30bbdbdbda196d2402330ced5a3bd9f0829da8c136235c6c93f90cf2b481", 0xde}], 0xa}, 0x48004) syz_genetlink_get_family_id$ethtool(&(0x7f0000002300), r3) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002380), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000023c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x68, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000002dc0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x6202c6ec93596487}, 0xc, &(0x7f0000002d80)={&(0x7f00000025c0)={0x798, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0x78}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x4c4, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xb}, @from_mac=@device_b, @device_b, @device_b, {0x7, 0x2}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x286, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @random="efb5b7f75670", @from_mac=@device_b, {0x5, 0x6}, "", @value={0x3, 0x1, 0x0, 0x1, 0x8}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x12, "a8cb6f4595e11d6c63287336b2fdb2e4511b"}, {@device_a, @device_b}, {@device_a, @device_b, 0x13, "b233208ac0bf585714140b48b428a697c8896b"}, {@device_b, @broadcast, 0x8f, "67942fb4711421050bf5384b8d615335d851c7d9cdcd2b8acb560a1c0a9b5611f02668d37a97965dab0b5575d069612b07e698d57c580a077cafe6f83e65b5105ec1d944d105cc5b7b790dab063a01847a96613282c7109e489ec874a5c8e1bd404eec8cc1d971442306305684dffe94898107741407d20f0fc44b094b29ca4398fc21b24117d452160066b07221d2"}, {@broadcast, @device_b, 0x9b, "f618c8d5e54c5e8a38aa6d9c23faefcdd219840d6ef9fad878b5a677d0c7da3025fe6bdee5e7b7a682eac329df58c5add4f80ea6ea23ca602e29b7852dc73f11d2892ca81bd4effd0938a11ab0593da655cdb0aef7756c62140c960d1a13d4fd244e2d7986ed984cbae353b1dc9f80c76e7de271f2bd32af9cecd1b29c797973314e74feaf7344a886dbfaba3f0f5e10c855cddff87b24eeedf8a9"}, {@device_a, @broadcast, 0xb5, "1cb8a15a74705383b8003ecd12e13c7aea8cd06f1483a48967a4392e2191fd691079ba114993349ef54f7944f4139a9696654b216baf59e003fcb996c5f4c2823e422a561c6d13f10fd95fbe330e35426066bcce501d9ad1ac8bd3c749d9f5345868ebfa4427fb866321b6f31992da09cc022b0a774eb8f2f8a5db78b21cd6508d7a094c2c65ac0b8b6cff0eea89608d68bf78ee24da3fce1c59453fcb75f38297fc082ef1bf4077e310c19101e2074d9d27def4fe"}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000002e00)={0x0, @in6={{0xa, 0x4e20, 0x1000, @remote, 0x5}}}, &(0x7f0000002ec0)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002f00)={r10, 0x9, 0x3, 0x6, 0x80000001, 0x2}, &(0x7f0000002f40)=0x14) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000003000)={0x6, 'wlan1\x00', {0x6}, 0x4}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000003040)=0x2, 0x4) 4.330801303s ago: executing program 1 (id=3684): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000306050000000000000000000200000805000100070000000900020073797a3000000000b57b01bb6bcd169e91ce8ad079b36df72d00e5a0c50b2c224f38a2ae01219e8c544b65113eaf3d8daa3126d9b762860712188306498dac7f196bc2b9b09afad3fc7111cde61c36e7f67e6e271fc2511188d63a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, 0x0, 0x91, 0x20008800, 0x0, 0xffcb) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x4003, 0x0, 0x7, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup(r2) write$vga_arbiter(r8, &(0x7f00000002c0)=@target={'target ', {'PCI:', '6', ':', '3', ':', '1', '.', '15'}}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 4.309777274s ago: executing program 4 (id=3685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180b0000a9000000000000000000000000000000000000000000000000000000000600000200000000000000000000000000000000000000000000000000000000000000010a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00001000000000ffffffff0000000000000000000090e299666e6c4b000000"], 0xfc}}, 0x0) 4.084662761s ago: executing program 4 (id=3686): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) 4.079510649s ago: executing program 8 (id=3687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.857525197s ago: executing program 4 (id=3688): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000044c0)={'sit0\x00', &(0x7f0000004440)={'tunl0\x00', 0x0, 0x40, 0x700, 0x89, 0x3, {{0x5, 0x4, 0x1, 0x3f, 0x14, 0x6b, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2}}}}) 3.610893907s ago: executing program 4 (id=3689): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r4 = getpgid(0x0) syz_pidfd_open(r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c00)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000001d00)=0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001"], 0xd0}}, 0x20050800) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/uts\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002280)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f00000022c0)=0x0, &(0x7f0000002300), &(0x7f0000002340)) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002440)=0x0, &(0x7f0000002480), &(0x7f00000024c0)) sendmmsg$unix(r0, &(0x7f00000025c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)="10fec9476d9e0a02cc064c7b212c86b4a6e7ef7361e6e41963f248db0b230af009ad27a8df1b", 0x26}, {&(0x7f00000004c0)="f878c09076d6ad85fd22ecd156c1b7fb0eb183e32a61554ad7eab7c47b53fa000e5fd8ea16a1672cd5609889f221541ab6ef47293afdd51da6d9a35e22c1a3b128bfbee9500a47cba1e865559469", 0x4e}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x1}}, {{&(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000ac0)="a9f47b2a31e042f78287705fa4bdcd2a14964813bd8a04a9f0f81dd12e3cfaaf91d61a19b0bf2d6a35ddcd426128f17ac9fedd6a95315ba95c62868f475f2b033d92c252a584777d3b749edb60c781ecb8ca81c4591d9dd1e1b3885ceba0e9a7cd211cd81220dfc673a8e8c5c1", 0x6d}, {&(0x7f0000000b40)="12c6b9012b0f32d0f63124d0919e22f2d32ba8e79c3076ccbf74a82211af143df162625021989768b5a1696bfcae602448e577b273e318173aecd9cdf8e4f494608a19832e1ef03cfd730ae4e7fa0795573549c5865b5d65f6fab78d8b4b4e17be3a5f232f788659f945e3a5e93384a26feab352066a528ddf6268099544100aab179fe172a533997d09c852be7e58", 0x8f}], 0x2, &(0x7f0000001480)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}], 0x110, 0x20000000}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001640)="ee9e3e08c9206c3d75f578f09b7d7803b360a701ec317c5cba4f7a233aace727e56a5afc6856adcd217f80d818a8630be4c11c0cdb52193be4926d5af3d84072b18f683a98959870efffa80c996af45474671e43d4f46a95ed1e54c4243b202fa64b618460307dbf0482dc53d003e90d9c02e6e152253e3eaa559dcd8fe4cb4527c4e7798263524b802a66f5ce092389c910e9fcfbeec5340376772e117be055167298a36f12849452dab2c2da87da5bc2400c70", 0xb4}], 0x1, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [r0, r2, r2, r3, r3]}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r1, r2, r2, r3, r0, r2]}}], 0x60, 0x8800}}, {{&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001840)="2da0328a39c966dc98d27b17634d92b7628fe71f77eb9b3f64450c93e9e5c3f7028adbc1815b58ed240b898302ba58a78b6722f0e7e05b7e589b4d6e992c25ba64ad839ae402bf2afa9c2e935c86878d68a17e2b1577b74a574f51fc91c8920ef5cb2e94a01c822143445b0f441768b416d04b752c702eafae4dff0295b8477fa6aad5dbc4baf29bd5aaea2346c3cce8af30e39af6de014223ba3b0bc61847226a02a8e8a0ea66ee02a1c73ae44b3f0605191043b5605cd03f803918bfe0b4e172c075e902c1a91ac54caddbcb5101766d8b98f451b7cf20419897746525c1ac20e38c81e7dcae1f022658bd798e68ace504d75476378477de81736250b171", 0xff}, {&(0x7f0000001940)="52d7d5a6a21c0f7be7883c7eb046dd7e5e31b1ab053e25fed4003335e001a19cab56f9f7a2695c5cb3eeb728d527b17ec1eb204dbfb0c3f4", 0x38}, {&(0x7f0000001980)="5f832daa79", 0x5}, {&(0x7f00000019c0)="f10095da141c13c0d78ebb59a20b54498a6c731898db375d7df2c4025d1a6ec792f0bafeb7f752e8c245efc8444552cf4d04aa06ae9e58779bc435d59650248ed4d339946f690c", 0x47}, {&(0x7f0000001a40)="836338172fcf9dfb644d651224bbdb5c3dd7aed9ef3460d356b78bd87ee0bb82dd0f88566d0ddc0a95944d034b9a14c8ff0b88f56413b84a696c42671a6ae41ef38bc85e4278e78cef428933265e2fa44cf797f28ec25adb58ea5282946f54ebf6b0965abb9362bc033574befb2c8c13fdffbfb6992ffd12df3a1e8ee37d2e9c9a0a2a4ff8f9276fa694bdd05fcca8d693d1bbe8e35792fb4112bd8acc6a5f6bf2216b612956682fcaf938c6a1d6202111f733e90389938d9571a3b980b5d69b72d7ba7f5bea374d124a69aede0c0bd7bb", 0xd1}, {&(0x7f0000001b40)="441daf66044594af3f84f0355454ea7c925a62d255000a4be038acb9477aa405c7ad273a28b59031a012d04250", 0x2d}], 0x6, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x38, 0x2000c080}}, {{&(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001e00)="e8f423a45a15acbce6f5db32214c15f3e80034e8b6f50fe91dfc115a26ab4af2acc3b6290ffb0ded59de9503563c6af255429a29de29ac93e3d9671cd02e2b5010264fadf2d82a024024c8f6f90803c8bf3a7d3f43c5c5c172e28185db2375a9a3dd327f16c857bf6f0f8d0d5ddb68bfafaa9526156833bcc1feba3ed415ac0707005f8a807b98a20c8525b0ed590150b5abfb23c03875642aae77e3d7e4", 0x9e}, {&(0x7f0000001ec0)="95e18ee60845cf7802ce3fb495afe7ac0aec6946ea113bcbc0606374983f203cca5e6e1fcf7728705665884a0f75312020e1974aa4be7de32259ee85c6d4db7d8e63161d3e9269cc05616baaf9485bc3ce972ee85c", 0x55}, {&(0x7f0000001f40)="4d5a93a3e4644de2b2dc601d7693393f2b5d537a863a440ac9c18cfc6d7a5b8324a04e189f7893a5aaf135f3ae91f36fe126d2ca79f4006d4c201533b1328e2baf7d2ee175e60465cb2477e506adc133c4206d5c20b2164d6350621659d5abcaa7615c068db2c60c3ff1c7990366e638592e13dafdde76d802b108b147ea948950b97d04cabefe5894136d24b69fd0699201933bc6ae70258051e2522a1ef8e980611f8eaab8100dec70216f6081fd69b7f8", 0xb2}, {&(0x7f0000002000)="a2df2929c632a70da3345da10a607db07a65abc4ee85719430846ca46a5ce18db88d8a2c7f85ec718090053313ebaa6fad3bd44031c92a4413ac56043613e860a16d0bbd3fb7f0efd7a78c833ffadcbda9dfa01eeea0478f20b74a2f3b520b7ea76d005ae429706c985fbd963c4eb892fd3b442bb55d7d103336bec06da703c401b309ad605bb23103394bce8259b875b6461d1ecb4213a3a0d33c8a92c04cc0ffa90653", 0xa4}, {&(0x7f00000020c0)="c555561216c2006a6061bd3d041f9e776a17851689c0b4661e86cbf0", 0x1c}], 0x5, &(0x7f0000002500)=[@rights={{0x20, 0x1, 0x1, [r0, r3, r1, r3]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r11}}}], 0xb8, 0x4000041}}], 0x5, 0xc000) r12 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x847ba, 0x0, 0xe, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc, 0x0, r12}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r17, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r17, r18, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r16, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x40002042, 0x0, {0x1}}) 3.372419088s ago: executing program 0 (id=3690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffd69, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYBLOB="b534b579e87680d82b3826f34b0751751239644974dffcda142b37e4f287bf9ac25780679a14a1ff095edb0bda52075ca71c01758f01bfd30a28fdb2df517e05dd4950e158b282486617186f7f0acc6adec1a9c78700df372bec0ae7ece47301437ceaa06f08bc51d43acdc308bc7c9df11ddef22d7b2d1cc85ab98ccaa0901f24132f47924cc095540c6cc28b18eb9b4c3ffd71d43075cf", @ANYRES16=r0], 0x38}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_open_dev$video(&(0x7f0000000180), 0x2000000005, 0x422c1) pwritev2(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000600)="ddd88cedbe9edd72d2717f7860044a1e153385269aa74b7f812557762ef1a7ab8339dacc587257ee789f5e179425cdd3bdf85b2c3cc0a2ad40e734945018d4f65bf9ec147b53162fb329d653cbd0d2cf1218fbc032f6498edd0dc73720e4910854a63b50f03f553dc0fd03d501e73e8153557d96fc8ad5da7cd2d306064d34b16fc5ba2a2a6c752f9c2936edb09522f7f8f17ab5e99442c490529f0649c536d7433baa3753d76524632ea30e9f79dc2be2f56b59e43f786e99ff7e8c6ff73b17cd94959f06f5d1def5ee5ddea8bddc4cde3fbd33ec4e12d25d29ca6f77cffb055dfa56a310f284105af4164073de40eadf534cd2ca71136da748f1", 0xfb}, {&(0x7f0000000700)="8726dffd519d0346b12f1fd751df4b0cc968000040c419e4780d8043644ad5a1895ff5103ff06843cd4374069d5c5d4747be2c045a3018eba5be26f07dfa68f894ff473785d137b200321080fd9148d987cc52add883cd66a9945efa28dd8381ad3c2f1d049848b1fd8dc23e53afa16912d77518ae0588ed16ef611b4ca7f6d1f76d934be33214ca2613e359f763d8f06f73bdab0d0c63933eefb9436f519691e08d58f6f9b0974d983dfe039f545bcda7bc948c25420ead32dd8c8d4eb546afb7de3fb9018f9c4a7c2796d5969bd3a2385777ed3a272937f055eabd1907e1ba224c8e338387589afb99", 0xea}, {&(0x7f0000000200)="940be3d7", 0x4}, {&(0x7f0000000800)="e630026c2f79a9bb336034871a2837ad4774aa72645b5b658bfa4ffa83fb00766d33a3bc5101d678438ab0942aa981a3c74e305b3b30a2f1a8c5820f136a8587cb75febc0d0970225043c925230ae6da49d1535b1ce8f8f39c51918fccf240d5ffe54e91d0b316c9d2ad4edcd465a4df9a9622aad97c06de7289e2cea0c36fb5439e3f93317fb21ab581a1491495104fe40777e0db8e8fbf32e1cdc4a4b466ee7820", 0xa2}], 0x4, 0x7000, 0x0, 0x3) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fchown(r10, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7b13000001c00000"], 0x20}}, 0x20000844) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c1) write$binfmt_aout(r12, 0x0, 0xc8) sendmsg$sock(r7, 0x0, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000300)={0x98, "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"}) 3.343456815s ago: executing program 8 (id=3691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000070a05000000f379316000000a004001090001"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffefffff6, 0x80010, r0, 0xfdb8b000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r3, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000014c0)="4569d7f8db46e8f2b09d61a56d8e173367e721b701e44f3ba4805cfbb916f78f2da02c538c6cae96b71eedb4d90036eaf39526833502ba3cf6c82f3b70c0574d80eaa8b4d13d300b82cb6f5cfc2e261fe1f467df75254a6a86829583f507d65c1235d25684cef8948ac22faab6fae6b5da4dc4e7c5d455841ddc8258187ee9272b662cd3748d838bda1a2d7094f045d176d854214dd8e094b5025b91caebe468021f7a66d75d8224eebc8f45cc8a2969dace8cfb2c4605ddbca6dd5dbf777bd39bcecd56ed32e1478786763061f1a5b6e3f997edb2b10696bfd6a69bc97179ccdeade338a1a0b41fa309be82b3565ee10f462168b41783f5ec790335f7b716e3137f59d130f9d6988c6e44b1c4ad9d01272f7e58757370ea24c9cd4d1a9f7d4c8fd30b778b2d3ce5fd66072b04ecdae10b920d432dd52952d52b94e757624f457fa4669e181bc32c09ae936def46966920085cb9679b6a423a3fd214cb2b654ea44f51ff60bc84a8e15cb10fb92173faed54d9722065a7dca63c82dc1480e249cb217726913d1029e2fbbca13a9f17a12dbfa3db8000dabead908ce0edbdff785f4a8d9985dc8bcefa48b8bd7ccd316c02d157f7195fa5c74f796824917b312ad4ab995f2ca14e8cd413cb6d94fa08d0070b59134de68b99be3a4b7a50f85e9f535c0af78187b1374a52da970ef97fb80f169177375fb55ab115e0aece7767ac000c968f9a8ed39188c61b426a8e1d0cdb8e375fa2fdfff1f840b5a082d80e531c3c0bd14607b1151bad29f9d93d6e8dd64e0f69c70ee0beab7bb08b5db020fc9a40fd911646181198452830812c3a2537bcacd8bec24ce4e7aa4cfa0ca47bdcd2f80138ff508e1adf9ce43fa3e35ecd35c60753e4aff829293e586b26b0b0a09a1aa865dfcefc5efb93f15cdc4a6bd6dff2a5ad294b7906f112362c6292ed978cd5747518b00c5c8a1dec890f13dde16dc62903bfd047125190ccadc4532a44a1d527dcc612f4308a7e241f1f78310b7798925f3381266b69566be3eb7d22333634dfcea1d07166b4ebaadf6b96cad578a77d58cf611b6739a5e3a582f36282d88a7c68d4ba84a416415aad38f7e1427b8c07c3d69f6c8f386523dab9e561b9daa8e52492834486776e711792278ef14db42abe834d9e71ebc249f36b530a4d3ab986b1097b2e83c769fd63e1bc923042bca8b1a99a3b058b9b7b1fe8970f4ea5918eddd1955ad8522c5c11a7aaa5a20b515176ac703ab3e4ace9fedf2030eea0403d92802095f68f30695c580191bc33a75ed53b0921d289907b49bf2c90eb7b4691bdc9ed7783b585802672f9fb0ea0e98fdc1182f2469b5c31b8b474628130bfc589c04378286f039f85cf384d17987b4747416dee9b6d0d5a38a001c2fd2defbf239c44ab096725f8a683031e50f3da0f5fce7b8f1ff641cc989d6a0e291f054103345b3016b0f1636072b35f6453308195c87a82d31e7e66ec296a21b5ed14ec3465242b40a203d3b7d5c2b669c534bb320a1d1d03c1c3e9c110f1c7e14d58acab453484e8c3c65957ecea0c1a63cc31be11bfd6e098a817ccda4968923cd94b42407c2bc3cba6dee5ad05a4eadddcf131dad086531808cddee9b5fec2df1722977e5d8555600da6c33c4ead063cafa905a160df40723fbbc70d78fd2cfc3139741b541ab918b1c0fc75f952c7a8271e508015d15f2d017f8ccaeed5cd06a1218f2c9f9dd2e27f9cd49c134198483812a939b96da167c76ec63580d8e83241e127163dcbe92e5e6a37820bd8a1efd29de86f154a9c1b9d525a38709aaa25674f2810dbd81a3ce3cadbac7a4b7cef490900d37b6d82a67c9f27b39cf7013a7b0c48a8bdaa0d52429d85655b76994d7f7320b68b9095960ee6bf34f7f6ec9da4025d037c83d2ef6ca25457dac63f88cab07c0d619cbd8ea76bdb4a4e6de4a4df3505799563ec21f35650c3bb8be31e449c22e1ac0c6329ee8098cb0fbf7e93c20183b51e57fdc18a1f5f0577a74b7709d6a5e51cce7117a9001116479be8c0c361b380d0e3a6a970a29d839fa83fe8a5e2e30e5759a55593d1a8948448f7583704efe5daee248b8a1227377090e11e5718cdff6652817ecc7e7bf5cc02e1d985cb92caceaffcd2d124c6c7c73c0c9090161c30374f5579a9a7296412f753e7809066d6e799ff219cc3c453337e3a5ee023adfa0b3bbd88cefe82e7091fd9faa605312d3fe7bddbae59bffbe808dda0131f7de4f495f76a9005ebfdd88fa120e65c9cfff463ca30accee8839a29a5ff1451f48070fa7df5700ba9977e7bd561577c08ac8085634121889dbf8be605cfa92d7c5e4ab088d27c6d1cb802e7dbd5e106c47741c35e31", 0x689}, {&(0x7f0000000940)}, {0x0}, {0x0}, {&(0x7f0000000c00)}], 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/43, 0x2b) getdents64(r4, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.922090763s ago: executing program 1 (id=3692): r0 = socket(0x10, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x110}], 0x1, 0x0, &(0x7f0000000140), 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYBLOB="816c2b83a479e4408713d5a137f057283114238f1d10e1d62d06fbf3e865c74e396dfdefc0e4b82fd4835e197f5b3678a53e7617041a30657f973f9db8a69448437dd440bfc9d462"], 0x38}, 0x1, 0x0, 0x0, 0x2404d081}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x3ff) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f0000000300)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r5, &(0x7f0000006400)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, 0x0}}], 0x1, 0x64040084) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x20}, 0x5}], 0x1, 0x40002142, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) socket$nl_route(0x10, 0x3, 0x0) write$sndseq(r4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x20000000000008, 0x400000, 0x10000, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/hibernate_compression_threads', 0x40000, 0xb) ioctl$KVM_RUN(r6, 0xae80, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0x25, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_delete(r7) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.675154251s ago: executing program 4 (id=3693): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "4df58a881cbac78c", "890f374bee1468a38a1a985261fbfddd1b22800e828cebe882b6677020e26137", "1c138bdb", "95a47435adb99537"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x80000001, 0x81, 0x7a, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="274211074376353d63115f00000000000d00000000000000950000000000000080565abb96e4178f759d14f7d0b648b23bc11db130e82b8d4d2ff17652fddf577f3cfb0720987f"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 1.55648972s ago: executing program 7 (id=3694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x4e21, 0x0, 0x0, 0xfffd, 0xa, 0x0, 0x80, 0x89}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000030000000000000000000000000000ffffffffffffffff07"], 0xb8}}, 0x10) 1.335157399s ago: executing program 7 (id=3695): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x68, 0xf, 0x1, 0x9, 0x193, 0xfffffe0000000001, 0xffffffff, 0x7ff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x68, 0xf, 0x1, 0x9, 0x193, 0xfffffe0000000001, 0xffffffff, 0x7ff}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) socket(0x26, 0x2, 0x0) (async) r3 = socket(0x26, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r4, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df8995", 0xb9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1a000}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) 1.217460082s ago: executing program 1 (id=3696): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1211930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0) 1.042067971s ago: executing program 8 (id=3697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc010000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180b0000a9000000000000000000000000000000000000000000000000000000000600000200000000000000000000000000000000000000000000000000000000000000020a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00001000000000ffffffff0000000000000000000090e299666e6c4b000000"], 0xfc}}, 0x0) 792.166ms ago: executing program 8 (id=3698): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0) 657.530598ms ago: executing program 4 (id=3699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'netdevsim0\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = io_uring_setup(0x45a8, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r4}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8}) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x72000) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(r7, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x10c2, &(0x7f0000002340)={0x0, 0x7a8e, 0x180, 0x0, 0x2fe}, &(0x7f0000000100), &(0x7f0000000000)) 599.511113ms ago: executing program 8 (id=3700): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc018620b, &(0x7f000001ed80)) close(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0xcf, 0xf4, 0x8, 0x572, 0xd811, 0x94e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0xb3, 0x5b, 0x1e}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x20004004) 452.793724ms ago: executing program 0 (id=3701): socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0xfffffffffffffd66) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) shutdown(0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173", 0x68, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000040)=0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) 0s ago: executing program 7 (id=3702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000306050000000000000000000200000805000100070000000900020073797a3000000000b57b01bb6bcd169e91ce8ad079b36df72d00e5a0c50b2c224f38a2ae01219e8c544b65113eaf3d8daa3126d9b762860712188306498dac7f196bc2b9b09afad3fc7111cde61c36e7f67e6e271fc2511188d63a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, 0x0, 0x91, 0x20008800, 0x0, 0xffcb) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x4003, 0x0, 0x7, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup(r2) write$vga_arbiter(r8, &(0x7f00000002c0)=@target={'target ', {'PCI:', '6', ':', '3', ':', '1', '.', '15'}}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 7ffc0000 [ 1158.398666][ T30] audit: type=1326 audit(1769872093.536:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.3.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f466259aeb9 code=0x7ffc0000 [ 1158.498397][ T30] audit: type=1326 audit(1769872093.536:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.3.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466259aeb9 code=0x7ffc0000 [ 1158.663853][ T30] audit: type=1326 audit(1769872093.536:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.3.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466259aeb9 code=0x7ffc0000 [ 1158.870329][ T30] audit: type=1326 audit(1769872093.566:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.3.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f466259aeb9 code=0x7ffc0000 [ 1159.006224][ T30] audit: type=1326 audit(1769872093.576:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17850 comm="syz.3.3072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466259aeb9 code=0x7ffc0000 [ 1159.201011][ T5840] Bluetooth: hci3: command tx timeout [ 1159.606206][T10200] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1159.631727][ T5913] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1159.717292][T10200] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1159.814143][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 1159.835611][ T5913] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.878279][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1159.895175][ T5913] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1159.930408][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.959565][ T5913] usb 4-1: config 0 descriptor?? [ 1160.102710][T10200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.121626][T10200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.132529][T10200] bond0 (unregistering): Released all slaves [ 1160.148583][T10200] bond1 (unregistering): Released all slaves [ 1160.174040][T10200] bond2 (unregistering): Released all slaves [ 1160.196943][T10200] bond3 (unregistering): Released all slaves [ 1160.224277][T10200] bond4 (unregistering): Released all slaves [ 1160.243046][T10200] bond5 (unregistering): Released all slaves [ 1160.270441][T17786] team0: Port device team_slave_0 added [ 1160.296303][T17858] syzkaller1: entered promiscuous mode [ 1160.304177][T17858] syzkaller1: entered allmulticast mode [ 1160.405239][ T5913] hid_parser_main: 5 callbacks suppressed [ 1160.405263][ T5913] kye 0003:0458:0087.0031: unknown main item tag 0x0 [ 1160.440785][T17786] team0: Port device team_slave_1 added [ 1160.488404][ T5913] kye 0003:0458:0087.0031: unknown main item tag 0x0 [ 1160.556043][ T5913] kye 0003:0458:0087.0031: unknown main item tag 0x0 [ 1160.585401][T17871] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3076'. [ 1160.586473][T10200] tipc: Left network mode [ 1160.606713][ T5913] kye 0003:0458:0087.0031: unknown main item tag 0x0 [ 1160.628444][T17871] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3076'. [ 1160.654251][ T5913] kye 0003:0458:0087.0031: unknown main item tag 0x0 [ 1160.684764][ T5913] kye 0003:0458:0087.0031: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0 [ 1160.966905][T17786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.008368][T17786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.118413][T17786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.170987][T17786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.178022][T17786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.283251][ T5840] Bluetooth: hci3: command tx timeout [ 1161.314655][T17786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.630164][T17786] hsr_slave_0: entered promiscuous mode [ 1161.899661][T17786] hsr_slave_1: entered promiscuous mode [ 1161.906084][T17786] debugfs: 'hsr0' already exists in 'hsr' [ 1161.917256][ T48] usb 4-1: USB disconnect, device number 46 [ 1162.004719][T17786] Cannot create hsr debugfs directory [ 1163.538938][T13238] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1163.615550][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1163.864920][T13238] usb 6-1: device descriptor read/64, error -32 [ 1163.949783][T10200] hsr_slave_0: left promiscuous mode [ 1164.039056][T10200] hsr_slave_1: left promiscuous mode [ 1164.085157][T10200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.155816][T10200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.168782][T13238] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1165.074592][T13238] usb 6-1: device descriptor read/all, error -71 [ 1165.119320][T13238] usb usb6-port1: attempt power cycle [ 1165.247937][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 1165.758462][T13238] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1165.806732][T13238] usb 6-1: Using ep0 maxpacket: 32 [ 1165.837463][T13238] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1165.876360][T13238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.929783][T13238] usb 6-1: config 0 descriptor?? [ 1165.956481][T13238] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1166.141619][T10200] team0 (unregistering): Port device team_slave_1 removed [ 1166.286429][T17943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1166.296348][T17943] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1166.318205][T17943] netlink: 'syz.3.3089': attribute type 6 has an invalid length. [ 1166.328065][T10200] team0 (unregistering): Port device team_slave_0 removed [ 1166.360275][T17943] netlink: 'syz.3.3089': attribute type 5 has an invalid length. [ 1166.389509][T17943] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1166.699407][T13238] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1166.758655][T13238] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1166.803661][T13238] usb 6-1: USB disconnect, device number 24 [ 1167.030238][T17958] fuse: Bad value for 'fd' [ 1167.695155][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1167.729835][T17967] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1168.755830][T17972] binder: 17971:17972 ioctl c0306201 200000001a80 returned -14 [ 1168.797134][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 1169.045321][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 1169.107951][T17986] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1169.305651][T10200] IPVS: stop unused estimator thread 0... [ 1169.378716][ T48] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1169.508385][ T48] usb 5-1: device descriptor read/64, error -71 [ 1169.588371][T13238] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1169.597059][T17786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1169.646029][T17786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1169.690661][T17786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1169.726061][T17786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1169.763379][T13238] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1169.778346][ T48] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1169.779864][T13238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.819748][T13238] usb 6-1: config 0 descriptor?? [ 1169.846454][T13238] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1169.949282][ T48] usb 5-1: device descriptor read/64, error -71 [ 1170.054793][T13238] gspca_spca508: reg_read err -71 [ 1170.079584][T13238] gspca_spca508: reg_read err -71 [ 1170.089128][ T48] usb usb5-port1: attempt power cycle [ 1170.098751][T13238] gspca_spca508: reg_read err -71 [ 1170.112973][T17786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.115264][T13238] gspca_spca508: reg_read err -71 [ 1170.153948][T13238] gspca_spca508: reg_read err -71 [ 1170.161961][T13238] gspca_spca508: reg write: error -71 [ 1170.167540][T13238] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1170.173876][T17786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.217999][T13238] usb 6-1: USB disconnect, device number 25 [ 1170.253330][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.260567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.311522][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.318694][T10195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.396859][T18022] netlink: 'syz.3.3102': attribute type 4 has an invalid length. [ 1170.458515][ T48] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1170.490711][T18025] netlink: 'syz.3.3102': attribute type 4 has an invalid length. [ 1170.517608][ T48] usb 5-1: device descriptor read/8, error -71 [ 1170.738798][T17786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.788543][ T48] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1170.851560][ T48] usb 5-1: device descriptor read/8, error -71 [ 1170.965327][T17786] veth0_vlan: entered promiscuous mode [ 1170.989916][ T48] usb usb5-port1: unable to enumerate USB device [ 1171.052506][T17786] veth1_vlan: entered promiscuous mode [ 1171.234166][T17786] veth0_macvtap: entered promiscuous mode [ 1171.272103][T17786] veth1_macvtap: entered promiscuous mode [ 1171.327581][T17786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.357591][T17786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.397213][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.439792][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.488041][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.560460][T10195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.651927][T17028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.664347][T17028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.720581][T10195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.731369][T10195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.866944][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1171.973655][T18042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1172.027022][T18046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1172.125581][T18039] team0 (unregistering): Port device team_slave_0 removed [ 1172.278799][T18039] team0 (unregistering): Port device team_slave_1 removed [ 1172.646261][T18064] netlink: 'syz.4.3109': attribute type 8 has an invalid length. [ 1172.678754][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1172.769872][T13563] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.789619][T13563] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.813788][T13563] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.841838][T13563] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.944147][T18090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.579440][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1174.821115][T18089] tipc: Enabling of bearer rejected, failed to enable media [ 1175.284576][T18108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1175.887417][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 1175.897662][T18121] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1176.079825][T18123] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3124'. [ 1176.091726][T18123] unsupported nlmsg_type 40 [ 1176.206195][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1176.318553][T18130] batadv_slave_1: entered promiscuous mode [ 1176.373412][T18130] batadv_slave_1: left promiscuous mode [ 1176.892015][T16961] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1177.402120][T16961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.442420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.448815][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.458195][T16961] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1177.476837][T16961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.568896][T16961] usb 6-1: config 0 descriptor?? [ 1177.598455][T15185] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1177.768311][T15185] usb 4-1: Using ep0 maxpacket: 16 [ 1177.790017][T15185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.820791][T15185] usb 4-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 1177.827093][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.861620][T15185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.873044][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.908474][T15185] usb 4-1: config 0 descriptor?? [ 1178.122070][T16961] usbhid 6-1:0.0: can't add hid device: -71 [ 1178.130729][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.159028][T16961] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1178.170648][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.208069][T16961] usb 6-1: USB disconnect, device number 26 [ 1178.209157][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.308744][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.343185][T15185] usbhid 4-1:0.0: can't add hid device: -32 [ 1178.399292][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.410134][T15185] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1178.445467][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.473490][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.505712][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.540377][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.572351][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.628516][T16961] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1178.703417][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 1178.818374][T16961] usb 6-1: Using ep0 maxpacket: 8 [ 1178.826581][T16961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.859686][T16961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1178.875452][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1178.900205][T16961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1178.963072][T16961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.049904][T16961] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1179.066575][T16961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1179.085552][T16961] usb 6-1: SerialNumber: syz [ 1179.110609][T16961] usb 6-1: config 0 descriptor?? [ 1179.128194][T16961] hso 6-1:0.0: Can't find BULK IN endpoint [ 1179.367242][T16961] usb 6-1: USB disconnect, device number 27 [ 1180.238333][T16958] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1180.360616][T16961] usb 4-1: USB disconnect, device number 47 [ 1180.410835][T16958] usb 6-1: Using ep0 maxpacket: 32 [ 1180.428898][T16958] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1180.448583][T16958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.467403][T16958] usb 6-1: config 0 descriptor?? [ 1180.913714][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1180.926496][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1180.939147][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1180.946826][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1180.974850][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1180.985346][T16958] logitech 0003:046D:C29C.0032: unknown main item tag 0x0 [ 1181.019831][T16958] logitech 0003:046D:C29C.0032: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1181.354286][T18196] Cannot find del_set index 0 as target [ 1181.446597][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3149'. [ 1181.608526][T14753] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1181.778508][T14753] usb 5-1: device descriptor read/64, error -71 [ 1181.801866][T16961] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1181.960588][T16961] usb 4-1: Using ep0 maxpacket: 16 [ 1181.971740][T16961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1181.985110][T16961] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1181.996023][T16961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.017486][T16961] usb 4-1: Product: syz [ 1182.027546][T16961] usb 4-1: Manufacturer: syz [ 1182.038649][T14753] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1182.058420][T16961] usb 4-1: SerialNumber: syz [ 1182.063220][T16958] logitech 0003:046D:C29C.0032: no inputs found [ 1182.096589][T16961] usb 4-1: config 0 descriptor?? [ 1182.119789][T16958] usb 6-1: USB disconnect, device number 28 [ 1182.142935][T16961] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1182.155941][T16961] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1182.218565][T14753] usb 5-1: device descriptor read/64, error -71 [ 1182.359548][T14753] usb usb5-port1: attempt power cycle [ 1182.718337][T14753] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1182.761323][T16961] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1182.784267][T14753] usb 5-1: device descriptor read/8, error -71 [ 1183.058502][T14753] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1183.109096][T14753] usb 5-1: device descriptor read/8, error -71 [ 1183.175399][T18220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.212582][T18220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.227818][T18217] xt_CT: No such helper "pptp" [ 1183.239004][T14753] usb usb5-port1: unable to enumerate USB device [ 1183.900705][T16961] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1183.910963][T16961] em28xx 4-1:0.0: board has no eeprom [ 1184.009140][T16961] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1184.031420][T16961] em28xx 4-1:0.0: dvb set to bulk mode. [ 1184.050909][ T5913] em28xx 4-1:0.0: Binding DVB extension [ 1184.192882][ T5913] em28xx 4-1:0.0: Registering input extension [ 1184.628491][T16958] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1184.838571][T16958] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1184.871415][T16958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.880094][T16961] usb 4-1: USB disconnect, device number 48 [ 1184.893736][T16961] em28xx 4-1:0.0: Disconnecting em28xx [ 1184.908645][T16958] usb 6-1: config 0 descriptor?? [ 1184.923934][T16961] em28xx 4-1:0.0: Closing input extension [ 1184.940339][T16958] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1184.958420][ T5913] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1184.979280][T16961] em28xx 4-1:0.0: Freeing device [ 1185.150869][T16958] gspca_spca508: reg_read err -71 [ 1185.160984][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 1185.184057][T16958] gspca_spca508: reg_read err -71 [ 1185.193825][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.221329][T16958] gspca_spca508: reg_read err -71 [ 1185.266230][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1185.290539][T16958] gspca_spca508: reg_read err -71 [ 1185.321206][T16958] gspca_spca508: reg_read err -71 [ 1185.333102][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1185.351443][T16958] gspca_spca508: reg write: error -71 [ 1185.372373][T16958] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1185.381127][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1185.419008][T16958] usb 6-1: USB disconnect, device number 29 [ 1185.429542][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.479896][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1185.496232][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1185.510745][ T5913] usb 5-1: Manufacturer: syz [ 1185.523157][ T5913] usb 5-1: config 0 descriptor?? [ 1185.846246][T18266] loop2: detected capacity change from 0 to 7 [ 1185.872891][T18266] Dev loop2: unable to read RDB block 7 [ 1185.891083][T18266] loop2: unable to read partition table [ 1185.925607][T18266] loop2: partition table beyond EOD, truncated [ 1185.940911][T18266] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1186.088304][ T5913] rc_core: IR keymap rc-hauppauge not found [ 1186.161988][ T5913] Registered IR keymap rc-empty [ 1186.183455][T18274] netlink: 'syz.3.3166': attribute type 9 has an invalid length. [ 1186.234055][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.286907][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.368815][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1186.459435][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1186.526631][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 1186.664280][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.690901][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1186.719745][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.809034][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.870743][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1186.942019][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.009194][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.078392][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.111368][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.148509][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.194096][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1187.271796][ T5913] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1187.304965][ T5913] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1187.356513][ T5913] usb 5-1: USB disconnect, device number 62 [ 1187.998588][T14753] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1188.258845][T14753] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1188.326774][T14753] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1188.398829][T14753] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1188.494746][T14753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.568574][T18293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1188.578584][ T5913] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1188.619572][T14753] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.770232][ T5913] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1188.808436][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.832411][ T5913] usb 4-1: config 0 descriptor?? [ 1188.843466][T18293] tmpfs: Unknown parameter 'fd' [ 1188.880890][ T5913] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1189.066223][ T5913] gspca_spca508: reg_read err -71 [ 1189.081871][ T5913] gspca_spca508: reg_read err -71 [ 1189.096176][ T5913] gspca_spca508: reg_read err -71 [ 1189.114398][ T5913] gspca_spca508: reg_read err -71 [ 1189.132719][ T5913] gspca_spca508: reg_read err -71 [ 1189.176146][ T5913] gspca_spca508: reg write: error -71 [ 1189.186588][ T5913] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1189.210016][ T5913] usb 4-1: USB disconnect, device number 49 [ 1189.291970][T16958] usb 6-1: USB disconnect, device number 30 [ 1189.695913][T18317] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1190.018678][T16958] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1190.053191][T18323] loop2: detected capacity change from 0 to 7 [ 1190.090992][T18323] Dev loop2: unable to read RDB block 7 [ 1190.096620][T18323] loop2: unable to read partition table [ 1190.123913][T18326] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1190.137370][T18323] loop2: partition table beyond EOD, truncated [ 1190.155023][T18323] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1190.225943][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 1190.239913][T16958] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.296963][T16958] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1190.374486][T16958] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1190.404226][T16958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.436599][T16958] usb 5-1: Product: syz [ 1190.453610][T16958] usb 5-1: Manufacturer: syz [ 1190.483967][T16958] usb 5-1: SerialNumber: syz [ 1190.516734][T16958] cdc_ncm 5-1:1.0: skipping garbage [ 1190.543063][T16958] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1190.582718][T16958] cdc_ncm 5-1:1.0: bind() failure [ 1190.645550][T18340] netlink: 'syz.5.3186': attribute type 9 has an invalid length. [ 1190.660217][T16958] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1190.699588][T16958] cdc_ncm 5-1:1.1: bind() failure [ 1190.750167][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 1190.828436][T16958] usb 5-1: USB disconnect, device number 63 [ 1190.843586][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1190.920273][T18346] vlan2: entered promiscuous mode [ 1191.458424][T16958] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1191.576317][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1191.611182][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1191.644254][T16958] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1191.647645][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1191.688587][T16958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.706188][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1191.723501][T16958] usb 4-1: config 0 descriptor?? [ 1191.789311][T16958] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1191.973290][T16958] gspca_spca508: reg_read err -71 [ 1192.006139][T16958] gspca_spca508: reg_read err -71 [ 1192.028656][T16958] gspca_spca508: reg_read err -71 [ 1192.066606][T16958] gspca_spca508: reg_read err -71 [ 1192.110563][T16958] gspca_spca508: reg_read err -71 [ 1192.135966][T16958] gspca_spca508: reg write: error -71 [ 1192.155516][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1192.155532][ T30] audit: type=1800 audit(1769872127.866:843): pid=18373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3199" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1192.170888][T16958] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1192.273254][T16958] usb 4-1: USB disconnect, device number 50 [ 1193.438576][T16961] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1193.588409][T16961] usb 5-1: device descriptor read/64, error -71 [ 1193.651791][T18408] netlink: 'syz.1.3206': attribute type 9 has an invalid length. [ 1193.878366][T16961] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1194.038991][T16961] usb 5-1: device descriptor read/64, error -71 [ 1194.198551][T16961] usb usb5-port1: attempt power cycle [ 1194.558463][T16961] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1194.627576][T16961] usb 5-1: device descriptor read/8, error -71 [ 1194.911218][T16961] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1195.062295][T16961] usb 5-1: device descriptor read/8, error -71 [ 1195.254600][T16961] usb usb5-port1: unable to enumerate USB device [ 1196.632861][T16958] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1196.812930][T16958] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1196.826795][T16958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.869063][T16958] usb 5-1: config 0 descriptor?? [ 1196.907909][T16958] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1197.102806][T16958] gspca_spca508: reg_read err -71 [ 1197.110782][T16958] gspca_spca508: reg_read err -71 [ 1197.122667][T16958] gspca_spca508: reg_read err -71 [ 1197.186957][T16958] gspca_spca508: reg_read err -71 [ 1197.224818][T16958] gspca_spca508: reg_read err -71 [ 1197.232944][T16958] gspca_spca508: reg write: error -71 [ 1197.245148][T16958] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1197.270684][T16958] usb 5-1: USB disconnect, device number 68 [ 1197.608083][T18454] netlink: 'syz.5.3218': attribute type 5 has an invalid length. [ 1198.315518][T18479] netlink: 'syz.4.3222': attribute type 9 has an invalid length. [ 1198.370308][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1198.968593][T18498] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 1199.031036][T18500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1199.100596][T14753] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1199.115975][T18498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1199.320531][T14753] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1199.364239][T14753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.416958][T14753] usb 6-1: config 0 descriptor?? [ 1199.463018][T14753] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1199.682928][T14753] gspca_spca508: reg_read err -71 [ 1199.708702][T14753] gspca_spca508: reg_read err -71 [ 1199.747521][T14753] gspca_spca508: reg_read err -71 [ 1199.771557][T14753] gspca_spca508: reg_read err -71 [ 1199.788117][T14753] gspca_spca508: reg_read err -71 [ 1199.835617][T14753] gspca_spca508: reg write: error -71 [ 1199.850653][T14753] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1199.901525][T14753] usb 6-1: USB disconnect, device number 32 [ 1201.246242][T18528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3803735552 (7607471104 ns) > initial count (3422614510 ns). Using initial count to start timer. [ 1202.407675][T14753] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1202.603779][T14753] usb 6-1: Using ep0 maxpacket: 32 [ 1202.690159][T14753] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 1202.788405][T14753] usb 6-1: config 0 has no interface number 0 [ 1202.809827][T14753] usb 6-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1202.840093][T14753] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1202.881755][T14753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.988671][T14753] usb 6-1: config 0 descriptor?? [ 1203.049803][T18559] netlink: 'syz.3.3245': attribute type 9 has an invalid length. [ 1204.557070][T16961] usb 6-1: USB disconnect, device number 33 [ 1208.260212][T18608] fuse: Bad value for 'user_id' [ 1208.265164][T18608] fuse: Bad value for 'user_id' [ 1208.328397][T18609] netlink: 'syz.1.3257': attribute type 9 has an invalid length. [ 1208.588343][T14753] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1208.753405][T14753] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1208.767184][T14753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.792153][T14753] usb 5-1: Product: syz [ 1208.817985][T14753] usb 5-1: Manufacturer: syz [ 1208.835753][T14753] usb 5-1: SerialNumber: syz [ 1208.882409][T14753] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1208.927103][T15185] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1209.552341][ C1] usb 5-1: ath: unknown panic pattern! [ 1210.638401][T15185] usb 5-1: Service connection timeout for: 258 [ 1210.654282][T15185] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1210.730616][T15185] ath9k_htc: Failed to initialize the device [ 1210.772456][T15185] usb 5-1: ath9k_htc: USB layer deinitialized [ 1211.372301][T16961] usb 5-1: USB disconnect, device number 69 [ 1212.268697][T16961] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1212.378647][ T5913] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1212.510837][T16961] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.543070][T16961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1212.563288][T16961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1212.618643][ T5913] usb 6-1: config 0 has no interfaces? [ 1212.627864][T16961] usb 5-1: Product: syz [ 1212.651728][ T5913] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a0f, bcdDevice= 0.00 [ 1212.678320][T16961] usb 5-1: Manufacturer: syz [ 1212.704215][T16961] usb 5-1: SerialNumber: syz [ 1212.714559][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.736949][ T5913] usb 6-1: Product: syz [ 1212.743147][ T5913] usb 6-1: Manufacturer: syz [ 1212.747952][ T5913] usb 6-1: SerialNumber: syz [ 1212.767817][ T5913] usb 6-1: config 0 descriptor?? [ 1212.946580][T16961] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1213.058694][T18657] netlink: 'syz.0.3272': attribute type 9 has an invalid length. [ 1213.145188][T18643] input: syz0 as /devices/virtual/input/input58 [ 1213.255975][ T30] audit: type=1326 audit(1769872148.966:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1213.396361][ T30] audit: type=1326 audit(1769872148.966:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1213.474033][T16960] usb 5-1: USB disconnect, device number 70 [ 1213.523026][ T30] audit: type=1326 audit(1769872149.056:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1213.532480][T16960] usblp0: removed [ 1213.629056][T18671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1213.670616][ T30] audit: type=1326 audit(1769872149.056:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1213.836917][ T30] audit: type=1326 audit(1769872149.076:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1213.968615][ T30] audit: type=1326 audit(1769872149.076:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1214.100133][ T30] audit: type=1326 audit(1769872149.076:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1214.189244][ T30] audit: type=1326 audit(1769872149.076:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1214.314233][ T30] audit: type=1326 audit(1769872149.076:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1214.425865][ T30] audit: type=1326 audit(1769872149.076:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18645 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727cb9aeb9 code=0x7ffc0000 [ 1215.199078][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1215.206402][T16961] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1215.258306][T16961] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1215.528572][T13238] usb 6-1: USB disconnect, device number 34 [ 1215.639235][T18690] loop2: detected capacity change from 0 to 7 [ 1215.683643][T18692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1215.692774][T18690] Dev loop2: unable to read RDB block 7 [ 1215.778485][T18690] loop2: unable to read partition table [ 1215.823370][T18690] loop2: partition table beyond EOD, truncated [ 1215.850792][T18690] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1215.884991][T18692] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1215.958314][T18692] netlink: 'syz.5.3281': attribute type 21 has an invalid length. [ 1216.031113][T18694] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1216.095670][T18694] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1216.488722][T18706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.536132][T18706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.679456][T18711] fuse: Bad value for 'fd' [ 1217.359085][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1217.365530][T16961] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1217.435544][T18719] sctp: [Deprecated]: syz.0.3286 (pid 18719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1217.435544][T18719] Use struct sctp_sack_info instead [ 1217.456471][T16961] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1217.678324][T16960] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1217.850255][T16960] usb 6-1: device descriptor read/64, error -71 [ 1218.098622][T16960] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1218.268489][T16960] usb 6-1: device descriptor read/64, error -71 [ 1218.392973][T16960] usb usb6-port1: attempt power cycle [ 1218.759667][T16960] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1218.811417][T16960] usb 6-1: device descriptor read/8, error -71 [ 1219.058439][T16960] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1219.099304][T16960] usb 6-1: device descriptor read/8, error -71 [ 1219.228923][T16960] usb usb6-port1: unable to enumerate USB device [ 1219.678980][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1219.690807][T16961] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1219.717116][T16961] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1219.927021][T18738] netlink: 'syz.0.3293': attribute type 10 has an invalid length. [ 1220.463701][T18752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1220.652846][T18757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1220.693749][T18757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1220.738704][T18762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1220.784745][T18757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1220.880455][T18765] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1220.993484][T18771] netlink: 'syz.0.3309': attribute type 25 has an invalid length. [ 1221.038319][T18771] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 1221.086850][T18771] bridge0: port 1(bridge_slave_0) entered learning state [ 1221.246322][T18778] netlink: 'syz.5.3313': attribute type 2 has an invalid length. [ 1221.281756][T18778] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1221.649331][T18792] netlink: 'syz.1.3320': attribute type 29 has an invalid length. [ 1221.701272][T18792] netlink: 'syz.1.3320': attribute type 29 has an invalid length. [ 1221.794325][T18794] syzkaller0: entered promiscuous mode [ 1221.822005][T18794] syzkaller0: entered allmulticast mode [ 1221.839083][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1221.853077][T16961] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1221.902930][T16961] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1224.585280][T16960] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1224.774487][T16960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1224.796968][T16960] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1224.806298][T16960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.851017][T16960] usb 5-1: config 0 descriptor?? [ 1224.874985][T18822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1225.144070][T16960] elan 0003:04F3:0755.0033: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1225.425342][T16960] usb 5-1: USB disconnect, device number 71 [ 1226.385269][T16958] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1226.475509][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1226.485739][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1226.508992][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1226.517190][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1226.525124][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1226.536502][T18809] pim6reg: entered allmulticast mode [ 1226.568538][T16958] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1226.591268][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1226.599848][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1226.608845][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1226.619546][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1226.627216][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1226.658653][T16958] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1226.684824][T16958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1226.698780][T16958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.709875][T16958] usb 5-1: config 0 descriptor?? [ 1226.724628][T16958] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1226.763569][T18840] loop2: detected capacity change from 0 to 7 [ 1226.772926][T18840] Dev loop2: unable to read RDB block 7 [ 1226.779259][T18840] loop2: unable to read partition table [ 1226.785261][T18840] loop2: partition table beyond EOD, truncated [ 1226.791889][T18840] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1227.258898][T18848] binder: 18844:18848 ioctl c0306201 200000000540 returned -14 [ 1227.708317][ T5913] usb 5-1: USB disconnect, device number 72 [ 1227.838426][T14753] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1228.127804][T14753] usb 6-1: Using ep0 maxpacket: 8 [ 1228.200609][T14753] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1228.240258][T14753] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1228.313072][T14753] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.415429][T14753] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.549625][T14753] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.619933][T14753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.718949][ T5840] Bluetooth: hci4: command tx timeout [ 1228.745906][T18836] chnl_net:caif_netlink_parms(): no params data found [ 1229.054930][T14753] usb 6-1: GET_CAPABILITIES returned 0 [ 1229.321651][T14753] usbtmc 6-1:16.0: can't read capabilities [ 1229.956529][T18836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.019582][T18836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.041680][T18873] netlink: 'syz.0.3337': attribute type 6 has an invalid length. [ 1230.050593][T18836] bridge_slave_0: entered allmulticast mode [ 1230.072131][T18873] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1230.090567][T18836] bridge_slave_0: entered promiscuous mode [ 1230.125622][T18836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.168638][T18836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.202118][T18836] bridge_slave_1: entered allmulticast mode [ 1230.231849][T18836] bridge_slave_1: entered promiscuous mode [ 1230.327306][T14753] usb 6-1: USB disconnect, device number 39 [ 1230.386621][T18836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.444841][T18836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.692288][T18836] team0: Port device team_slave_0 added [ 1230.767777][T18836] team0: Port device team_slave_1 added [ 1230.801533][ T5840] Bluetooth: hci4: command tx timeout [ 1230.848378][ T5913] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1230.963852][T16958] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1231.028921][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 1231.046628][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.071862][T18836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.083600][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.102545][T18836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.136684][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1231.151348][ T5913] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1231.168572][T16958] usb 6-1: Using ep0 maxpacket: 16 [ 1231.175801][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.179579][T18836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.184242][T16958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.218884][ T5913] usb 5-1: config 0 descriptor?? [ 1231.224968][T16958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.238826][T16958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1231.288608][T16958] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1231.308035][T16958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.339703][T16958] usb 6-1: config 0 descriptor?? [ 1231.372321][T18836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.398157][T18836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.479397][T18836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.660630][ T5913] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 1231.727912][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0034/input/input59 [ 1231.938486][T18882] tipc: Enabling of bearer rejected, failed to enable media [ 1231.983819][T16958] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0035/input/input60 [ 1232.053657][ T5913] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1232.054187][T18836] hsr_slave_0: entered promiscuous mode [ 1232.103558][T16958] microsoft 0003:045E:07DA.0035: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1232.209271][T18836] hsr_slave_1: entered promiscuous mode [ 1232.351976][T16958] usb 6-1: USB disconnect, device number 40 [ 1232.522682][T18896] loop2: detected capacity change from 0 to 7 [ 1232.561421][T18896] Dev loop2: unable to read RDB block 7 [ 1232.603649][T18896] loop2: unable to read partition table [ 1232.640281][T18896] loop2: partition table beyond EOD, truncated [ 1232.649324][T18879] FAULT_INJECTION: forcing a failure. [ 1232.649324][T18879] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.662314][T18879] CPU: 0 UID: 0 PID: 18879 Comm: syz.4.3339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.662344][T18879] Tainted: [L]=SOFTLOCKUP [ 1232.662352][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1232.662364][T18879] Call Trace: [ 1232.662372][T18879] [ 1232.662380][T18879] dump_stack_lvl+0xe8/0x150 [ 1232.662407][T18879] should_fail_ex+0x412/0x560 [ 1232.662433][T18879] should_failslab+0xa8/0x100 [ 1232.662455][T18879] __kmalloc_noprof+0xde/0x7e0 [ 1232.662473][T18879] ? tomoyo_encode+0x28b/0x550 [ 1232.662499][T18879] tomoyo_encode+0x28b/0x550 [ 1232.662524][T18879] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1232.662555][T18879] ? tomoyo_path_number_perm+0x219/0x630 [ 1232.662575][T18879] tomoyo_path_number_perm+0x246/0x630 [ 1232.662596][T18879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.662614][T18879] ? __lock_acquire+0x6b5/0x2cf0 [ 1232.662649][T18879] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1232.662689][T18879] ? __fget_files+0x2a/0x420 [ 1232.662710][T18879] ? __fget_files+0x2a/0x420 [ 1232.662727][T18879] ? __fget_files+0x3a0/0x420 [ 1232.662744][T18879] ? __fget_files+0x2a/0x420 [ 1232.662766][T18879] security_file_ioctl+0xc3/0x2a0 [ 1232.662788][T18879] __se_sys_ioctl+0x47/0x170 [ 1232.662825][T18879] do_syscall_64+0xe2/0xf80 [ 1232.662844][T18879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.662861][T18879] ? trace_irq_disable+0x37/0x100 [ 1232.662877][T18879] ? clear_bhb_loop+0x60/0xb0 [ 1232.662898][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.662915][T18879] RIP: 0033:0x7f385099aeb9 [ 1232.662932][T18879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.662948][T18879] RSP: 002b:00007f3851824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.662967][T18879] RAX: ffffffffffffffda RBX: 00007f3850c15fa0 RCX: 00007f385099aeb9 [ 1232.662981][T18879] RDX: 0000000000000000 RSI: 0000000040044590 RDI: 0000000000000008 [ 1232.662993][T18879] RBP: 00007f3851824090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.663004][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.663015][T18879] R13: 00007f3850c16038 R14: 00007f3850c15fa0 R15: 00007f3850d3fa48 [ 1232.663043][T18879] [ 1232.663065][T18879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1232.788358][T18896] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1232.878445][ T5840] Bluetooth: hci4: command tx timeout [ 1232.998384][T16961] usb 5-1: reset high-speed USB device number 73 using dummy_hcd [ 1233.411836][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1233.522944][T18908] loop2: detected capacity change from 0 to 7 [ 1233.552687][T18908] Dev loop2: unable to read RDB block 7 [ 1233.578866][T18908] loop2: unable to read partition table [ 1233.593296][T18908] loop2: partition table beyond EOD, truncated [ 1233.624535][T18908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1233.899660][T18836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1233.922874][T16958] usb 5-1: USB disconnect, device number 73 [ 1234.025727][T18836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1234.138808][T18915] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1234.147172][T18836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1234.211807][T18836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1234.488165][T18836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.526244][T18836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.621379][T18836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1234.637021][T18836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.725032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.732262][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.755703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.762901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.787493][T18836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.822256][T18836] veth0_vlan: entered promiscuous mode [ 1234.836466][T18836] veth1_vlan: entered promiscuous mode [ 1234.948937][T18836] veth0_macvtap: entered promiscuous mode [ 1234.960348][ T5840] Bluetooth: hci4: command tx timeout [ 1234.974032][T18836] veth1_macvtap: entered promiscuous mode [ 1235.063218][T18836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.116678][T18836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.138108][T13563] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.151495][T13563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.188148][T13563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.197481][T13563] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.282483][T18938] mmap: syz.0.3354 (18938): VmData 37605376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1235.709085][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.735612][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.830257][T17033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.880215][T17033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.177131][T18948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3356'. [ 1237.752742][T18982] loop3: detected capacity change from 0 to 7 [ 1237.770649][T18982] Dev loop3: unable to read RDB block 7 [ 1237.778505][T18982] loop3: unable to read partition table [ 1237.785719][T18982] loop3: partition table beyond EOD, truncated [ 1237.831898][T18982] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1238.278312][T16961] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1238.448322][T16961] usb 7-1: Using ep0 maxpacket: 8 [ 1238.459771][T16961] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 1238.499205][T16961] usb 7-1: config 0 has no interface number 0 [ 1238.517635][T16961] usb 7-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 1238.557314][T16961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.577782][T16961] usb 7-1: Product: syz [ 1238.626982][T16961] usb 7-1: Manufacturer: syz [ 1238.654817][T16961] usb 7-1: SerialNumber: syz [ 1238.911391][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.917878][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.431598][T16961] usb 7-1: config 0 descriptor?? [ 1239.615181][T16961] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 1239.845864][T16961] gspca_sn9c20x: Write register 1000 failed -71 [ 1239.876254][T16961] gspca_sn9c20x: Device initialization failed [ 1239.889929][T18994] loop2: detected capacity change from 0 to 7 [ 1239.946951][T16961] gspca_sn9c20x 7-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 1239.969158][T18994] Dev loop2: unable to read RDB block 7 [ 1240.048434][T18994] loop2: unable to read partition table [ 1240.069946][T16961] usb 7-1: USB disconnect, device number 2 [ 1240.095453][T18994] loop2: partition table beyond EOD, truncated [ 1240.142647][T18994] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1240.898739][T19004] loop2: detected capacity change from 0 to 7 [ 1240.976559][T19004] Dev loop2: unable to read RDB block 7 [ 1240.995057][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1241.009310][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1241.018606][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1241.029642][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1241.047914][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.082336][T19004] loop2: unable to read partition table [ 1241.114674][T19004] loop2: partition table beyond EOD, truncated [ 1241.136252][T19004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1241.463798][T19022] netlink: 'syz.4.3379': attribute type 3 has an invalid length. [ 1241.582426][T10178] tipc: Resetting bearer [ 1241.965434][T10178] tipc: Disabling bearer [ 1242.082155][T19028] loop2: detected capacity change from 0 to 7 [ 1242.130717][T19028] Dev loop2: unable to read RDB block 7 [ 1242.165167][T19028] loop2: unable to read partition table [ 1242.199000][T19028] loop2: partition table beyond EOD, truncated [ 1242.282218][T19028] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1243.118414][ T5831] Bluetooth: hci2: command tx timeout [ 1243.426015][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1243.426034][ T30] audit: type=1326 audit(1769872179.126:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19040 comm="syz.5.3385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f727cb9aeb9 code=0x0 [ 1243.759921][T15185] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1243.971915][T15185] usb 6-1: Using ep0 maxpacket: 32 [ 1244.258365][T15185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.278401][ T5913] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1244.357312][T15185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.388000][T15185] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1244.427322][T15185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.598796][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1244.619904][ T5913] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 1244.628116][ T5913] usb 5-1: config 0 has no interface number 0 [ 1244.698690][ T5913] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1244.738749][ T5913] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1244.765161][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.845560][ T5913] usb 5-1: config 0 descriptor?? [ 1245.201461][ T5831] Bluetooth: hci2: command tx timeout [ 1245.219546][T15185] usb 6-1: config 0 descriptor?? [ 1245.764403][ T5913] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1245.911475][T19070] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1245.950516][ T5913] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1245.959213][ T5913] usb 7-1: not running at top speed; connect to a high speed hub [ 1245.969430][ T5913] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 1245.977616][ T5913] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1245.992022][ T5913] usb 7-1: config 1 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1246.050830][ T5913] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1246.125370][T15185] usbhid 6-1:0.0: can't add hid device: -22 [ 1246.153771][ T5913] usb 7-1: config 1 interface 3 has no altsetting 0 [ 1246.165623][T19015] chnl_net:caif_netlink_parms(): no params data found [ 1246.203598][ T5913] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.252844][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.299285][ T5913] usb 7-1: Product: syz [ 1246.326822][ T5913] usb 7-1: Manufacturer: syz [ 1246.491651][ T5913] usb 7-1: SerialNumber: syz [ 1246.598422][T15185] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1246.709578][T16961] usb 5-1: USB disconnect, device number 74 [ 1246.903368][ T5913] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1247.032982][ T5913] usb 7-1: USB disconnect, device number 3 [ 1247.228740][T15185] usb 6-1: USB disconnect, device number 41 [ 1247.278712][ T5831] Bluetooth: hci2: command tx timeout [ 1247.959897][T19099] Invalid logical block size (-2147483648) [ 1248.220052][T19102] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3399'. [ 1248.269597][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1248.538343][T15185] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1248.740619][T15185] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.788500][T15185] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1248.798017][T15185] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.861122][T19109] loop2: detected capacity change from 0 to 7 [ 1248.871256][T16683] Dev loop2: unable to read RDB block 7 [ 1248.876855][T16683] loop2: unable to read partition table [ 1248.880138][T15185] usb 7-1: config 0 descriptor?? [ 1248.909822][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.937927][T16683] loop2: partition table beyond EOD, truncated [ 1248.951015][T19109] Dev loop2: unable to read RDB block 7 [ 1248.957289][ T13] bond_slave_0: left promiscuous mode [ 1248.965250][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.976558][T19109] loop2: unable to read partition table [ 1248.986978][T19109] loop2: partition table beyond EOD, truncated [ 1248.995141][ T13] bond_slave_1: left promiscuous mode [ 1249.004572][T19109] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1249.019361][ T13] bond0 (unregistering): Released all slaves [ 1249.058184][ T13] bond1 (unregistering): Released all slaves [ 1249.313502][T15185] hid-picolcd 0003:04D8:C002.0036: unknown main item tag 0x2 [ 1249.358350][ T5831] Bluetooth: hci2: command tx timeout [ 1249.359653][T15185] hid-picolcd 0003:04D8:C002.0036: item fetching failed at offset 6/7 [ 1249.399309][T15185] hid-picolcd 0003:04D8:C002.0036: device report parse failed [ 1249.406995][T15185] hid-picolcd 0003:04D8:C002.0036: probe with driver hid-picolcd failed with error -22 [ 1249.461929][ T13] bond2 (unregistering): Released all slaves [ 1249.632025][T19089] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1249.880028][ T13] tipc: Left network mode [ 1249.949384][T19015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.966981][T19015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.000953][T16959] usb 7-1: USB disconnect, device number 4 [ 1250.008419][T19015] bridge_slave_0: entered allmulticast mode [ 1250.019002][T19015] bridge_slave_0: entered promiscuous mode [ 1250.103910][T19015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.121503][T19015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.138663][T19015] bridge_slave_1: entered allmulticast mode [ 1250.156901][T19015] bridge_slave_1: entered promiscuous mode [ 1250.322365][T19015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.349410][T19015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.418104][T19015] team0: Port device team_slave_0 added [ 1250.433007][T19015] team0: Port device team_slave_1 added [ 1250.522099][T19015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.550604][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.632583][T19015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.811995][T19015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.841154][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.902527][T19015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.499861][T19015] hsr_slave_0: entered promiscuous mode [ 1251.520044][T19015] hsr_slave_1: entered promiscuous mode [ 1251.541287][T19015] debugfs: 'hsr0' already exists in 'hsr' [ 1251.571726][T19015] Cannot create hsr debugfs directory [ 1251.902337][ T13] hsr_slave_0: left promiscuous mode [ 1252.018115][ T13] pim6reg (unregistering): left allmulticast mode [ 1252.778544][T16961] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1252.930304][T16961] usb 6-1: Using ep0 maxpacket: 16 [ 1253.089432][T16961] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1253.108529][T16961] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1253.148397][T16961] usb 6-1: config 1 has no interface number 1 [ 1253.154563][T16961] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1253.254763][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1253.264755][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1253.272746][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1253.283662][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1253.289272][T16961] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.291446][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1253.410016][T16961] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1253.446797][T16961] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1253.465227][T16961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.518410][T16961] usb 6-1: Product: syz [ 1253.537801][T16961] usb 6-1: Manufacturer: syz [ 1253.608337][T16961] usb 6-1: SerialNumber: syz [ 1253.665106][T19162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1253.899724][T16961] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 1254.111891][T16961] usb 6-1: USB disconnect, device number 42 [ 1254.325741][T19174] fuse: Bad value for 'fd' [ 1255.442710][ T5831] Bluetooth: hci4: command tx timeout [ 1255.470391][T19185] loop2: detected capacity change from 0 to 7 [ 1255.481048][T16683] Dev loop2: unable to read RDB block 7 [ 1255.486806][T16683] loop2: unable to read partition table [ 1255.531343][T16683] loop2: partition table beyond EOD, truncated [ 1255.549399][T19187] fuse: Unknown parameter '0x000000000000000b' [ 1255.569801][T19185] Dev loop2: unable to read RDB block 7 [ 1255.589651][T19185] loop2: unable to read partition table [ 1255.595569][T19185] loop2: partition table beyond EOD, truncated [ 1255.607289][T19185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1255.801524][T19186] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1256.102472][T19191] loop5: detected capacity change from 0 to 7 [ 1256.132136][T19194] syzkaller0: entered promiscuous mode [ 1256.137675][T19194] syzkaller0: entered allmulticast mode [ 1256.140248][T19191] Dev loop5: unable to read RDB block 7 [ 1256.208464][T19191] loop5: AHDI p4 [ 1256.229837][T19191] loop5: partition table partially beyond EOD, truncated [ 1256.409266][T16961] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1256.622741][T16961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1256.653488][T16961] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1256.679477][T16961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.709509][T16961] usb 6-1: Product: syz [ 1256.713743][T16961] usb 6-1: Manufacturer: syz [ 1256.738301][T16961] usb 6-1: SerialNumber: syz [ 1256.757608][T16961] usb 6-1: config 0 descriptor?? [ 1256.834520][ T13] IPVS: stop unused estimator thread 0... [ 1257.261582][T16961] usb 6-1: USB disconnect, device number 43 [ 1257.388579][T17654] udevd[17654]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.518569][ T5831] Bluetooth: hci4: command tx timeout [ 1257.603700][T19225] loop2: detected capacity change from 0 to 7 [ 1257.612003][T19229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3429'. [ 1257.651180][T19225] Dev loop2: unable to read RDB block 7 [ 1257.692659][T19225] loop2: unable to read partition table [ 1257.742975][T19225] loop2: partition table beyond EOD, truncated [ 1257.769341][T19225] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1258.287684][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.345956][T19170] chnl_net:caif_netlink_parms(): no params data found [ 1258.585774][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.782410][T16961] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1258.820997][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.946987][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.976660][T16961] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1258.993371][T16961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.022389][T16961] usb 6-1: config 0 descriptor?? [ 1259.296260][T19239] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1259.343654][T19239] ALSA: mixer_oss: invalid index 1374389 [ 1259.406593][T16961] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1259.430116][T19170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.453811][T16961] [drm:udl_init] *ERROR* Selecting channel failed [ 1259.463394][T19170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.499066][T19170] bridge_slave_0: entered allmulticast mode [ 1259.539032][T19170] bridge_slave_0: entered promiscuous mode [ 1259.546204][T16961] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1259.597760][T16961] [drm] Initialized udl on minor 2 [ 1259.605250][ T5831] Bluetooth: hci4: command tx timeout [ 1259.613788][T19170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.634511][T16961] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.644970][T19170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.661673][T19170] bridge_slave_1: entered allmulticast mode [ 1259.672353][T16961] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1259.682051][T16959] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.719959][T19170] bridge_slave_1: entered promiscuous mode [ 1259.728635][T16959] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.746873][T16961] usb 6-1: USB disconnect, device number 44 [ 1259.760514][T19015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.787843][T16959] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1260.208732][T19015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1260.474416][T19170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.538591][T19015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1260.669945][T19170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.795594][T19015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1261.003434][T19170] team0: Port device team_slave_0 added [ 1261.068169][T19271] IPVS: length: 240 != 8 [ 1261.146186][T19274] hub 9-0:1.0: USB hub found [ 1261.161681][T19266] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1261.172389][T19274] hub 9-0:1.0: 1 port detected [ 1261.215602][T19266] team0: Port device batadv1 added [ 1261.239774][ T13] bridge_slave_1: left allmulticast mode [ 1261.252539][ T13] bridge_slave_1: left promiscuous mode [ 1261.283304][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.329574][ T13] bridge_slave_0: left allmulticast mode [ 1261.353307][ T13] bridge_slave_0: left promiscuous mode [ 1261.379609][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.678434][ T5831] Bluetooth: hci4: command tx timeout [ 1262.408334][T16958] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1262.658490][T16958] usb 5-1: Using ep0 maxpacket: 32 [ 1262.680313][T16958] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 1262.804961][T16958] usb 5-1: config 0 has no interface number 0 [ 1262.818980][T16958] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1262.848471][T16958] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1262.918713][T16958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.009120][T16958] usb 5-1: config 0 descriptor?? [ 1263.865661][T19300] loop2: detected capacity change from 0 to 7 [ 1263.893164][T19300] Dev loop2: unable to read RDB block 7 [ 1263.924617][T19300] loop2: unable to read partition table [ 1263.968117][T19300] loop2: partition table beyond EOD, truncated [ 1264.002658][T19300] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1264.838381][ T48] usb 5-1: USB disconnect, device number 75 [ 1265.234322][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.289124][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.320651][ T13] bond0 (unregistering): Released all slaves [ 1265.360429][T19170] team0: Port device team_slave_1 added [ 1265.399441][T19304] netlink: 'syz.5.3441': attribute type 1 has an invalid length. [ 1265.592416][T19170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.629965][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.731242][T19170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.908543][T19350] loop2: detected capacity change from 0 to 7 [ 1265.925741][T19350] Dev loop2: unable to read RDB block 7 [ 1265.958711][T16959] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1266.013848][T19170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.042352][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.054309][T19350] loop2: unable to read partition table [ 1266.075794][T19350] loop2: partition table beyond EOD, truncated [ 1266.085086][T19350] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1266.230220][T16959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1266.241425][T16959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.251281][T16959] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1266.252490][T19170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.260354][T16959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.262751][T16959] usb 6-1: config 0 descriptor?? [ 1266.578552][T19359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.671223][T19360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.680323][T19359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.691452][T19360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.761568][T19362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1266.785025][T19362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1267.207575][T19170] hsr_slave_0: entered promiscuous mode [ 1267.230633][T19170] hsr_slave_1: entered promiscuous mode [ 1267.256752][T19170] debugfs: 'hsr0' already exists in 'hsr' [ 1267.308379][T15185] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1267.334695][T19170] Cannot create hsr debugfs directory [ 1267.498312][T15185] usb 5-1: device descriptor read/64, error -71 [ 1267.621498][T16959] usbhid 6-1:0.0: can't add hid device: -71 [ 1267.627475][T16959] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1267.686482][T16959] usb 6-1: USB disconnect, device number 45 [ 1267.878340][T15185] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1268.039130][T15185] usb 5-1: device descriptor read/64, error -71 [ 1268.115592][ T13] hsr_slave_0: left promiscuous mode [ 1268.149431][T15185] usb usb5-port1: attempt power cycle [ 1268.173210][ T13] hsr_slave_1: left promiscuous mode [ 1268.208454][T16959] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1268.235702][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.244714][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.271993][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.378545][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.413988][T16959] usb 6-1: Using ep0 maxpacket: 32 [ 1268.473561][T16959] usb 6-1: config 0 has an invalid interface number: 38 but max is 0 [ 1268.482215][T16959] usb 6-1: config 0 has no interface number 0 [ 1268.488611][T16959] usb 6-1: config 0 interface 38 has no altsetting 0 [ 1268.497666][ T13] veth1_macvtap: left promiscuous mode [ 1268.498104][T16959] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1268.513057][T16959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.568832][T15185] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1268.578726][ T13] veth0_macvtap: left promiscuous mode [ 1268.604451][ T13] veth1_vlan: left promiscuous mode [ 1268.624002][T16959] usb 6-1: Product: syz [ 1268.628385][T16959] usb 6-1: Manufacturer: syz [ 1268.633057][T16959] usb 6-1: SerialNumber: syz [ 1268.641423][T16959] usb 6-1: config 0 descriptor?? [ 1268.651384][T16959] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1268.684695][T15185] usb 5-1: device descriptor read/8, error -71 [ 1268.691933][ T13] veth0_vlan: left promiscuous mode [ 1268.939357][T15185] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1268.974321][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.027648][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.040840][T15185] usb 5-1: device descriptor read/8, error -71 [ 1269.171527][T16959] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1269.208773][T15185] usb usb5-port1: unable to enumerate USB device [ 1269.225400][T16959] gspca_pac7302 6-1:0.38: probe with driver gspca_pac7302 failed with error -71 [ 1269.266426][T16959] usb 6-1: USB disconnect, device number 46 [ 1269.957656][T19396] fuse: Unknown parameter '' [ 1270.479467][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1270.543845][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1271.579932][T19403] loop2: detected capacity change from 0 to 7 [ 1271.616621][T16683] Dev loop2: unable to read RDB block 7 [ 1271.635999][T16683] loop2: unable to read partition table [ 1271.665352][T16683] loop2: partition table beyond EOD, truncated [ 1271.723936][T19403] Dev loop2: unable to read RDB block 7 [ 1271.756099][T19403] loop2: unable to read partition table [ 1271.757225][T19015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.789694][T19403] loop2: partition table beyond EOD, truncated [ 1271.817132][T19403] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1271.976556][T19015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.986356][T19414] input: syz1 as /devices/virtual/input/input61 [ 1272.023005][T19414] input: failed to attach handler leds to device input61, error: -6 [ 1272.151543][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.158732][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.166922][T19414] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1272.219965][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.227242][T10195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.394587][T19170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1272.432843][T19170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1272.488317][ T48] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1272.610763][T19170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1272.719895][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8224, setting to 1024 [ 1272.833600][T19170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1272.834176][ T48] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1272.918559][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.994047][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1273.020647][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.124987][ T48] usb 5-1: Product: syz [ 1273.145581][ T48] usb 5-1: Manufacturer: syz [ 1273.155755][ T48] usb 5-1: SerialNumber: syz [ 1273.267679][T19420] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1273.296607][ T48] hub 5-1:1.0: bad descriptor, ignoring hub [ 1273.319054][ T48] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1273.516755][ T48] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1273.848437][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.931466][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.320199][ T48] usb 5-1: USB disconnect, device number 80 [ 1274.353667][ T48] usblp0: removed [ 1274.989933][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1275.000138][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1275.010746][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1275.022826][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1275.038359][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1275.087846][T19015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.236644][T19447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1275.789682][T19170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.081078][T19015] veth0_vlan: entered promiscuous mode [ 1276.224943][T19170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.289969][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.297202][T17025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.350313][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.357549][T17025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.392748][T19015] veth1_vlan: entered promiscuous mode [ 1276.545340][T19445] chnl_net:caif_netlink_parms(): no params data found [ 1276.758154][ T5913] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1276.930869][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1277.060121][T17028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.072346][T17028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.082432][T17028] bond0 (unregistering): Released all slaves [ 1277.119330][ T5840] Bluetooth: hci1: command tx timeout [ 1277.178356][ T5913] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1277.240183][T17028] : left promiscuous mode [ 1277.346838][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1277.359667][T19445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.367369][T19445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.394056][T19445] bridge_slave_0: entered allmulticast mode [ 1277.402862][T19445] bridge_slave_0: entered promiscuous mode [ 1277.439842][T19445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.447173][T19445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.455917][T19445] bridge_slave_1: entered allmulticast mode [ 1277.465478][ T5913] usb usb5-port1: attempt power cycle [ 1277.482253][T19445] bridge_slave_1: entered promiscuous mode [ 1277.503936][T19015] veth0_macvtap: entered promiscuous mode [ 1277.587946][T19445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.626177][T19015] veth1_macvtap: entered promiscuous mode [ 1277.669484][T19445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.725758][T17028] hsr_slave_0: left promiscuous mode [ 1277.732344][T17028] hsr_slave_1: left promiscuous mode [ 1277.740543][T17028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.749040][T17028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.785981][T17028] team0 (unregistering): Port device batadv1 removed [ 1277.838784][ T5913] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1277.887952][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1278.133078][ T5913] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1278.161150][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1278.272934][ T5913] usb usb5-port1: unable to enumerate USB device [ 1278.622038][T17028] team0 (unregistering): Port device team_slave_1 removed [ 1278.704899][T17028] team0 (unregistering): Port device team_slave_0 removed [ 1279.198771][ T5840] Bluetooth: hci1: command tx timeout [ 1279.612048][T19445] team0: Port device team_slave_0 added [ 1279.632273][T19445] team0: Port device team_slave_1 added [ 1279.656863][T19015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.800266][T19170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.843952][T19015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.943054][T19445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.978440][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.071263][T19445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.138194][T19445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.145515][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.216630][T19445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.265819][T10194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.311791][T10194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.322985][T10194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.376446][T10194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.493123][T19445] hsr_slave_0: entered promiscuous mode [ 1280.513240][T19445] hsr_slave_1: entered promiscuous mode [ 1280.878085][T19170] veth0_vlan: entered promiscuous mode [ 1280.889053][ T5913] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1281.043563][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1281.054921][T19170] veth1_vlan: entered promiscuous mode [ 1281.076014][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.106376][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.237515][T10194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.259410][T10194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.278536][ T5840] Bluetooth: hci1: command tx timeout [ 1281.299961][ T5913] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1281.374155][T19170] veth0_macvtap: entered promiscuous mode [ 1281.415965][T19445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1281.438582][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1281.466875][T19445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1281.497737][T19170] veth1_macvtap: entered promiscuous mode [ 1281.547430][T19445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1281.556691][ T5913] usb usb5-port1: attempt power cycle [ 1281.570989][T19445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1281.623131][T19521] syzkaller0: entered promiscuous mode [ 1281.636749][T19521] syzkaller0: entered allmulticast mode [ 1281.670328][T19170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.686064][T19170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.767235][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.777532][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.812618][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.869304][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.920921][ T5913] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1281.990559][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1282.073598][T17031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.097950][T17031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.209981][T13563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.238578][ T5913] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1282.238894][T13563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.256277][T19445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.279683][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1282.303790][T19445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.400411][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.407718][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.421352][ T5913] usb usb5-port1: unable to enumerate USB device [ 1282.505341][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.512663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.800161][T19445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.958626][T19445] veth0_vlan: entered promiscuous mode [ 1283.001909][T19445] veth1_vlan: entered promiscuous mode [ 1283.096405][T19445] veth0_macvtap: entered promiscuous mode [ 1283.133261][T19445] veth1_macvtap: entered promiscuous mode [ 1283.202075][T19445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.256611][T19445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.355817][T17028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.365239][ T5840] Bluetooth: hci1: command tx timeout [ 1283.388747][T17028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.397592][T17028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.549845][T17028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.862204][T10195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.911849][T10195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.083229][T17025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.108334][T17025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.739223][T19601] syzkaller0: entered promiscuous mode [ 1286.765180][T19601] syzkaller0: entered allmulticast mode [ 1286.889454][T19620] netlink: 'syz.1.3490': attribute type 13 has an invalid length. [ 1287.019017][T19619] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1288.529056][T13238] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1288.788382][T13238] usb 9-1: config 0 has no interfaces? [ 1288.793912][T13238] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1288.849305][T13238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.893724][T13238] usb 9-1: config 0 descriptor?? [ 1289.198546][T13238] usb 9-1: string descriptor 0 read error: -71 [ 1289.219587][T13238] usb 9-1: USB disconnect, device number 2 [ 1289.415143][T19636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1290.758599][T15185] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1290.970412][T15185] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.980785][T15185] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.027666][T15185] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1291.078026][T15185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1291.108273][T15185] usb 9-1: SerialNumber: syz [ 1291.180605][T15185] usb 9-1: 0:2 : does not exist [ 1291.439696][T15185] usb 9-1: USB disconnect, device number 3 [ 1291.519366][T16683] udevd[16683]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.660395][T19620] gretap0: refused to change device tx_queue_len [ 1294.667207][T19620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1294.901656][T19670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3501'. [ 1295.056534][ T5913] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1295.090687][T19675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1295.118682][ T5913] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1295.209362][T15185] IPVS: starting estimator thread 0... [ 1295.339973][T19682] IPVS: using max 54 ests per chain, 129600 per kthread [ 1295.765906][T19689] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1295.791456][T19678] fido_id[19678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1296.148411][T15185] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1296.260877][T19700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 1296.378334][T15185] usb 5-1: Using ep0 maxpacket: 32 [ 1296.438114][T15185] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1296.500836][T15185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.541414][T15185] usb 5-1: Product: syz [ 1296.584197][T15185] usb 5-1: Manufacturer: syz [ 1296.603325][T15185] usb 5-1: SerialNumber: syz [ 1296.660411][T15185] usb 5-1: config 0 descriptor?? [ 1296.966183][T15185] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 1297.037036][T15185] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1297.153576][T15185] usb 5-1: USB disconnect, device number 89 [ 1297.207399][T19715] syzkaller0: entered promiscuous mode [ 1297.239704][T19715] syzkaller0: entered allmulticast mode [ 1297.729912][T19721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1297.765694][T19723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1298.058383][ T48] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1298.258930][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1298.285474][ T48] usb 5-1: too many configurations: 98, using maximum allowed: 8 [ 1298.320274][ T48] usb 5-1: config 6 has no interfaces? [ 1298.348579][ T48] usb 5-1: config 6 has no interfaces? [ 1298.377592][ T48] usb 5-1: config 6 has no interfaces? [ 1298.405202][ T48] usb 5-1: config 6 has no interfaces? [ 1298.433400][ T48] usb 5-1: config 6 has no interfaces? [ 1298.444106][ T48] usb 5-1: config 6 has no interfaces? [ 1298.479535][ T48] usb 5-1: config 6 has no interfaces? [ 1298.508051][ T48] usb 5-1: config 6 has no interfaces? [ 1298.533789][T19744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.543303][ T48] usb 5-1: string descriptor 0 read error: -71 [ 1298.565734][ T48] usb 5-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 1298.608414][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 1298.631912][ T48] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 1298.658457][ T48] usb 5-1: no configuration chosen from 8 choices [ 1298.692432][ T48] usb 5-1: USB disconnect, device number 90 [ 1300.323301][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.330114][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.049830][T19787] netlink: 'syz.8.3525': attribute type 1 has an invalid length. [ 1301.195832][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3525'. [ 1301.537577][ T5913] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1301.890209][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1301.979776][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1302.069065][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1302.150518][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.300268][ T5913] usb 5-1: config 0 descriptor?? [ 1302.343458][T19788] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1302.400472][ T5913] hub 5-1:0.0: USB hub found [ 1302.615991][ T5913] hub 5-1:0.0: 2 ports detected [ 1302.776310][T19801] tipc: Started in network mode [ 1302.834977][T19801] tipc: Node identity 5a2a6a0f7a09, cluster identity 4711 [ 1302.869642][T19801] tipc: Enabled bearer , priority 0 [ 1302.901448][T19802] syzkaller0: entered promiscuous mode [ 1302.927556][T19802] syzkaller0: entered allmulticast mode [ 1302.940271][T19800] tipc: Enabling of bearer rejected, already enabled [ 1303.012081][T19800] tipc: Resetting bearer [ 1303.079449][T19800] tipc: Disabling bearer [ 1303.196630][ T5913] hub 5-1:0.0: set hub depth failed [ 1303.236003][ T5913] usb 5-1: USB disconnect, device number 91 [ 1304.114878][T19823] netlink: 'syz.4.3532': attribute type 29 has an invalid length. [ 1304.205325][T19830] loop2: detected capacity change from 0 to 7 [ 1304.215809][T19830] Dev loop2: unable to read RDB block 7 [ 1304.221803][T19830] loop2: unable to read partition table [ 1304.227947][T19830] loop2: partition table beyond EOD, truncated [ 1304.237373][T19830] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1305.158407][ T5913] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1305.386883][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3542'. [ 1305.431026][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1305.472028][T19859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1305.700908][ T5913] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1305.878349][ T5913] usb 5-1: device descriptor read/64, error -71 [ 1306.050490][ T5913] usb usb5-port1: attempt power cycle [ 1306.508362][ T5913] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1306.577528][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1306.887599][ T30] audit: type=1326 audit(1769872242.596:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.8.3548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2837b9aeb9 code=0x0 [ 1306.918418][ T5913] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1306.981233][ T5913] usb 5-1: device descriptor read/8, error -71 [ 1307.222570][ T5913] usb usb5-port1: unable to enumerate USB device [ 1307.254368][ T30] audit: type=1326 audit(1769872242.636:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.8.3548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2837b9aeb9 code=0x0 [ 1307.478489][ T48] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1307.782523][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.818545][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.848645][ T48] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.958835][ T48] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.968104][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.123612][ T48] usb 9-1: config 0 descriptor?? [ 1308.658406][ T48] usbhid 9-1:0.0: can't add hid device: -71 [ 1308.664497][ T48] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1308.765184][ T48] usb 9-1: USB disconnect, device number 4 [ 1310.128596][ T5913] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1310.358411][ T5913] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.430235][ T5913] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1310.503388][ T5913] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1310.555383][ T5913] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1310.618856][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.647600][T19917] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1310.655278][ T5913] usb 5-1: Product: syz [ 1310.665395][ T5913] usb 5-1: Manufacturer: syz [ 1310.679788][ T5913] usb 5-1: SerialNumber: syz [ 1310.729795][T19917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1310.941615][T19933] binder: 19932:19933 ioctl c0306201 2000000003c0 returned -14 [ 1311.023235][ T5913] usb 5-1: USB disconnect, device number 96 [ 1311.066964][ T30] audit: type=1326 audit(1769872246.776:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.0.3558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f330119aeb9 code=0x0 [ 1311.144292][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1311.608446][ T5913] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1311.769318][ T5913] usb 9-1: device descriptor read/64, error -71 [ 1312.105978][ T5913] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1312.260567][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1312.348393][ T5913] usb 9-1: device descriptor read/64, error -71 [ 1312.502315][ T5913] usb usb9-port1: attempt power cycle [ 1312.960242][T16960] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1312.994477][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1313.018903][ T5913] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1313.106145][ T5913] usb 9-1: device descriptor read/8, error -71 [ 1313.138596][T16960] usb 5-1: device descriptor read/64, error -32 [ 1313.436796][T19979] syzkaller0: entered promiscuous mode [ 1313.461881][T19979] syzkaller0: entered allmulticast mode [ 1313.508425][ T5913] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1313.518510][T16960] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1313.755341][ T5913] usb 9-1: device descriptor read/8, error -71 [ 1313.858359][T16960] usb 5-1: Using ep0 maxpacket: 32 [ 1313.933667][T16960] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 1313.981545][T16960] usb 5-1: config 0 has no interface number 0 [ 1313.988486][T16960] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1314.028486][ T5913] usb usb9-port1: unable to enumerate USB device [ 1314.060929][T16960] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1314.270169][T16960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.304955][T16960] usb 5-1: config 0 descriptor?? [ 1315.264553][ T30] audit: type=1326 audit(1769872250.976:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.428380][ T30] audit: type=1326 audit(1769872251.056:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.584017][ T30] audit: type=1326 audit(1769872251.116:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.710115][ T5913] usb 5-1: USB disconnect, device number 98 [ 1315.737334][ T30] audit: type=1326 audit(1769872251.116:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.765367][ T30] audit: type=1326 audit(1769872251.116:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.790546][ T30] audit: type=1326 audit(1769872251.176:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1315.952528][ T30] audit: type=1326 audit(1769872251.176:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1316.001959][ T30] audit: type=1326 audit(1769872251.176:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1316.067843][ T30] audit: type=1326 audit(1769872251.176:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1316.108369][T16960] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1316.136592][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1316.146101][ T30] audit: type=1326 audit(1769872251.176:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761bb9aeb9 code=0x7ffc0000 [ 1316.258760][ T5913] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1316.289155][T16960] usb 9-1: too many configurations: 53, using maximum allowed: 8 [ 1316.313476][T16960] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1316.327925][T16960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.339281][T16960] usb 9-1: Product: syz [ 1316.376863][T16960] usb 9-1: Manufacturer: syz [ 1316.402824][T16960] usb 9-1: SerialNumber: syz [ 1316.439705][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 1316.471804][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1316.556061][ T5913] usb 5-1: config 8 has an invalid interface number: 1 but max is 0 [ 1316.598034][ T5913] usb 5-1: config 8 has no interface number 0 [ 1316.638069][ T5913] usb 5-1: config 8 interface 1 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1023 [ 1316.677361][ T5913] usb 5-1: config 8 interface 1 has no altsetting 0 [ 1316.692594][T16960] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1316.732536][ T5913] usb 5-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=49.20 [ 1316.752383][T16960] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1316.772539][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.788736][ T5913] usb 5-1: Product: syz [ 1316.795953][T16960] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1316.806061][ T5913] usb 5-1: Manufacturer: syz [ 1316.811041][ T5913] usb 5-1: SerialNumber: syz [ 1316.823542][T16960] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1316.841661][T20006] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1316.883933][T16960] usb 9-1: USB disconnect, device number 9 [ 1317.090952][ T5913] HFC-S_USB 5-1:8.1: probe with driver HFC-S_USB failed with error -5 [ 1317.154304][ T5913] usb 5-1: USB disconnect, device number 99 [ 1317.856651][T20044] syzkaller0: entered promiscuous mode [ 1317.939543][T20044] syzkaller0: entered allmulticast mode [ 1318.228884][T16960] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1318.410954][T16960] usb 5-1: device descriptor read/64, error -71 [ 1318.698417][T16960] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1318.888321][T16960] usb 5-1: device descriptor read/64, error -71 [ 1319.258794][T16960] usb usb5-port1: attempt power cycle [ 1319.618345][T16960] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1319.649010][T16960] usb 5-1: device descriptor read/8, error -71 [ 1319.889854][T16960] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1320.009218][T16960] usb 5-1: device descriptor read/8, error -71 [ 1320.146683][T16960] usb usb5-port1: unable to enumerate USB device [ 1320.803913][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3586'. [ 1322.079078][T20110] loop2: detected capacity change from 0 to 7 [ 1322.419707][T20110] Dev loop2: unable to read RDB block 7 [ 1322.506523][T20110] loop2: unable to read partition table [ 1322.522336][T20110] loop2: partition table beyond EOD, truncated [ 1322.567542][T20110] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1322.682104][T20114] syzkaller0: entered promiscuous mode [ 1322.687639][T20114] syzkaller0: entered allmulticast mode [ 1323.278524][T16960] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1323.296043][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3595'. [ 1323.458379][T16960] usb 5-1: Using ep0 maxpacket: 16 [ 1323.465586][T16960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1323.488483][T16960] usb 5-1: config 0 has no interface number 0 [ 1323.501825][T16959] IPVS: starting estimator thread 0... [ 1323.508983][T16960] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1323.519811][T16960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.528525][T16960] usb 5-1: Product: syz [ 1323.532788][T16960] usb 5-1: Manufacturer: syz [ 1323.537412][T16960] usb 5-1: SerialNumber: syz [ 1323.569222][T16960] usb 5-1: config 0 descriptor?? [ 1323.597454][T16960] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1323.605298][T20129] IPVS: using max 53 ests per chain, 127200 per kthread [ 1323.829958][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.854514][T20134] netlink: 'syz.0.3596': attribute type 14 has an invalid length. [ 1323.871702][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.388672][T20148] random: crng reseeded on system resumption [ 1324.808532][T14753] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1325.176587][T16960] gspca_spca1528: reg_w err -71 [ 1325.208521][T14753] usb 9-1: Using ep0 maxpacket: 32 [ 1325.243788][T14753] usb 9-1: config 0 has an invalid interface number: 185 but max is 0 [ 1325.293600][T14753] usb 9-1: config 0 has no interface number 0 [ 1325.330928][T14753] usb 9-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1325.404142][T14753] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1325.484334][T14753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.580715][T14753] usb 9-1: config 0 descriptor?? [ 1325.738442][T16960] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1325.998724][T16960] usb 5-1: USB disconnect, device number 104 [ 1326.425694][T20163] loop2: detected capacity change from 0 to 7 [ 1326.499278][T20163] Dev loop2: unable to read RDB block 7 [ 1326.532926][T20163] loop2: unable to read partition table [ 1326.598057][T20163] loop2: partition table beyond EOD, truncated [ 1326.641755][T20163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1327.125114][T20180] dlm: non-version read from control device 4096 [ 1327.210507][T15185] usb 9-1: USB disconnect, device number 10 [ 1327.933637][T20193] loop2: detected capacity change from 0 to 7 [ 1327.969730][T20193] Dev loop2: unable to read RDB block 7 [ 1327.989745][T20193] loop2: unable to read partition table [ 1328.010277][T20193] loop2: partition table beyond EOD, truncated [ 1328.028580][T20193] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1328.170508][T20195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.538773][T14753] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1330.807652][T14753] usb 9-1: Using ep0 maxpacket: 32 [ 1331.059914][T14753] usb 9-1: config 0 has an invalid interface number: 185 but max is 0 [ 1331.068192][T14753] usb 9-1: config 0 has no interface number 0 [ 1331.148457][T14753] usb 9-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1331.208629][T14753] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1331.217786][T14753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.632642][T14753] usb 9-1: config 0 descriptor?? [ 1332.074188][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1332.230586][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1333.418172][T15185] usb 9-1: USB disconnect, device number 11 [ 1333.441810][T20263] fuse: Bad value for 'fd' [ 1336.618333][ T5913] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1336.744937][T20322] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 1336.755793][T20322] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 1336.777580][ T5913] usb 9-1: Using ep0 maxpacket: 16 [ 1336.795782][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.830787][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.866311][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1336.886441][ T5913] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1336.896769][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.924417][ T5913] usb 9-1: config 0 descriptor?? [ 1336.974236][T20325] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1337.369625][ T5913] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 1337.619605][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0038/input/input62 [ 1337.676724][T20334] bridge0: port 3(bond0) entered blocking state [ 1337.714941][T20334] bridge0: port 3(bond0) entered disabled state [ 1337.752064][T20334] bond0: entered allmulticast mode [ 1337.798759][T20334] bond_slave_0: entered allmulticast mode [ 1337.830097][T20334] bond_slave_1: entered allmulticast mode [ 1337.991253][T20334] bond0: entered promiscuous mode [ 1338.039303][T20334] bond_slave_0: entered promiscuous mode [ 1338.079945][T20334] bond_slave_1: entered promiscuous mode [ 1338.087230][T20334] bridge0: port 3(bond0) entered blocking state [ 1338.093737][T20334] bridge0: port 3(bond0) entered forwarding state [ 1338.853059][ T5913] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1339.078450][T16958] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 1340.670357][ T5913] usb 9-1: USB disconnect, device number 12 [ 1340.739445][T20375] netlink: 'syz.8.3643': attribute type 13 has an invalid length. [ 1341.648796][T20375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.656360][T20375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.290847][T20375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.367794][T20375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.158715][T20384] syzkaller0: entered promiscuous mode [ 1343.175917][T20384] syzkaller0: entered allmulticast mode [ 1343.196393][T17028] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.724294][T20402] loop2: detected capacity change from 0 to 7 [ 1343.740174][T20402] Dev loop2: unable to read RDB block 7 [ 1343.771179][T20402] loop2: unable to read partition table [ 1343.777489][T20402] loop2: partition table beyond EOD, truncated [ 1343.800801][T20402] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1344.033177][T20409] kvm: apic: phys broadcast and lowest prio [ 1344.773641][ T5913] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1345.170434][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1345.343198][ T5913] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 1345.396791][ T5913] usb 5-1: config 0 has no interface number 0 [ 1345.403775][ T5913] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1345.414828][ T5913] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1345.424234][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.442687][ T5913] usb 5-1: config 0 descriptor?? [ 1346.994559][T16959] usb 5-1: USB disconnect, device number 105 [ 1349.966470][T17028] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.978904][T17028] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.997576][T20411] tipc: Enabling of bearer rejected, failed to enable media [ 1350.064727][T17028] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.287805][T20442] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3661'. [ 1350.762106][ T5913] IPVS: starting estimator thread 0... [ 1350.898640][T20457] IPVS: using max 54 ests per chain, 129600 per kthread [ 1350.933927][T20455] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1351.017268][T20455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1352.928695][T16959] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1353.091135][T20485] syzkaller0: entered promiscuous mode [ 1353.098508][T16959] usb 5-1: Using ep0 maxpacket: 32 [ 1353.105633][T20485] syzkaller0: entered allmulticast mode [ 1353.123781][T16959] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 1353.170572][T16959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.227484][T16959] usb 5-1: config 0 has no interface number 0 [ 1353.251223][T16959] usb 5-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1353.284944][T16959] usb 5-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1353.319088][T16959] usb 5-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1353.369642][T16959] usb 5-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1353.444316][T16959] usb 5-1: config 0 interface 167 has no altsetting 0 [ 1353.487265][T16959] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1353.538141][T16959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.576954][T16959] usb 5-1: Product: syz [ 1353.594372][T16959] usb 5-1: Manufacturer: syz [ 1353.613176][T16959] usb 5-1: SerialNumber: syz [ 1353.644204][T16959] usb 5-1: config 0 descriptor?? [ 1353.679227][T20478] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1353.931468][T20478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.970863][T20478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.016700][T16959] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 1354.080179][T16959] usbtest 5-1:0.167: probe with driver usbtest failed with error -22 [ 1354.153761][T16959] usb 5-1: USB disconnect, device number 106 [ 1356.038089][T20530] syzkaller0: entered promiscuous mode [ 1356.052166][T20530] syzkaller0: entered allmulticast mode [ 1356.485181][T20538] netlink: 'syz.4.3689': attribute type 13 has an invalid length. [ 1356.581178][T17025] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.650818][T17025] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.694132][T17025] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1356.731743][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3691'. [ 1356.760127][T17025] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1359.598502][T15185] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1359.785651][T15185] usb 9-1: config 0 has an invalid interface number: 30 but max is 0 [ 1359.818327][T15185] usb 9-1: config 0 has no interface number 0 [ 1359.824543][T15185] usb 9-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1359.876703][T15185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.906502][T15185] usb 9-1: config 0 descriptor?? [ 1359.931991][T15185] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1359.969425][T15185] usb 9-1: setting power ON [ 1359.991846][T15185] dvb-usb: bulk message failed: -22 (2/0) [ 1360.158457][T15185] dvb-usb: bulk message failed: -22 (1/0) [ 1360.270647][T15185] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1360.325302][T15185] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1360.357609][T15185] dvb_usb_cxusb 9-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1360.399511][T15185] usb 9-1: USB disconnect, device number 13 [ 1360.492740][ T31] INFO: task syz.3.3252:18582 blocked for more than 143 seconds. [ 1360.667090][ T31] Tainted: G L syzkaller #0 [ 1360.687049][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1360.945282][ T31] task:syz.3.3252 state:D stack:26304 pid:18582 tgid:18581 ppid:16596 task_flags:0x400140 flags:0x00080002 [ 1361.003927][ T31] Call Trace: [ 1361.036569][ T31] [ 1361.045443][ T31] __schedule+0x14ea/0x5050 [ 1361.061529][ T31] ? __pfx___schedule+0x10/0x10 [ 1361.078266][ T31] ? schedule+0x90/0x360 [ 1361.088503][ T31] schedule+0x164/0x360 [ 1361.096926][ T31] schedule_preempt_disabled+0x13/0x30 [ 1361.111171][ T31] __mutex_lock+0x7fe/0x1300 [ 1361.122281][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1361.139123][ T31] ? usbdev_open+0x182/0x770 [ 1361.144046][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1361.164257][ T31] ? bus_find_device+0x27d/0x2d0 [ 1361.174684][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1361.188040][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 1361.201443][ T31] ? usbdev_open+0xa7/0x770 [ 1361.227567][ T31] usbdev_open+0x182/0x770 [ 1361.246601][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1361.256728][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1361.287121][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1361.295209][ T31] chrdev_open+0x4cd/0x5e0 [ 1361.308261][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1361.314118][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1361.336447][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1361.362448][ T31] do_dentry_open+0x7ce/0x1420 [ 1361.377538][ T31] vfs_open+0x3b/0x340 [ 1361.384044][ T31] ? path_openat+0x346e/0x3e20 [ 1361.393556][ T31] path_openat+0x3486/0x3e20 [ 1361.405007][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1361.417553][ T31] ? getname_flags+0xb7/0x540 [ 1361.428182][ T31] ? __pfx_path_openat+0x10/0x10 [ 1361.439576][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1361.471948][ T31] do_filp_open+0x22d/0x490 [ 1361.483960][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1361.494872][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1361.505504][ T31] ? alloc_fd+0x64b/0x6c0 [ 1361.759418][ T31] do_sys_openat2+0x12f/0x220 [ 1361.774347][ T31] ? __se_sys_futex+0x3a8/0x450 [ 1361.779327][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1361.782107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.784581][ T31] ? rcu_is_watching+0x15/0xb0 [ 1361.784615][ T31] __x64_sys_openat+0x138/0x170 [ 1361.794422][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.831892][ T31] do_syscall_64+0xe2/0xf80 [ 1361.847143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.867123][ T31] ? trace_irq_disable+0x37/0x100 [ 1361.872400][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1361.877285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.883678][ T31] RIP: 0033:0x7f466255b78e [ 1361.888409][ T31] RSP: 002b:00007f4663406b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1361.896971][ T31] RAX: ffffffffffffffda RBX: 00007f46634076c0 RCX: 00007f466255b78e [ 1361.905377][ T31] RDX: 0000000000000000 RSI: 00007f4663406c00 RDI: ffffffffffffff9c [ 1361.917657][ T31] RBP: 00007f4663406c00 R08: 0000000000000000 R09: 0000000000000000 [ 1361.926028][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1361.934469][ T31] R13: 00007f4662816038 R14: 00007f4662815fa0 R15: 00007f466293fa48 [ 1361.945369][ T31] [ 1361.950823][ T31] INFO: task syz.3.3252:18584 blocked for more than 144 seconds. [ 1361.967925][ T31] Tainted: G L syzkaller #0 [ 1361.974807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1361.984808][ T31] task:syz.3.3252 state:D stack:27992 pid:18584 tgid:18581 ppid:16596 task_flags:0x400140 flags:0x00080002 [ 1361.998536][ T31] Call Trace: [ 1362.001911][ T31] [ 1362.004923][ T31] __schedule+0x14ea/0x5050 [ 1362.010735][ T31] ? __pfx___schedule+0x10/0x10 [ 1362.015729][ T31] ? schedule+0x90/0x360 [ 1362.021269][ T31] schedule+0x164/0x360 [ 1362.025543][ T31] schedule_preempt_disabled+0x13/0x30 [ 1362.032133][ T31] __mutex_lock+0x7fe/0x1300 [ 1362.036880][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1362.042836][ T31] ? usbdev_open+0x182/0x770 [ 1362.047528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1362.060898][ T31] ? bus_find_device+0x27d/0x2d0 [ 1362.065982][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1362.071757][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1362.079220][ T31] ? usbdev_open+0xa7/0x770 [ 1362.083858][ T31] usbdev_open+0x182/0x770 [ 1362.090117][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 1362.095861][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1362.101509][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1362.106727][ T31] chrdev_open+0x4cd/0x5e0 [ 1362.112732][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1362.117866][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1362.125174][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1362.130522][ T31] do_dentry_open+0x7ce/0x1420 [ 1362.135422][ T31] vfs_open+0x3b/0x340 [ 1362.140338][ T31] ? path_openat+0x346e/0x3e20 [ 1362.145199][ T31] path_openat+0x3486/0x3e20 [ 1362.150285][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1362.157003][ T31] ? getname_flags+0xb7/0x540 [ 1362.167962][ T31] ? __pfx_path_openat+0x10/0x10 [ 1362.173973][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.179317][ T31] do_filp_open+0x22d/0x490 [ 1362.183945][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1362.189834][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1362.194805][ T31] ? alloc_fd+0x64b/0x6c0 [ 1362.202265][ T31] do_sys_openat2+0x12f/0x220 [ 1362.207070][ T31] ? __se_sys_futex+0x3a8/0x450 [ 1362.212638][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1362.217964][ T31] ? rcu_is_watching+0x15/0xb0 [ 1362.223888][ T31] __x64_sys_openat+0x138/0x170 [ 1362.229480][ T31] do_syscall_64+0xe2/0xf80 [ 1362.234100][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.249053][ T31] ? trace_irq_disable+0x37/0x100 [ 1362.254205][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1362.260974][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.266990][ T31] RIP: 0033:0x7f466255b78e [ 1362.276779][ T31] RSP: 002b:00007f46633e5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1362.286599][ T31] RAX: ffffffffffffffda RBX: 00007f46633e66c0 RCX: 00007f466255b78e [ 1362.295580][ T31] RDX: 0000000000000000 RSI: 00007f46633e5c00 RDI: ffffffffffffff9c [ 1362.303981][ T31] RBP: 00007f46633e5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1362.313624][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1362.324377][ T31] R13: 00007f4662816128 R14: 00007f4662816090 R15: 00007f466293fa48 [ 1362.333998][ T31] [ 1362.337495][ T31] [ 1362.337495][ T31] Showing all locks held in the system: [ 1362.345799][ T31] 1 lock held by khungtaskd/31: [ 1362.352559][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1362.373888][ T31] 2 locks held by getty/5584: [ 1362.383624][ T31] #0: ffff8880359110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1362.394276][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1362.407595][ T31] 3 locks held by kworker/u9:9/5840: [ 1362.413250][ T31] #0: ffff888140ac9148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1362.427103][ T31] #1: ffffc90004b4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1362.441545][ T31] #2: ffff88806d378ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1362.452748][ T31] 7 locks held by kworker/1:5/5891: [ 1362.458044][ T31] 1 lock held by syz.3.3252/18582: [ 1362.465208][ T31] #0: ffff888143f2a198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1362.474660][ T31] 1 lock held by syz.3.3252/18584: [ 1362.481799][ T31] #0: ffff888143f2a198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1362.494520][ T31] 2 locks held by syz.0.3701/20581: [ 1362.501317][ T31] [ 1362.503725][ T31] ============================================= [ 1362.503725][ T31] [ 1362.514820][ T31] NMI backtrace for cpu 0 [ 1362.514840][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.514864][ T31] Tainted: [L]=SOFTLOCKUP [ 1362.514870][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.514882][ T31] Call Trace: [ 1362.514889][ T31] [ 1362.514897][ T31] dump_stack_lvl+0xe8/0x150 [ 1362.514928][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1362.514951][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1362.514976][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1362.515001][ T31] sys_info+0x135/0x170 [ 1362.515020][ T31] watchdog+0xf90/0xfe0 [ 1362.515043][ T31] ? watchdog+0x209/0xfe0 [ 1362.515066][ T31] kthread+0x726/0x8b0 [ 1362.515088][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.515106][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.515128][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.515151][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.515170][ T31] ret_from_fork+0x51b/0xa40 [ 1362.515197][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1362.515218][ T31] ? __switch_to+0xc82/0x1410 [ 1362.515242][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.515262][ T31] ret_from_fork_asm+0x1a/0x30 [ 1362.515297][ T31] [ 1362.515330][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1362.642147][ C1] NMI backtrace for cpu 1 [ 1362.642168][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.642188][ C1] Tainted: [L]=SOFTLOCKUP [ 1362.642194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.642204][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1362.642226][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1362.642239][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1362.642254][ C1] RAX: 0000000000d477c9 RBX: ffffffff8199570d RCX: 0000000080000001 [ 1362.642265][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc91b3 RDI: ffffffff8c073a00 [ 1362.642276][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1362.642287][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1b70 [ 1362.642298][ C1] R13: 1ffff110039dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 1362.642309][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 1362.642321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1362.642332][ C1] CR2: 000055557f57c4e8 CR3: 000000007ab48000 CR4: 00000000003526f0 [ 1362.642346][ C1] Call Trace: [ 1362.642354][ C1] [ 1362.642360][ C1] default_idle+0x9/0x20 [ 1362.642377][ C1] default_idle_call+0x72/0xb0 [ 1362.642394][ C1] do_idle+0x1bd/0x500 [ 1362.642408][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1362.642427][ C1] ? __pfx_do_idle+0x10/0x10 [ 1362.642445][ C1] cpu_startup_entry+0x43/0x60 [ 1362.642458][ C1] start_secondary+0x101/0x110 [ 1362.642476][ C1] common_startup_64+0x13e/0x147 [ 1362.642501][ C1] [ 1362.827312][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1362.834201][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.845058][ T31] Tainted: [L]=SOFTLOCKUP [ 1362.849384][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1362.859444][ T31] Call Trace: [ 1362.862739][ T31] [ 1362.865679][ T31] vpanic+0x1e0/0x670 [ 1362.869677][ T31] panic+0xc5/0xd0 [ 1362.873414][ T31] ? __pfx_panic+0x10/0x10 [ 1362.877837][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1362.883231][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1362.889427][ T31] watchdog+0xfda/0xfe0 [ 1362.893610][ T31] ? watchdog+0x209/0xfe0 [ 1362.897960][ T31] kthread+0x726/0x8b0 [ 1362.902049][ T31] ? __pfx_watchdog+0x10/0x10 [ 1362.906746][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.911367][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1362.916586][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.921186][ T31] ret_from_fork+0x51b/0xa40 [ 1362.925785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1362.930897][ T31] ? __switch_to+0xc82/0x1410 [ 1362.935697][ T31] ? __pfx_kthread+0x10/0x10 [ 1362.940303][ T31] ret_from_fork_asm+0x1a/0x30 [ 1362.945086][ T31] [ 1362.948701][ T31] Kernel Offset: disabled [ 1362.953016][ T31] Rebooting in 86400 seconds..