last executing test programs: 22m58.347721011s ago: executing program 32 (id=215): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xbe3}, 0x1c) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x700, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x14], &(0x7f0000000a80)=[r3], &(0x7f0000000040), 0x0, 0x2}) 22m41.320972907s ago: executing program 33 (id=316): socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m18.283859897s ago: executing program 34 (id=1996): bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 11m57.417076253s ago: executing program 35 (id=2545): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x300, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x4009, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8804, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x31, "3a867cf0a70f4fd673292639346ea5e1a8fa8566c780406f6709000005000000000c0000fe65af078e84e4e4d48a1a87be"}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r4, &(0x7f0000000000), 0x10) socket$can_raw(0x1d, 0x3, 0x1) dup3(r3, r4, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="010000000200", 0x6, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1}, 0x94) syz_emit_ethernet(0x14, &(0x7f0000001500)=ANY=[@ANYBLOB], 0x0) 11m45.205487673s ago: executing program 36 (id=2582): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{0x10a, 0x0, 0x8}, {0x9c4, 0x0, 0x8}, {0x80a, 0x0, 0x3}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$inet(r1, 0x0, 0xc810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0xff07}, 0x2000000) 8m44.367501324s ago: executing program 37 (id=2928): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024) 7m25.708963453s ago: executing program 38 (id=3041): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x1, 0xffffff, "ecc5f3fb22f707004f22f79cb83ff83b61bbb18a599b8cbe", {0x7, 0xe8}, 0x77ff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xa, 0x8000, 0x0, 0xd, 0x1, 0xfffffe0000000002, 0xfa0c, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syncfs(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) socket(0x10, 0x80003, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000080)) 6m48.636427916s ago: executing program 2 (id=3111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x2, 0x7}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x42797000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002200)={0x10, 0x0, r7}, 0x10) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) 6m47.49865938s ago: executing program 2 (id=3116): socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000500)='wg2\x00') r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6m47.17671435s ago: executing program 2 (id=3119): socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)="03a6839c576a2fe4253f844295321d2af6a98fdb2718760768a56d7c665a9ae5a785c01791649d46fe19c72b36ee62", 0x2f}], 0x1}, 0x10) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=@tcp6=r0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6m46.96479756s ago: executing program 2 (id=3120): r0 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x25) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000240)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000000702000000000000020900010073797a30"], 0x108}}, 0x0) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/17, 0x11}, 0x91}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 6m45.641027602s ago: executing program 2 (id=3122): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac3(0x1, 0xcc, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x2, 0x0, 0x15, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x22, 0x2000000}, [@cluster_info_segment={0x6, 0x20, 0x1, 0x8b, 0x2}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x0, 0x949, 0x8, 0x8}, @cluster_info_segment={0x6, 0x20, 0x1, 0xb1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x0, 0x3, {0xa, 0x25, 0x25, 0x2, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x3, 0x3ae8, 0x5e6d72df59037a2e, 0x3, 0xb, 0xc0, 0x5}, @as_header={0x17, 0x24, 0x1, 0x5, 0x9, 0x8001, 0x3, 0xa, 0x2, 0x0, 0xe}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0xc2, {0xa, 0x25, 0x25, 0x7fff, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x9, 0x7, 0xfa, 0xff, 0x4}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x6, 0x6}]}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x408}}, {0x8a, &(0x7f00000003c0)=@string={0x8a, 0x3, "0e735f31cb903864ad984c4a028fc8cd0857cebb0c1865ac7d1f87fa05a85db9b6e02b9c5d3a4575dc7517452d4a09b7413996c03b6570f76781b3f487d80f4d5f6a12e650cc991f2562aaa97d0647422d2776b2170cc2f2d6a4202de9c07ba5ce56bf43bd51e97c956bdd2e5df0e0b6b1e7f335ab45006bf2519c045c4328cf1ff44ed5f8f527b1"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xd1, &(0x7f00000004c0)=@string={0xd1, 0x3, "271c55c6ef73bd30f2dddc54940628c40ccd411b2c4634d95d72e8977560244cb6b336136b12efc37b8dba074c5878c9b6fd6f410457ed4858df65d523c7221275abfbd26b3e95eb6a088124e8fb8fb4fb14e05cd9264947f438614c60a8a398175f00b4e62240464c4fedd55c76533af0a57a8146bd30294556b792ef6fc14685c007ee4e919965513c08df669465a9fc4613087aa1458bfef8d197622c53362e3350df4e6011d2fd546c32a42a56be84d96c10882224df1726e0f127ac95e82b82b068599879973ca86aff364244"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2809}}, {0x68, &(0x7f0000000640)=@string={0x68, 0x3, "2c1327e8a5c26fe17f0743a6a188e35b4fd29a7fec5b2b496fa718a9960952bf66c05a18051bad41afd2b0239f51568424055c51ce5937a64452760180c5492df364a2c3905b9f23814dac2e80eb4b6029312c9dd03613bad3e389788ca2ae4b72cf78db901c"}}, {0x1c, &(0x7f0000000780)=@string={0x1c, 0x3, "d711e26a823d8d117ca546e5097dd210511cc21f505ca26d1292"}}, {0x0, 0x0}, {0x5a, &(0x7f0000000800)=@string={0x5a, 0x3, "3194f4b13f138c8f62840ed5da52a58ce799b24aada570708b473032343f75d96a3430b10ec4bff7a6b4cf417640ac794589963acf08ebd5dff01e672f532d2e13258149da3f48bbe1eeda01d68c9ed114ca837922811b05"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect$uac2(0x3, 0xfc, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x63, 0x40, 0xa, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x8, 0x20, 0x8f}, [@sample_rate={0xf, 0x24, 0xd, 0x5, 0x0, 0x2, [0x2, 0x2, 0x2, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x8d, 0x4, 0x9, 0x9, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7fff, 0x2, 0xc7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x59, 0xa0, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x61, 0x0, 0x54, 0x2, 0xff}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x40, 0x9, "f3c0", '#R'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9c, 0x2, 0x9, "c7cb4f8bc173ba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xe, 0xe, {0x8, 0x25, 0x1, 0x3, 0xc, 0x6, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x8, "", "ae"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x7, "a2262d", "08edb9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x2, 0xd, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3b, 0xf, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0xa, 0x37, {0x8, 0x25, 0x1, 0x80, 0xf, 0xd, 0xb}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x3, 0x1, 0xcc, 0x40, 0xfb}, 0x3e, &(0x7f0000000b80)={0x5, 0xf, 0x3e, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xd, 0x2, 0xded, 0xf000, 0x101, [0x3f, 0x1e]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "cdce1901100009e8e04ab16febd12748"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x3, 0xffff}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x21, &(0x7f0000000c00)=@string={0x21, 0x3, "c9f9c21371a9b7954a9ffeb9f42a7d982c40c4c0355d747d165f69a2d65c4f"}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000000d80)={0x14, &(0x7f0000000c80)={0x40, 0xf, 0xb1, {0xb1, 0x3, "f2fb29fb1cfe369b58d552115181cc6955b3e6fd32a881fa964298596c5a8ad1e0cbdb0c76e5e7210aa0f36e0911d5d6a5d1ddb6f5c55c459347be6676bcbc1c922b4dc51eec0e7aabf9cc9a5d66f10f429ff5f9d75139e0dd4743c3b542d0041374c6c46fe640e2b792a37949200775294e18e64362c824bab511ff795eb599170c1688af2b745f540bd64140f6ae53afbd6c95ead155de45a4e8f01d8ced6c168437ce1b443a7defc49ca6948040"}}, &(0x7f0000000d40)={0x0, 0x3, 0x28, @string={0x28, 0x3, "2fa8ce9b01e589c4e5cded8c66a6ad0513835a5958c8e4b3d545f41f7005dea05d853695486d"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x20, 0x18, 0x95, "9aaf9b3a409bf4de911dee9419855a99011a260483ef35348ec83860f901a2bcd91bc0d633ebea64214cb37cbad2e236d6f7d551fa8e09b7c24aa728b2aa2f625a1454ee881e0af539db0e1b00c2face2fef0f2e63edd3af3e26045376bf7726d2dbd91886dd13c632b12d4e2ef66c509056dc5f17a47f627aa56687bbad7e36b529ee21a5b1fdb7c930ff439ee10b457815811cde"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f00)={0x20, 0x81, 0x1, '\v'}, &(0x7f0000000f40)={0x20, 0x82, 0x2, "bd84"}, &(0x7f0000000f80)={0x20, 0x83, 0x2, "73c9"}, &(0x7f0000000fc0)={0x20, 0x84, 0x4, "fbd3577b"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "666f0f"}}) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000140)={0x4, 0x5, 0x7, 0x2, 0xe, '\x00\x00\x00\t\x00'}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4000) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000000180), 0x0, 0x44000) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8, 0xe0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xdb, 0x7c, {0x7, 0x25, 0x1, 0x4, 0x18, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x8, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd9, 0x2, 0x40, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) 6m44.031210241s ago: executing program 2 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 6m28.61167271s ago: executing program 39 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 6m13.255295511s ago: executing program 6 (id=3169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 6m9.667218595s ago: executing program 6 (id=3173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 6m4.651757714s ago: executing program 6 (id=3177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 6m0.986005458s ago: executing program 6 (id=3182): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 5m55.877602733s ago: executing program 6 (id=3188): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x1, 0xffffff, "ecc5f3fb22f707004f22f79cb83ff83b61bbb18a599b8cbe", {0x7, 0xe8}, 0x77ff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xa, 0x8000, 0x0, 0xd, 0x1, 0xfffffe0000000002, 0xfa0c, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syncfs(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10020) socket(0x10, 0x80003, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) 5m51.182740913s ago: executing program 6 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r10, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_GET_XSAVE(r10, 0x9000aea4, &(0x7f0000000700)) ioctl$FS_IOC_GETVERSION(r11, 0x80047601, &(0x7f00000003c0)) close(0x3) 5m35.899189762s ago: executing program 40 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r10, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_GET_XSAVE(r10, 0x9000aea4, &(0x7f0000000700)) ioctl$FS_IOC_GETVERSION(r11, 0x80047601, &(0x7f00000003c0)) close(0x3) 3m15.683618693s ago: executing program 4 (id=3401): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 3m9.769355587s ago: executing program 4 (id=3409): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r6, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 3m6.808432764s ago: executing program 4 (id=3416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r4) r5 = open(&(0x7f00000002c0)='./bus\x00', 0xc2802, 0x141) ftruncate(r5, 0x2008002) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000180)=0x4) socket(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000200)='ns/time\x00') 3m3.056871735s ago: executing program 4 (id=3423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2m59.384680418s ago: executing program 4 (id=3427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f40700090400020000000100000000000000080004000100", 0x22) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 2m55.812839541s ago: executing program 4 (id=3434): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2m43.913853172s ago: executing program 9 (id=3450): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.56219303s ago: executing program 9 (id=3451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2m40.192233055s ago: executing program 41 (id=3434): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2m38.402649256s ago: executing program 9 (id=3457): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 2m36.03482585s ago: executing program 9 (id=3460): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(0x0, 0x3) 2m34.662451288s ago: executing program 9 (id=3463): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 2m33.865888539s ago: executing program 9 (id=3465): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x398}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m32.795570918s ago: executing program 42 (id=3465): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x398}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m28.277443159s ago: executing program 1 (id=3472): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 2m23.54238927s ago: executing program 1 (id=3476): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2m20.440647758s ago: executing program 1 (id=3479): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x62040200) unshare(0x20000000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfdff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x10000) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m13.106709788s ago: executing program 1 (id=3486): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m11.901412476s ago: executing program 1 (id=3488): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 2m9.198164473s ago: executing program 1 (id=3491): mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140), 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r1, 0x9, 0x2) getdents64(r1, 0x0, 0x59) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r1, 0xf02c4000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0xffffffff, 0x7, 0x2f, 0xe, 0x1, 0xfffffffb, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x6, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1004, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x100005, 0x3, 0x40, 0x10000, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x8, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7fff, 0x48b03) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x3266b000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0xb) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000126000/0x3000)=nil) ptrace(0x10, r6) 2m8.595846294s ago: executing program 43 (id=3491): mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140), 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r1, 0x9, 0x2) getdents64(r1, 0x0, 0x59) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000080) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r1, 0xf02c4000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x2, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0xffffffff, 0x7, 0x2f, 0xe, 0x1, 0xfffffffb, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x6, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1004, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x100005, 0x3, 0x40, 0x10000, 0x4, 0x6, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x8, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7fff, 0x48b03) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x3266b000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0xb) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000126000/0x3000)=nil) ptrace(0x10, r6) 58.758769815s ago: executing program 8 (id=3565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 55.021658377s ago: executing program 8 (id=3570): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 50.256799193s ago: executing program 8 (id=3576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 45.473667655s ago: executing program 8 (id=3581): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 40.320698362s ago: executing program 8 (id=3587): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 35.402849191s ago: executing program 8 (id=3594): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 25.105293631s ago: executing program 7 (id=3605): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 22.290888284s ago: executing program 7 (id=3609): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 20.021774477s ago: executing program 44 (id=3594): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 18.834787393s ago: executing program 7 (id=3613): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r6 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 18.075344832s ago: executing program 0 (id=3614): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 17.652939053s ago: executing program 5 (id=3615): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 16.385411065s ago: executing program 5 (id=3616): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 15.077754982s ago: executing program 3 (id=3617): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 14.922535162s ago: executing program 7 (id=3618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14.817095651s ago: executing program 0 (id=3619): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r7 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 12.587291525s ago: executing program 5 (id=3620): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 10.808050957s ago: executing program 7 (id=3621): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 10.714453893s ago: executing program 3 (id=3622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.190914648s ago: executing program 0 (id=3623): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 9.153497995s ago: executing program 5 (id=3624): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) 7.575339771s ago: executing program 3 (id=3625): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',g', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 7.101134545s ago: executing program 0 (id=3626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 6.754500705s ago: executing program 5 (id=3627): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 6.494700133s ago: executing program 3 (id=3628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.915024706s ago: executing program 0 (id=3629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.580982687s ago: executing program 5 (id=3630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 3.529531618s ago: executing program 3 (id=3631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 2.196645734s ago: executing program 7 (id=3632): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 332.698532ms ago: executing program 3 (id=3633): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=3634): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r7, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.3124'. [ 1110.916192][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1114.468035][T17996] xt_ecn: cannot match TCP bits for non-tcp packets [ 1115.991659][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.000863][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.550053][T18026] xt_ecn: cannot match TCP bits for non-tcp packets [ 1118.043120][T18017] Bluetooth: hci4: command 0x0406 tx timeout [ 1120.262561][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1120.936000][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3138'. [ 1125.540903][T18111] xt_ecn: cannot match TCP bits for non-tcp packets [ 1126.263217][T10107] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1126.516557][T10107] usb 10-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1126.543609][T18119] xt_ecn: cannot match TCP bits for non-tcp packets [ 1126.624209][T10107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.648654][T10107] usb 10-1: Product: syz [ 1126.702351][T10107] usb 10-1: Manufacturer: syz [ 1126.722483][T10107] usb 10-1: SerialNumber: syz [ 1126.807318][T10107] usb 10-1: config 0 descriptor?? [ 1126.972351][T10107] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1127.153031][T10107] gspca_m5602: Failed to find a sensor [ 1127.189039][T10107] ALi m5602 10-1:0.0: ALi m5602 webcam failed [ 1127.208674][T10109] usb 3-1: USB disconnect, device number 2 [ 1127.261665][T10107] usb 10-1: USB disconnect, device number 17 [ 1127.472003][T10109] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1127.763806][T18017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1127.779407][T18017] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1127.788867][T18017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1127.800085][T18017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1127.809164][T18017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1127.857705][T18130] fuse: Bad value for 'fd' [ 1128.023107][ T5694] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1128.241703][ T5694] usb 10-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1128.279713][ T5694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.317494][ T5694] usb 10-1: Product: syz [ 1128.335894][ T5694] usb 10-1: Manufacturer: syz [ 1128.351806][ T5694] usb 10-1: SerialNumber: syz [ 1128.384438][ T5694] usb 10-1: config 0 descriptor?? [ 1128.423316][ T5694] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1129.308915][T18135] xt_ecn: cannot match TCP bits for non-tcp packets [ 1129.883138][ T5637] Bluetooth: hci6: command tx timeout [ 1130.312047][ T5694] gspca_m5602: Failed to find a sensor [ 1130.362695][ T5694] ALi m5602 10-1:0.0: ALi m5602 webcam failed [ 1130.456142][ T5694] usb 10-1: USB disconnect, device number 18 [ 1131.342088][ T3310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1131.963123][ T5637] Bluetooth: hci6: command tx timeout [ 1132.491981][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.540388][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.599919][T18131] bridge_slave_0: entered allmulticast mode [ 1132.659229][T18131] bridge_slave_0: entered promiscuous mode [ 1132.674467][T10111] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1132.752607][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.820230][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.922561][T18131] bridge_slave_1: entered allmulticast mode [ 1132.933509][T10111] usb 1-1: Using ep0 maxpacket: 32 [ 1132.980666][T10111] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1133.001648][T18131] bridge_slave_1: entered promiscuous mode [ 1133.025004][T10111] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1133.107266][T10111] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1133.177088][T10111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1133.241046][T10111] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1133.299778][T10111] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1133.332677][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.389001][T10111] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1133.443601][T10111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.457288][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.581234][T10111] usb 1-1: config 0 descriptor?? [ 1133.914911][T18158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.006957][T18158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.043113][ T5637] Bluetooth: hci6: command tx timeout [ 1134.152330][T18158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.182051][T10111] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1134.232482][T18131] team0: Port device team_slave_0 added [ 1134.267300][T18158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.290887][T18131] team0: Port device team_slave_1 added [ 1134.659168][T18158] IPv6: addrconf: prefix option has invalid lifetime [ 1134.808297][T18173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.879010][T18173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.892088][ T808] usb 1-1: USB disconnect, device number 83 [ 1134.899398][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.981018][ T808] usblp0: removed [ 1134.988461][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.202575][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.286385][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.346126][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.499844][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.612048][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3156'. [ 1135.651909][T18175] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1135.757060][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3156'. [ 1135.882126][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'. [ 1136.085757][T18184] xt_ecn: cannot match TCP bits for non-tcp packets [ 1136.123976][ T5637] Bluetooth: hci6: command tx timeout [ 1136.160847][T18131] hsr_slave_0: entered promiscuous mode [ 1136.197678][T18131] hsr_slave_1: entered promiscuous mode [ 1136.238324][T18131] debugfs: 'hsr0' already exists in 'hsr' [ 1136.285988][T18131] Cannot create hsr debugfs directory [ 1137.991633][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3161'. [ 1138.970165][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3164'. [ 1139.289297][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3164'. [ 1139.733453][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3165'. [ 1140.363798][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1140.543298][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1140.570544][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1140.586682][T10111] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1140.610480][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1140.700797][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1140.737455][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1140.772540][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1140.816884][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1140.826361][T10111] usb 5-1: Using ep0 maxpacket: 16 [ 1140.867969][T10111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.894875][T10111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1140.932140][T10111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1140.968132][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1141.009690][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.019093][T10111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.036666][T10111] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.083261][T10111] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1141.132355][T10111] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1141.170728][ T9] usb 1-1: config 0 descriptor?? [ 1141.178702][T10111] usb 5-1: Manufacturer: syz [ 1141.226692][T10111] usb 5-1: config 0 descriptor?? [ 1141.451238][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.504219][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.611277][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1141.633928][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.681352][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.055098][T18231] IPv6: addrconf: prefix option has invalid lifetime [ 1142.173525][T18246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.197800][T10111] rc_core: IR keymap rc-hauppauge not found [ 1142.238267][T18246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.247208][T10111] Registered IR keymap rc-empty [ 1142.268350][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.313336][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.366798][T10111] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1142.441990][T10111] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input61 [ 1142.485973][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.567665][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.569085][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3169'. [ 1142.615602][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.646303][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.683470][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.713319][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.727171][ T9] usb 1-1: USB disconnect, device number 84 [ 1142.744160][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.783388][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.841347][ T9] usblp0: removed [ 1142.856986][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.893223][T10111] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1142.934223][T10111] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1142.966529][T10111] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1143.082001][T10111] usb 5-1: USB disconnect, device number 9 [ 1143.900971][T18269] netlink: 'syz.4.3170': attribute type 13 has an invalid length. [ 1144.292100][T18272] xt_ecn: cannot match TCP bits for non-tcp packets [ 1144.924769][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1145.938168][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3173'. [ 1146.726203][T18131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1146.811057][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.866069][T18131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1147.041149][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1147.094280][T18131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1147.557554][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1147.620146][T18303] xt_ecn: cannot match TCP bits for non-tcp packets [ 1147.633242][T18131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1147.765413][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.982275][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.091374][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1151.133305][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.290430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.297674][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.427734][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.434953][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.778145][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1151.848822][T18350] netlink: 'syz.9.3179': attribute type 13 has an invalid length. [ 1152.062533][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 1152.243205][ T808] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1152.268135][T18353] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3179'. [ 1152.444182][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 1152.470372][ T808] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1152.508407][ T808] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1152.561181][ T808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1152.604491][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1152.645951][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1152.702055][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1152.751401][ T808] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1152.793845][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.874479][ T808] usb 5-1: config 0 descriptor?? [ 1153.123134][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.183389][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.316997][ T808] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1153.344520][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.419507][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.537400][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.782293][T18355] IPv6: addrconf: prefix option has invalid lifetime [ 1153.913227][T18131] veth0_vlan: entered promiscuous mode [ 1153.933898][T18363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.982938][T18131] veth1_vlan: entered promiscuous mode [ 1153.989619][T18363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.077586][ T808] usb 5-1: USB disconnect, device number 10 [ 1154.164510][ T808] usblp0: removed [ 1154.263699][T18131] veth0_macvtap: entered promiscuous mode [ 1154.382349][T18131] veth1_macvtap: entered promiscuous mode [ 1154.507081][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.602541][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.734232][ T9684] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.790777][ T9684] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.857370][T18378] xt_ecn: cannot match TCP bits for non-tcp packets [ 1154.970242][ T9684] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.041011][ T9684] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.333214][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1155.533029][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1155.589249][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.719885][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.790958][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.811835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1155.866644][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1155.917102][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.930450][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.037829][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1156.103392][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1156.173091][ T9] usb 5-1: Manufacturer: syz [ 1156.237186][ T9] usb 5-1: config 0 descriptor?? [ 1156.250418][ T9684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.313922][ T9684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.823504][ T9] rc_core: IR keymap rc-hauppauge not found [ 1156.869763][ T9] Registered IR keymap rc-empty [ 1156.908680][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1156.973019][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.046456][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1157.182319][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 1157.320874][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.473332][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.543082][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.623207][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.726573][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.903626][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1157.958327][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1158.023156][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1158.087327][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1158.159374][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1158.267388][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1158.278181][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.396908][ T9] usb 5-1: USB disconnect, device number 11 [ 1159.245874][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 1160.242326][T18434] xt_ecn: cannot match TCP bits for non-tcp packets [ 1162.705113][T18451] xt_ecn: cannot match TCP bits for non-tcp packets [ 1163.334320][ T6813] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1165.261956][T18478] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3194'. [ 1165.313137][T10109] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1165.573068][T10109] usb 5-1: Using ep0 maxpacket: 32 [ 1165.625000][T10109] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1165.643808][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3194'. [ 1165.654726][T10109] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1165.670021][T10109] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1165.683102][T10109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1165.760868][T10109] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1165.941883][T10109] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1166.087766][T10109] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1166.192293][T10109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.341564][T10109] usb 5-1: config 0 descriptor?? [ 1166.646843][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.749030][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.919074][T18493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.978596][T10109] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1167.018919][T18493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.381541][T18470] IPv6: addrconf: prefix option has invalid lifetime [ 1167.551418][T18493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.611941][T18493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.636777][ T9] usb 5-1: USB disconnect, device number 12 [ 1167.699073][ T9] usblp0: removed [ 1168.979773][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3198'. [ 1170.326309][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1172.615171][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1172.645564][T10107] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1172.757244][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3202'. [ 1172.853072][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1172.867269][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.892708][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1172.924714][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1172.942776][T10107] usb 5-1: config 0 has no interfaces? [ 1172.958264][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1172.977911][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.998449][T10107] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1173.013782][T10107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.022629][T10107] usb 5-1: Product: syz [ 1173.030770][T10107] usb 5-1: Manufacturer: syz [ 1173.042503][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1173.061713][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1173.081022][ T9] usb 6-1: Manufacturer: syz [ 1173.091089][T10107] usb 5-1: SerialNumber: syz [ 1174.081382][ T9] usb 6-1: config 0 descriptor?? [ 1174.090941][T10107] usb 5-1: config 0 descriptor?? [ 1174.432500][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3204'. [ 1174.495023][ T9] rc_core: IR keymap rc-hauppauge not found [ 1174.518265][ T9] Registered IR keymap rc-empty [ 1174.541983][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.583171][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.627803][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1174.682485][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input63 [ 1174.719707][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.765998][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.793116][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.826333][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.853101][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.883293][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.925070][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1174.958097][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1175.043256][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1175.083438][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1175.139444][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1175.173818][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1175.223501][ T9] usb 6-1: USB disconnect, device number 52 [ 1177.405218][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.414033][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.426741][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1178.396877][T13297] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1178.573791][T13297] usb 10-1: Using ep0 maxpacket: 32 [ 1178.588807][T13297] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1178.610741][T13297] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1178.627989][T13297] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1178.658693][T13297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1178.695485][T13297] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1178.732680][T13297] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1178.769207][T13297] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1178.790917][T13297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.836907][T13297] usb 10-1: config 0 descriptor?? [ 1179.102643][T18591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.150181][T18591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.365025][T18591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.378907][T13297] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1179.434456][T18591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.869585][T18603] IPv6: addrconf: prefix option has invalid lifetime [ 1180.095949][T10108] usb 10-1: USB disconnect, device number 20 [ 1180.141177][T10108] usblp0: removed [ 1180.426139][T18017] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1180.472784][T18017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1180.482728][T18017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1180.500546][T18017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1180.514211][T18017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1181.745610][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1182.603408][ T5637] Bluetooth: hci4: command tx timeout [ 1184.194759][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1184.393210][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1184.440507][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1184.454575][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.498467][ T9] usb 1-1: Product: syz [ 1184.514360][ T9] usb 1-1: Manufacturer: syz [ 1184.519576][ T9] usb 1-1: SerialNumber: syz [ 1184.687535][ T5637] Bluetooth: hci4: command tx timeout [ 1185.250881][ T9] usb 1-1: config 0 descriptor?? [ 1185.264163][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1185.271984][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1185.278886][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1185.289742][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1185.298734][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1185.319695][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.336213][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1185.344725][ T9] usb 1-1: media controller created [ 1185.364490][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.391605][ T9] usb 1-1: selecting invalid altsetting 3 [ 1185.397809][ T9] ttusb2: set interface to alts=3 failed [ 1185.473788][T18648] dvb-usb: bulk message failed: -22 (7/0) [ 1185.482394][T18648] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1185.507526][ T9] DVB: Unable to find symbol tda10086_attach() [ 1185.519433][T18648] ttusb2: i2c transfer failed. [ 1185.519716][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1185.595879][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1185.602333][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1185.624043][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1185.635853][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1185.652629][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1186.066498][T18645] syz.0.3213 (18645): drop_caches: 2 [ 1186.142911][T10108] usb 1-1: USB disconnect, device number 85 [ 1186.218193][T10108] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1186.379951][T18393] usb 5-1: USB disconnect, device number 13 [ 1186.764799][ T5637] Bluetooth: hci4: command tx timeout [ 1186.988509][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 1187.161234][T18675] syz.0.3216 (18675): drop_caches: 2 [ 1187.352984][T13297] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1187.439572][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.513007][T13297] usb 1-1: Using ep0 maxpacket: 32 [ 1187.538725][T13297] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1187.569828][T13297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.631637][T13297] usb 1-1: Product: syz [ 1187.641834][T13297] usb 1-1: Manufacturer: syz [ 1187.670201][T13297] usb 1-1: SerialNumber: syz [ 1187.696085][T13297] usb 1-1: config 0 descriptor?? [ 1187.717971][T13297] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1187.747745][T13297] dvb-usb: bulk message failed: -22 (4/0) [ 1187.761936][T13297] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1187.788076][T13297] dvb-usb: bulk message failed: -22 (5/0) [ 1187.813087][T13297] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1187.903278][T13297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1187.928394][T18675] dvb-usb: bulk message failed: -22 (7/0) [ 1187.941863][T18675] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1187.977716][T18675] ttusb2: i2c transfer failed. [ 1188.013271][T13297] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1188.038702][T13297] usb 1-1: media controller created [ 1188.100364][T13297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1188.258441][T13297] usb 1-1: selecting invalid altsetting 3 [ 1188.282102][T13297] ttusb2: set interface to alts=3 failed [ 1188.404051][T13297] DVB: Unable to find symbol tda10086_attach() [ 1188.425689][T13297] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1188.481309][T13297] dvb-usb: bulk message failed: -22 (4/0) [ 1188.508116][T13297] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1188.553218][T13297] dvb-usb: bulk message failed: -22 (5/0) [ 1188.570836][T13297] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1188.603331][T13297] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1188.638295][T13297] usb 1-1: USB disconnect, device number 86 [ 1188.843760][ T5637] Bluetooth: hci4: command tx timeout [ 1188.888917][T13297] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1188.952028][T18683] netlink: 'syz.4.3217': attribute type 13 has an invalid length. [ 1189.333229][T10108] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1189.593195][T10108] usb 6-1: Using ep0 maxpacket: 32 [ 1189.611633][T10108] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1189.621717][T10108] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1189.630413][T10108] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1189.639454][T10108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1189.659620][T10108] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1189.669350][T10108] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1189.689147][T10108] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1189.698262][T10108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.715083][T10108] usb 6-1: config 0 descriptor?? [ 1189.998711][T18689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.020963][T18689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.083658][T18689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.092687][T18689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.102672][T10108] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1190.245320][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.358333][T18689] IPv6: addrconf: prefix option has invalid lifetime [ 1190.501896][T18701] syz.0.3221 (18701): drop_caches: 2 [ 1190.555968][T18698] xt_ecn: cannot match TCP bits for non-tcp packets [ 1190.764382][T10108] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1190.933021][T10108] usb 1-1: Using ep0 maxpacket: 32 [ 1190.966472][T13297] usb 6-1: USB disconnect, device number 53 [ 1190.988884][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1191.012714][T13297] usblp0: removed [ 1191.064877][T10108] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1191.139979][T10108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.197095][T10108] usb 1-1: Product: syz [ 1191.230294][T10108] usb 1-1: Manufacturer: syz [ 1191.270568][T10108] usb 1-1: SerialNumber: syz [ 1191.312322][T10108] usb 1-1: config 0 descriptor?? [ 1191.363870][T10108] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1191.409803][T10108] dvb-usb: bulk message failed: -22 (4/0) [ 1191.502312][T10108] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1191.550496][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3222'. [ 1191.577055][T10108] dvb-usb: bulk message failed: -22 (5/0) [ 1191.690471][T10108] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1191.821475][T10108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1191.854367][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.937997][T10108] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1191.988502][T18717] xt_ecn: cannot match TCP bits for non-tcp packets [ 1192.010268][T10108] usb 1-1: media controller created [ 1192.219654][T10108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1192.628844][T10108] usb 1-1: selecting invalid altsetting 3 [ 1192.677765][T10108] ttusb2: set interface to alts=3 failed [ 1193.057959][T10108] DVB: Unable to find symbol tda10086_attach() [ 1193.109230][T10108] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1193.184018][T10108] dvb-usb: bulk message failed: -22 (4/0) [ 1193.225930][T10108] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1193.337012][T10108] dvb-usb: bulk message failed: -22 (5/0) [ 1193.376767][T10108] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1193.429330][T10108] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1193.463067][T10108] usb 1-1: USB disconnect, device number 87 [ 1193.813242][T10108] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1193.858975][T18728] xt_ecn: cannot match TCP bits for non-tcp packets [ 1194.854440][T18017] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.214836][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.478952][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 1195.934426][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.969900][T18663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1196.011335][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.030243][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3227'. [ 1196.052532][T18613] bridge_slave_0: entered allmulticast mode [ 1196.100734][T18613] bridge_slave_0: entered promiscuous mode [ 1196.297428][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.352510][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.392752][T18613] bridge_slave_1: entered allmulticast mode [ 1196.446726][T18613] bridge_slave_1: entered promiscuous mode [ 1197.574438][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'. [ 1197.675315][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.970974][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.004870][T18393] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1200.186757][T18393] usb 10-1: Using ep0 maxpacket: 32 [ 1200.215128][T18393] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1200.255968][T18393] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1200.311665][T18393] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1200.343303][T18393] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1200.358317][T18393] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1200.445672][T18393] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1200.555151][T18393] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1200.583163][T18393] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.613489][T18393] usb 10-1: config 0 descriptor?? [ 1200.865998][T18772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.906102][T18772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.010985][T18772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.024149][T18393] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1201.043485][T18772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.236980][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1201.295909][T18785] xt_ecn: cannot match TCP bits for non-tcp packets [ 1201.314610][T18772] IPv6: addrconf: prefix option has invalid lifetime [ 1201.421065][T13297] usb 10-1: USB disconnect, device number 21 [ 1201.456784][T13297] usblp0: removed [ 1201.978917][T18797] syz.0.3235 (18797): drop_caches: 2 [ 1202.791027][T18805] xt_ecn: cannot match TCP bits for non-tcp packets [ 1204.263822][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3237'. [ 1205.262522][T18613] team0: Port device team_slave_0 added [ 1205.313870][ T12] bridge_slave_1: left allmulticast mode [ 1205.319623][ T12] bridge_slave_1: left promiscuous mode [ 1205.325421][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.345530][ T12] bridge_slave_0: left allmulticast mode [ 1205.351210][ T12] bridge_slave_0: left promiscuous mode [ 1205.359297][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.461587][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3238'. [ 1205.942060][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.016113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.075029][ T12] bond0 (unregistering): Released all slaves [ 1206.297889][T18613] team0: Port device team_slave_1 added [ 1206.977216][T18823] syz.5.3239 (18823): drop_caches: 2 [ 1207.016091][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1207.163090][T10099] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1207.370875][T10099] usb 6-1: Using ep0 maxpacket: 32 [ 1207.417977][T10099] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1207.446607][T10099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.472778][T10099] usb 6-1: Product: syz [ 1207.494087][T10099] usb 6-1: Manufacturer: syz [ 1207.526234][T10099] usb 6-1: SerialNumber: syz [ 1207.537865][T10099] usb 6-1: config 0 descriptor?? [ 1207.547066][T10099] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1207.577629][T10099] dvb-usb: bulk message failed: -22 (4/0) [ 1207.618578][T10099] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1207.656707][T10099] dvb-usb: bulk message failed: -22 (5/0) [ 1207.677118][T10099] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1207.712440][T10099] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1207.767035][T10099] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1207.791959][T18823] dvb-usb: bulk message failed: -22 (7/0) [ 1207.801670][T18823] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1207.813595][T10099] usb 6-1: media controller created [ 1207.851256][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.885322][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.919818][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.959117][T18823] ttusb2: i2c transfer failed. [ 1208.071726][T10099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1208.162689][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.182114][T10099] usb 6-1: selecting invalid altsetting 3 [ 1208.197815][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.260883][T10099] ttusb2: set interface to alts=3 failed [ 1208.303686][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.517327][T10099] DVB: Unable to find symbol tda10086_attach() [ 1208.542732][T10099] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1208.587314][T10099] dvb-usb: bulk message failed: -22 (4/0) [ 1208.623703][T10099] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1208.670009][T10099] dvb-usb: bulk message failed: -22 (5/0) [ 1208.701633][T10099] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1208.765141][T10099] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1208.852494][T10099] usb 6-1: USB disconnect, device number 54 [ 1209.218050][T10099] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1209.280697][T18613] hsr_slave_0: entered promiscuous mode [ 1209.306142][T18844] syz.5.3243 (18844): drop_caches: 2 [ 1209.321579][T18613] hsr_slave_1: entered promiscuous mode [ 1209.353734][T18613] debugfs: 'hsr0' already exists in 'hsr' [ 1209.374607][T18613] Cannot create hsr debugfs directory [ 1209.488156][ T12] hsr_slave_0: left promiscuous mode [ 1209.525676][ T12] hsr_slave_1: left promiscuous mode [ 1209.558310][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.604312][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.644053][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.677300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.799157][ T12] veth1_macvtap: left promiscuous mode [ 1209.819914][ T12] veth0_macvtap: left promiscuous mode [ 1209.839197][ T12] veth1_vlan: left promiscuous mode [ 1209.866442][ T12] veth0_vlan: left promiscuous mode [ 1210.042556][T18867] xt_ecn: cannot match TCP bits for non-tcp packets [ 1210.141989][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3246'. [ 1212.208161][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1212.350543][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1213.322623][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1214.562962][T18393] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1214.799357][T18393] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.868453][T18393] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1214.950608][T18393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.001352][T18393] usb 6-1: config 0 descriptor?? [ 1215.113277][T18393] pwc: Askey VC010 type 2 USB webcam detected. [ 1215.224336][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1215.327241][T18613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.880322][T18393] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1215.929353][T18393] pwc: recv_control_msg error -71 req 02 val 2700 [ 1215.983030][T18393] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1216.047230][T18393] pwc: recv_control_msg error -71 req 04 val 1000 [ 1216.072147][T18393] pwc: recv_control_msg error -71 req 04 val 1300 [ 1216.134283][T18393] pwc: recv_control_msg error -71 req 04 val 1400 [ 1216.171087][T18393] pwc: recv_control_msg error -71 req 02 val 2000 [ 1216.230821][T18393] pwc: recv_control_msg error -71 req 02 val 2100 [ 1216.314272][T18393] pwc: recv_control_msg error -71 req 04 val 1500 [ 1216.361451][T18393] pwc: recv_control_msg error -71 req 02 val 2500 [ 1216.430677][T18393] pwc: recv_control_msg error -71 req 02 val 2400 [ 1216.554391][T18393] pwc: recv_control_msg error -71 req 02 val 2600 [ 1216.597664][T18393] pwc: recv_control_msg error -71 req 02 val 2900 [ 1216.672178][T18393] pwc: recv_control_msg error -71 req 02 val 2800 [ 1216.689662][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1216.714794][T18913] xt_ecn: cannot match TCP bits for non-tcp packets [ 1216.748263][T18393] pwc: recv_control_msg error -71 req 04 val 1100 [ 1216.825855][T18393] pwc: recv_control_msg error -71 req 04 val 1200 [ 1216.883875][T18393] pwc: Registered as video103. [ 1216.920872][T18613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.130744][T18393] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input64 [ 1217.225697][T18393] usb 6-1: USB disconnect, device number 55 [ 1217.506229][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3251'. [ 1217.741811][T18613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.549350][T18613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.881955][T18927] syz.4.3252 (18927): drop_caches: 2 [ 1219.183246][T10107] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1219.362990][T10107] usb 5-1: Using ep0 maxpacket: 32 [ 1219.387912][T10107] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1219.417566][T10107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.468842][T10107] usb 5-1: Product: syz [ 1219.481847][T10107] usb 5-1: Manufacturer: syz [ 1219.501090][T10107] usb 5-1: SerialNumber: syz [ 1219.545210][T10107] usb 5-1: config 0 descriptor?? [ 1219.625469][T10107] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1219.660901][T10107] dvb-usb: bulk message failed: -22 (4/0) [ 1219.686533][T18613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1219.698510][T10107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1219.726861][T18613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1219.745598][T10107] dvb-usb: bulk message failed: -22 (5/0) [ 1219.766106][T10107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1219.778369][T18613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1219.819141][T18613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1219.839836][T10107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1219.855053][T18927] dvb-usb: bulk message failed: -22 (7/0) [ 1219.869470][T18613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1219.876511][T18927] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1219.895484][T10107] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1219.948085][T10107] usb 5-1: media controller created [ 1219.958010][T18927] ttusb2: i2c transfer failed. [ 1219.964999][T18613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1220.012502][T18613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1220.078609][T10107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.092197][T18613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1220.239192][T10107] usb 5-1: selecting invalid altsetting 3 [ 1220.281056][T10107] ttusb2: set interface to alts=3 failed [ 1220.648419][T18613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.777888][T18613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.806178][T10107] DVB: Unable to find symbol tda10086_attach() [ 1220.860041][T10107] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1220.878753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.886751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.938208][T10107] dvb-usb: bulk message failed: -22 (4/0) [ 1220.959243][T10107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.005803][T10107] dvb-usb: bulk message failed: -22 (5/0) [ 1221.079222][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.086448][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.123124][T10107] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1221.209297][T10107] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1221.329951][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.439490][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.515124][T18963] xt_ecn: cannot match TCP bits for non-tcp packets [ 1221.915147][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1222.192029][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.000151][T18613] veth0_vlan: entered promiscuous mode [ 1223.191973][T18613] veth1_vlan: entered promiscuous mode [ 1223.205230][T18979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.266093][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1223.280014][T18979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.301929][T18978] syz.4.3258 (18978): drop_caches: 2 [ 1223.570824][T18613] veth0_macvtap: entered promiscuous mode [ 1223.670563][T18613] veth1_macvtap: entered promiscuous mode [ 1223.827967][T18613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.894682][T18613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.952645][T18663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.002556][T18663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.085467][T18663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.181662][T18663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.638546][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.704316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.957601][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.019853][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.039454][T18988] xt_ecn: cannot match TCP bits for non-tcp packets [ 1225.587794][T18993] syz.0.3260 (18993): drop_caches: 2 [ 1225.733242][ T808] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1225.945318][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 1225.995102][ T808] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1226.031589][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.084017][ T808] usb 1-1: Product: syz [ 1226.118665][ T808] usb 1-1: Manufacturer: syz [ 1226.157380][ T808] usb 1-1: SerialNumber: syz [ 1226.212067][ T808] usb 1-1: config 0 descriptor?? [ 1226.517485][T18993] dvb-usb: bulk message failed: -22 (7/0) [ 1226.571641][T18993] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1226.581823][T18993] ttusb2: i2c transfer failed. [ 1226.920068][ T808] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1226.977417][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 1227.020567][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1227.093795][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 1227.147595][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1227.158490][T18393] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1227.324174][ T9678] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1227.391791][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1227.412714][ T808] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1227.421392][ T808] usb 1-1: media controller created [ 1227.513983][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1227.940604][ T808] usb 1-1: selecting invalid altsetting 3 [ 1228.051100][ T808] ttusb2: set interface to alts=3 failed [ 1228.581900][ T808] DVB: Unable to find symbol tda10086_attach() [ 1228.731967][ T808] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1228.942779][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 1228.971257][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1229.028434][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 1229.059432][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1229.107118][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1229.459559][T19035] xt_ecn: cannot match TCP bits for non-tcp packets [ 1229.666286][T19037] xt_ecn: cannot match TCP bits for non-tcp packets [ 1229.847973][T19040] syz.5.3267 (19040): drop_caches: 2 [ 1229.864539][T19042] dvb-usb: bulk message failed: -22 (7/0) [ 1229.889569][T19042] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1229.939060][T19042] ttusb2: i2c transfer failed. [ 1230.670094][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3268'. [ 1230.823391][ T808] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1231.012986][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 1231.053471][ T808] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1231.099849][ T808] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1231.143882][ T808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1231.218039][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1231.312703][ T808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1231.406763][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1231.508111][ T808] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1231.579396][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.690591][ T808] usb 2-1: config 0 descriptor?? [ 1231.964190][T19054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.037062][T19054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.165383][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.176021][ T808] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1232.237718][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.668108][T19054] IPv6: addrconf: prefix option has invalid lifetime [ 1232.780443][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.816884][T17006] usb 2-1: USB disconnect, device number 65 [ 1232.836800][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.900258][T17006] usblp0: removed [ 1233.778007][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3272'. [ 1234.511379][T19086] xt_ecn: cannot match TCP bits for non-tcp packets [ 1234.888797][T19085] syz.5.3275 (19085): drop_caches: 2 [ 1234.976824][T17006] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1235.212958][T17006] usb 6-1: Using ep0 maxpacket: 32 [ 1235.332557][T17006] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1235.459285][T17006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.559425][T17006] usb 6-1: Product: syz [ 1235.578865][T17006] usb 6-1: Manufacturer: syz [ 1235.602565][T17006] usb 6-1: SerialNumber: syz [ 1235.717959][T17006] usb 6-1: config 0 descriptor?? [ 1235.819767][T17006] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1235.842188][T17006] dvb-usb: bulk message failed: -22 (4/0) [ 1235.859339][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1235.931461][T17006] dvb-usb: bulk message failed: -22 (5/0) [ 1235.955348][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1236.209310][T17006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1236.412179][T17006] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1236.452680][T17006] usb 6-1: media controller created [ 1236.690211][T17006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1236.719158][T19101] syz.0.3277 (19101): drop_caches: 2 [ 1236.728360][T19102] dvb-usb: bulk message failed: -22 (7/0) [ 1236.740579][T19102] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1236.795295][T19102] ttusb2: i2c transfer failed. [ 1236.850430][T17006] usb 6-1: selecting invalid altsetting 3 [ 1236.871195][T17006] ttusb2: set interface to alts=3 failed [ 1237.374832][T17006] DVB: Unable to find symbol tda10086_attach() [ 1237.422332][T17006] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1237.499743][T17006] dvb-usb: bulk message failed: -22 (4/0) [ 1237.547690][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1237.609219][T17006] dvb-usb: bulk message failed: -22 (5/0) [ 1237.641924][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1237.705952][T17006] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1237.820686][T17006] usb 6-1: USB disconnect, device number 57 [ 1238.414649][T17006] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1238.439218][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1238.853046][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.865409][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.596909][T10109] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1240.759516][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1240.823265][T10109] usb 2-1: Using ep0 maxpacket: 32 [ 1240.893065][T10109] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1240.922636][T10109] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1240.931307][T10109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1240.982653][T10109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1241.061889][T10109] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1241.109908][T10109] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1241.239453][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1241.260224][T10109] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1241.298204][T10109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.429000][T10109] usb 2-1: config 0 descriptor?? [ 1241.734835][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.833851][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.117176][T19136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.134810][T10109] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1242.166311][T19136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.601889][T19136] IPv6: addrconf: prefix option has invalid lifetime [ 1242.736503][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.847420][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.873256][ T5694] usb 2-1: USB disconnect, device number 66 [ 1242.928172][ T5694] usblp0: removed [ 1243.273915][T19164] xt_ecn: cannot match TCP bits for non-tcp packets [ 1244.218104][T19177] xt_ecn: cannot match TCP bits for non-tcp packets [ 1245.231185][T19190] xt_ecn: cannot match TCP bits for non-tcp packets [ 1247.009469][T19201] xt_ecn: cannot match TCP bits for non-tcp packets [ 1248.667257][T19211] xt_ecn: cannot match TCP bits for non-tcp packets [ 1249.727729][T19219] xt_ecn: cannot match TCP bits for non-tcp packets [ 1249.866042][T19228] syz.9.3293 (19228): drop_caches: 2 [ 1250.243087][T17006] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1250.545239][T17006] usb 10-1: Using ep0 maxpacket: 32 [ 1250.689848][T17006] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1250.715440][T17006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.735070][T17006] usb 10-1: Product: syz [ 1250.782226][T17006] usb 10-1: Manufacturer: syz [ 1250.815755][T17006] usb 10-1: SerialNumber: syz [ 1250.884435][T17006] usb 10-1: config 0 descriptor?? [ 1250.969866][T17006] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1251.041778][T17006] dvb-usb: bulk message failed: -22 (4/0) [ 1251.112665][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1251.165652][T18017] Bluetooth: hci6: command 0x0406 tx timeout [ 1251.203576][T19228] dvb-usb: bulk message failed: -22 (7/0) [ 1251.262160][T19228] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1251.283366][T17006] dvb-usb: bulk message failed: -22 (5/0) [ 1251.365944][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1251.407952][T19228] ttusb2: i2c transfer failed. [ 1251.500618][T17006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1251.581658][T17006] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1251.640277][T17006] usb 10-1: media controller created [ 1251.951170][T17006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.421429][T17006] usb 10-1: selecting invalid altsetting 3 [ 1252.461052][T17006] ttusb2: set interface to alts=3 failed [ 1252.934496][T19258] xt_ecn: cannot match TCP bits for non-tcp packets [ 1252.970602][T17006] DVB: Unable to find symbol tda10086_attach() [ 1253.007183][T17006] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1253.047158][T17006] dvb-usb: bulk message failed: -22 (4/0) [ 1253.078675][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1253.157455][T17006] dvb-usb: bulk message failed: -22 (5/0) [ 1253.170658][T17006] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1253.185545][T17006] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1253.673260][ T5694] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1253.855840][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 1253.875421][ T5694] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1253.938462][ T5694] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1253.989059][ T5694] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1254.047198][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1254.097737][ T5694] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1254.167590][ T5694] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1254.273925][ T5694] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1254.334922][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.403096][ T5694] usb 6-1: config 0 descriptor?? [ 1254.747236][T19263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.877117][T19263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.316199][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.349807][ T5694] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1255.407412][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.770288][T19263] IPv6: addrconf: prefix option has invalid lifetime [ 1255.884867][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.962754][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.004393][T10109] usb 6-1: USB disconnect, device number 58 [ 1256.091874][T10109] usblp0: removed [ 1256.890155][T19282] xt_ecn: cannot match TCP bits for non-tcp packets [ 1259.335847][ T6816] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1260.444108][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3305'. [ 1261.405314][T19322] xt_ecn: cannot match TCP bits for non-tcp packets [ 1261.527034][T19323] xt_ecn: cannot match TCP bits for non-tcp packets [ 1264.896847][T19346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.934145][T19346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.986559][T19346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.037150][T19346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.242139][T19346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.285338][T19346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.699444][T19346] IPv6: addrconf: prefix option has invalid lifetime [ 1265.857661][T19356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.909273][T19356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.039603][T19360] xt_ecn: cannot match TCP bits for non-tcp packets [ 1267.051929][T19364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.059491][T19362] syz.9.3316 (19362): drop_caches: 2 [ 1267.160226][T19364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.267482][T19362] dvb-usb: bulk message failed: -22 (7/0) [ 1267.294938][T19362] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1267.358119][T19362] ttusb2: i2c transfer failed. [ 1268.452340][T19379] syz.9.3320 (19379): drop_caches: 2 [ 1268.516146][T19381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.569177][T19381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.619234][T19379] dvb-usb: bulk message failed: -22 (7/0) [ 1268.641087][T19379] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1268.675995][T19384] syz.5.3321 (19384): drop_caches: 2 [ 1268.699190][T19379] ttusb2: i2c transfer failed. [ 1268.962992][ T5694] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1269.136798][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 1269.167935][ T5694] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1269.202925][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.232397][ T5694] usb 6-1: Product: syz [ 1269.243005][ T5694] usb 6-1: Manufacturer: syz [ 1269.260166][ T5694] usb 6-1: SerialNumber: syz [ 1269.296300][ T5694] usb 6-1: config 0 descriptor?? [ 1269.321261][ T5694] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1269.346898][ T5694] dvb-usb: bulk message failed: -22 (4/0) [ 1269.367945][ T5694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1269.398665][ T5694] dvb-usb: bulk message failed: -22 (5/0) [ 1269.417243][ T5694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1269.456495][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1269.512071][T19387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.532106][ T5694] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1269.548453][T19384] dvb-usb: bulk message failed: -22 (7/0) [ 1269.588753][T19384] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1269.604984][ T5694] usb 6-1: media controller created [ 1269.611362][T19387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.662211][T19384] ttusb2: i2c transfer failed. [ 1269.719519][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1269.841113][ T5694] usb 6-1: selecting invalid altsetting 3 [ 1269.876841][ T5694] ttusb2: set interface to alts=3 failed [ 1270.232555][T19398] xt_ecn: cannot match TCP bits for non-tcp packets [ 1270.427995][ T5694] DVB: Unable to find symbol tda10086_attach() [ 1270.457779][ T5694] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1270.524990][ T5694] dvb-usb: bulk message failed: -22 (4/0) [ 1270.543126][ T5694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1270.612016][ T5694] dvb-usb: bulk message failed: -22 (5/0) [ 1270.645713][ T5694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1270.729273][ T5694] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1270.819069][ T5694] usb 6-1: USB disconnect, device number 59 [ 1270.962342][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 1271.141061][ T5694] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1271.727767][T19410] xt_ecn: cannot match TCP bits for non-tcp packets [ 1272.282041][T19415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.296434][T19412] kvm: kvm [19405]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 1272.330344][T19415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.343265][T19415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.352365][T19415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.463200][T19415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.521207][T19415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.829145][T19415] IPv6: addrconf: prefix option has invalid lifetime [ 1272.937014][T19415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.006094][T19415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.132181][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1275.231225][T19436] xt_ecn: cannot match TCP bits for non-tcp packets [ 1277.563576][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.626138][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.772419][T19467] xt_ecn: cannot match TCP bits for non-tcp packets [ 1280.240650][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1284.751726][T19511] xt_ecn: cannot match TCP bits for non-tcp packets [ 1285.168546][T19520] xt_ecn: cannot match TCP bits for non-tcp packets [ 1287.949956][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 1289.288378][T19553] xt_ecn: cannot match TCP bits for non-tcp packets [ 1290.532262][T19556] syz.0.3355 (19556): drop_caches: 2 [ 1290.539148][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.573763][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.589722][T19556] dvb-usb: bulk message failed: -22 (7/0) [ 1290.597643][T19556] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1290.668611][T19556] ttusb2: i2c transfer failed. [ 1290.891163][T19563] xt_ecn: cannot match TCP bits for non-tcp packets [ 1290.956980][T19567] xt_ecn: cannot match TCP bits for non-tcp packets [ 1291.326481][ T6816] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1292.002172][T19577] xt_ecn: cannot match TCP bits for non-tcp packets [ 1292.534404][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3360'. [ 1294.705253][T19604] xt_ecn: cannot match TCP bits for non-tcp packets [ 1297.496677][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1299.278980][T19635] xt_ecn: cannot match TCP bits for non-tcp packets [ 1300.298499][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.307988][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.145784][T19666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.210686][T19666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.874553][T19692] xt_ecn: cannot match TCP bits for non-tcp packets [ 1307.483105][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.968530][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1308.253330][T10107] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1308.453278][T10107] usb 6-1: Using ep0 maxpacket: 16 [ 1308.476258][T10107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.538686][T10107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1308.592187][T10107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1308.655010][T10107] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1308.722547][T10107] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.883369][T10107] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1308.962383][T10107] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1309.069639][T10107] usb 6-1: Manufacturer: syz [ 1309.212924][T10107] usb 6-1: config 0 descriptor?? [ 1309.777077][T10107] rc_core: IR keymap rc-hauppauge not found [ 1309.866742][T10107] Registered IR keymap rc-empty [ 1309.934561][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.054666][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.149049][T10107] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1310.251118][T10107] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65 [ 1310.335604][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.383077][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.442088][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.473393][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.510591][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.555010][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.603155][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.690881][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.753889][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.851148][T10107] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1310.929198][T10107] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1310.985079][T10107] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1311.039529][T10107] usb 6-1: USB disconnect, device number 60 [ 1312.069169][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1312.119448][T19739] xt_ecn: cannot match TCP bits for non-tcp packets [ 1317.410265][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3398'. [ 1320.191260][T19797] xt_ecn: cannot match TCP bits for non-tcp packets [ 1320.736910][T19801] xt_ecn: cannot match TCP bits for non-tcp packets [ 1321.310970][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1322.801613][T19821] xt_ecn: cannot match TCP bits for non-tcp packets [ 1323.964645][ T3285] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1324.569229][T19827] xt_ecn: cannot match TCP bits for non-tcp packets [ 1325.835099][T19838] syz.5.3412 (19838): drop_caches: 2 [ 1325.883021][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1326.092944][T18393] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1326.162932][T13297] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1326.282949][T18393] usb 6-1: Using ep0 maxpacket: 32 [ 1326.303714][T18393] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1326.332958][T13297] usb 2-1: Using ep0 maxpacket: 16 [ 1326.342028][T18393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.364835][T13297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.389904][T18393] usb 6-1: Product: syz [ 1326.401039][T18393] usb 6-1: Manufacturer: syz [ 1326.412330][T13297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1326.430452][T18393] usb 6-1: SerialNumber: syz [ 1326.462958][T13297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1326.480504][T18393] usb 6-1: config 0 descriptor?? [ 1326.519420][T13297] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1326.539367][T18393] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1326.587291][T18393] dvb-usb: bulk message failed: -22 (4/0) [ 1326.593733][T13297] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.622000][T18393] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1326.656891][T13297] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1326.674660][T18393] dvb-usb: bulk message failed: -22 (5/0) [ 1326.694353][T13297] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1326.702620][T18393] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1326.739146][T13297] usb 2-1: Manufacturer: syz [ 1326.755719][T19838] dvb-usb: bulk message failed: -22 (7/0) [ 1326.769710][T18393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1326.797772][T19838] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1326.809235][T13297] usb 2-1: config 0 descriptor?? [ 1326.855751][T18393] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1326.925656][T18393] usb 6-1: media controller created [ 1326.944254][T19838] ttusb2: i2c transfer failed. [ 1327.063473][T18393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.211760][T18393] usb 6-1: selecting invalid altsetting 3 [ 1327.248062][T18393] ttusb2: set interface to alts=3 failed [ 1327.314082][T19857] xt_ecn: cannot match TCP bits for non-tcp packets [ 1327.492949][T13297] rc_core: IR keymap rc-hauppauge not found [ 1327.521608][T13297] Registered IR keymap rc-empty [ 1327.550842][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1327.613138][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1327.658161][T13297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1327.702515][T18393] DVB: Unable to find symbol tda10086_attach() [ 1327.742704][T18393] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1327.757767][T13297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 1327.800136][T18393] dvb-usb: bulk message failed: -22 (4/0) [ 1327.839424][T18393] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1327.862467][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1327.918077][T18393] dvb-usb: bulk message failed: -22 (5/0) [ 1327.944285][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1327.978424][T18393] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1328.010139][T18393] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1328.019319][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.073143][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.147616][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.218665][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.306753][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.371258][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.425521][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.494198][T13297] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1328.525897][T13297] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1328.573569][T13297] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1328.708647][T13297] usb 2-1: USB disconnect, device number 67 [ 1328.834382][T19871] syzkaller0: entered promiscuous mode [ 1328.847680][T19871] syzkaller0: entered allmulticast mode [ 1331.254229][T19886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.292174][T19886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.997691][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1332.647073][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1336.674153][T19935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.724087][T19934] xt_ecn: cannot match TCP bits for non-tcp packets [ 1336.758345][T19935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.278322][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3431'. [ 1341.613103][T19971] xt_ecn: cannot match TCP bits for non-tcp packets [ 1344.525556][T19987] xt_ecn: cannot match TCP bits for non-tcp packets [ 1344.971151][T19994] xt_ecn: cannot match TCP bits for non-tcp packets [ 1345.508531][T20006] xt_ecn: cannot match TCP bits for non-tcp packets [ 1349.440937][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1351.588341][T20042] xt_ecn: cannot match TCP bits for non-tcp packets [ 1353.592644][T20054] xt_ecn: cannot match TCP bits for non-tcp packets [ 1354.609740][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3453'. [ 1355.315175][T13297] usb 5-1: USB disconnect, device number 14 [ 1355.327262][ T9678] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1356.183213][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1356.200136][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1356.212413][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1356.248377][T17006] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1356.261382][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1356.284342][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1356.573091][T17006] usb 2-1: Using ep0 maxpacket: 16 [ 1356.600066][T17006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.638509][T17006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.704924][T17006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1356.770750][T17006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1356.851209][T17006] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.930414][T17006] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1356.969403][T17006] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1357.010993][T17006] usb 2-1: Manufacturer: syz [ 1357.083381][T17006] usb 2-1: config 0 descriptor?? [ 1357.216294][T20076] xt_ecn: cannot match TCP bits for non-tcp packets [ 1357.653414][T17006] rc_core: IR keymap rc-hauppauge not found [ 1357.661216][T17006] Registered IR keymap rc-empty [ 1357.667021][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1357.710706][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1357.776100][T17006] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1357.814911][T17006] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 1357.949752][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.001820][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.051900][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.133134][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.215111][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.290210][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.313089][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.354024][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.363616][T18017] Bluetooth: hci2: command tx timeout [ 1358.403442][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.453249][T17006] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1358.504537][T17006] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1358.578810][T17006] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1358.707536][T17006] usb 2-1: USB disconnect, device number 68 [ 1359.340338][T20072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.390311][T20072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.430980][T20072] bridge_slave_0: entered allmulticast mode [ 1359.475080][T20072] bridge_slave_0: entered promiscuous mode [ 1359.545443][T20072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.568475][T20072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.621301][T20072] bridge_slave_1: entered allmulticast mode [ 1359.681554][T20072] bridge_slave_1: entered promiscuous mode [ 1359.984873][T20072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.036093][T20072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.171457][T20072] team0: Port device team_slave_0 added [ 1360.208879][T20072] team0: Port device team_slave_1 added [ 1360.327701][T20072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.363511][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.402841][T20072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.427804][T20072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.435801][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.464697][ T5637] Bluetooth: hci2: command tx timeout [ 1360.484375][T20072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.966172][ T808] usb 10-1: USB disconnect, device number 22 [ 1361.090796][T20072] hsr_slave_0: entered promiscuous mode [ 1361.124617][T20072] hsr_slave_1: entered promiscuous mode [ 1361.144332][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1361.165654][T20072] debugfs: 'hsr0' already exists in 'hsr' [ 1361.198904][T20072] Cannot create hsr debugfs directory [ 1361.271694][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1361.732570][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.741113][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.217130][ T9678] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.524189][ T5637] Bluetooth: hci2: command tx timeout [ 1362.766922][T20122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.829387][T20122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.259314][T18017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1363.289562][T18017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1363.301547][T18017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1363.312728][T18017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1363.324656][T18017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1363.426996][T20121] syz.0.3467 (20121): drop_caches: 2 [ 1363.814166][ T9678] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.459360][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1364.603035][T18017] Bluetooth: hci2: command tx timeout [ 1365.402927][T18017] Bluetooth: hci1: command tx timeout [ 1365.734925][ T9678] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.334777][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1367.093352][T20164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1367.109452][ T9678] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.304197][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1367.483230][T18017] Bluetooth: hci1: command tx timeout [ 1367.840345][T20179] xt_ecn: cannot match TCP bits for non-tcp packets [ 1368.493170][ T9678] bridge_slave_1: left allmulticast mode [ 1368.498854][ T9678] bridge_slave_1: left promiscuous mode [ 1368.534594][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.118923][ T9678] bridge_slave_0: left allmulticast mode [ 1369.183966][ T9678] bridge_slave_0: left promiscuous mode [ 1369.201715][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.556417][T20200] xt_ecn: cannot match TCP bits for non-tcp packets [ 1369.573181][T18017] Bluetooth: hci1: command tx timeout [ 1370.735277][ T9678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.134018][ T9678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.482589][ T9678] bond0 (unregistering): Released all slaves [ 1371.653289][T18017] Bluetooth: hci1: command tx timeout [ 1373.831776][T20126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.875089][T20126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.954259][T20126] bridge_slave_0: entered allmulticast mode [ 1373.987211][T20126] bridge_slave_0: entered promiscuous mode [ 1374.037126][T20126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.059210][T20126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.090768][T20126] bridge_slave_1: entered allmulticast mode [ 1374.135158][T20126] bridge_slave_1: entered promiscuous mode [ 1375.575172][ T9678] hsr_slave_0: left promiscuous mode [ 1375.609716][ T9678] hsr_slave_1: left promiscuous mode [ 1375.664272][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.721001][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.814682][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.825722][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.035942][ T9678] veth1_macvtap: left promiscuous mode [ 1376.047157][ T9678] veth0_macvtap: left promiscuous mode [ 1376.055639][ T9678] veth1_vlan: left promiscuous mode [ 1376.061221][ T9678] veth0_vlan: left promiscuous mode [ 1378.076161][ T9678] team0 (unregistering): Port device team_slave_1 removed [ 1378.660536][ T9678] team0 (unregistering): Port device team_slave_0 removed [ 1378.939406][T20300] xt_ecn: cannot match TCP bits for non-tcp packets [ 1379.450904][T20126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.495464][T20072] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1379.574048][T20072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1379.612327][T20072] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1379.756075][T20072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1379.919719][T20126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.022021][T20072] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1380.178220][T20072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1380.230095][T20072] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1380.268070][T20072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1380.530698][T20126] team0: Port device team_slave_0 added [ 1380.755202][T20126] team0: Port device team_slave_1 added [ 1381.170818][T20126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.198766][T20126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.287162][T20126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.337123][T20126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.381332][T20126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.438066][T20126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.509153][T20328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1381.618444][T20126] hsr_slave_0: entered promiscuous mode [ 1381.634220][T20126] hsr_slave_1: entered promiscuous mode [ 1381.640646][T20126] debugfs: 'hsr0' already exists in 'hsr' [ 1381.652101][T20126] Cannot create hsr debugfs directory [ 1381.660422][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1383.271325][ T9678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.536091][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3487'. [ 1383.847029][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 1386.298207][ T9678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.454415][T20072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.480297][T20389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.551703][T20389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.166224][ T9678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.197155][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1387.243118][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1387.256631][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1387.303885][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1387.314818][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1387.334484][ T6820] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1387.398827][T20072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.289298][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.296969][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.440705][ T9678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.665723][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.672996][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.408429][ T5637] Bluetooth: hci3: command tx timeout [ 1391.485382][ T5637] Bluetooth: hci3: command tx timeout [ 1391.537042][ T9678] bridge_slave_1: left allmulticast mode [ 1391.557741][T20454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1391.569408][ T9678] bridge_slave_1: left promiscuous mode [ 1391.617133][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.654724][ T9678] bridge_slave_0: left allmulticast mode [ 1391.690979][ T9678] bridge_slave_0: left promiscuous mode [ 1391.712437][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.761152][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1392.971756][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3498'. [ 1393.338217][ T9678] hsr_slave_0: left promiscuous mode [ 1393.359307][ T9678] hsr_slave_1: left promiscuous mode [ 1393.365477][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.374211][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.487788][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.548112][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.567254][ T5637] Bluetooth: hci3: command tx timeout [ 1393.655346][ T9678] veth1_macvtap: left promiscuous mode [ 1393.665868][ T9678] veth0_macvtap: left promiscuous mode [ 1393.684604][ T9678] veth1_vlan: left promiscuous mode [ 1393.734497][ T9678] veth0_vlan: left promiscuous mode [ 1395.521981][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3500'. [ 1395.643103][ T5637] Bluetooth: hci3: command tx timeout [ 1395.677110][T20491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.714437][T20491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.920197][ T9678] team0 (unregistering): Port device team_slave_1 removed [ 1395.978626][ T9678] team0 (unregistering): Port device team_slave_0 removed [ 1396.412662][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1396.483584][T20126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1396.553339][T20126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.632310][T20072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.657535][T20126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1396.702412][T20126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.711058][T20126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1396.760845][T20126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1396.977377][T20126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1397.044766][T20126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.168310][T20400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.220951][T20400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.269104][T20400] bridge_slave_0: entered allmulticast mode [ 1397.296788][T20400] bridge_slave_0: entered promiscuous mode [ 1397.483408][T20400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.535110][T20400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.542374][T20400] bridge_slave_1: entered allmulticast mode [ 1397.624934][T20400] bridge_slave_1: entered promiscuous mode [ 1397.898452][T20400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.959769][T20400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.731596][ T9678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.882023][T20400] team0: Port device team_slave_0 added [ 1398.930642][T20400] team0: Port device team_slave_1 added [ 1399.420285][T20533] xt_ecn: cannot match TCP bits for non-tcp packets [ 1399.524311][ T9678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.616250][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1399.692324][T20400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.744666][T20400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.852964][T20400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.055432][T20400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.082878][T20400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.183409][T20400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.528988][ T9678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.750305][T20072] veth0_vlan: entered promiscuous mode [ 1400.939312][ T9678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.118241][T20400] hsr_slave_0: entered promiscuous mode [ 1401.136097][T20400] hsr_slave_1: entered promiscuous mode [ 1401.150113][T20400] debugfs: 'hsr0' already exists in 'hsr' [ 1401.167964][T20400] Cannot create hsr debugfs directory [ 1401.339058][T20072] veth1_vlan: entered promiscuous mode [ 1401.998888][T20552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3506'. [ 1402.065309][T20126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.224434][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3506'. [ 1402.532129][ T9678] bridge_slave_1: left allmulticast mode [ 1402.553091][ T9678] bridge_slave_1: left promiscuous mode [ 1402.573737][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.614270][ T9678] bridge_slave_0: left allmulticast mode [ 1402.632993][ T9678] bridge_slave_0: left promiscuous mode [ 1402.649099][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.368305][T20569] xt_ecn: cannot match TCP bits for non-tcp packets [ 1403.472728][ T9678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.549889][ T9678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.576591][ T9678] bond0 (unregistering): Released all slaves [ 1403.772321][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1404.583531][ T9678] hsr_slave_0: left promiscuous mode [ 1404.592506][ T9678] hsr_slave_1: left promiscuous mode [ 1404.618360][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.682985][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.759985][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.768803][ T9678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.829023][ T9678] veth1_macvtap: left promiscuous mode [ 1404.842381][ T9678] veth0_macvtap: left promiscuous mode [ 1404.849080][ T9678] veth1_vlan: left promiscuous mode [ 1404.854338][ T9678] veth0_vlan: left promiscuous mode [ 1406.258505][ T9678] team0 (unregistering): Port device team_slave_1 removed [ 1406.310370][ T9678] team0 (unregistering): Port device team_slave_0 removed [ 1406.349818][T20594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.393165][T20594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.783904][T20126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.815115][T20072] veth0_macvtap: entered promiscuous mode [ 1407.310136][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1407.351523][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1407.366335][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.373527][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.480897][T20072] veth1_macvtap: entered promiscuous mode [ 1407.562071][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.569318][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.150932][T20072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.215762][T20072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.570813][ T3285] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.621130][ T3285] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.672559][ T3285] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.072281][ T3285] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.416357][T20126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.588391][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.661065][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.862673][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.926048][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.598084][T20126] veth0_vlan: entered promiscuous mode [ 1410.925738][T20126] veth1_vlan: entered promiscuous mode [ 1411.541797][T20400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1411.644941][T20400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1411.768580][T20126] veth0_macvtap: entered promiscuous mode [ 1411.826111][T20400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1411.937839][T20400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1411.994555][T20400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1412.069195][T20400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1412.105205][T20400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1412.164739][T20400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1412.223164][T20126] veth1_macvtap: entered promiscuous mode [ 1412.486672][T20126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.619584][T20126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.758033][ T6822] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.810846][ T6822] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.867082][ T6822] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.966811][ T6822] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.549366][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.604720][T20400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.614837][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.709287][T20400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.904145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.912096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.036909][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.062835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.072535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.095062][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.198285][T20400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1414.456794][T20400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.006524][T20400] veth0_vlan: entered promiscuous mode [ 1415.312442][T20400] veth1_vlan: entered promiscuous mode [ 1416.131309][T20400] veth0_macvtap: entered promiscuous mode [ 1416.377083][T20400] veth1_macvtap: entered promiscuous mode [ 1416.780834][T20400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.884930][T20400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.991524][ T6822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.000377][ T6822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.065240][ T6822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.209322][ T6822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.786800][ T6822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.826103][ T6822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.136264][ T9678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.188301][ T9678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.494458][T20492] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1418.716257][T20492] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1418.744059][T20492] usb 9-1: config 0 has no interface number 0 [ 1418.751425][T20492] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1418.799990][T20492] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1418.879712][T20492] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1418.934512][T20708] xt_ecn: cannot match TCP bits for non-tcp packets [ 1418.989820][T20492] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1419.083305][T20492] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1419.194456][T20492] usb 9-1: Product: syz [ 1419.271565][T20492] usb 9-1: SerialNumber: syz [ 1419.325634][ T6813] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1419.409293][T20492] usb 9-1: config 0 descriptor?? [ 1419.516112][T20492] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1419.700973][T20492] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input68 [ 1419.799957][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.807975][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.815855][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.823508][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.831136][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.838913][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.846549][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.854211][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.861880][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.869511][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1419.928486][T20492] usb 9-1: USB disconnect, device number 3 [ 1419.934926][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1420.331229][T20492] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1423.186473][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.192966][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.400262][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1423.737846][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1429.143143][ T808] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1429.369691][ T808] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1429.431492][ T808] usb 9-1: config 0 has no interface number 0 [ 1429.491407][ T808] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1429.620918][ T808] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1429.698288][ T808] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1429.745858][ T808] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1429.768647][ T808] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1429.783079][ T808] usb 9-1: Product: syz [ 1429.790630][ T808] usb 9-1: SerialNumber: syz [ 1429.831385][ T808] usb 9-1: config 0 descriptor?? [ 1429.869102][ T808] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1429.947747][ T808] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input69 [ 1430.094828][ C0] cm109_urb_ctl_callback: 255 callbacks suppressed [ 1430.094855][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1430.098813][T20492] usb 9-1: USB disconnect, device number 4 [ 1430.101434][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1430.277881][T20492] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1432.023450][T20833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1432.226460][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1436.055256][T20878] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3538'. [ 1436.246516][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3538'. [ 1436.737901][T20878] bond0: (slave bond_slave_1): Releasing backup interface [ 1440.249331][T20912] xt_ecn: cannot match TCP bits for non-tcp packets [ 1445.114576][T20959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1445.453295][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1445.496114][T20961] xt_ecn: cannot match TCP bits for non-tcp packets [ 1451.323437][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1452.022940][T20618] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1452.223125][T20618] usb 4-1: Using ep0 maxpacket: 32 [ 1452.349625][T20618] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1452.366167][T21026] syz.3.3558 (21026): drop_caches: 2 [ 1452.530760][T20618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.618181][T20618] usb 4-1: Product: syz [ 1452.701410][T20618] usb 4-1: Manufacturer: syz [ 1452.751433][T20618] usb 4-1: SerialNumber: syz [ 1452.774642][T20618] usb 4-1: config 0 descriptor?? [ 1452.831072][T20618] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1452.874870][T20618] dvb-usb: bulk message failed: -22 (4/0) [ 1452.920460][T20618] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1452.993509][T20618] dvb-usb: bulk message failed: -22 (5/0) [ 1453.048250][T20618] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1453.157225][T20618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1453.291090][T20618] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1453.355700][T20618] usb 4-1: media controller created [ 1453.520268][T20618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1453.823070][T20618] usb 4-1: selecting invalid altsetting 3 [ 1453.868101][T20618] ttusb2: set interface to alts=3 failed [ 1454.354578][T20618] DVB: Unable to find symbol tda10086_attach() [ 1454.420343][T20618] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1454.549468][T20618] dvb-usb: bulk message failed: -22 (4/0) [ 1454.589020][T20618] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1454.653913][T20618] dvb-usb: bulk message failed: -22 (5/0) [ 1454.701991][T20618] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1454.780454][T20618] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1455.572357][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1456.209026][T21072] syz.7.3564 (21072): drop_caches: 2 [ 1458.074909][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1458.574265][T21100] xt_ecn: cannot match TCP bits for non-tcp packets [ 1459.191753][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1459.566739][T21110] syz.7.3569 (21110): drop_caches: 2 [ 1460.935201][T21120] xt_ecn: cannot match TCP bits for non-tcp packets [ 1462.099432][T21130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.183678][T21130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.782020][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1467.869036][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1468.114737][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1469.090484][T21192] xt_ecn: cannot match TCP bits for non-tcp packets [ 1472.711425][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1472.777676][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1473.429366][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.521422][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.303751][T21261] xt_ecn: cannot match TCP bits for non-tcp packets [ 1477.591423][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1477.780118][T21267] xt_ecn: cannot match TCP bits for non-tcp packets [ 1480.097131][T21294] syzkaller0: entered promiscuous mode [ 1480.125408][T21294] syzkaller0: entered allmulticast mode [ 1481.563364][T18017] Bluetooth: hci2: command 0x0406 tx timeout [ 1482.390847][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1483.325041][ T6813] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1484.134537][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3598'. [ 1484.312139][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1484.624472][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.642818][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.316830][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1486.686209][T18017] Bluetooth: hci1: command 0x0406 tx timeout [ 1488.993119][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3603'. [ 1491.127766][T21408] xt_ecn: cannot match TCP bits for non-tcp packets [ 1492.330613][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1496.199287][T18017] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1496.233438][T18017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1496.247713][T18017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1496.265335][T18017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1496.285304][T18017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1497.946653][T21484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.014434][T21484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.363321][T18017] Bluetooth: hci4: command tx timeout [ 1499.220929][T21495] xt_ecn: cannot match TCP bits for non-tcp packets [ 1500.444742][T18017] Bluetooth: hci4: command tx timeout [ 1500.536058][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1502.523313][T18017] Bluetooth: hci4: command tx timeout [ 1503.088365][T21461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.141396][T21461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.194675][T21461] bridge_slave_0: entered allmulticast mode [ 1503.244172][T21461] bridge_slave_0: entered promiscuous mode [ 1503.333921][T21461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.383029][T21461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.437322][T21461] bridge_slave_1: entered allmulticast mode [ 1503.500070][T21461] bridge_slave_1: entered promiscuous mode [ 1503.929746][T21461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.092670][T21461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.596006][T21461] team0: Port device team_slave_0 added [ 1504.613081][T18017] Bluetooth: hci4: command tx timeout [ 1504.704812][T21461] team0: Port device team_slave_1 added [ 1505.361397][ T6816] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.674789][T21461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.719405][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.828793][T21461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.898521][T21461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.942904][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.093687][T21461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.542095][T21564] xt_ecn: cannot match TCP bits for non-tcp packets [ 1506.801669][ T6816] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.930676][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.955649][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.277281][T21461] hsr_slave_0: entered promiscuous mode [ 1508.318670][T21461] hsr_slave_1: entered promiscuous mode [ 1508.354445][T21461] debugfs: 'hsr0' already exists in 'hsr' [ 1508.370350][T21461] Cannot create hsr debugfs directory [ 1509.365068][ T6816] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.495438][ T6816] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.083624][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1512.285449][T18017] Bluetooth: hci3: command 0x0406 tx timeout [ 1514.463379][ T6816] bridge_slave_1: left allmulticast mode [ 1514.500265][ T6816] bridge_slave_1: left promiscuous mode [ 1514.560901][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.647577][ T6816] bridge_slave_0: left allmulticast mode [ 1514.666292][ T6816] bridge_slave_0: left promiscuous mode [ 1514.686467][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.324584][ T30] INFO: task kworker/0:4:13297 blocked for more than 143 seconds. [ 1515.337787][ T9678] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1515.378242][ T30] Tainted: G L syzkaller #0 [ 1515.483579][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1515.620618][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1515.632564][ T30] task:kworker/0:4 state:D stack:22312 pid:13297 tgid:13297 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1515.902660][ T30] Workqueue: usb_hub_wq hub_event [ 1516.020132][ T30] Call Trace: [ 1516.050385][ T30] [ 1516.061661][T20618] usb 1-1: USB disconnect, device number 88 [ 1516.099763][T10111] usb 4-1: USB disconnect, device number 6 [ 1516.109124][ T30] __schedule+0x1821/0x5740 [ 1516.129863][ T30] ? __pfx___schedule+0x10/0x10 [ 1516.170491][ T30] ? schedule+0x90/0x360 [ 1516.192666][ T30] schedule+0x164/0x360 [ 1516.219205][ T30] schedule_timeout+0xc3/0x2c0 [ 1516.222531][T13297] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1516.234558][ T30] ? __pfx__prb_read_valid+0x10/0x10 [ 1516.243348][T10107] usb 6-1: USB disconnect, device number 61 [ 1516.284215][ T30] ? up+0xe4/0x160 [ 1516.287993][ T30] ? __pfx_up+0x10/0x10 [ 1516.292161][ T30] ? __pfx___schedule+0x10/0x10 [ 1516.361810][ T30] console_unlock+0x150/0x1c0 [ 1516.390560][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1516.447926][ T30] ? trace_sched_exit_tp+0x3a/0x130 [ 1516.493982][ T30] ? __pfx___schedule+0x10/0x10 [ 1516.516104][ T30] ? schedule+0x90/0x360 [ 1516.524789][T10111] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1516.569580][ T30] ? schedule+0x90/0x360 [ 1516.614886][ T30] ? schedule+0x164/0x360 [ 1516.674313][T10107] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1516.728366][ T30] ? psi_group_change+0xab8/0x1050 [ 1516.744035][T20618] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1516.762353][ T30] ? __schedule+0x2a66/0x5740 [ 1516.792425][ T30] ? __schedule+0x17ef/0x5740 [ 1516.803956][ T30] ? __schedule+0x1821/0x5740 [ 1516.835682][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1516.850049][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.870539][ T30] ? wg_packet_decrypt_worker+0xd01/0xd80 [ 1516.883236][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1516.910107][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1516.965484][ T30] ? wg_packet_decrypt_worker+0xd01/0xd80 [ 1517.032402][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1517.060351][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.091400][ T30] ? bad_range+0x8b/0x2c0 [ 1517.110196][ T30] ? lock_acquire+0x106/0x350 [ 1517.128789][ T30] ? bad_range+0x8b/0x2c0 [ 1517.148594][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.173348][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1517.185688][ T30] ? rcu_is_watching+0x15/0xb0 [ 1517.190542][ T30] ? psi_group_change+0xab8/0x1050 [ 1517.202601][ T30] ? __schedule+0x2a66/0x5740 [ 1517.222913][ T30] ? __schedule+0x17ef/0x5740 [ 1517.227671][ T30] ? __schedule+0x1821/0x5740 [ 1517.244308][ T30] ? __pfx___schedule+0x10/0x10 [ 1517.249267][ T30] ? schedule+0x90/0x360 [ 1517.263504][ T30] ? schedule+0x164/0x360 [ 1517.267972][ T30] ? worker_thread+0xc21/0xfc0 [ 1517.272835][ T30] ? kthread+0x389/0x470 [ 1517.299073][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1517.304283][ T30] ? __pfx_kthread+0x10/0x10 [ 1517.318043][ T30] ? ret_from_fork+0x514/0xb70 [ 1517.328605][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.334686][ T30] ? __switch_to+0xc79/0x1410 [ 1517.341516][ T30] ? __pfx_kthread+0x10/0x10 [ 1517.351767][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1517.365201][ T30] [ 1517.385610][ T30] [ 1517.385610][ T30] Showing all locks held in the system: [ 1517.416677][ T30] 1 lock held by rcu_preempt/16: [ 1517.522957][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 1517.542826][ T30] 1 lock held by khungtaskd/30: [ 1517.548532][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1517.583120][ T30] 2 locks held by kworker/0:2/808: [ 1517.592955][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1517.605631][ T30] #1: ffffc90004a1fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1517.662305][ T30] 2 locks held by getty/5384: [ 1517.676347][ T30] #0: ffff8880360990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1517.778944][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1517.816596][ T30] 5 locks held by kworker/u8:14/6816: [ 1517.834743][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1517.867673][ T30] #1: ffffc9000367fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1517.897761][ T30] #2: ffffffff8fdc2628 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1517.912180][ T30] #3: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1517.923199][ T30] #4: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1517.934184][ T30] 3 locks held by kworker/u8:16/6820: [ 1517.939564][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1517.957370][ T30] #1: ffffc90005197c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1517.971908][ T30] #2: ffff88806a9c0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1517.982258][ T30] 3 locks held by kworker/u8:18/6822: [ 1518.002996][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.021201][ T30] #1: ffffc90005ae7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.034004][ T30] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1518.046009][ T30] 3 locks held by kworker/1:16/10109: [ 1518.051401][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.071112][ T30] #1: ffffc90006d1fc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.082874][ T30] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1518.103063][ T30] 4 locks held by syz.5.3243/18851: [ 1518.109260][ T30] #0: ffff88807f71cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1518.130167][ T30] #1: ffff88807f71c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1518.143070][ T30] #2: ffffffff8ff54aa0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1518.154738][ T30] #3: ffff8880936dc2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1518.165511][ T30] 3 locks held by kworker/1:1/20492: [ 1518.173379][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1518.195403][ T30] #1: ffffc90003617c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1518.222866][ T30] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1518.236167][ T30] 7 locks held by syz-executor/21461: [ 1518.241660][ T30] #0: ffff888034786410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1518.258730][ T30] #1: ffff88807a651480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1518.270225][ T30] #2: ffff888029afce18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1518.294786][ T30] #3: ffffffff8f6503a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1518.314581][ T30] #4: ffff888056fc5128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1518.332892][ T30] #5: ffff888056fcc258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1518.343088][ T30] #6: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 1518.354695][ T30] 1 lock held by syz.7.3632/21647: [ 1518.361994][ T30] #0: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_add_ifaddr+0x14d/0x3e0 [ 1518.372983][ T30] 2 locks held by syz.3.3633/21653: [ 1518.378225][ T30] 1 lock held by syz.3.3633/21656: [ 1518.383368][ T30] #0: ffff888078d4ac40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1518.422536][ T30] 2 locks held by syz.0.3634/21657: [ 1518.430012][ T30] #0: ffff888056c358d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1518.441920][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1518.455169][ T30] [ 1518.469122][ T30] ============================================= [ 1518.469122][ T30] [ 1518.495701][ T30] NMI backtrace for cpu 1 [ 1518.495737][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.495765][ T30] Tainted: [L]=SOFTLOCKUP [ 1518.495783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.495797][ T30] Call Trace: [ 1518.495805][ T30] [ 1518.495815][ T30] dump_stack_lvl+0xe8/0x150 [ 1518.495846][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1518.495945][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1518.495986][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1518.496016][ T30] sys_info+0x135/0x170 [ 1518.496038][ T30] watchdog+0xfd3/0x1030 [ 1518.496099][ T30] ? watchdog+0x1c9/0x1030 [ 1518.496136][ T30] kthread+0x389/0x470 [ 1518.496165][ T30] ? __pfx_watchdog+0x10/0x10 [ 1518.496194][ T30] ? __pfx_kthread+0x10/0x10 [ 1518.496223][ T30] ret_from_fork+0x514/0xb70 [ 1518.496249][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.496272][ T30] ? __switch_to+0xc79/0x1410 [ 1518.496305][ T30] ? __pfx_kthread+0x10/0x10 [ 1518.496335][ T30] ret_from_fork_asm+0x1a/0x30 [ 1518.496374][ T30] [ 1518.496382][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1518.629110][ C0] NMI backtrace for cpu 0 [ 1518.629132][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.629156][ C0] Tainted: [L]=SOFTLOCKUP [ 1518.629163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.629175][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 1518.629204][ C0] Code: e8 5b 82 fe 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 b7 26 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c 26 86 00 48 c7 c3 d8 c9 3a 93 49 03 1e 48 89 [ 1518.629220][ C0] RSP: 0018:ffffc90000007838 EFLAGS: 00000246 [ 1518.629236][ C0] RAX: 1ffffffff1c4d6f2 RBX: 0000000000000000 RCX: 0000000080000102 [ 1518.629250][ C0] RDX: 0000000000000000 RSI: ffffffff8c28b640 RDI: ffffffff8c28b600 [ 1518.629263][ C0] RBP: ffffffff8176f256 R08: 0000000000000000 R09: 0000000000000000 [ 1518.629275][ C0] R10: ffffc90000007a18 R11: ffffffff81b0f020 R12: 0000000000000002 [ 1518.629293][ C0] R13: ffffffff8e95cca0 R14: ffffffff8e26b790 R15: dffffc0000000000 [ 1518.629307][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 1518.629322][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1518.629335][ C0] CR2: 00007fb48f8187d0 CR3: 000000007fc02000 CR4: 00000000003526f0 [ 1518.629351][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000000000 [ 1518.629362][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1518.629373][ C0] Call Trace: [ 1518.629380][ C0] [ 1518.629388][ C0] lock_acquire+0x5f/0x350 [ 1518.629413][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1518.629462][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.629491][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1518.629512][ C0] unwind_next_frame+0xc3/0x2550 [ 1518.629532][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1518.629557][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1518.629579][ C0] ? irq_exit_rcu+0x9/0x30 [ 1518.629596][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.629624][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1518.629677][ C0] arch_stack_walk+0x11b/0x150 [ 1518.629703][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.629732][ C0] stack_trace_save+0xa9/0x100 [ 1518.629760][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1518.629789][ C0] ? kasan_save_track+0x4f/0x80 [ 1518.629826][ C0] ? kasan_save_track+0x3e/0x80 [ 1518.629852][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1518.629872][ C0] kasan_save_track+0x3e/0x80 [ 1518.629895][ C0] ? kasan_save_track+0x3e/0x80 [ 1518.629919][ C0] ? kasan_save_free_info+0x46/0x50 [ 1518.629939][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1518.629964][ C0] ? slab_free_after_rcu_debug+0x12a/0x220 [ 1518.629984][ C0] ? rcu_core+0x7cd/0x1070 [ 1518.630003][ C0] ? handle_softirqs+0x22a/0x840 [ 1518.630021][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1518.630038][ C0] ? irq_exit_rcu+0x9/0x30 [ 1518.630055][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.630107][ C0] kasan_save_free_info+0x46/0x50 [ 1518.630128][ C0] __kasan_slab_free+0x5c/0x80 [ 1518.630155][ C0] slab_free_after_rcu_debug+0x12a/0x220 [ 1518.630174][ C0] ? rcu_core+0x751/0x1070 [ 1518.630193][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1518.630213][ C0] rcu_core+0x7cd/0x1070 [ 1518.630240][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1518.630267][ C0] handle_softirqs+0x22a/0x840 [ 1518.630293][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1518.630316][ C0] __irq_exit_rcu+0xca/0x220 [ 1518.630335][ C0] irq_exit_rcu+0x9/0x30 [ 1518.630352][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1518.630379][ C0] [ 1518.630386][ C0] [ 1518.630393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1518.630428][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1518.630456][ C0] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1518.630471][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 1518.630489][ C0] RAX: 000000000140c7dd RBX: ffffffff819a958a RCX: 0000000080000001 [ 1518.630503][ C0] RDX: 0000000000000001 RSI: ffffffff8dfacd5d RDI: ffffffff8c28b660 [ 1518.630518][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1518.630532][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1518.630548][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1518.630567][ C0] ? do_idle+0x36a/0x5f0 [ 1518.630599][ C0] default_idle+0x9/0x20 [ 1518.630621][ C0] default_idle_call+0x72/0xb0 [ 1518.630644][ C0] do_idle+0x36a/0x5f0 [ 1518.630673][ C0] ? __pfx_do_idle+0x10/0x10 [ 1518.630704][ C0] cpu_startup_entry+0x43/0x60 [ 1518.630730][ C0] rest_init+0x2de/0x300 [ 1518.630768][ C0] start_kernel+0x38a/0x3e0 [ 1518.630912][ C0] x86_64_start_reservations+0x24/0x30 [ 1518.630964][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1518.630988][ C0] common_startup_64+0x13e/0x147 [ 1518.631026][ C0] [ 1519.129216][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1519.136164][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1519.146894][ T30] Tainted: [L]=SOFTLOCKUP [ 1519.151266][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.161330][ T30] Call Trace: [ 1519.164618][ T30] [ 1519.167555][ T30] vpanic+0x56c/0xa60 [ 1519.171579][ T30] ? __pfx___schedule+0x10/0x10 [ 1519.176441][ T30] ? __pfx_vpanic+0x10/0x10 [ 1519.180959][ T30] panic+0xc5/0xd0 [ 1519.184715][ T30] ? __pfx_panic+0x10/0x10 [ 1519.189137][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1519.194556][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1519.200747][ T30] watchdog+0x102c/0x1030 [ 1519.205104][ T30] ? watchdog+0x1c9/0x1030 [ 1519.209539][ T30] kthread+0x389/0x470 [ 1519.213620][ T30] ? __pfx_watchdog+0x10/0x10 [ 1519.218307][ T30] ? __pfx_kthread+0x10/0x10 [ 1519.222917][ T30] ret_from_fork+0x514/0xb70 [ 1519.227539][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1519.232654][ T30] ? __switch_to+0xc79/0x1410 [ 1519.237374][ T30] ? __pfx_kthread+0x10/0x10 [ 1519.242013][ T30] ret_from_fork_asm+0x1a/0x30 [ 1519.246833][ T30] [ 1519.250807][ T30] Kernel Offset: disabled [ 1519.255141][ T30] Rebooting in 86400 seconds..