last executing test programs: 5m16.507483617s ago: executing program 4 (id=5): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socket(0xa, 0x800, 0xfffffffb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xaf) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x1f00000, 0x0, 0x3008, 0x3, 0xc, 0x3, 0x2, 0x5}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x88c, 0x0) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2b, 0x9, 0x200c0400, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8, 0x1}}, 0x50) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) 5m1.364217258s ago: executing program 32 (id=5): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socket(0xa, 0x800, 0xfffffffb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xaf) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x1f00000, 0x0, 0x3008, 0x3, 0xc, 0x3, 0x2, 0x5}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x88c, 0x0) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2b, 0x9, 0x200c0400, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8, 0x1}}, 0x50) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) 4m43.270082597s ago: executing program 3 (id=106): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x36c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="1b1d65113d463d93c07f4faa67eea566edcf4c6a8c6347ca4bb3adefb3c3d5cf73fa166e015fedf14b781b403071d6caac55b0b6a6a8143a14df32b862117bf3d9c45e1a0cc6b3273b7bb1147e94982153c07984b7b716343bef2dae478ed912477af020d1c71a7737730df3de330183bfccf9af9c6e43345cd46b2ea63c5c1c242a24c8f61fd48c1497b54e3da464233e83ae7b9d4c", @nested={0x2bc, 0x1, 0x0, 0x1, [@nested={0x2b0, 0x8e, 0x0, 0x1, [@nested={0x103, 0x125, 0x0, 0x1, [@nested={0x4, 0x53}, @nested={0x4, 0x48}, @generic="81a6947d21fca8196765a474a90a1127649676c3589a5ea8bf0af44ba2f4cb91f038a1190495bcda855857039e19503da4674b7a187baf97a55209592fb1a965251c2cccb68baf4f993f190abc5f10146af2c94d5f2398c9bfae250395bbef9137ad3a68f4969ecfa1b9b0e59236f9bfe68638c10bde6a5c194af69df38af6e0bb0121ef6bb4ca61390f29c9cf6cc195c9e0f666b8cbd823022d37a26109c3d46aa8ddf77eeec2ea4da3fb3bd38d7c04393b3f598a15fafcdfe6ee5d48820b850c15840875edc60dcb5c8cff56253e7ccf40fb76133070d2fad71fb88dad8ce4e662a717948bb38657e18783d7fac45f945904e26f1c62"]}, @nested={0xc, 0x66, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @nested={0xbc, 0xd5, 0x0, 0x1, [@typed={0x6, 0x41, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x128, 0x0, 0x0, @pid}, @generic="d60ffb747717b085c3f00d4c7ac8bf3f871e2a1b8523c835914b3d60c25bddded1b0a4da97251eafdba033224526cafaca57e6fa674e2e8f5f6aff6c52488bf7dfcf9ebfcfb24fd603c30c720c5dea6109a518f79105a3a75f684129adf91aca345ea14a0c5171594124d33cd3aa982f6b264ce099f4ec228a83973ebb95a3718c44c108bd0e8838a1d84a1f4e13e17cffe1074a45b5c9a08c201a3d42811002", @nested={0x4, 0x101}, @nested={0x4, 0x117}]}, @nested={0x20, 0x10b, 0x0, 0x1, [@nested={0x4, 0x12d}, @nested={0x4, 0x4}, @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, @typed={0x8, 0x46, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x55}, @nested={0xb1, 0x16, 0x0, 0x1, [@nested={0x4, 0xc6}, @nested={0x4, 0x102}, @generic="95e59289bccf053c0225eba710201f469c8ef747aae2f519559c2f231471fad9036c7cd49abae60d063832f0c10545ff6ae37439f425a47e2f58900f66d717cdeeebd6a4cb26e8a296a35a27a74555f85494431beb67bd7add978c2c653acf549fe4d08e6e71eaff32a240ef757df70ae2d4a3e1f67bb1acd1f4a7ff95f1537c70fe3d9b8fe799dae1e5c9d072a65986b8121b3ed89851c6f47a39f5f6d8326f31c2eddb8b"]}]}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x36c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m43.004538234s ago: executing program 3 (id=108): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) getpeername$inet6(r0, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_mtu(r5, 0x111, 0xa, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000900)={0x80, r1, 'id1\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x81, 0x7, 0xb9fb, 0x10000, 0x1, 0x7, '\x00', 0x0, r6, 0x1, 0x1, 0x1, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d0490000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000005a7100001000000183b005a5e000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000fa59b00d160b0000dd6a300004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0x91, &(0x7f0000000540)=""/145, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r6, r7], &(0x7f0000000a40)=[{0x0, 0x2, 0x7, 0xc}, {0x2, 0x4, 0x6, 0x6}, {0x2, 0x5, 0x10, 0x5}, {0x4, 0x4, 0x10, 0x7}, {0x1, 0x1, 0x3}, {0x3, 0x5, 0xd}], 0x10, 0x10001}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwritev(r10, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000000)='0', 0x1}], 0x2, 0x300, 0x20009) socket(0x200000000000011, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x7, 0xf, 0xb3, 0x40, 0x921, 0x1200, 0xe7b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0xdd, 0x3f, 0x0, 0x5f, 0xf6, 0xb5, 0x46}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) 4m39.310840238s ago: executing program 3 (id=116): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddb8579339e0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1ff}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 4m38.949369007s ago: executing program 3 (id=117): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x9, &(0x7f0000002e40)) 4m37.946551721s ago: executing program 3 (id=125): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket(0x21, 0x3, 0x5) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="022653c11e2abd00"/22], 0x24, 0x2) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4f}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00001200000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 4m37.601811448s ago: executing program 3 (id=126): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000480)) fsopen(&(0x7f0000009c40)='erofs\x00', 0x0) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5, 0x0, 0x0, 0xab}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="d35cdd00a21e39d7ec9bfc1a5f3ee9187b6e99108cacd609094f8b4cfe33c5240ac65ae16afe7bb0fafd802fe81597e0957e90c951e591689dd46c95c17894f29bad6a23cb61f3e224e34f27f28c9124e34acd7ca1726046aa2d1caed2e507d51e75838e4b7f8d42f57b389839861611d1f0515510d8d69ad2fc"], 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="120110013797cb0811046600c9000102030109021200010a9180c20984580800ef2f4e0a"], 0x0) r7 = fspick(r3, &(0x7f0000000180)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000004c0)='],-/-@}}:#&\x00', &(0x7f0000000500)='-)\x00', 0x0) 4m36.968408956s ago: executing program 33 (id=126): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000480)) fsopen(&(0x7f0000009c40)='erofs\x00', 0x0) ftruncate(r4, 0x200004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5, 0x0, 0x0, 0xab}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="d35cdd00a21e39d7ec9bfc1a5f3ee9187b6e99108cacd609094f8b4cfe33c5240ac65ae16afe7bb0fafd802fe81597e0957e90c951e591689dd46c95c17894f29bad6a23cb61f3e224e34f27f28c9124e34acd7ca1726046aa2d1caed2e507d51e75838e4b7f8d42f57b389839861611d1f0515510d8d69ad2fc"], 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="120110013797cb0811046600c9000102030109021200010a9180c20984580800ef2f4e0a"], 0x0) r7 = fspick(r3, &(0x7f0000000180)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000004c0)='],-/-@}}:#&\x00', &(0x7f0000000500)='-)\x00', 0x0) 2m32.37510642s ago: executing program 6 (id=610): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getnexthop={0x54, 0x6a, 0x20, 0x80000001, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x54}}, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000200)="9dc48691b3e94208284aed920194782ba471986e3bc31b3f3f03195e7176dd13a7a291096fc65bd9e7943ec68766a42b7ea2c64c52eed4dddd8cbec39a85d89f728696b5b509b223b2396e10393d30c34c79450f118375af632731f041cebe08cad976769f76844f5b6ce89f3f94a7020db7388e93dfb849a24c9c24ca18e4ee270faeac2ad03c0a66556297469eab8b14094a", 0x93) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @remote, 0x2}}}, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xffff080e, 0x8000}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000440)={0x7, 0x2, 0x1, 'queue0\x00', 0x100}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000500)={0xc}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000540)='rw\x00', 0x0, 0x0) (async, rerun: 32) r5 = signalfd(r0, &(0x7f0000000580)={[0x800]}, 0x8) (rerun: 32) ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, &(0x7f00000005c0)=0x8000) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000600)={'xfrm0\x00', {0x2, 0x0, @multicast2}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000700)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000780)={0x28, 0x4, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000740)}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x20, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000090}, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x27c, r11, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x60}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb0d}, {0x6, 0x16, 0x7fff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x7bb}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3a17}, {0x5, 0x12, 0x1}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000010) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000cc0)={r5, 0x80000001, 0x80000000, 0x8}) (rerun: 64) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r12, 0x3b65, 0x0) (async) fanotify_init(0x4, 0x1000) 2m31.578705761s ago: executing program 6 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x40) 2m31.437865841s ago: executing program 6 (id=614): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m30.376160181s ago: executing program 5 (id=619): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff0200000000000000000000000000010000000032"], 0x23c}}, 0x8000000) 2m30.203740954s ago: executing program 5 (id=620): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x103201, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x7, &(0x7f0000000100)=[0x8d, 0x380, 0x8f8, 0x1, 0x6, 0x8, 0x8], &(0x7f0000000140)=[0x5, 0x53d, 0xfcc, 0x0, 0x6, 0x3bdfb768], 0x20, 0x5, 0xffff7a20, &(0x7f0000000180)=[0x6, 0xffff8d07, 0x9, 0x4, 0x6], &(0x7f00000001c0)}) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000280), &(0x7f00000002c0)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000440)={0x80000000, &(0x7f0000000380)=[{}, {0x80000000}], &(0x7f00000003c0)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}], 0xa, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000009c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x6, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000b80)={{r2, 0x0, 0x2, [0x3, 0x400]}, {r3, r4, 0x5, [0x5, 0x9]}, 0x4, [0x6, 0x7]}) listen(r0, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000d40)=0x9, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000d80)={0x2, 'vlan0\x00', 0x1}, 0x18) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x24040004) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000001080), 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000010c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001100)=0x28) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001140)=0x2, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r8 = add_key$keyring(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)="fdfb64ddf6689f515f9502bfe87b5d0f3eee4b46df479f6f51f5b811e7ad0f8497143d4a6f9016dcb56caa25ae3f37dcf253ac08a8a8c53f064c617a9ae0aebaed30acdf30ab8fa4756370556369eb604fa2e1ba641fa0a441a723bd87d1a1af038d1e47d7853c20028cf755db365b6cd05a22f3e7e09d43c9464d9e39", 0x7d, r8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x7c, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x44004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r10, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xffc4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c800}, 0x2000c010) 2m30.059719826s ago: executing program 5 (id=621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m29.959142076s ago: executing program 5 (id=622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x9, 0x201, 0x467, 0x1, 0x1ff, 0x9, 0x5}, &(0x7f0000000900)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10, 0x2}, &(0x7f00000000c0)=0x90) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m29.861361217s ago: executing program 5 (id=623): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x5, 0x2}, {0x1, 0x10}}}, 0x24}}, 0x0) 2m28.404637511s ago: executing program 5 (id=626): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x63, 0x5401, 0x0, 0x0}], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x8c, 0x1cf}, {0x5, 0x6, 0x1, 0xd}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x5, 0xd, 0x4, 0x4b, 0x3, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() getpgid(r3) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2m28.308658838s ago: executing program 6 (id=627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x6c00, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000f80)={0x18, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2m26.967274862s ago: executing program 6 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x80000000, 0x3, 0x2, "aa7265d25c1188ad855b1933c8e080be4bcdccf3124ea81db2d881ac3b0027c1", 0x32525942}) read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3801000010000100fefff7ff0001237cc4a90000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c, 0x0, r3}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m25.718624055s ago: executing program 6 (id=639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bond0\x00', 0x10) mq_open(&(0x7f0000000040)='bond0\x00', 0x2, 0x40, &(0x7f0000000080)={0x2, 0x4, 0x6120, 0x7fffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x324, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000086dd6c3709890019840120010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b3891f8e85d8fd918f4042a4407e2c9dd8f45cea3b183b8ff17cdf941ae1e3d"], 0x0) syz_open_dev$sg(0x0, 0x3, 0x0) msgget$private(0x0, 0x2) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10, 0xfffffffe}, [@ldst={0x6, 0x2, 0x5, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x9}, 0x10}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00002d1000/0x1000)=nil, 0x1000, 0x1000002, 0x11013, r8, 0x10c000) 2m13.215495117s ago: executing program 34 (id=626): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x63, 0x5401, 0x0, 0x0}], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x8c, 0x1cf}, {0x5, 0x6, 0x1, 0xd}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x5, 0xd, 0x4, 0x4b, 0x3, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() getpgid(r3) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2m10.505198021s ago: executing program 35 (id=639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bond0\x00', 0x10) mq_open(&(0x7f0000000040)='bond0\x00', 0x2, 0x40, &(0x7f0000000080)={0x2, 0x4, 0x6120, 0x7fffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x324, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000086dd6c3709890019840120010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b3891f8e85d8fd918f4042a4407e2c9dd8f45cea3b183b8ff17cdf941ae1e3d"], 0x0) syz_open_dev$sg(0x0, 0x3, 0x0) msgget$private(0x0, 0x2) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10, 0xfffffffe}, [@ldst={0x6, 0x2, 0x5, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x9}, 0x10}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00002d1000/0x1000)=nil, 0x1000, 0x1000002, 0x11013, r8, 0x10c000) 2m3.272123261s ago: executing program 1 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x78d883) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_delete(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x11}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x40040000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x640, 0xffffffff, 0x368, 0x368, 0x238, 0xfeffffff, 0xffffffff, 0x570, 0x570, 0x570, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x0, 0x6}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, @mcast2, @loopback, @private0, @mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty, @mcast1, @loopback, @dev]}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @mcast2, @remote, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @local, @empty, @local]}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, {0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x27}}, 0x0, {[0x0, 0x3, 0xfffffffc, 0x0, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 2m0.012904052s ago: executing program 1 (id=730): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000002100)={{0x2, 0x4e24, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 'lo\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9, 0x4}, {0xeeee8000, 0x3000, 0x10, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x0, 0xdddd0000, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0x0, 0x0, 0x2, 0x4200, 0xf, 0x0, 0x0, [0x0, 0x80003, 0x8001]}) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xa8c05c84}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f6234b877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8dd35c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d4440000c801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3c89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d247c2e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x100) syz_fuse_handle_req(r6, &(0x7f000000c400)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r4, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r8], &(0x7f0000000280)='syzkaller\x00'}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) getpid() 1m58.048655685s ago: executing program 1 (id=736): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000d80), 0x0, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000100)={0x0, 0x1e, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r5, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x45}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) gettid() r7 = syz_io_uring_setup(0x49d, &(0x7f0000000300)={0x0, 0x44df, 0x1, 0x3, 0x33f}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) r9 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f00000000c0)=r9, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x627, 0x1764, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) 1m55.976454104s ago: executing program 1 (id=745): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pipe(&(0x7f0000000400)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x2b, 0x1, 0x100) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x2}]}) epoll_create1(0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x8a080, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r5) fcntl$setstatus(r5, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r5, 0x8, r6) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x1f7f9330}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r3, 0x4}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000002f80)=""/54) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 1m54.708658181s ago: executing program 1 (id=748): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@getqdisc={0x30, 0x26, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xe, 0x9}, {0xffe0, 0xc}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000580)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000480)="91b5622cd83b06faf5466f4f24706a9ac76a7ee3fe282f387e295e0978d3982b29aed0cf9a3f3d38a77c4927b380d601f9613dc8b67e6e76c2af10c83a15a8686ef669aab8297052b250fb9f9651bcb312a6356d37ecabe85da312b5f3c17c523e20e1939715d7a2d403edd70dba8523e205818c981f6091b2faa5f825194368636d8f5e05703ba10c81b911d480230d8ded2bbff561f312b29cabb1169c22ae87ee5e26c2d60d5393f9818e5a6a9a6ed0e7a549f5ed88aa78d8dbe4619412d279e7911a96249073", 0xc8, 0x4004000, &(0x7f0000000040)={0xa, 0x4e24, 0x86, @empty, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r8, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000080)="c3", 0x1}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1m53.349868779s ago: executing program 1 (id=756): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x13) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000001c0)=0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000180), 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x3) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000080)={0x0, @capture={0x0, 0x0, {0x3, 0xb737}, 0xff, 0x8000}}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/56, 0x38) 1m38.279550711s ago: executing program 36 (id=756): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x13) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000001c0)=0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000180), 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x3) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000080)={0x0, @capture={0x0, 0x0, {0x3, 0xb737}, 0xff, 0x8000}}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/56, 0x38) 8.239436091s ago: executing program 2 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0) 7.836469214s ago: executing program 2 (id=1143): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x7, 0x75b2, 0x30, 0x84400}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x3098c0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r7 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x541b, 0x1000000000000) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) 5.74508037s ago: executing program 8 (id=1149): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x80086601, 0x0) fsopen(&(0x7f0000000200)='zonefs\x00', 0x1) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, 0x0, 0x2, 0x0) write$cgroup_pressure(r7, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x10, 0x80, 0xdd7, 0xa, {{0x11, 0x4, 0x1, 0x9, 0x44, 0x62, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@noop, @cipso={0x86, 0x2e, 0x0, [{0x2, 0xf, "f400daabc8a600000000000000"}, {0x7, 0x10, "07d6b4343b4c70e3ce08fcb675a5"}, {0x5, 0x2}, {0x1, 0x7, "00844e2e94"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000002000d6e239448160a4010000000000000000000200000000000c00144000000000000000000000000d003d4604bb7aaff36eebb8e126e7077421da2f8da4aa4c3d84a1fe585a2957e55ca7ba3626ef7e2ef62690dfff594304a57ebcdf329cb547c3ea317a363f82d3d2e4f6f6fe"], 0x28}}, 0x0) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 5.242416626s ago: executing program 7 (id=1150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000104, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000f80)={0x18, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 4.376362475s ago: executing program 2 (id=1152): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x100000000, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000240)=',8ZCj', 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6}, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000200), &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), &(0x7f0000000200), 0x4, 0x6, 0x24, 0x8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0xac7e, 0x8, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0x8, 0x1000, 0x7f, 0xe, 0xd, "fe1d00003413000000000020b42717e47f00"}}) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b87}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=@delqdisc={0x84, 0x25, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x3, 0x3}, {0xe, 0x8}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x84}}, 0x0) 4.326413515s ago: executing program 0 (id=1153): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001340), 0x101200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f00000013c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x80009, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1003, 0x9, 0x0, 0xd1, 0x4000080, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.218767689s ago: executing program 8 (id=1154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.971920542s ago: executing program 0 (id=1155): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0xe, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r11, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r12}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 3.870729122s ago: executing program 0 (id=1156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d000000060000000400000018090600", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98848cd14e9a88d4ea84136ad1b0fa"], 0x50) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xbc, 0x0, 0x200, 0x70bd2a, 0x8, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4f", 0x36}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e1a97c74fa040f70f2fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f", 0x12}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.807199567s ago: executing program 9 (id=1157): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x10001, 0x3f, 0x7, {0x2, 0x6fd8e84b}, 0x3, 0xed}}) (async) socket$kcm(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xa}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) (async) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) (async) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.704688994s ago: executing program 7 (id=1158): syz_open_dev$amidi(0x0, 0x2, 0x181) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x800, 0x0, 0xb4a, 0x400, 0x8, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000240)={0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000"], 0xdc}}, 0x44) 3.438410049s ago: executing program 9 (id=1159): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="f09031c2", @ANYRES16, @ANYBLOB="bbfb28bd7000fddbdf25670000000c009900c60000002a0000000800c40002"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000300)={0x2, 0x0, [{0xc0000000, 0xa07, 0x6, 0x1, 0x998e}, {0x0, 0x2800000, 0x5, 0x40, 0x8}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x9, 0x12, 0x463, 0x1, 0x1ff, 0x9, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x10, 0x2}, &(0x7f00000000c0)=0x90) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f00005af000/0x2000)=nil, 0x2000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x10003, 0x3, 0xfec00000, 0x1000, &(0x7f0000940000/0x1000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, 0x0) fsopen(&(0x7f0000000000)='pstore\x00', 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a0402, 0x0) readv(r7, &(0x7f0000000100), 0x0) 3.421361023s ago: executing program 0 (id=1160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000010003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b"], 0x23c}}, 0x8000000) 3.212395011s ago: executing program 0 (id=1161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xfc, 0xfffffffe, 0x1b, @empty, @loopback={0x300, 0xffff888101827518}, 0x700, 0x700}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendfile(r4, r4, 0x0, 0x2000fb) semtimedop(0x0, &(0x7f0000000200), 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$media(0x0, 0x4007, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.645334317s ago: executing program 9 (id=1162): syz_emit_ethernet(0xa9, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', &(0x7f0000000200)=0xfc}) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000140)=0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a8080"], 0x44}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x7ff, 0xa, 0x8, 0x44f}, {0xa, 0xe, 0x9, 0x9}, {0x8, 0xff, 0x30, 0x6}, {0x3, 0x2, 0xe, 0x2}, {0x2, 0x8, 0x9, 0x3}, {0x3c, 0xf, 0x3}, {0x0, 0x6, 0x40, 0xeb}, {0x1, 0x8, 0x9}]}) 2.126453913s ago: executing program 9 (id=1163): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, 0x0, 0x8080) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) r2 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1ff}) 1.971833731s ago: executing program 2 (id=1164): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x800) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x5}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000580)={r7, 0x3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsetxattr$security_evm(r8, &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6f82208519f412f0bf34bd50c4f89f55"}, 0x11, 0x2) syz_usb_connect(0x5, 0xc51, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xa7, 0x7b, 0x97, 0x8, 0x2001, 0x3c21, 0xd95f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3f, 0x4, 0x36, 0x8, 0xd0, 0x9, [{{0x9, 0x4, 0x90, 0x7, 0x4, 0xde, 0x67, 0x4a, 0x9, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "630a87"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x8}}], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x4c, 0xf8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @generic={0x45, 0x22, "836c7f5337a171b99b1afa4c949c1eb7ee871cdef8fb42a9269b67d73c7c837014822971073716ea2f229ff61bf70d66d47f0db4a51d95f95290fff92eb9e3451209a4"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x68, 0xa1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x55, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xc}]}}, {{0x9, 0x5, 0x1, 0x8, 0xd386ab9d4daaa0de, 0x0, 0x2, 0xfa}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x9, 0x1, 0x7, [@generic={0x19, 0x23, "4dc0b180802eb2f7db2e50d55eff6b820c875d82f1d94e"}]}}]}}, {{0x9, 0x4, 0xc6, 0xd, 0x10, 0xff, 0x81, 0xba, 0x0, [], [{{0x9, 0x5, 0x5, 0x1, 0x8, 0x8, 0x9, 0x9, [@generic={0x6, 0x24, "3efac49b"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x7, 0x6, 0x0, [@generic={0x6a, 0x11, "bf4d429be9518587a44a9f715c307711ea9e011b1658e0c5d28df8dce103d510231b70931c2362d7d14c9a87994ff3a06422031c9558e181eadc342348374e558db8bb27d6736fc1a2f205212c162a50eaffc6bc3c89982a104d44fcda600d87b71112a811a39d96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xe, 0x3, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x8, 0x5, [@generic={0xce, 0x3, "58428c21708cf23377661acd49346db1e5f81fe68eefc5294c306923ad6d14e2aa86c3fae7f5992f99195174b04bc35cbd9e560313536caeb979b9393d22c93859b1f06ef1d4f2e99b6faf1b3c0510364a62072ccb714ad38729c74b441d1265f511608a77bf72f431d65033366d675380dc6f3347b3c60db3cb7c4861560cb194d40bad1770f773ef04880eb52eeb9ba7cb2ab8fd2f1dfd6e4d48a672a8558ca3a3eb4a766a8bb8b058d9a139cbd06e80f8194d3b82c6e4f39357067f800ab747e06cf47c2d5797bbccb63c"}, @generic={0x50, 0x7, "651c93dc28b86ad135d94422540ce71f6b2038e4c434828ce739307e8e69417f9adf74273620c48767cdcdb8ba483c848bc2a8360575a4e698fc7bbc5be01b1273ec22d5060517560edc4316c095"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x4, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x24, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7f, 0x1, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x3, 0x6, 0xf4, [@generic={0xd, 0x0, "16efacff42137d8fba1d68"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x9, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x5, 0x240}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0x3, 0x10, [@generic={0x9e, 0x25, "5990bef37244e93a3f939914407b55f4b27a5d4fd3381cf496aadae4ed0c26cf17c4f001b345892cf19669bed8ba079d02c462c5545a4b6814bfc1d4cc387b7f9ed9acee2ffceed0eb5576cf1cc7dc250030144efe05c5421e4b9a988f9c0f61a38e4e61f6b02fa196d6649e997fc1b0a4fb3c2960b44d8e725d0e433437e8ed9c19360f2c3a1c3764cf61c33329095ec2accc825db52fca03fc42f2"}]}}, {{0x9, 0x5, 0x6, 0x1b, 0x200, 0x8, 0x61, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x8, 0x7, 0x1}}, {{0x9, 0x5, 0x9, 0x127d9e47d685e03c, 0x400, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x4, 0x6a8}, @generic={0x5, 0xe, "1dc2af"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xf, 0x4, 0x6}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x4, 0xb8, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x80, 0xc7, 0x4}}, {{0x9, 0x5, 0xb, 0x1, 0x3af, 0x80, 0x3, 0xd, [@generic={0x75, 0x2, "48c6cea6bcc8af290c1decd929d99d6b1038d642de93c575d5507e404b9395f69ad2bec3628698d222f768bfd596981410da2129e345b35365e06d4d09f642256971741f55612fd99036bdf53832b92ede4b810e5d27a96dcd751e7e07a9624c6e8f0698ffcee44ab7cee902351c1ee8ce4f21"}]}}]}}, {{0x9, 0x4, 0xbd, 0xd, 0x8, 0xba, 0x39, 0xb4, 0x7, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x14, 0x0, 0x10, [@generic={0x6e, 0x21, "be135a7dfe737cfd514ae90ad164058161bf8e42782e52a642a67664392ce59f79d7302b2ec8f11aa0ebe5ef1ab3b1ce4fe7afa4e8ae02432e5cbb1048f0e3532230e7fd94791310ce15153001d749149ee5ea254621844e41f60f8ef6bcf1ab52e1caa0d0fc4b80c1022fd0"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x10, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfff7}, @generic={0xe2, 0x24, "e2cc3531ac772b6fa99327fa91631371aa1461f6d0f7ebf689dbc2c00ff273dc372db60f32a1a52eb0c89043e6e41108c9c4ac8c9cac7759a3f55251a27f7d7369ee92b88c4b7322ac848b5057c43381dbeeb87f2490ed7023b6c25068f1f4a7859b7657c71d962766cc87fc28b7e6fc795b70f29f24015d2829b0f8d8d1e31781f30636be7df06c6369b5fefaae9dfe251dd8c2fa6c4202cd9356b5dc76db7d4be9e058c6dea31be7e71a889efd462b93c698b6ba9be09df39cfa413dcfca16f7b3fa220f59d6d5fcb6072bd914566889e8e9d73ebfd43e6416eebccd75a237"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}, @generic={0x1e, 0x22, "c67f01246a017e82e2eaa3d463bc61ccda59030ca287697609eb7a72"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xe, 0x6, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xab, 0x0, 0x8, [@generic={0xae, 0xa, "e0de35b5893144d5cfcbc87d81dc83a8f4956cfb823f67a829ee3efe45f22dead53366618bfb7c4a6c9671cc0bd369ad62ea4cab751c08deb445de21ae3e4bb601f5a2a62de21bfbb9a89118e2a0c56d45a374feb9cf8048f9689ef5a199739202bb9b30de5c05421e59a389d4bc2dda87f03365d66b725d503967da33c808b139137adab1bc45545963a0f30905d08ef75d3442d916da4308d96056c804c9494499e11865c5a02098d9646a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0xeb, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x7, 0x9, 0x0, [@generic={0xb2, 0x1, "c843c3360059e433cbed8a6ecc24d5b1fcc4b2a96e789c6d424c9e947755192d53dd4ceae8be9e01bcda111880f78a91664f9659bfb7b94f2efe265b4ff0f09bc0d9d118ac9d136610af6350bc36e9ccd5721ccd7c9ecfe4c91875151984b706a122956f546dd68bb398caec6fd4b31e8ae0f66c70992a8df903683c32658440ff30a71a46e9414c47f0a93a1ac0a1126b2398212d0279af0371e81ffc57aea4e66d8194577680a9e1f13abbd4836521"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x5, 0xd, 0x2, [@generic={0x99, 0xc, "343dec30f1161c10b76b0c1bfe234226912312d85b7dde89b1b2c1e1bb20ddabb74b01b9e3c26c194c0aeefa834f8ed9ec61db013ee61b7d0b6165f1a57a290f9d90046587bb3464945946978feb73155bdbbd9119ea6765427a4dc5fb8d1f9cd04d881937c35fb6ed7b3105790cb403799c404142cd905f4dcb16cd3dd51b176aededf524b951c579f2cb8d7fceb551518306d013b998"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x86, 0x2, 0xe, 0xff, 0xff, 0xff, 0xa3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "c8ffecc86d"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xd660, 0xe2ac, 0xfffd, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x7, 0x75}]}], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0xf, 0x8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @generic={0x15, 0x24, "b0c759045a457eb7a7f9b9c375d35079870769"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x2, 0x7f, 0x9, [@generic={0x12, 0x23, "31e8e3e4fa717fe6a38ae1aff86d68ce"}, @generic={0x2b, 0x6, "dd566f26de3ef507216a0cd49580995218c3d221c01244bf929ec77c8944815fc0ca1f741260582c5b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xd1, 0x1, 0x9, [@generic={0x80, 0xf, "c791d92216f98e4cf1be4595d45fe53b96da973faeae20d232feefe59996a79a6563689cf999bbc6caad6394a7b9aa49cb7a560b62fa257793b28ed6f806de8234c1e156e6bda25af4c4e2334d538f01530e889face72f8f7c095919f8590eaff8d155a609a3d8408d6d6d9ba04a4b60179ac22ae361addb08bb6004dab7"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x8, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0xc4, 0x0, [@generic={0x15, 0x23, "54d3b5cccd29da409cc7ce32713805ef52e233"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x308, 0x0, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3, 0xff, 0xba}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x3, 0x9, [@generic={0x54, 0x3, "aed120a202977ec1c265ae2a453aa44a30c145a5b7bca35759622aa1f6eae424fbec40a0565a74d276c8e3c1f7828a8d531ad3ba5857afd8d2ad0496962bfb9345c78478116fc53b34070f5a26b699d62db6"}, @generic={0xba, 0x21, "212751a6063ad408e4e97001dd10bd0b5072edf2129412448fb1f06a0e1578be14cd27c427c5a3753dc0a21e9e14d2a3e2897fc978aae64284d4e8642213de25102fe4e8fb52972de1f602a460eda2cc6a3b34a7b63f9a63d2bfd069aaa611f054aac85e55973200fac870a7e3a265b40c9556ad7375ac3d19c4da013367095ebe50d71d2c73d2e3074c62bcc2b26913294f49d30aa59872663aa1e8936b41ad0c973e71ab0f59bfeeca6645c90e4f0077a7b2c1cc858966"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x2, 0x7f, 0x9}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x2, 0x3, 0xfe}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x80, 0x7, 0x8}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x81, 0x7, 0x2, [@generic={0xad, 0x35, "74682e26a82e158061ae5afc20ad3c9deb20ef46e4196da234bfb521de18b49f4f0be6e85ec9a00006e2d4cab37cc40d795176e811195c47d3993539ce03e037b6e0852d490b14279aef3a065eec0ccac95fe9ec51e90694e0fa708d4fd21611b0e0fdd215d316a4d4d8d0bcdd6b7cabffea0325abbe8841fcf15fd7641a57fc4882f56dc3718c517403c1cb0b7823baa90bbe8dae1200886d2b9e012710aadd889e51687345e144222f06"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x4a, 0x7, 0x2, [@generic={0xc9, 0x29, "f7dddd7de4254ed64ae272b91b97c1d4de52f9c86da4239fd6bca052b32ef118fdb7d7237239f310dd9cffbac5dbf2a9703d81cee4af578f65a364179b76733231116e36bf74dc09c89a0a4f1992af0c16375b4bbbb3951926647ba3e7d323f2108bb638de830c770f72f970217e4c898468b6c9d58cd28031beda47512fdda784fa1b35d201e678285284517776ff52ad670d497bcde46e3ba27caed5265211da58d0731cddd92ef25aa0d4c23a9eae360103191f00c62140da8fe57a5622b26a7ddd852f2dfc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}]}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x3, 0xa, 0x2, 0x40, 0xe}, 0x17b, &(0x7f0000001380)={0x5, 0xf, 0x17b, 0x4, [@generic={0xf5, 0x10, 0x2, "6db5b3bacdb5cb0dc78d504ea23c4f3271476f93433225563f6e858d4f3ad7334e447cf7fa7c7cac22ae2ab10b256eb80baf609bd27edb2b5a2e3e76a81e43e82276e1066f7eff1fc0fabc2c23d6329cd1f498a89a24fdb8c80f2796e77ab02c96cc4a373b2c7d516c16e43c50cded681389d706c09c9a076a38f0c682e53b0c31ae4a81afb839ee1f41bc4e78c8faeb712cbaef770e67c05e800c791b24dc800d1741b9ef00279fc79cb043b60c9fbb66e41a10286dcd5e79649a7d4d8dc3c74fce60edc4ba787fd8d4fba6659b03120818a151f69fd5e5d51ddf705ed328fd264ae671f53851418c521aaab04eb105a5ae"}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "514c977a89b8f0da232bdbff88b17406"}, @generic={0x63, 0x10, 0x2, "577c99b147f0da5dbb88df52316d97386b631e90dbd1795c11172930303c9aac743a07e80faa5e9c942002034c36f0d5af721c614de476c6ff4a87713db0901b05a6453a9f727329ae44208d09c0442e8cb978c1fc738dea194057b831fb7b7b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x3, 0x5}]}, 0x5, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xa9, &(0x7f0000001600)=@string={0xa9, 0x3, "029f8c9349e2a4133a20bf01e718cc8dea3a06baf138e5008850bf51aff0db99cffbf5d110ca9c445c005df42dadfb4db840f3d38625f67a80e8fa75ba97577d1e95d52b16464aac923613e12706a93c5d1acb8e8bd5db279e21d3fe0d4ef3cb43fe133245d2ddc4dfcd4857d758ef9e99ee2aeec5fbcb2454fe54772918b53c75c2940fc66989aff19931bf3bd21dec346ebcded22e813a239677c46c730de1a7367512e236ec"}}]}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'ip6tnl0\x00', r6, 0x2f, 0x48, 0xf, 0x4, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x1, 0x1, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001940)={'ip_vti0\x00', &(0x7f00000018c0)={'syztnl1\x00', r6, 0x10, 0x7, 0x2, 0x57, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x65, 0x0, 0xcf, 0x2f, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x41, 0x1, 0x3, [{@multicast2, 0x81}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @noop, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001ac0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xd0, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) openat2$dir(0xffffffffffffff9c, &(0x7f0000001b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001b80)={0x6040, 0x80, 0x17}, 0x18) recvfrom$l2tp(r1, &(0x7f0000001bc0)=""/99, 0x63, 0x40, &(0x7f0000001c40)={0x2, 0x0, @multicast2}, 0x10) write$UHID_CREATE2(r8, &(0x7f0000001c80)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x3f, 0x6, 0xd, 0xecc7, 0x40, 0xfffffffa, "10515323ce03286fec3ea1a3d7243e425c11b139e3639c42a9c801a276dcaf9906b4978118f5f9d0b5827eb0218e070eabfcf5df3354b832efdaf3c5df52ed"}}, 0x157) setxattr$incfs_id(&(0x7f0000001e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001e80), &(0x7f0000001ec0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001f00)={'vcan0\x00', {0x2, 0x4e24, @local}}) socket$pppl2tp(0x18, 0x1, 0x1) 1.847802091s ago: executing program 9 (id=1165): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8a, 0xb7, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edbfaffffff49e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 1.529755485s ago: executing program 7 (id=1166): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0xe, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r11, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r12}}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 1.431505313s ago: executing program 7 (id=1167): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket(0x21, 0x3, 0x5) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="022653c11e2abd00"/22], 0x24, 0x2) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4f}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000006000000000e4986919", 0x28}], 0x1}, 0x0) 1.41116372s ago: executing program 0 (id=1168): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0xbe27, 0x0, 0x5, 0x7}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r2, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0xe, 0x57, {0x57, 0x6, "f1e1cf9e6538aedc778a8b2ed96698a4d91886ac2d758dd6c06965deb7d3971905a9ef79fa7cc37e5aab2c53ee457b4fad2dab00360dffb5d79df4ccca6d6048dee9baca76f37045b9450b2fb5b2cd733a5f25117a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "b96630885f275868512ea3831666c72c67fd5fb82d3bc75c2aeb88868323f7dead56fe41566826d871105129bb0ad09a3eb0bdbefa27363d35c938b4a09ae6050d0f43700aef8655385bc51971"}}, &(0x7f0000000240)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x2, [@generic={0x88, 0x10, 0x0, "5c511a919924d6830ec3b6c2b6d13553bb31be199ae24b124deb23a73b8fd93dc1cfe067a26d022aa6ce5beb6140325c80cb47a1edf10278403d5b0a0234c08a0e3258d3d0916644626983aa37490a499f9a45a2df5fbddd940147337947bea158f64eb0aa9ea4fbbfdfd64bf412fdbc67d77826e0304c89c28628cb352d5c5de3931541fd"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x0, 0x2, 0x0, 0x6}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0xe1, 0x0, 0x0, "b64ca7b5", "4536fccd"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x6bbdaa06aa621c0f, 0x5, 0xfc, 0x7, 0x652, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x18, 0xa6, "09a319e8c3669f3044f4d910f2a3a88062ab1ecb30247d471682d763cb44f1f27e978c4d05518e0bb779c9de38e126647c3337434e1a4e95bc9694f411fb77bef65abbacba7c5861edabbd75a8a89cdccdc31aabb8f0668f27bd1e9a9ff25d96c49eb258a7399ce7848059c1777c8067f3fa841aaa268d22a84df8f965a97f8a89d2f5543a24c4ca5c83e2a16793c1683e6d448d0c7cda3db1ab21c3711dc107a79348b2d9c3"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x80, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9605"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9f}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "389d"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.309358868s ago: executing program 7 (id=1169): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}, {0x0}], 0x2}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0, 0xf2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {&(0x7f00000003c0)="4af011a9248e03bb2373087ae4012f0f8fb522a49b87a3ec2176e1acb62ea379b59abe2494c93e0546e8a4a30f7f5df0998931164144077f2e88c8907363963c7249a8b609fb6614f0cda4b7dcf62e89f5367d94ac8274622eef0d4f4659cdd6c26cda3f7cc2565b1a06d98048d4", 0x6e}, {0x0}], 0x5) 1.20071403s ago: executing program 2 (id=1170): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x6100c1) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x50093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000240)={0x100, 0x6, 0x200}, 0xc) io_setup(0x1, &(0x7f0000000480)) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000340)) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000440)) keyctl$clear(0x7, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000080000000000070000001c000180060005004e20000008000300ac1e00010600010002000000"], 0x30}}, 0x40000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, r1, 0x97391000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00030000", @ANYRES16=r7, @ANYBLOB="100029bd7000fedbdf2503000000040001804000068008000700", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0800060000000000060005004e210000080006001900000014000400000000000000000000000000000000000800040006000000"], 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="00000000e0000001000000000000000000000000000000070000000001000012000000fb0bc38914690200000000000000ab4e4f9ff765c60ad03b8b387018a3dfdc191e4ec1a01f4e65522b000015f3223f9e90f9fd6d1b494fef2a2ef25c55e0d8380d1200"], 0x38}}], 0x1, 0x4880) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 1.043574066s ago: executing program 8 (id=1171): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd69000000002006fefe80000000000000000000000000000efe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8110040790780003000905baab1012a3ae8d0000dcbb081ba3fc2ee7c4aef75321d1ad3d72c9e4062f989dd3ac716989b91a42b7741484ca79519eea1f75945c516e7f70896c720c2ccef8909d8161422509b77dad"], 0x0) 1.022771076s ago: executing program 2 (id=1172): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) preadv(r3, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0xfffffffffffffeac, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000380)="9f6cada5270000e1c9e8503036e0dc9bcb4fa672e27febdac8232fa3db72d5f78ef8e59df28f35a44f36ff745f7a8375793eb80900000004d652ee5d7b60262d2763108df6e2f913bb34ed437f5f9fa8409ff322d779fd40dfaf1c65c0f8caecf1a202d331f745", 0x67}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 856.123512ms ago: executing program 8 (id=1173): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'geneve1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e}}) syz_usb_connect$cdc_ecm(0x6, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xfc, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "096ff7"}, {0x5, 0x24, 0x0, 0xe0}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0x9, 0x7f}, [@mbim={0xc, 0x24, 0x1b, 0xd8ff, 0xc1a1, 0x8, 0x81, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x9, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0xc84502fedacec1da, 0x7, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x560b8ee17b736215, 0x2, 0x24, 0xf7}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x2, 0x1, 0x8, 0x10, 0x3}, 0x4c, &(0x7f0000000100)={0x5, 0xf, 0x4c, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x5, 0x11, 0x6, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x45, 0x2, 0x2, 0x6, 0xe}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0x0, 0x4, [0xc0cf, 0x30, 0xff003f]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0xf, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xf8, 0x7, 0x101}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x1d, &(0x7f00000001c0)=@string={0x1d, 0x3, "6d99bcc2f013cb0071183845c09ac7aac663d3cd2214f132bf165e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}, {0x55, &(0x7f0000000240)=@string={0x55, 0x3, "96861acc20fc2855ad7569017c9fc02c4bbe16e871b978d55b244a5ce1403a0d8453014169953536db068cf6066f410cb9d30fa476565403ad0af03a7a4f23fb35d6cc1546c5067dcfc7b92d940140e11fc1ba"}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000324908007f"], 0x50) pipe2$9p(&(0x7f0000000240), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 774.109955ms ago: executing program 7 (id=1174): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x9}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) 473.568541ms ago: executing program 9 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="cd", 0x1}], 0x1}}], 0x1, 0x4000000) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x10000002}) 202.700602ms ago: executing program 8 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000"], 0xdc}}, 0x44) 0s ago: executing program 8 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) unshare(0x28000600) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r2, &(0x7f0000000100)=ANY=[], 0xb0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r3, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000b000000be0000000100000000000000098fb44b5bbd96055a67c4be048699dd2ff08be7ab813aa30ee338b2896708694fc3ce31fe20f606cd37b32d9d7ed7c9f9ab36e4d70ee3e711a880b539ad6adccabdb89ee1894445d07217ade66f4d9e6e39cc7d98c3acd87caf65378fa251eb14a76b504ece63c1cf8fd8b24db9faae0947eb3fe92d925fe0056a46f5de2c378979190de0389f211d6b53eadb8534f853611ee8458e0d900a395583887d19db78e7abca12050a6882f22da14d5cac", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f00000000c0), 0x0}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000000)="aefeda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) poll(&(0x7f0000000200)=[{r8, 0x974a}], 0x1, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @initdev}, &(0x7f0000000140)=0xc) kernel console output (not intermixed with test programs): 5398][ T5979] usb usb7-port1: attempt power cycle [ 234.483519][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.595362][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.704987][ T3970] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.829659][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 234.844658][ T5979] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 234.895325][ T5979] usb 7-1: device descriptor read/8, error -71 [ 235.111488][ T8353] netlink: 182 bytes leftover after parsing attributes in process `syz.1.571'. [ 235.144768][ T5979] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 235.165633][ T5979] usb 7-1: device descriptor read/8, error -71 [ 235.274756][ T5979] usb usb7-port1: unable to enumerate USB device [ 235.354476][ T5896] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 235.804524][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 235.812850][ T5896] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 235.822242][ T5896] usb 6-1: config 0 has no interface number 0 [ 235.828949][ T5896] usb 6-1: config 0 interface 249 has no altsetting 0 [ 235.840537][ T5896] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 235.849887][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.862584][ T5896] usb 6-1: Product: syz [ 235.872611][ T5896] usb 6-1: Manufacturer: syz [ 235.881708][ T5896] usb 6-1: SerialNumber: syz [ 235.897953][ T5896] usb 6-1: config 0 descriptor?? [ 236.116754][ T8367] netlink: 'syz.6.573': attribute type 6 has an invalid length. [ 236.374483][ T5896] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 236.457128][ T9] usb 6-1: USB disconnect, device number 25 [ 236.488940][ T8375] PKCS8: Unsupported PKCS#8 version [ 236.561901][ T5979] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 236.585979][ T5896] usb 3-1: device descriptor read/64, error -71 [ 236.738120][ T5979] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 236.876082][ T5896] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 236.943429][ T7257] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 236.969431][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.031284][ T5979] usb 2-1: Product: syz [ 237.050049][ T5979] usb 2-1: Manufacturer: syz [ 237.064009][ T5979] usb 2-1: SerialNumber: syz [ 237.084719][ T5896] usb 3-1: device descriptor read/64, error -71 [ 237.097913][ T5979] usb 2-1: config 0 descriptor?? [ 237.114427][ T7257] usb 7-1: Using ep0 maxpacket: 32 [ 237.123742][ T7257] usb 7-1: unable to get BOS descriptor or descriptor too short [ 237.134345][ T5979] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 237.137197][ T7257] usb 7-1: config 14 has an invalid interface number: 164 but max is 0 [ 237.159920][ T7257] usb 7-1: config 14 has no interface number 0 [ 237.168600][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.209232][ T5896] usb usb3-port1: attempt power cycle [ 237.215212][ T7257] usb 7-1: config 14 interface 164 has no altsetting 0 [ 237.247093][ T7257] usb 7-1: New USB device found, idVendor=10b8, idProduct=0bc6, bcdDevice=19.f0 [ 237.247451][ T5979] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 237.277723][ T7257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.299890][ T7257] usb 7-1: Product: syz [ 237.305120][ T5979] usb 2-1: media controller created [ 237.315081][ T7257] usb 7-1: Manufacturer: syz [ 237.329902][ T7257] usb 7-1: SerialNumber: syz [ 237.580399][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.594496][ T5896] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 237.684464][ T5896] usb 3-1: device descriptor read/8, error -71 [ 237.986446][ T5896] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 238.016781][ T5896] usb 3-1: device descriptor read/8, error -71 [ 238.119007][ T5979] DVB: Unable to find symbol mt352_attach() [ 238.129972][ T5896] usb usb3-port1: unable to enumerate USB device [ 238.264646][ T5979] DVB: Unable to find symbol nxt6000_attach() [ 238.289165][ T5979] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 238.363140][ T5979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 238.404874][ T7258] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 238.413756][ T5979] dvb-usb: schedule remote query interval to 1000 msecs. [ 238.436698][ T5979] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 238.450604][ T5979] dvb-usb: bulk message failed: -22 (7/0) [ 238.462231][ T1008] net_ratelimit: 28 callbacks suppressed [ 238.462253][ T1008] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.480051][ T5979] dvb-usb: bulk message failed: -22 (7/0) [ 238.504978][ T5979] usb 2-1: USB disconnect, device number 23 [ 238.577259][ T7258] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 238.582611][ T5979] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 238.589052][ T7258] usb 6-1: config 0 interface 0 has no altsetting 0 [ 238.618573][ T1008] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.676313][ T7258] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.700728][ T7258] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 238.720185][ T7258] usb 6-1: Product: syz [ 238.737080][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.747926][ T7258] usb 6-1: Manufacturer: syz [ 238.760417][ T7258] usb 6-1: SerialNumber: syz [ 238.792043][ T7258] usb 6-1: config 0 descriptor?? [ 238.855975][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 238.881034][ T7258] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 239.005407][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.022368][ T8166] udevd[8166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.068284][ T8404] fuse: Bad value for 'user_id' [ 239.074590][ T8392] input: syz0 as /devices/virtual/input/input26 [ 239.097739][ T8404] fuse: Bad value for 'user_id' [ 239.125464][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.244835][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.355102][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.403359][ T7258] usb 6-1: USB disconnect, device number 26 [ 239.455013][ T5979] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 239.474495][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.584645][ T1008] bond2: (slave macvlan2): failed to get link speed/duplex [ 239.608264][ T5979] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 239.618049][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.632459][ T5979] usb 3-1: config 0 descriptor?? [ 239.644124][ T5979] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 239.722942][ T7257] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in cold state, will try to load a firmware [ 239.771848][ T7257] usb 7-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 239.792735][ T7257] usb 7-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 240.054899][ T5979] gspca_stv06xx: I2C: Read error writing address: -71 [ 240.216332][ T5979] usb 3-1: USB disconnect, device number 34 [ 240.767200][ T8428] tipc: Enabled bearer , priority 0 [ 240.810849][ T8424] tipc: Resetting bearer [ 241.054477][ T5979] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 241.204622][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 241.334090][ T5979] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 241.359289][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.384622][ T5979] usb 3-1: Product: syz [ 241.389011][ T5979] usb 3-1: Manufacturer: syz [ 241.409361][ T5979] usb 3-1: SerialNumber: syz [ 241.436256][ T5979] usb 3-1: config 0 descriptor?? [ 241.520891][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 241.673584][ T5979] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 242.088695][ T5979] usb write operation failed. (-71) [ 242.113652][ T5979] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.139531][ T5979] dvbdev: DVB: registering new adapter (Terratec H7) [ 242.167636][ T5979] usb 3-1: media controller created [ 242.183119][ T5979] usb read operation failed. (-71) [ 242.199430][ T5979] usb write operation failed. (-71) [ 242.239429][ T5979] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 242.289962][ T5979] usb 3-1: USB disconnect, device number 35 [ 243.285065][ T8450] netlink: 182 bytes leftover after parsing attributes in process `syz.6.595'. [ 244.108190][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.598'. [ 244.434487][ T7245] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 244.612174][ T7245] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 244.623202][ T7245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 244.663837][ T7245] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.679658][ T7245] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.688275][ T7245] usb 3-1: Product: syz [ 244.692590][ T7245] usb 3-1: Manufacturer: syz [ 244.697672][ T7245] usb 3-1: SerialNumber: syz [ 244.705084][ T8424] tipc: Disabling bearer [ 244.712496][ T7245] usb 3-1: config 0 descriptor?? [ 244.745295][ T4446] net_ratelimit: 6 callbacks suppressed [ 244.745312][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.773532][ T7245] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 244.837535][ T8166] udevd[8166]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.864766][ T6020] bond2: (slave macvlan2): failed to get link speed/duplex [ 244.926167][ T8461] input: syz0 as /devices/virtual/input/input27 [ 244.974773][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.054508][ T7245] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 245.080601][ T5979] usb 3-1: USB disconnect, device number 36 [ 245.095399][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.204586][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.223157][ T7245] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 245.232902][ T7245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.242875][ T7245] usb 6-1: config 0 descriptor?? [ 245.255101][ T7245] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 245.324494][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.434484][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.554499][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.668127][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 245.711394][ T7245] gspca_stv06xx: I2C: Read error writing address: -71 [ 245.733796][ T7245] usb 6-1: USB disconnect, device number 27 [ 245.784519][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 246.539564][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.5.609'. [ 246.837424][ T8501] sctp: [Deprecated]: syz.6.610 (pid 8501) Use of int in maxseg socket option. [ 246.837424][ T8501] Use struct sctp_assoc_value instead [ 247.548670][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 247.605941][ T8510] binder: BINDER_SET_CONTEXT_MGR already set [ 247.613581][ T8510] binder: 8505:8510 ioctl 4018620d 200000000040 returned -16 [ 247.623927][ T8510] binder: 8505:8510 ioctl c0306201 200000000300 returned -11 [ 248.330533][ T8514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.385225][ T8515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.430463][ T8515] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 248.935398][ T7245] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 248.996083][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.621'. [ 249.165406][ T7245] usb 2-1: Using ep0 maxpacket: 32 [ 249.211119][ T7245] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 249.224711][ T7245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.248164][ T7245] usb 2-1: config 0 descriptor?? [ 249.270397][ T7245] go7007 2-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 249.404494][ T6384] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 249.495531][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.506498][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.585808][ T6384] usb 6-1: Using ep0 maxpacket: 32 [ 249.593780][ T6384] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 249.605441][ T6384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 249.616662][ T6384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 249.636030][ T6384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 249.647953][ T6384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 249.700210][ T6384] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 249.711736][ T6384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.735673][ T6384] usb 6-1: Product: syz [ 249.740191][ T6384] usb 6-1: Manufacturer: syz [ 249.747194][ T6384] usb 6-1: SerialNumber: syz [ 249.757948][ T6384] usb 6-1: config 0 descriptor?? [ 249.804500][ T5971] net_ratelimit: 42 callbacks suppressed [ 249.808355][ T5971] bond2: (slave macvlan2): failed to get link speed/duplex [ 249.835511][ T5971] bond2: (slave macvlan2): failed to get link speed/duplex [ 249.945762][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 249.974601][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 249.982040][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.005641][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.032072][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.053525][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.071011][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.077131][ T5971] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.094307][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.100470][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.116135][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.131265][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.137772][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.144175][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.152139][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.158798][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.166554][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.173528][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.180365][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.187176][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.194541][ T5971] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.194608][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.213925][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.223995][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.230116][ T5971] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.241686][ T6384] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 250.251304][ T6384] input input28: Timeout waiting for response from device. [ 250.298655][ T6384] usb 6-1: USB disconnect, device number 28 [ 250.304657][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.336334][ T8541] delete_channel: no stack [ 250.344486][ T3465] bond2: (slave macvlan2): failed to get link speed/duplex [ 250.771726][ T8550] xt_policy: output policy not valid in PREROUTING and INPUT [ 250.835623][ T5979] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 251.144453][ T5979] usb 6-1: Using ep0 maxpacket: 8 [ 251.185915][ T5979] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 251.197582][ T5979] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 251.207100][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.216730][ T5979] usb 6-1: Product: syz [ 251.221272][ T5979] usb 6-1: Manufacturer: syz [ 251.228699][ T5979] usb 6-1: SerialNumber: syz [ 251.239940][ T5979] usb 6-1: config 0 descriptor?? [ 251.252251][ T5979] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 251.260720][ T5979] usb 6-1: setting power ON [ 251.265686][ T5979] dvb-usb: bulk message failed: -22 (2/0) [ 251.277953][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.291586][ T5979] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 251.321675][ T5979] usb 6-1: media controller created [ 251.353534][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.374458][ T5896] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 251.391232][ T5979] usb 6-1: selecting invalid altsetting 6 [ 251.400655][ T5979] usb 6-1: digital interface selection failed (-22) [ 251.411409][ T5979] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 251.426881][ T5979] usb 6-1: setting power OFF [ 251.436531][ T5979] dvb-usb: bulk message failed: -22 (2/0) [ 251.448396][ T5979] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 251.469324][ T5979] (NULL device *): no alternate interface [ 251.656045][ T9] usb 2-1: USB disconnect, device number 24 [ 251.689811][ T5896] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.710508][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.722675][ T5896] usb 3-1: Product: syz [ 251.746001][ T5896] usb 3-1: Manufacturer: syz [ 251.750711][ T5896] usb 3-1: SerialNumber: syz [ 252.176415][ T8568] fuse: Bad value for 'fd' [ 252.200291][ T5896] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 252.231852][ T8568] ipip0: entered promiscuous mode [ 252.243582][ T8568] ipip0: entered allmulticast mode [ 252.290273][ T8568] netlink: 72 bytes leftover after parsing attributes in process `syz.6.632'. [ 253.636293][ T8589] vivid-007: ================= START STATUS ================= [ 253.651595][ T8589] vivid-007: Enable Output Cropping: true [ 253.667422][ T8589] vivid-007: Enable Output Composing: true [ 253.677271][ T8589] vivid-007: Enable Output Scaler: true [ 253.699705][ T8589] vivid-007: Tx RGB Quantization Range: Automatic [ 253.759824][ T8589] vivid-007: Transmit Mode: HDMI [ 253.769590][ T8589] vivid-007: Hotplug Present: 0x00000000 [ 253.776145][ T8589] vivid-007: RxSense Present: 0x00000000 [ 253.782377][ T8589] vivid-007: EDID Present: 0x00000000 [ 253.791673][ T8589] vivid-007: ================== END STATUS ================== [ 253.998826][ T8594] fuse: Bad value for 'user_id' [ 254.003868][ T8594] fuse: Bad value for 'user_id' [ 254.066501][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.082115][ T8598] macvtap1: entered allmulticast mode [ 254.089224][ T8598] veth0_macvtap: entered allmulticast mode [ 254.164898][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.492725][ T5896] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 254.513939][ T5896] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 254.549521][ T5896] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 254.578334][ T5896] usb 3-1: USB disconnect, device number 37 [ 254.874681][ T4586] net_ratelimit: 71 callbacks suppressed [ 254.874697][ T4586] bond2: (slave macvlan2): failed to get link speed/duplex [ 254.954488][ T4586] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.054514][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.074510][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.164500][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.184506][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.285241][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.334806][ T6016] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.416796][ T6016] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.455111][ T4586] bond2: (slave macvlan2): failed to get link speed/duplex [ 255.471675][ T8624] netlink: 182 bytes leftover after parsing attributes in process `syz.1.649'. [ 255.675998][ T5896] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 255.707824][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714329][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.834477][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 255.843197][ T5896] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 255.856512][ T5896] usb 3-1: config 0 has no interface number 0 [ 255.864210][ T5896] usb 3-1: config 0 interface 250 has no altsetting 0 [ 255.874919][ T5896] usb 3-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 255.884777][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.893113][ T5896] usb 3-1: Product: syz [ 255.899005][ T5896] usb 3-1: Manufacturer: syz [ 255.903697][ T5896] usb 3-1: SerialNumber: syz [ 255.917369][ T5896] usb 3-1: config 0 descriptor?? [ 255.930837][ T5896] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 256.741408][ T5896] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 256.791000][ T6020] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.806641][ T6020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.829768][ T6020] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.843402][ T6020] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.800691][ T8650] xt_policy: output policy not valid in PREROUTING and INPUT [ 258.496307][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 258.678435][ T8670] netlink: 182 bytes leftover after parsing attributes in process `syz.0.660'. [ 259.374527][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 259.914610][ T3970] net_ratelimit: 73 callbacks suppressed [ 259.914631][ T3970] bond2: (slave macvlan2): failed to get link speed/duplex [ 259.987604][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.036045][ T3970] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.122076][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.148174][ T8704] binder: 8703:8704 ioctl 8008662c 200000000480 returned -22 [ 260.156154][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.234537][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.308117][ T1008] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.578997][ T30] audit: type=1326 audit(1766488430.648:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 260.614554][ T74] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.632083][ T30] audit: type=1326 audit(1766488430.648:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 260.634706][ T74] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.741657][ T3970] bond2: (slave macvlan2): failed to get link speed/duplex [ 260.794513][ T30] audit: type=1326 audit(1766488430.648:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 260.877022][ T30] audit: type=1326 audit(1766488430.648:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 260.894501][ T5887] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 261.144544][ T30] audit: type=1326 audit(1766488430.658:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.314509][ T30] audit: type=1326 audit(1766488430.658:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.413523][ T8716] xt_policy: output policy not valid in PREROUTING and INPUT [ 261.431698][ T30] audit: type=1326 audit(1766488430.658:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.434535][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 261.481769][ T5887] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 261.497239][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.514445][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.537231][ T30] audit: type=1326 audit(1766488430.658:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.537262][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.632131][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.718453][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.807352][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.819840][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.848309][ T30] audit: type=1326 audit(1766488430.658:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.871091][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.871681][ T30] audit: type=1326 audit(1766488430.658:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x7ffc0000 [ 261.977871][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.989862][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.041148][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.073313][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.116751][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.127871][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.151450][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.162556][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.177755][ T5887] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 262.190482][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.234802][ T5887] usb 2-1: config 0 descriptor?? [ 262.718502][ T8735] syzkaller0: entered promiscuous mode [ 262.724124][ T8735] syzkaller0: entered allmulticast mode [ 262.847956][ T5887] usbhid 2-1:0.0: can't add hid device: -32 [ 262.853954][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 263.948058][ T7245] usb 2-1: USB disconnect, device number 25 [ 264.520565][ T8759] xt_policy: output policy not valid in PREROUTING and INPUT [ 265.149703][ T3970] net_ratelimit: 65 callbacks suppressed [ 265.149722][ T3970] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.268565][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.291134][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.384797][ T6020] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.414487][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.495310][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.524501][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.616856][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.634495][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.724985][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 265.737432][ T8771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 266.246709][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.258903][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.267182][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.286240][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.295568][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.161524][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 267.535615][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.553205][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.570807][ T8785] bridge_slave_0: entered allmulticast mode [ 267.592633][ T8785] bridge_slave_0: entered promiscuous mode [ 267.635486][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.671512][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.694864][ T8785] bridge_slave_1: entered allmulticast mode [ 267.702247][ T8785] bridge_slave_1: entered promiscuous mode [ 267.856982][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.874872][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.020714][ T8785] team0: Port device team_slave_0 added [ 268.360401][ T8785] team0: Port device team_slave_1 added [ 268.398713][ T5151] Bluetooth: hci4: command tx timeout [ 269.138418][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.146795][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.174559][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.216525][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.237135][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.245561][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.257283][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.285094][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.310847][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.327289][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.440302][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.726288][ T8785] hsr_slave_0: entered promiscuous mode [ 269.752600][ T8785] hsr_slave_1: entered promiscuous mode [ 269.766206][ T8785] debugfs: 'hsr0' already exists in 'hsr' [ 269.772185][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.702'. [ 269.782559][ T8785] Cannot create hsr debugfs directory [ 269.930860][ T8831] syzkaller0: entered promiscuous mode [ 269.944525][ T8831] syzkaller0: entered allmulticast mode [ 270.454846][ T3439] net_ratelimit: 15 callbacks suppressed [ 270.454860][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 270.506868][ T51] Bluetooth: hci4: command tx timeout [ 270.785079][ T6020] bond2: (slave macvlan2): failed to get link speed/duplex [ 271.037991][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 271.081889][ T8785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 271.275808][ T8785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 271.430216][ T51] Bluetooth: hci6: command tx timeout [ 271.503688][ T8785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 271.593839][ T8785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 271.799629][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.834553][ T8877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.714'. [ 271.858786][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.193630][ T8821] bridge_slave_0: entered allmulticast mode [ 272.209161][ T8821] bridge_slave_0: entered promiscuous mode [ 272.296547][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.315590][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.325837][ T8821] bridge_slave_1: entered allmulticast mode [ 272.366751][ T8821] bridge_slave_1: entered promiscuous mode [ 272.444987][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.478776][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.584451][ T51] Bluetooth: hci4: command tx timeout [ 272.681453][ T8821] team0: Port device team_slave_0 added [ 272.731203][ T8821] team0: Port device team_slave_1 added [ 272.866046][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.886300][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.942627][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.012809][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.027923][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.089369][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.119095][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 273.266664][ T8821] hsr_slave_0: entered promiscuous mode [ 273.281675][ T8821] hsr_slave_1: entered promiscuous mode [ 273.297474][ T8821] debugfs: 'hsr0' already exists in 'hsr' [ 273.340068][ T8821] Cannot create hsr debugfs directory [ 273.384129][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.464959][ T51] Bluetooth: hci6: command tx timeout [ 273.542571][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.731494][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.738652][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.824850][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 273.840507][ T2012] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.847706][ T2012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.004839][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 274.105804][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 274.180924][ T8821] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 274.201330][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.220545][ T8821] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 274.235244][ T8821] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 274.242876][ T8905] netlink: 'syz.2.722': attribute type 1 has an invalid length. [ 274.259628][ T8821] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 274.304769][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 274.321900][ T8907] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 274.345030][ T3439] bond2: (slave macvlan2): failed to get link speed/duplex [ 274.434239][ T8785] veth0_vlan: entered promiscuous mode [ 274.485538][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 274.504059][ T8785] veth1_vlan: entered promiscuous mode [ 274.580242][ T8785] veth0_macvtap: entered promiscuous mode [ 274.684591][ T51] Bluetooth: hci4: command tx timeout [ 274.771293][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.784238][ T8785] veth1_macvtap: entered promiscuous mode [ 274.822842][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.858410][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.880835][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.887993][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.915534][ T2012] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.922711][ T2012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.956113][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.989778][ T4586] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.026124][ T4586] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.044168][ T4586] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.072789][ T4586] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.291351][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.294994][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 275.314907][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.351731][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.376992][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.394966][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.533625][ T8821] veth0_vlan: entered promiscuous mode [ 275.544780][ T51] Bluetooth: hci6: command tx timeout [ 275.564903][ T3423] net_ratelimit: 3 callbacks suppressed [ 275.564933][ T3423] bond2: (slave macvlan2): failed to get link speed/duplex [ 275.606769][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 275.718615][ T8821] veth1_vlan: entered promiscuous mode [ 275.975751][ T8821] veth0_macvtap: entered promiscuous mode [ 276.189741][ T2012] bond2: (slave macvlan2): failed to get link speed/duplex [ 276.220456][ T8821] veth1_macvtap: entered promiscuous mode [ 276.279038][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.311604][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.354123][ T74] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.378519][ T74] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.400065][ T74] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.412321][ T74] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.444917][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 276.452364][ T3517] bond2: (slave macvlan2): failed to get link speed/duplex [ 277.761253][ T51] Bluetooth: hci6: command tx timeout [ 278.487461][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.527867][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.602995][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.611328][ T74] bond2: (slave macvlan2): failed to get link speed/duplex [ 278.618674][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.626398][ T74] bond2: (slave macvlan2): failed to get link speed/duplex [ 278.784508][ T6020] bond2: (slave macvlan2): failed to get link speed/duplex [ 278.824527][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 278.894520][ T49] bond2: (slave macvlan2): failed to get link speed/duplex [ 279.275963][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 279.473095][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 279.494783][ T5824] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 279.522213][ T8968] input: syz1 as /devices/virtual/input/input34 [ 279.537502][ T24] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 279.552150][ T24] usb 9-1: config 2 has no interface number 0 [ 279.558435][ T24] usb 9-1: config 2 interface 31 has no altsetting 0 [ 279.560510][ T8968] binder: 8963:8968 ioctl c0306201 0 returned -14 [ 279.573487][ T24] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 279.584694][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.348389][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.399688][ T5824] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.434763][ T24] usb 9-1: Product: syz [ 280.439022][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.464713][ T24] usb 9-1: Manufacturer: syz [ 280.534516][ T24] usb 9-1: SerialNumber: syz [ 280.549986][ T5824] usb 8-1: config 0 descriptor?? [ 280.599814][ T8955] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 280.645829][ T4446] net_ratelimit: 19 callbacks suppressed [ 280.645844][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 280.667726][ T5824] usbhid 8-1:0.0: can't add hid device: -22 [ 280.767841][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 280.779218][ T5824] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 280.794476][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 280.842634][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.851569][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.904674][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 280.934682][ T4446] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.034500][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.074528][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.226888][ T24] ch9200 9-1:2.31: probe with driver ch9200 failed with error -22 [ 281.252084][ T24] usb 9-1: USB disconnect, device number 2 [ 281.264557][ T12] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.351105][ T8968] syz.0.735 (8968): drop_caches: 2 [ 281.367434][ T6016] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.424540][ T6016] bond2: (slave macvlan2): failed to get link speed/duplex [ 281.589728][ T8978] vlan2: entered promiscuous mode [ 282.164217][ T8997] bond4: invalid ARP target 0.0.0.0 specified for addition [ 282.171587][ T8997] bond4: option arp_ip_target: invalid value (0) [ 282.187353][ T8997] bond4 (unregistering): Released all slaves [ 283.033312][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.042782][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.245753][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 283.245765][ T30] audit: type=1326 audit(1766488453.398:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.1.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5ddd8f749 code=0x0 [ 283.948766][ T24] usb 8-1: USB disconnect, device number 2 [ 284.300010][ T9016] tipc: Started in network mode [ 284.310609][ T9016] tipc: Node identity 8ed0f65b63ec, cluster identity 4711 [ 284.332363][ T9016] tipc: Enabled bearer , priority 0 [ 284.638718][ T9024] netlink: 'syz.1.748': attribute type 27 has an invalid length. [ 284.726038][ T9015] tipc: Disabling bearer [ 284.811714][ T8920] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.857812][ T8920] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.890131][ T8920] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.923395][ T8920] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.038180][ T9028] vlan2: entered promiscuous mode [ 285.654936][ T6020] net_ratelimit: 46 callbacks suppressed [ 285.654955][ T6020] bond2: (slave macvlan2): failed to get link speed/duplex [ 285.894680][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 286.044437][ T60] bond2: (slave macvlan2): failed to get link speed/duplex [ 286.158246][ T9052] netlink: 'syz.2.758': attribute type 27 has an invalid length. [ 286.624409][ T9052] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 286.699254][ T9061] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 287.124644][ T5824] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 287.354764][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 287.394521][ T5824] usb 8-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 287.403682][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.417435][ T5824] usb 8-1: config 0 descriptor?? [ 287.540480][ T5824] go7007 8-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 288.148436][ T9081] fuse: Unknown parameter 'ur_id' [ 288.182019][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.764'. [ 288.203111][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.227741][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.163162][ T9090] syzkaller0: entered promiscuous mode [ 289.169992][ T9090] syzkaller0: entered allmulticast mode [ 289.905484][ T6384] usb 8-1: USB disconnect, device number 3 [ 290.174948][ T9110] tipc: Enabling of bearer rejected, failed to enable media [ 291.765132][ T9125] vlan2: entered promiscuous mode [ 292.112570][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 292.402344][ T9] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 292.411419][ T9] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 292.422654][ T9] usb 8-1: config 220 has no interface number 2 [ 292.429840][ T9] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 292.443761][ T9] usb 8-1: config 220 interface 0 has no altsetting 0 [ 292.453054][ T9] usb 8-1: config 220 interface 76 has no altsetting 0 [ 292.468208][ T9] usb 8-1: config 220 interface 1 has no altsetting 0 [ 292.486218][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 292.503145][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.521740][ T9] usb 8-1: Product: syz [ 292.532923][ T9] usb 8-1: Manufacturer: syz [ 292.543934][ T9] usb 8-1: SerialNumber: syz [ 292.785690][ T9] usb 8-1: selecting invalid altsetting 0 [ 292.814193][ T9] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 292.858647][ T9] uvcvideo 8-1:220.0: No valid video chain found. [ 292.891536][ T9] usb 8-1: selecting invalid altsetting 0 [ 292.899356][ T9] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 292.930182][ T9] usb 8-1: USB disconnect, device number 4 [ 293.027216][ T9149] ksmbd: Unknown IPC event: 3, ignore. [ 294.182980][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.192398][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.203673][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.214583][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.149763][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.791'. [ 295.172331][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.791'. [ 295.257678][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.792'. [ 296.374496][ T5824] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 296.606928][ T5824] usb 8-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 296.682183][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 296.740500][ T5824] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.904495][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 296.929389][ T5824] usb 8-1: Product: syz [ 296.934092][ T5824] usb 8-1: Manufacturer: syz [ 296.942735][ T5824] usb 8-1: SerialNumber: syz [ 296.975335][ T5824] usb 8-1: config 0 descriptor?? [ 297.109365][ T5824] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 297.154458][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 297.174143][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.246363][ T9188] input: syz0 as /devices/virtual/input/input36 [ 297.314466][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 297.322508][ T9] usb 9-1: config index 0 descriptor too short (expected 67, got 36) [ 297.334456][ T9] usb 9-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 297.360308][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.439882][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.470475][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.578782][ T9] usb 9-1: config index 1 descriptor too short (expected 67, got 36) [ 297.587569][ T9] usb 9-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 297.644558][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.682766][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.714284][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.745715][ T9] usb 9-1: config index 2 descriptor too short (expected 67, got 36) [ 297.754787][ T9] usb 9-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 297.768290][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.782045][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.784256][ T5824] usb 8-1: USB disconnect, device number 5 [ 297.813232][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.833400][ T9] usb 9-1: config index 3 descriptor too short (expected 67, got 36) [ 297.842000][ T9] usb 9-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 297.857412][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.873173][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.890939][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.917137][ T9] usb 9-1: config index 4 descriptor too short (expected 67, got 36) [ 297.925605][ T9] usb 9-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 297.936072][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.946941][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.957095][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.973348][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 297.983022][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.991475][ T9] usb 9-1: Product: syz [ 297.996005][ T9] usb 9-1: Manufacturer: syz [ 298.000725][ T9] usb 9-1: SerialNumber: syz [ 298.007103][ T9] usb 9-1: config 0 descriptor?? [ 298.030360][ T9] mcba_usb 9-1:0.0: Can't find endpoints [ 298.232299][ T9] usb 9-1: USB disconnect, device number 3 [ 298.633962][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.806'. [ 298.889348][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.809'. [ 299.185817][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.812'. [ 299.194661][ T9233] veth0_vlan: entered allmulticast mode [ 299.363936][ T9236] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 299.626676][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 299.827669][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 299.837544][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 299.872882][ T5824] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.890516][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.916518][ T5824] usb 8-1: Product: syz [ 299.932044][ T5824] usb 8-1: Manufacturer: syz [ 299.943626][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 299.951455][ T5824] usb 8-1: SerialNumber: syz [ 299.975581][ T5824] usb 8-1: config 0 descriptor?? [ 300.134617][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 300.337011][ T5824] usb 8-1: USB disconnect, device number 6 [ 300.414851][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.431471][ T9] usb 9-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 300.502981][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.536296][ T9] usb 9-1: config 0 descriptor?? [ 300.568748][ T9244] tipc: Started in network mode [ 300.583881][ T9244] tipc: Node identity 821a50b24304, cluster identity 4711 [ 300.590550][ T9] go7007 9-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 300.618502][ T9244] tipc: Enabled bearer , priority 0 [ 300.740155][ T9242] tipc: Resetting bearer [ 300.813402][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.823861][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.966642][ T5151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.977787][ T5151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.987829][ T5151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.998169][ T5151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.025411][ T5151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.818736][ T7257] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 301.836993][ T7257] dvb_usb_dibusb_mc 7-1:14.164: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 301.876613][ T7257] usb 7-1: USB disconnect, device number 35 [ 302.364278][ T9] usb 9-1: USB disconnect, device number 4 [ 302.894533][ T7257] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 303.057861][ T7257] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.070544][ T7257] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.079783][ T5151] Bluetooth: hci7: command tx timeout [ 303.081154][ T7257] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.095813][ T7257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.103878][ T7257] usb 9-1: SerialNumber: syz [ 303.498891][ T9242] tipc: Disabling bearer [ 303.508539][ T5824] tipc: Node number set to 3239989426 [ 303.527688][ T9043] syz_tun (unregistering): left allmulticast mode [ 303.534260][ T9043] syz_tun (unregistering): left promiscuous mode [ 303.541708][ T9043] bridge0: port 3(syz_tun) entered disabled state [ 303.649275][ T7257] usb 9-1: 0:2 : does not exist [ 303.654302][ T7257] usb 9-1: unit 4 not found! [ 303.700646][ T7257] usb 9-1: USB disconnect, device number 5 [ 303.780979][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.076859][ T9254] chnl_net:caif_netlink_parms(): no params data found [ 304.555943][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.580267][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.732068][ T9254] bridge_slave_0: entered allmulticast mode [ 304.770395][ T9254] bridge_slave_0: entered promiscuous mode [ 304.781800][ T5971] bridge_slave_1: left allmulticast mode [ 304.947982][ T5971] bridge_slave_1: left promiscuous mode [ 304.958493][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.114296][ T5971] bridge_slave_0: left allmulticast mode [ 305.131534][ T5971] bridge_slave_0: left promiscuous mode [ 305.152940][ T5151] Bluetooth: hci7: command tx timeout [ 305.165051][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.073616][ T5971] bond1 (unregistering): (slave gretap1): Releasing active interface [ 306.417467][ T5971] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 306.665078][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.687778][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.709599][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.739354][ T5971] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 306.749564][ T5971] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 306.760591][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.772219][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.782597][ T5971] bond_slave_0: left promiscuous mode [ 306.793701][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.808298][ T5971] bond_slave_1: left promiscuous mode [ 306.820222][ T5971] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 306.832873][ T5971] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 306.847609][ T5971] bond0 (unregistering): Released all slaves [ 306.880727][ T5971] bond1 (unregistering): Released all slaves [ 307.095128][ T5971] bond2 (unregistering): Released all slaves [ 307.119839][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.127945][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.139772][ T9254] bridge_slave_1: entered allmulticast mode [ 307.178255][ T9254] bridge_slave_1: entered promiscuous mode [ 307.222904][ T9299] bond1: option mode: unable to set because the bond device has slaves [ 307.232539][ T5151] Bluetooth: hci7: command tx timeout [ 307.238359][ T9301] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.250477][ T9301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.419058][ T5971] tipc: Left network mode [ 307.731488][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.868993][ T9333] tipc: Enabled bearer , priority 0 [ 307.898104][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.938983][ T9328] tipc: Resetting bearer [ 308.304439][ T978] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 308.457241][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.468660][ T978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.482700][ T978] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 308.495259][ T978] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.503314][ T978] usb 8-1: Manufacturer: syz [ 308.511979][ T978] usb 8-1: config 0 descriptor?? [ 308.937911][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 308.946386][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 308.953274][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 308.961778][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 308.970822][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 308.991174][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 309.028520][ T978] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 309.047061][ T978] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 309.308287][ T5151] Bluetooth: hci7: command tx timeout [ 309.746826][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.772540][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.157341][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 310.413180][ T978] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 310.420961][ T978] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 310.456946][ T978] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 310.476814][ T978] usb 8-1: USB disconnect, device number 7 [ 310.632776][ T9364] fido_id[9364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 311.770454][ T9328] tipc: Disabling bearer [ 311.836565][ T5971] hsr_slave_0: left promiscuous mode [ 311.845076][ T5971] hsr_slave_1: left promiscuous mode [ 311.863122][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.895664][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.507415][ T9389] xt_policy: output policy not valid in PREROUTING and INPUT [ 313.075872][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 314.264848][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 314.436231][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 315.189183][ T6384] tipc: Node number set to 3980195419 [ 315.300526][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 315.332559][ T9430] vlan2: entered promiscuous mode [ 315.398795][ T9254] team0: Port device team_slave_0 added [ 315.437452][ T9254] team0: Port device team_slave_1 added [ 315.637326][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.782586][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.836713][ T7245] IPVS: starting estimator thread 0... [ 315.859210][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.917837][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.934425][ T9450] IPVS: using max 39 ests per chain, 93600 per kthread [ 315.942867][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.121099][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.395370][ T5971] IPVS: stop unused estimator thread 0... [ 316.436412][ T9457] syzkaller0: entered promiscuous mode [ 316.614483][ T9457] syzkaller0: entered allmulticast mode [ 316.624762][ T9254] hsr_slave_0: entered promiscuous mode [ 316.748391][ T9254] hsr_slave_1: entered promiscuous mode [ 316.774311][ T9254] debugfs: 'hsr0' already exists in 'hsr' [ 316.780582][ T9254] Cannot create hsr debugfs directory [ 317.149406][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.155952][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.753152][ T9254] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 317.902439][ T9254] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 317.918863][ T9254] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 317.964441][ T5930] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 318.023316][ T9254] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 318.084424][ T978] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 318.194790][ T5930] usb 8-1: Using ep0 maxpacket: 16 [ 318.202426][ T5930] usb 8-1: config 7 has an invalid interface number: 9 but max is 0 [ 318.262121][ T978] usb 9-1: Using ep0 maxpacket: 16 [ 318.293048][ T5930] usb 8-1: config 7 has no interface number 0 [ 318.310794][ T5930] usb 8-1: config 7 interface 9 has no altsetting 0 [ 318.352797][ T978] usb 9-1: config 0 has no interfaces? [ 318.395420][ T5930] usb 8-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 0.00 [ 318.408135][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.423717][ T5930] usb 8-1: Product: syz [ 318.481852][ T978] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.498176][ T5930] usb 8-1: Manufacturer: syz [ 318.503006][ T978] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.515715][ T5930] usb 8-1: SerialNumber: syz [ 318.521516][ T978] usb 9-1: Manufacturer: syz [ 318.712581][ T978] usb 9-1: config 0 descriptor?? [ 318.914463][ T5930] usb-storage 8-1:7.9: USB Mass Storage device detected [ 319.046606][ T5930] usb-storage 8-1:7.9: Quirks match for vid 071b pid 3203: 80600 [ 319.147038][ T5930] usb 8-1: USB disconnect, device number 8 [ 319.181201][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.289146][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.329553][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.336738][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.450087][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.457322][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.639424][ T9521] xt_policy: output policy not valid in PREROUTING and INPUT [ 320.063478][ T9528] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 320.130819][ T9530] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 320.139834][ T9528] team0: Port device dummy0 added [ 320.219205][ T9530] team0: Port device dummy0 removed [ 320.238742][ T9530] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 320.283347][ T9254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.662219][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.940211][ T9254] veth0_vlan: entered promiscuous mode [ 321.022178][ T9254] veth1_vlan: entered promiscuous mode [ 321.199231][ T9254] veth0_macvtap: entered promiscuous mode [ 321.247122][ T9254] veth1_macvtap: entered promiscuous mode [ 321.380190][ T7245] usb 9-1: USB disconnect, device number 6 [ 321.475381][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.686486][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.763227][ T5971] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.836503][ T5971] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.857135][ T5971] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.899218][ T5971] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.455667][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.661545][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.890429][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.907620][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.391159][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.9.817'. [ 323.854452][ T5930] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 324.026584][ T5930] usb 10-1: device descriptor read/64, error -71 [ 324.284577][ T5930] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 324.414472][ T5930] usb 10-1: device descriptor read/64, error -71 [ 324.605036][ T5930] usb usb10-port1: attempt power cycle [ 324.693373][ T9591] netlink: 'syz.8.886': attribute type 27 has an invalid length. [ 324.891068][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.898814][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.004554][ T5930] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 325.066676][ T5930] usb 10-1: device descriptor read/8, error -71 [ 325.349920][ T9599] xt_policy: output policy not valid in PREROUTING and INPUT [ 325.361666][ T5930] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 325.391900][ T5930] usb 10-1: device descriptor read/8, error -71 [ 325.504975][ T5930] usb usb10-port1: unable to enumerate USB device [ 325.933197][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.956228][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.527355][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 326.735468][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.747283][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.767583][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.874761][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.471579][ T24] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 327.673902][ T24] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.687709][ T24] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 327.718178][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 327.827823][ T24] usb 9-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 327.991084][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.119709][ T24] usb 9-1: config 0 descriptor?? [ 328.134990][ T9628] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 328.780771][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 328.795560][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 328.867450][ T24] usb 9-1: USB disconnect, device number 7 [ 329.218095][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.226964][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.249397][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.258653][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.674516][ T978] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 329.848644][ T9661] vlan2: entered promiscuous mode [ 329.856396][ T9661] bridge0: entered promiscuous mode [ 329.982794][ T978] usb 10-1: config 9 has an invalid interface number: 32 but max is 0 [ 329.991235][ T978] usb 10-1: config 9 has no interface number 0 [ 330.004662][ T978] usb 10-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 330.021560][ T978] usb 10-1: config 9 interface 32 has no altsetting 0 [ 330.039924][ T978] usb 10-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 330.050842][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.057181][ T9665] netlink: 'syz.8.905': attribute type 1 has an invalid length. [ 330.059479][ T978] usb 10-1: Product: syz [ 330.095384][ T9665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.111081][ T978] usb 10-1: Manufacturer: syz [ 330.125933][ T978] usb 10-1: SerialNumber: syz [ 330.154468][ T5930] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 330.317112][ T5930] usb 8-1: unable to get BOS descriptor or descriptor too short [ 330.332068][ T9669] xt_policy: output policy not valid in PREROUTING and INPUT [ 330.399364][ T5930] usb 8-1: not running at top speed; connect to a high speed hub [ 330.420504][ T978] usb 10-1: USB disconnect, device number 6 [ 330.420649][ T5930] usb 8-1: config 2 has an invalid interface number: 212 but max is 1 [ 330.441269][ T5930] usb 8-1: config 2 has an invalid interface number: 226 but max is 1 [ 330.449832][ T5930] usb 8-1: config 2 has no interface number 0 [ 330.455978][ T5930] usb 8-1: config 2 has no interface number 1 [ 330.462085][ T5930] usb 8-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 330.476589][ T5930] usb 8-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 330.495068][ T5930] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 330.510776][ T5930] usb 8-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 330.531483][ T5930] usb 8-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.550217][ T5930] usb 8-1: config 2 interface 212 has no altsetting 0 [ 330.564938][ T5930] usb 8-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 330.577988][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.601442][ T5930] usb 8-1: Product: syz [ 330.611554][ T5930] usb 8-1: Manufacturer: syz [ 330.621641][ T5930] usb 8-1: SerialNumber: syz [ 330.948060][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.240851][ T9688] input: syz0 as /devices/virtual/input/input40 [ 332.644719][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 332.809475][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.821920][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.832604][ T24] usb 10-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 332.844415][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 332.853735][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.869697][ T24] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 332.883366][ T24] usb 10-1: Product: syz [ 332.888203][ T24] usb 10-1: Manufacturer: syz [ 332.894216][ T24] usb 10-1: SerialNumber: syz [ 332.909200][ T24] usb 10-1: config 0 descriptor?? [ 332.991221][ T24] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 333.012880][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.130630][ T9692] input: syz0 as /devices/virtual/input/input41 [ 333.195500][ T9707] FAULT_INJECTION: forcing a failure. [ 333.195500][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 333.264016][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.9.912 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.264051][ T9707] Tainted: [L]=SOFTLOCKUP [ 333.264059][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.264082][ T9707] Call Trace: [ 333.264090][ T9707] [ 333.264099][ T9707] dump_stack_lvl+0xe8/0x150 [ 333.264128][ T9707] should_fail_ex+0x414/0x560 [ 333.264164][ T9707] should_failslab+0xa8/0x100 [ 333.264189][ T9707] __kmalloc_noprof+0xdf/0x800 [ 333.264207][ T9707] ? iovec_from_user+0x87/0x250 [ 333.264233][ T9707] iovec_from_user+0x87/0x250 [ 333.264259][ T9707] __import_iovec+0x163/0x7f0 [ 333.264286][ T9707] ? __asan_memset+0x22/0x50 [ 333.264316][ T9707] io_import_rw_buffer+0x440/0x710 [ 333.264349][ T9707] ? __pfx_io_import_rw_buffer+0x10/0x10 [ 333.264371][ T9707] ? percpu_ref_get_many+0x21/0x1e0 [ 333.264390][ T9707] ? percpu_ref_get_many+0x21/0x1e0 [ 333.264418][ T9707] io_prep_rwv+0x136/0x3e0 [ 333.264442][ T9707] ? __pfx_io_prep_rwv+0x10/0x10 [ 333.264474][ T9707] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 333.264502][ T9707] io_submit_sqes+0xad3/0x2140 [ 333.264551][ T9707] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 333.264594][ T9707] ? ksys_write+0x1cb/0x250 [ 333.264617][ T9707] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 333.264640][ T9707] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 333.264664][ T9707] ? __pfx_vfs_write+0x10/0x10 [ 333.264685][ T9707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.264711][ T9707] ? __fget_files+0x3a0/0x420 [ 333.264751][ T9707] ? fput+0xa0/0xd0 [ 333.264776][ T9707] ? ksys_write+0x22a/0x250 [ 333.264798][ T9707] ? __pfx_ksys_write+0x10/0x10 [ 333.264822][ T9707] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 333.264847][ T9707] do_syscall_64+0xec/0xf80 [ 333.264865][ T9707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.264882][ T9707] ? trace_irq_disable+0x37/0x100 [ 333.264906][ T9707] ? clear_bhb_loop+0x60/0xb0 [ 333.264929][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.264949][ T9707] RIP: 0033:0x7f7d1078f749 [ 333.264966][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.264984][ T9707] RSP: 002b:00007f7d11570038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 333.265005][ T9707] RAX: ffffffffffffffda RBX: 00007f7d109e6090 RCX: 00007f7d1078f749 [ 333.265019][ T9707] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 333.265032][ T9707] RBP: 00007f7d11570090 R08: 0000000000000000 R09: 0000000000000000 [ 333.265044][ T9707] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 333.265056][ T9707] R13: 00007f7d109e6128 R14: 00007f7d109e6090 R15: 00007f7d10b0fa28 [ 333.265089][ T9707] [ 333.769717][ T5824] usb 10-1: USB disconnect, device number 7 [ 333.894890][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 333.921301][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 333.936614][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 334.044437][ T6384] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 334.528697][ T6384] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 334.560340][ T6384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.579670][ T6384] usb 9-1: Product: syz [ 334.583899][ T6384] usb 9-1: Manufacturer: syz [ 334.596304][ T6384] usb 9-1: SerialNumber: syz [ 334.606749][ T6384] usb 9-1: config 0 descriptor?? [ 334.631561][ T6384] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 335.003812][ T9740] xt_policy: output policy not valid in PREROUTING and INPUT [ 335.833394][ T5930] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.226/input/input43 [ 336.585968][ T6384] videodev: could not get a free minor [ 336.591564][ T6384] gspca_main: video_register_device err -23 [ 336.608768][ T6384] sunplus 9-1:0.0: probe with driver sunplus failed with error -23 [ 336.778068][ T30] audit: type=1326 audit(1766488506.918:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.7.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655dd8f749 code=0x0 [ 336.778325][ T6384] usb 9-1: USB disconnect, device number 8 [ 338.912957][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.936688][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.624557][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 339.786213][ T24] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 339.829274][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 339.849096][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.882913][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.912708][ T24] usb 9-1: Product: syz [ 339.923450][ T24] usb 9-1: Manufacturer: syz [ 339.940766][ T24] usb 9-1: SerialNumber: syz [ 339.969306][ T24] usb 9-1: config 0 descriptor?? [ 340.038292][ T9822] syzkaller0: entered promiscuous mode [ 340.060171][ T9822] syzkaller0: entered allmulticast mode [ 340.079223][ T24] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 340.193852][ T9810] input: syz0 as /devices/virtual/input/input44 [ 340.222951][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.228531][ T9810] FAULT_INJECTION: forcing a failure. [ 340.228531][ T9810] name failslab, interval 1, probability 0, space 0, times 0 [ 340.288073][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz.8.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.288106][ T9810] Tainted: [L]=SOFTLOCKUP [ 340.288113][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.288125][ T9810] Call Trace: [ 340.288133][ T9810] [ 340.288141][ T9810] dump_stack_lvl+0xe8/0x150 [ 340.288170][ T9810] should_fail_ex+0x414/0x560 [ 340.288205][ T9810] should_failslab+0xa8/0x100 [ 340.288230][ T9810] __kmalloc_noprof+0xdf/0x800 [ 340.288248][ T9810] ? io_cache_alloc_new+0x40/0x100 [ 340.288266][ T9810] ? __pfx___io_read+0x10/0x10 [ 340.288291][ T9810] io_cache_alloc_new+0x40/0x100 [ 340.288309][ T9810] io_arm_apoll+0x474/0x8f0 [ 340.288341][ T9810] ? __pfx_io_arm_apoll+0x10/0x10 [ 340.288371][ T9810] ? io_file_get_normal+0xe9/0x2d0 [ 340.288394][ T9810] ? io_arm_poll_handler+0x207/0x2a0 [ 340.288425][ T9810] io_queue_async+0x175/0x240 [ 340.288455][ T9810] io_submit_sqes+0x10ba/0x2140 [ 340.288509][ T9810] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 340.288551][ T9810] ? ksys_write+0x1cb/0x250 [ 340.288572][ T9810] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 340.288594][ T9810] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 340.288616][ T9810] ? __pfx_vfs_write+0x10/0x10 [ 340.288637][ T9810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.288662][ T9810] ? __fget_files+0x3a0/0x420 [ 340.288693][ T9810] ? fput+0xa0/0xd0 [ 340.288719][ T9810] ? ksys_write+0x22a/0x250 [ 340.288739][ T9810] ? __pfx_ksys_write+0x10/0x10 [ 340.288763][ T9810] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 340.288790][ T9810] do_syscall_64+0xec/0xf80 [ 340.288810][ T9810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.288827][ T9810] ? trace_irq_disable+0x37/0x100 [ 340.288852][ T9810] ? clear_bhb_loop+0x60/0xb0 [ 340.288876][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.288895][ T9810] RIP: 0033:0x7f877af8f749 [ 340.288915][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.288933][ T9810] RSP: 002b:00007f87791f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 340.288954][ T9810] RAX: ffffffffffffffda RBX: 00007f877b1e5fa0 RCX: 00007f877af8f749 [ 340.288969][ T9810] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 340.288980][ T9810] RBP: 00007f87791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.288993][ T9810] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 340.289005][ T9810] R13: 00007f877b1e6038 R14: 00007f877b1e5fa0 R15: 00007f877b30fa28 [ 340.289038][ T9810] [ 340.630059][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'. [ 340.915816][ T9843] xt_policy: output policy not valid in PREROUTING and INPUT [ 341.029315][ T6384] usb 9-1: USB disconnect, device number 9 [ 344.012484][ T9895] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 344.026354][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.037031][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.050071][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.064489][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.554510][ T6384] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 344.642772][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.658536][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.725428][ T6384] usb 9-1: Using ep0 maxpacket: 16 [ 344.734070][ T6384] usb 9-1: config 7 has an invalid interface number: 9 but max is 0 [ 344.742636][ T6384] usb 9-1: config 7 has no interface number 0 [ 344.749552][ T6384] usb 9-1: config 7 interface 9 has no altsetting 0 [ 344.768829][ T6384] usb 9-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 0.00 [ 344.781679][ T6384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.792890][ T6384] usb 9-1: Product: syz [ 344.799071][ T6384] usb 9-1: Manufacturer: syz [ 344.808955][ T6384] usb 9-1: SerialNumber: syz [ 345.004406][ T5930] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 345.074053][ T6384] usb-storage 9-1:7.9: USB Mass Storage device detected [ 345.093686][ T6384] usb-storage 9-1:7.9: Quirks match for vid 071b pid 3203: 80600 [ 345.151401][ T6384] usb 9-1: USB disconnect, device number 10 [ 345.165307][ T5930] usb 10-1: Using ep0 maxpacket: 16 [ 345.178554][ T5930] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.189596][ T5930] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.200350][ T5930] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 345.209714][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.229028][ T5930] usb 10-1: config 0 descriptor?? [ 345.999437][ T6384] usb 10-1: USB disconnect, device number 8 [ 346.683644][ T9931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.960'. [ 346.872898][ T9935] netlink: 'syz.8.962': attribute type 63 has an invalid length. [ 346.889758][ T9935] netlink: 5 bytes leftover after parsing attributes in process `syz.8.962'. [ 346.900235][ T9935] gretap0: entered allmulticast mode [ 346.912612][ T9935] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 347.325288][ T7257] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 347.492476][ T6384] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 347.534105][ T7257] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 347.546001][ T7257] usb 9-1: config 0 has no interface number 0 [ 347.557669][ T7257] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.595649][ T7257] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 347.614548][ T7257] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.624706][ T7257] usb 9-1: Product: syz [ 347.628893][ T7257] usb 9-1: Manufacturer: syz [ 347.633517][ T7257] usb 9-1: SerialNumber: syz [ 347.667166][ T7257] usb 9-1: config 0 descriptor?? [ 347.690527][ T6384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.701157][ T6384] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.722997][ T6384] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 347.785463][ T6384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.061339][ T6384] usb 10-1: config 0 descriptor?? [ 348.091537][ T9952] netlink: 44 bytes leftover after parsing attributes in process `syz.8.962'. [ 348.132896][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.8.962'. [ 348.167243][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.207283][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.347714][ T30] audit: type=1326 audit(1766488518.498:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.9.964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d1078f749 code=0x0 [ 348.712536][ T7257] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 348.726197][ T7257] keyspan 9-1:0.133: unsupported endpoint type 0 [ 348.780982][ T7257] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 348.810018][ T7257] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 348.856524][ T7257] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 348.888529][ T9964] sctp: [Deprecated]: syz.9.964 (pid 9964) Use of int in maxseg socket option. [ 348.888529][ T9964] Use struct sctp_assoc_value instead [ 348.920407][ T7257] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 348.963609][ T7257] usb 9-1: USB disconnect, device number 11 [ 348.991827][ T7257] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 349.033125][ T7257] keyspan 9-1:0.133: device disconnected [ 349.283779][ T9969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 349.549494][ T9976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.971'. [ 349.695767][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.745330][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.753211][ T7257] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 349.948400][ T7257] usb 9-1: Using ep0 maxpacket: 16 [ 350.057620][ T7257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.068813][ T7257] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.091303][ T7257] usb 9-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 350.105941][ T7257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.164177][ T7257] usb 9-1: config 0 descriptor?? [ 350.340902][ T6384] usb 10-1: string descriptor 0 read error: -71 [ 350.364265][ T6384] usb 10-1: USB disconnect, device number 9 [ 350.589148][ T7257] saitek 0003:06A3:0621.000B: item fetching failed at offset 4/5 [ 350.616981][ T7257] saitek 0003:06A3:0621.000B: parse failed [ 350.623102][ T7257] saitek 0003:06A3:0621.000B: probe with driver saitek failed with error -22 [ 350.764812][ T6384] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 350.841977][ T7257] usb 9-1: USB disconnect, device number 12 [ 350.995668][ T6384] usb 10-1: Using ep0 maxpacket: 8 [ 351.003613][ T6384] usb 10-1: unable to get BOS descriptor or descriptor too short [ 351.018952][ T6384] usb 10-1: config 11 has an invalid interface number: 244 but max is 0 [ 351.034119][ T6384] usb 10-1: config 11 has no interface number 0 [ 351.095477][ T6384] usb 10-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 351.124599][ T6384] usb 10-1: config 11 interface 244 has no altsetting 0 [ 351.142193][ T6384] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 351.154542][ T6384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.175747][ T6384] usb 10-1: Product: syz [ 351.184661][ T6384] usb 10-1: Manufacturer: syz [ 351.193559][ T6384] usb 10-1: SerialNumber: syz [ 351.946981][ T9996] sctp: [Deprecated]: syz.2.977 (pid 9996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.946981][ T9996] Use struct sctp_sack_info instead [ 352.495688][ T6384] usb 10-1: USB disconnect, device number 10 [ 352.565005][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 352.598716][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 354.392243][T10021] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.982'. [ 357.323509][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.335772][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.347772][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.357176][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.434450][ T5887] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 357.574531][ T5887] usb 10-1: device descriptor read/64, error -71 [ 357.815245][ T5887] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 358.004492][ T5887] usb 10-1: device descriptor read/64, error -71 [ 358.014659][ T5930] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 358.119161][ T5887] usb usb10-port1: attempt power cycle [ 358.172247][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.190872][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.209557][ T5930] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 358.217957][ T5930] usb 9-1: config 0 has an invalid interface number: 255 but max is 1 [ 358.257900][ T5930] usb 9-1: config 0 has no interface number 0 [ 358.268002][T10068] input: syz0 as /devices/virtual/input/input45 [ 358.276240][ T5930] usb 9-1: config 0 has no interface number 1 [ 358.327077][ T5930] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 359.110505][ T5930] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 359.124411][ T5887] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 359.133401][ T5930] usb 9-1: config 0 interface 255 has no altsetting 0 [ 359.205840][ T5930] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 359.218192][ T5887] usb 10-1: device descriptor read/8, error -71 [ 359.225063][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.233493][ T5930] usb 9-1: Product: syz [ 359.245257][ T5930] usb 9-1: Manufacturer: syz [ 359.249989][ T5930] usb 9-1: SerialNumber: syz [ 359.267611][ T5930] usb 9-1: config 0 descriptor?? [ 359.298251][ T5930] usb 9-1: selecting invalid altsetting 0 [ 359.305098][ T5930] usb 9-1: Could not set interface, error -22 [ 359.474675][ T5887] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 359.515166][ T5887] usb 10-1: device descriptor read/8, error -71 [ 359.635341][ T5887] usb usb10-port1: unable to enumerate USB device [ 359.922947][ T5887] usb 9-1: USB disconnect, device number 13 [ 360.914506][ T5930] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 361.076495][ T5930] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.094406][ T5930] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.118558][ T5930] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 361.134383][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.162594][ T5930] usb 10-1: SerialNumber: syz [ 361.245890][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 361.255051][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 361.264174][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 361.517856][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 361.585995][ T5930] usb 10-1: 0:2 : does not exist [ 361.627461][T10096] xt_policy: output policy not valid in PREROUTING and INPUT [ 361.639057][ T5930] usb 10-1: USB disconnect, device number 15 [ 361.674291][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.634410][ T6384] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 362.864399][ T6384] usb 9-1: Using ep0 maxpacket: 16 [ 362.873120][ T6384] usb 9-1: config 7 has an invalid interface number: 9 but max is 0 [ 362.883895][ T6384] usb 9-1: config 7 has no interface number 0 [ 362.909296][ T6384] usb 9-1: config 7 interface 9 has no altsetting 0 [ 362.934433][ T6384] usb 9-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 0.00 [ 362.952493][ T6384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.978571][ T6384] usb 9-1: Product: syz [ 362.986541][ T6384] usb 9-1: Manufacturer: syz [ 362.997310][ T6384] usb 9-1: SerialNumber: syz [ 363.179104][T10118] FAULT_INJECTION: forcing a failure. [ 363.179104][T10118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.201927][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.7.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.201947][T10118] Tainted: [L]=SOFTLOCKUP [ 363.201951][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.201960][T10118] Call Trace: [ 363.201969][T10118] [ 363.201978][T10118] dump_stack_lvl+0xe8/0x150 [ 363.202010][T10118] should_fail_ex+0x414/0x560 [ 363.202044][T10118] prepare_alloc_pages+0x22b/0x650 [ 363.202065][T10118] __alloc_frozen_pages_noprof+0x123/0x370 [ 363.202079][T10118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 363.202093][T10118] ? __lock_acquire+0x6b6/0x2cf0 [ 363.202105][T10118] ? policy_nodemask+0x27c/0x720 [ 363.202123][T10118] ? __lock_acquire+0x6b6/0x2cf0 [ 363.202147][T10118] alloc_pages_mpol+0x232/0x4a0 [ 363.202176][T10118] vma_alloc_folio_noprof+0xe4/0x200 [ 363.202202][T10118] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 363.202221][T10118] folio_prealloc+0x30/0x180 [ 363.202231][T10118] do_wp_page+0x1231/0x5810 [ 363.202250][T10118] ? ___pte_offset_map+0x29/0x240 [ 363.202278][T10118] ? __pfx_do_wp_page+0x10/0x10 [ 363.202302][T10118] ? do_raw_spin_lock+0x121/0x290 [ 363.202331][T10118] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 363.202359][T10118] handle_mm_fault+0x14c5/0x32b0 [ 363.202380][T10118] ? handle_mm_fault+0xdb/0x32b0 [ 363.202398][T10118] ? __pfx_handle_mm_fault+0x10/0x10 [ 363.202429][T10118] ? __lock_acquire+0x6b6/0x2cf0 [ 363.202453][T10118] ? lock_mm_and_find_vma+0x9c/0x300 [ 363.202475][T10118] do_user_addr_fault+0x764/0x1380 [ 363.202506][T10118] exc_page_fault+0x71/0xd0 [ 363.202518][T10118] asm_exc_page_fault+0x26/0x30 [ 363.202529][T10118] RIP: 0010:__put_user_4+0xd/0x20 [ 363.202540][T10118] Code: 66 89 01 31 c9 0f 01 ca e9 00 6e 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 6d 03 00 90 90 90 90 90 90 90 90 90 90 [ 363.202549][T10118] RSP: 0018:ffffc9000c307bb8 EFLAGS: 00050206 [ 363.202560][T10118] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000003000 [ 363.202573][T10118] RDX: 0000000000000000 RSI: ffffffff8d975e7a RDI: ffffffff8bc083e0 [ 363.202593][T10118] RBP: ffffc9000c307ee0 R08: ffffffff820e7fb0 R09: ffff8880341aa800 [ 363.202607][T10118] R10: dffffc0000000000 R11: ffffed10068354f3 R12: 0000200000000000 [ 363.202622][T10118] R13: 1ffff92001860f90 R14: 0000000000000000 R15: 00000000fffffff2 [ 363.202643][T10118] ? __might_fault+0xb0/0x130 [ 363.202666][T10118] __se_sys_move_pages+0xca4/0x1650 [ 363.202690][T10118] ? __pfx___se_sys_move_pages+0x10/0x10 [ 363.202704][T10118] ? ksys_write+0x1cb/0x250 [ 363.202723][T10118] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 363.202745][T10118] ? __pfx_vfs_write+0x10/0x10 [ 363.202766][T10118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 363.202792][T10118] ? __fget_files+0x3a0/0x420 [ 363.202816][T10118] ? __pfx_ksys_write+0x10/0x10 [ 363.202828][T10118] ? __x64_sys_move_pages+0x21/0xf0 [ 363.202843][T10118] do_syscall_64+0xec/0xf80 [ 363.202854][T10118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.202868][T10118] ? trace_irq_disable+0x37/0x100 [ 363.202893][T10118] ? clear_bhb_loop+0x60/0xb0 [ 363.202917][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.202936][T10118] RIP: 0033:0x7f655dd8f749 [ 363.202951][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.202959][T10118] RSP: 002b:00007f655eb98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 363.202970][T10118] RAX: ffffffffffffffda RBX: 00007f655dfe5fa0 RCX: 00007f655dd8f749 [ 363.202977][T10118] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 363.202984][T10118] RBP: 00007f655eb98090 R08: 0000200000000000 R09: 0000000000000000 [ 363.202990][T10118] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 363.202997][T10118] R13: 00007f655dfe6038 R14: 00007f655dfe5fa0 R15: 00007f655e10fa28 [ 363.203039][T10118] [ 363.661776][ T6384] usb-storage 9-1:7.9: USB Mass Storage device detected [ 363.690977][ T6384] usb-storage 9-1:7.9: Quirks match for vid 071b pid 3203: 80600 [ 363.709660][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.718419][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.731707][T10122] input: syz0 as /devices/virtual/input/input46 [ 363.847471][ T6384] usb 9-1: USB disconnect, device number 14 [ 364.474768][ T6384] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 364.644707][ T6384] usb 9-1: Using ep0 maxpacket: 32 [ 364.654859][ T6384] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 364.664464][ T6384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.695056][T10135] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1011'. [ 364.708684][ T6384] usb 9-1: Product: syz [ 364.719346][ T6384] usb 9-1: Manufacturer: syz [ 364.730608][ T6384] usb 9-1: SerialNumber: syz [ 364.787414][ T6384] usb 9-1: config 0 descriptor?? [ 364.931817][T10139] netlink: 'syz.7.1012': attribute type 181 has an invalid length. [ 364.977967][T10142] netlink: ct family unspecified [ 364.985818][T10142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.027759][ T6384] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 015 [ 365.351370][ T5887] usb 9-1: USB disconnect, device number 15 [ 366.961851][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1020'. [ 367.031961][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.051168][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.165846][T10175] input: syz0 as /devices/virtual/input/input47 [ 367.444698][ T5887] IPVS: starting estimator thread 0... [ 367.546685][T10186] IPVS: using max 30 ests per chain, 72000 per kthread [ 368.081040][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.125302][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.938339][T10210] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1029'. [ 368.938385][T10210] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1029'. [ 369.454419][ T7245] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 369.616031][ T7245] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.628042][ T7245] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.640277][ T7245] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.652652][ T7245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.661540][ T7245] usb 9-1: Product: syz [ 369.666938][ T7245] usb 9-1: Manufacturer: syz [ 369.722217][ T7245] usb 9-1: SerialNumber: syz [ 369.764461][ T5887] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 369.931085][ T5887] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 369.944752][ T5887] usb 10-1: config 1 has no interface number 0 [ 369.958070][ T5887] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 369.979613][ T5887] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 369.992675][ T7245] usb 9-1: 0:2 : does not exist [ 369.993494][ T5887] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 370.008913][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.017153][ T5887] usb 10-1: Product: syz [ 370.021663][ T5887] usb 10-1: Manufacturer: syz [ 370.024171][ T7245] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 370.027648][ T5887] usb 10-1: SerialNumber: syz [ 370.045350][T10216] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 370.053344][T10216] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 370.063315][ T5887] usb 10-1: Error in usbnet_get_endpoints (-22) [ 370.081787][ T7245] usb 9-1: USB disconnect, device number 16 [ 370.119830][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.630025][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.638870][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.774477][ T7245] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 370.904539][ T7245] usb 9-1: device descriptor read/64, error -71 [ 371.228006][ T7245] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 371.357663][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.367790][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.384931][ T7245] usb 9-1: device descriptor read/64, error -71 [ 371.433610][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.450176][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.465874][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1035'. [ 371.505138][ T7245] usb usb9-port1: attempt power cycle [ 371.844413][ T7245] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 371.906075][ T7245] usb 9-1: device descriptor read/8, error -71 [ 372.235999][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.246121][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.263529][T10245] input: syz0 as /devices/virtual/input/input49 [ 372.327352][ T7245] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 372.354992][ T7245] usb 9-1: device descriptor read/8, error -71 [ 372.515095][ T7245] usb usb9-port1: unable to enumerate USB device [ 372.540183][ T7245] usb 10-1: USB disconnect, device number 16 [ 372.576348][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.587175][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.931945][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.956011][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.021224][T10275] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 373.044481][T10275] team0: left promiscuous mode [ 373.049560][T10275] team_slave_0: left promiscuous mode [ 373.062337][T10275] team_slave_1: left promiscuous mode [ 373.087298][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.109539][T10275] bond0: (slave team0): Enslaving as an active interface with an up link [ 373.182199][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.212067][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.221864][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.235764][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.836423][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1054'. [ 373.950772][T10296] loop4: detected capacity change from 0 to 1 [ 374.008981][T10296] Dev loop4: unable to read RDB block 1 [ 374.034795][T10296] loop4: unable to read partition table [ 374.040638][T10296] loop4: partition table beyond EOD, truncated [ 374.074832][T10296] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 374.583390][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.594541][ T5887] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 374.622226][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.651569][T10310] input: syz0 as /devices/virtual/input/input50 [ 374.754385][ T5887] usb 10-1: Using ep0 maxpacket: 8 [ 374.761476][ T5887] usb 10-1: config 0 has no interfaces? [ 374.787389][ T5887] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.797984][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.806694][ T5887] usb 10-1: Product: syz [ 374.811876][ T5887] usb 10-1: Manufacturer: syz [ 374.819782][ T5887] usb 10-1: SerialNumber: syz [ 374.881798][ T5887] usb 10-1: config 0 descriptor?? [ 374.918655][T10316] fuse: Unknown parameter 'default_permissionse0/../file0/../file0/../file0' [ 374.981777][T10316] fuse: Bad value for 'fd' [ 375.103739][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.113092][T10292] x_tables: duplicate underflow at hook 1 [ 375.120390][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.147604][T10322] fuse: Bad value for 'rootmode' [ 375.271219][T10329] libceph: resolve '. [ 375.271219][T10329] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 375.271219][T10329] ' (ret=-3): failed [ 375.383739][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1067'. [ 375.640754][ T6384] usb 10-1: USB disconnect, device number 17 [ 375.881961][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 375.970698][T10343] bridge0: entered promiscuous mode [ 375.999188][T10345] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1071'. [ 376.009074][T10343] vlan2: entered promiscuous mode [ 376.145942][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1072'. [ 376.278813][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 376.369494][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.575888][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.938176][T10365] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 377.193466][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1079'. [ 377.341541][T10379] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1082'. [ 377.564496][ T5976] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 377.614413][ T5887] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 377.826733][ T5976] usb 10-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 377.838392][ T5887] usb 9-1: config 3 has an invalid interface number: 61 but max is 0 [ 377.854589][ T5887] usb 9-1: config 3 has no interface number 0 [ 377.860829][ T5976] usb 10-1: config 0 interface 0 has no altsetting 0 [ 377.868640][ T5887] usb 9-1: config 3 interface 61 has no altsetting 0 [ 377.880519][ T5976] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.898205][ T5887] usb 9-1: string descriptor 0 read error: -22 [ 377.905683][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.914036][ T5887] usb 9-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 377.933392][ T5976] usb 10-1: Product: syz [ 377.939385][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.954466][ T5976] usb 10-1: Manufacturer: syz [ 377.966030][ T5976] usb 10-1: SerialNumber: syz [ 377.996986][ T5887] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.010952][ T5976] usb 10-1: config 0 descriptor?? [ 378.083274][ T5887] snd-usb-audio 9-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 378.144860][ T5976] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 378.187120][ T5976] usb 9-1: USB disconnect, device number 21 [ 378.206531][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.237302][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 378.266753][T10380] input: syz0 as /devices/virtual/input/input51 [ 378.309163][ T5887] usb 10-1: USB disconnect, device number 18 [ 378.589082][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.615849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.788383][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 378.846553][T10395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 379.164463][ T6384] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 379.214447][ T5976] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 379.304558][ T6384] usb 9-1: device descriptor read/64, error -71 [ 379.364433][ T5976] usb 10-1: Using ep0 maxpacket: 32 [ 379.371183][ T5976] usb 10-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 379.381806][ T5976] usb 10-1: config 254 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.526023][ T5976] usb 10-1: config 254 interface 0 has no altsetting 0 [ 379.726875][ T5976] usb 10-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=9c.85 [ 379.736405][ T6384] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 379.803653][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.818960][ T5976] usb 10-1: Product: syz [ 379.841839][ T5976] usb 10-1: Manufacturer: syz [ 379.851971][ T5976] usb 10-1: SerialNumber: syz [ 379.944423][ T6384] usb 9-1: device descriptor read/64, error -71 [ 380.054840][ T6384] usb usb9-port1: attempt power cycle [ 380.130534][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.144087][T10406] random: crng reseeded on system resumption [ 380.186201][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.214052][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.227212][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.357481][T10400] syzkaller0: entered promiscuous mode [ 380.363652][T10400] syzkaller0: entered allmulticast mode [ 380.444424][ T6384] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 380.465218][ T6384] usb 9-1: device descriptor read/8, error -71 [ 380.606841][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.624720][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.805841][ T6384] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 380.834058][ T6384] usb 9-1: device descriptor read/8, error -71 [ 380.907918][ T5976] snd_usb_podhd 10-1:254.0: Line 6 POD HDDESKTOP found [ 380.920081][ T5976] snd_usb_podhd 10-1:254.0: set_interface failed [ 380.933799][ T5976] snd_usb_podhd 10-1:254.0: Line 6 POD HDDESKTOP now disconnected [ 380.944761][ T6384] usb usb9-port1: unable to enumerate USB device [ 380.944906][ T5976] snd_usb_podhd 10-1:254.0: probe with driver snd_usb_podhd failed with error -71 [ 381.013295][ T5976] usb 10-1: USB disconnect, device number 19 [ 382.044777][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.276746][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.443191][T10440] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1102'. [ 382.974527][ T7257] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 383.144414][ T7257] usb 9-1: Using ep0 maxpacket: 32 [ 383.183265][ T7257] usb 9-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 383.225267][ T7257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.267550][ T7257] usb 9-1: config 0 descriptor?? [ 383.411526][T10450] input: syz1 as /devices/virtual/input/input52 [ 383.590622][ T7257] go7007 9-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 383.737602][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.787063][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.800543][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.809596][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.868793][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1109'. [ 384.905690][T10473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.994603][ T6384] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 385.019523][T10478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1113'. [ 385.137218][T10480] ALSA: mixer_oss: invalid OSS volume '' [ 385.185974][ T6384] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 385.227446][ T6384] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 385.266992][ T6384] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 385.285631][ T6384] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 385.295010][ T6384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.312269][ T6384] usb 10-1: Product: syz [ 385.322344][ T6384] usb 10-1: Manufacturer: syz [ 385.335340][ T6384] usb 10-1: SerialNumber: syz [ 385.481234][ T6384] usb 10-1: config 0 descriptor?? [ 385.483416][T10482] vlan2: entered promiscuous mode [ 385.625079][T10468] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 385.666009][T10468] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 385.681139][ T6384] usb 10-1: ucan: probing device on interface #0 [ 385.860768][ T5976] usb 9-1: USB disconnect, device number 26 [ 385.907919][ T6384] usb 10-1: ucan: could not read protocol version, ret=-71 [ 385.933599][ T6384] usb 10-1: ucan: probe failed; try to update the device firmware [ 385.958695][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'. [ 386.018530][ T6384] usb 10-1: USB disconnect, device number 20 [ 386.229104][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.246602][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.322428][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.336935][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.669170][T10486] bond0: (slave team0): Releasing backup interface [ 386.676665][ T6384] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 386.727189][T10486] team0 (unregistering): Port device team_slave_0 removed [ 386.757486][T10486] team0 (unregistering): Port device team_slave_1 removed [ 386.836255][ T6384] usb 9-1: Using ep0 maxpacket: 16 [ 386.853977][ T6384] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.864181][ T6384] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.895477][ T6384] usb 9-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 386.941925][ T6384] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.953730][ T6384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.970375][ T6384] usb 9-1: Product: syz [ 386.980693][ T6384] usb 9-1: Manufacturer: syz [ 386.994567][ T6384] usb 9-1: SerialNumber: syz [ 387.041435][T10508] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1124'. [ 387.143459][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.191864][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.311103][T10513] vlan2: entered promiscuous mode [ 388.710179][T10534] xt_policy: output policy not valid in PREROUTING and INPUT [ 390.097184][T10546] tipc: Enabling of bearer rejected, failed to enable media [ 390.126734][ T6384] usb 9-1: 0:2 : does not exist [ 390.155608][T10545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1135'. [ 390.236513][ T6384] usb 9-1: USB disconnect, device number 27 [ 390.490912][T10552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1137'. [ 390.820378][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.883713][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.904572][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 391.993706][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.025800][T10579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.037097][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.146924][T10581] netlink: 'syz.9.1146': attribute type 2 has an invalid length. [ 392.261873][T10581] : entered promiscuous mode [ 393.876081][T10596] xt_policy: output policy not valid in PREROUTING and INPUT [ 395.094426][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 395.273154][ T24] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 395.282912][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.324777][ T24] usb 9-1: config 0 descriptor?? [ 395.352761][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 395.618070][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1159'. [ 395.668101][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1159'. [ 395.771848][ T24] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 395.862719][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1159'. [ 396.195193][ T24] gspca_cpia1: usb_control_msg 02, error -32 [ 396.267496][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 396.982214][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1163'. [ 397.093842][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.159419][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.224530][ T24] gspca_cpia1: usb_control_msg 02, error -110 [ 397.232163][ T24] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 397.454553][ T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 397.611865][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.621055][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.626712][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 397.637960][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 397.650375][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.661355][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.671738][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 397.683052][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 397.693222][ T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 397.702433][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.712764][ T24] usb 10-1: config 0 descriptor?? [ 397.718929][T10648] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 397.898738][ T24] usb 9-1: USB disconnect, device number 28 [ 397.951789][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 397.951982][ T7258] usb 10-1: USB disconnect, device number 21 [ 398.126239][T10665] binder: BINDER_SET_CONTEXT_MGR already set [ 398.132306][T10665] binder: 10659:10665 ioctl 4018620d 200000000040 returned -16 [ 398.147960][T10665] binder: 10659:10665 ioctl c0306201 200000000340 returned -14 [ 398.996136][ T7258] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 399.068642][ T31] INFO: task kworker/0:10:5979 blocked for more than 143 seconds. [ 399.084360][ T31] Tainted: G L syzkaller #0 [ 399.093437][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.103864][ T31] task:kworker/0:10 state:D stack:15832 pid:5979 tgid:5979 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 399.107120][T10679] ALSA: mixer_oss: invalid OSS volume '' [ 399.127557][ T31] Workqueue: usb_hub_wq hub_event [ 399.140417][ T31] Call Trace: [ 399.147092][ T31] [ 399.153422][ T31] __schedule+0x149b/0x4fd0 [ 399.154436][ T7258] usb 10-1: Using ep0 maxpacket: 32 [ 399.170072][ T7258] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 399.182482][ T31] ? bus_for_each_drv+0x251/0x2e0 [ 399.194430][ T7258] usb 10-1: config 0 has no interface number 0 [ 399.224563][ T7258] usb 10-1: config 0 interface 2 has no altsetting 0 [ 399.231343][ T31] ? device_initial_probe+0xa1/0xd0 [ 399.258038][ T31] ? usb_generic_driver_probe+0x8d/0x150 [ 399.277631][ T7258] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 399.283272][ T31] ? bus_for_each_drv+0x251/0x2e0 [ 399.302474][ T7258] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.316971][ T31] ? device_initial_probe+0xa1/0xd0 [ 399.331092][ T31] ? __pfx___schedule+0x10/0x10 [ 399.331190][ T7258] usb 10-1: Product: syz [ 399.344377][ T31] ? schedule+0x91/0x360 [ 399.349501][ T7258] usb 10-1: Manufacturer: syz [ 399.349524][ T7258] usb 10-1: SerialNumber: syz [ 399.363761][ T31] schedule+0x165/0x360 [ 399.389700][ T7258] usb 10-1: config 0 descriptor?? [ 399.401400][ T31] schedule_timeout+0x9a/0x270 [ 399.421314][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 399.435058][ T31] ? do_raw_spin_lock+0x121/0x290 [ 399.440457][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.453811][ T31] ? wait_for_completion+0x267/0x5d0 [ 399.459509][ T31] wait_for_completion+0x2bf/0x5d0 [ 399.474400][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 399.485637][ T31] i2c_del_adapter+0x591/0x760 [ 399.495451][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 399.504623][ T31] ? rcu_is_watching+0x15/0xb0 [ 399.511983][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 399.524411][ T31] ? kfree+0x4d/0x660 [ 399.534418][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 399.540069][ T31] dvb_usb_device_exit+0x1be/0x350 [ 399.546443][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 399.554415][ T31] cxusb_probe+0x603/0x700 [ 399.559985][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.565994][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 399.572180][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.579218][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 399.586382][ T31] usb_probe_interface+0x668/0xc90 [ 399.594021][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 399.600544][ T31] really_probe+0x26d/0xad0 [ 399.605366][ T31] __driver_probe_device+0x18c/0x320 [ 399.610915][ T31] driver_probe_device+0x4f/0x240 [ 399.616092][ T31] __device_attach_driver+0x279/0x430 [ 399.622473][ T31] bus_for_each_drv+0x251/0x2e0 [ 399.623435][ T7258] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.627493][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 399.627527][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 399.627559][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.627580][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.627615][ T31] __device_attach+0x2b8/0x430 [ 399.627640][ T31] ? __pfx___device_attach+0x10/0x10 [ 399.627666][ T31] ? _raw_spin_unlock+0x28/0x50 [ 399.627696][ T31] device_initial_probe+0xa1/0xd0 [ 399.627717][ T31] bus_probe_device+0x12a/0x220 [ 399.627738][ T31] ? device_add+0x726/0xb80 [ 399.627757][ T31] device_add+0x7b6/0xb80 [ 399.627781][ T31] usb_set_configuration+0x1a87/0x2110 [ 399.627834][ T31] usb_generic_driver_probe+0x8d/0x150 [ 399.627861][ T31] usb_probe_device+0x1c4/0x3c0 [ 399.627891][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 399.627916][ T31] really_probe+0x26d/0xad0 [ 399.627943][ T31] __driver_probe_device+0x18c/0x320 [ 399.627966][ T31] driver_probe_device+0x4f/0x240 [ 399.627989][ T31] __device_attach_driver+0x279/0x430 [ 399.776686][ T31] bus_for_each_drv+0x251/0x2e0 [ 399.781691][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 399.787842][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 399.793324][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.794766][ T7258] usb 10-1: USB disconnect, device number 22 [ 399.800646][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.812440][ T31] __device_attach+0x2b8/0x430 [ 399.817559][ T31] ? __pfx___device_attach+0x10/0x10 [ 399.823021][ T31] ? _raw_spin_unlock+0x28/0x50 [ 399.830870][ T31] device_initial_probe+0xa1/0xd0 [ 399.837742][ T31] bus_probe_device+0x12a/0x220 [ 399.851513][ T31] ? device_add+0x726/0xb80 [ 399.856528][ T31] device_add+0x7b6/0xb80 [ 399.861553][ T31] usb_new_device+0xa39/0x1720 [ 399.873871][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 399.879849][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.885175][ T31] hub_event+0x29b1/0x4ef0 [ 399.891251][ T31] ? __pfx_hub_event+0x10/0x10 [ 399.897051][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 399.903517][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 399.916201][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 399.921974][ T31] process_scheduled_works+0xad1/0x1770 [ 399.931675][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.939284][ T31] ? do_raw_spin_lock+0x121/0x290 [ 399.948634][ T31] worker_thread+0x8a0/0xda0 [ 399.953279][ T31] ? __kthread_parkme+0x7b/0x200 [ 399.958578][ T31] kthread+0x711/0x8a0 [ 399.962806][ T31] ? __pfx_worker_thread+0x10/0x10 [ 399.968023][ T31] ? __pfx_kthread+0x10/0x10 [ 399.972768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.978020][ T31] ? __pfx_kthread+0x10/0x10 [ 399.982715][ T31] ret_from_fork+0x510/0xa50 [ 399.987443][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 399.992573][ T31] ? __switch_to+0xc9e/0x1480 [ 399.997399][ T31] ? __pfx_kthread+0x10/0x10 [ 400.002081][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.006950][ T31] [ 400.010153][ T31] INFO: task syz.5.626:8546 blocked for more than 144 seconds. [ 400.019253][ T31] Tainted: G L syzkaller #0 [ 400.036007][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.044974][ T31] task:syz.5.626 state:D stack:27160 pid:8546 tgid:8545 ppid:6157 task_flags:0x400140 flags:0x00080002 [ 400.057338][ T31] Call Trace: [ 400.060801][ T31] [ 400.063754][ T31] __schedule+0x149b/0x4fd0 [ 400.068404][ T31] ? __pfx___schedule+0x10/0x10 [ 400.073448][ T31] ? schedule+0x91/0x360 [ 400.077762][ T31] schedule+0x165/0x360 [ 400.082019][ T31] schedule_preempt_disabled+0x13/0x30 [ 400.087582][ T31] __mutex_lock+0x7e6/0x1350 [ 400.092271][ T31] ? __mutex_lock+0x5bb/0x1350 [ 400.097100][ T31] ? usbdev_open+0x16e/0x760 [ 400.101705][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 400.106937][ T31] ? bus_find_device+0x273/0x2b0 [ 400.111878][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 400.117203][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 400.123739][ T31] ? usbdev_open+0xa7/0x760 [ 400.128357][ T31] usbdev_open+0x16e/0x760 [ 400.132794][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 400.138497][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 400.143454][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 400.148762][ T31] chrdev_open+0x4cc/0x5e0 [ 400.153195][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 400.158202][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 400.165002][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 400.170089][ T31] do_dentry_open+0x7ce/0x1420 [ 400.174917][ T31] vfs_open+0x3b/0x340 [ 400.178997][ T31] ? path_openat+0x33f3/0x3dd0 [ 400.183778][ T31] path_openat+0x340e/0x3dd0 [ 400.188532][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 400.193944][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 400.199769][ T31] ? getname_flags+0xb8/0x540 [ 400.204563][ T31] ? __pfx_path_openat+0x10/0x10 [ 400.209508][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 400.214528][ T31] do_filp_open+0x1fa/0x410 [ 400.219048][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 400.224079][ T31] ? _raw_spin_unlock+0x28/0x50 [ 400.229083][ T31] ? alloc_fd+0x64c/0x6c0 [ 400.233428][ T31] do_sys_openat2+0x121/0x200 [ 400.238207][ T31] ? __se_sys_futex+0x36f/0x400 [ 400.243077][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.248387][ T31] ? rcu_is_watching+0x15/0xb0 [ 400.253266][ T31] __x64_sys_openat+0x138/0x170 [ 400.258220][ T31] do_syscall_64+0xec/0xf80 [ 400.262736][ T31] ? rcu_is_watching+0x15/0xb0 [ 400.267607][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.273699][ T31] ? clear_bhb_loop+0x60/0xb0 [ 400.278780][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.284804][ T31] RIP: 0033:0x7f71c618df90 [ 400.289231][ T31] RSP: 002b:00007f71c70e3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 400.297678][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f71c618df90 [ 400.305769][ T31] RDX: 0000000000000002 RSI: 00007f71c70e3c10 RDI: 00000000ffffff9c [ 400.313756][ T31] RBP: 00007f71c70e3c10 R08: 0000000000000000 R09: 0000000000000000 [ 400.321812][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 400.329882][ T31] R13: 00007f71c63e6038 R14: 00007f71c63e5fa0 R15: 00007f71c650fa28 [ 400.337908][ T31] [ 400.340990][ T31] INFO: task syz.6.639:8590 blocked for more than 144 seconds. [ 400.348892][ T31] Tainted: G L syzkaller #0 [ 400.355767][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.364502][ T31] task:syz.6.639 state:D stack:28120 pid:8590 tgid:8586 ppid:6534 task_flags:0x400140 flags:0x00080002 [ 400.377465][ T31] Call Trace: [ 400.380762][ T31] [ 400.383684][ T31] __schedule+0x149b/0x4fd0 [ 400.388550][ T31] ? __pfx___schedule+0x10/0x10 [ 400.393426][ T31] ? schedule+0x91/0x360 [ 400.397787][ T31] schedule+0x165/0x360 [ 400.401962][ T31] schedule_preempt_disabled+0x13/0x30 [ 400.407482][ T31] __mutex_lock+0x7e6/0x1350 [ 400.412086][ T31] ? __mutex_lock+0x5bb/0x1350 [ 400.417107][ T31] ? usbdev_open+0x16e/0x760 [ 400.421698][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 400.426987][ T31] ? bus_find_device+0x273/0x2b0 [ 400.431960][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 400.437370][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 400.443797][ T31] ? usbdev_open+0xa7/0x760 [ 400.448375][ T31] usbdev_open+0x16e/0x760 [ 400.452814][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 400.458588][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 400.463574][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 400.468986][ T31] chrdev_open+0x4cc/0x5e0 [ 400.473433][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 400.478567][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 400.484983][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 400.489939][ T31] do_dentry_open+0x7ce/0x1420 [ 400.495983][ T31] vfs_open+0x3b/0x340 [ 400.500069][ T31] ? path_openat+0x33f3/0x3dd0 [ 400.505610][ T31] path_openat+0x340e/0x3dd0 [ 400.510212][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 400.515713][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 400.521475][ T31] ? getname_flags+0xb8/0x540 [ 400.526214][ T31] ? __pfx_path_openat+0x10/0x10 [ 400.531263][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 400.536325][ T31] do_filp_open+0x1fa/0x410 [ 400.540853][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 400.546077][ T31] ? _raw_spin_unlock+0x28/0x50 [ 400.550931][ T31] ? alloc_fd+0x64c/0x6c0 [ 400.555478][ T31] do_sys_openat2+0x121/0x200 [ 400.560369][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.565634][ T31] ? __irq_exit_rcu+0x60/0x150 [ 400.570486][ T31] ? lockdep_softirqs_on+0x11e/0x190 [ 400.575870][ T31] __x64_sys_openat+0x138/0x170 [ 400.580751][ T31] do_syscall_64+0xec/0xf80 [ 400.585338][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.591421][ T31] ? clear_bhb_loop+0x60/0xb0 [ 400.598479][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.604779][ T31] RIP: 0033:0x7f70d5d8df90 [ 400.609337][ T31] RSP: 002b:00007f70d6c30b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 400.617878][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f70d5d8df90 [ 400.627331][ T31] RDX: 0000000000000002 RSI: 00007f70d6c30c10 RDI: 00000000ffffff9c [ 400.635458][ T31] RBP: 00007f70d6c30c10 R08: 0000000000000000 R09: 0000000000000000 [ 400.643547][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 400.651682][ T31] R13: 00007f70d5fe6308 R14: 00007f70d5fe6270 R15: 00007f70d610fa28 [ 400.659915][ T31] [ 400.663001][ T31] [ 400.663001][ T31] Showing all locks held in the system: [ 400.670880][ T31] 1 lock held by khungtaskd/31: [ 400.675943][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 400.685878][ T31] 2 locks held by getty/5588: [ 400.690646][ T31] #0: ffff88814e1e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 400.700452][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 400.712632][ T31] 5 locks held by kworker/0:10/5979: [ 400.718271][ T31] #0: ffff88814329b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.729656][ T31] #1: ffffc9000453fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.741539][ T31] #2: ffff88814473a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 400.750488][ T31] #3: ffff8880325e7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 400.759822][ T31] #4: ffff888030559160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 400.769151][ T31] 5 locks held by kworker/u8:17/6016: [ 400.774584][ T31] 4 locks held by udevd/8166: [ 400.779260][ T31] #0: ffff8880344ec418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 400.788129][ T31] #1: ffff88803109d088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 400.797593][ T31] #2: ffff88814dd23788 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 400.807158][ T31] #3: ffff8880325e7198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 400.816620][ T31] 1 lock held by syz.5.626/8546: [ 400.821568][ T31] #0: ffff88814473a198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 400.831229][ T31] 1 lock held by syz.6.639/8590: [ 400.836219][ T31] #0: ffff88814473a198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 400.845304][ T31] [ 400.847629][ T31] ============================================= [ 400.847629][ T31] [ 400.856138][ T31] NMI backtrace for cpu 0 [ 400.856162][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 400.856187][ T31] Tainted: [L]=SOFTLOCKUP [ 400.856192][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.856202][ T31] Call Trace: [ 400.856216][ T31] [ 400.856223][ T31] dump_stack_lvl+0xe8/0x150 [ 400.856252][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 400.856279][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.856312][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 400.856342][ T31] sys_info+0x135/0x170 [ 400.856363][ T31] watchdog+0xf95/0xfe0 [ 400.856394][ T31] ? watchdog+0x20a/0xfe0 [ 400.856426][ T31] kthread+0x711/0x8a0 [ 400.856453][ T31] ? __pfx_watchdog+0x10/0x10 [ 400.856477][ T31] ? __pfx_kthread+0x10/0x10 [ 400.856504][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.856532][ T31] ? __pfx_kthread+0x10/0x10 [ 400.856557][ T31] ret_from_fork+0x510/0xa50 [ 400.856579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 400.856596][ T31] ? __switch_to+0xc9e/0x1480 [ 400.856626][ T31] ? __pfx_kthread+0x10/0x10 [ 400.856650][ T31] ret_from_fork_asm+0x1a/0x30 [ 400.856690][ T31] [ 400.856697][ T31] Sending NMI from CPU 0 to CPUs 1: [ 400.982065][ C1] NMI backtrace for cpu 1 [ 400.982085][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.982108][ C1] Tainted: [L]=SOFTLOCKUP [ 400.982114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.982126][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 400.982148][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 400.982164][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 400.982179][ C1] RAX: 00000000006fdfd3 RBX: ffffffff819713be RCX: 0000000080000001 [ 400.982193][ C1] RDX: 0000000000000001 RSI: ffffffff8d791fea RDI: ffffffff8bc083e0 [ 400.982211][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 400.982228][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 400.982241][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 400.982253][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 400.982268][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.982280][ C1] CR2: 00007f7d109b7198 CR3: 000000007631c000 CR4: 00000000003526f0 [ 400.982296][ C1] Call Trace: [ 400.982304][ C1] [ 400.982310][ C1] default_idle+0x13/0x20 [ 400.982330][ C1] default_idle_call+0x73/0xb0 [ 400.982351][ C1] do_idle+0x1be/0x4d0 [ 400.982369][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 400.982389][ C1] ? __pfx_do_idle+0x10/0x10 [ 400.982412][ C1] cpu_startup_entry+0x44/0x60 [ 400.982430][ C1] start_secondary+0x101/0x110 [ 400.982455][ C1] common_startup_64+0x13e/0x147 [ 400.982485][ C1] [ 401.158225][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 401.165105][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.175770][ T31] Tainted: [L]=SOFTLOCKUP [ 401.180078][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.190122][ T31] Call Trace: [ 401.193404][ T31] [ 401.196327][ T31] vpanic+0x1e0/0x670 [ 401.200312][ T31] panic+0xb9/0xc0 [ 401.204031][ T31] ? __pfx_panic+0x10/0x10 [ 401.208445][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 401.213814][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 401.219970][ T31] watchdog+0xfdf/0xfe0 [ 401.224132][ T31] ? watchdog+0x20a/0xfe0 [ 401.228463][ T31] kthread+0x711/0x8a0 [ 401.232540][ T31] ? __pfx_watchdog+0x10/0x10 [ 401.237238][ T31] ? __pfx_kthread+0x10/0x10 [ 401.241830][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.247028][ T31] ? __pfx_kthread+0x10/0x10 [ 401.251620][ T31] ret_from_fork+0x510/0xa50 [ 401.256209][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 401.261316][ T31] ? __switch_to+0xc9e/0x1480 [ 401.265995][ T31] ? __pfx_kthread+0x10/0x10 [ 401.270587][ T31] ret_from_fork_asm+0x1a/0x30 [ 401.275362][ T31] [ 401.278755][ T31] Kernel Offset: disabled [ 401.283078][ T31] Rebooting in 86400 seconds..