last executing test programs: 26m13.227804743s ago: executing program 32 (id=336): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x0, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x0, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x8}, {0x81, 0x3, 0x6, '\x00', 0x5}, {0xb, 0x4d, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0xdb, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1, '\x00', 0x2}, {0x68, 0x8, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xc, '\x00', 0x2}, {0xa, 0x2, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x39}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x9, 0x7f, 0xa0, '\x00', 0x47}]}}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r0, 0xb11, 0x4, 0x25dfdbfe, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8091}, 0xa000) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000100), 0x5042) 20m3.806610328s ago: executing program 33 (id=1897): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) close(r0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 7m16.726612731s ago: executing program 5 (id=4883): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) cachestat(r0, &(0x7f0000000080)={0x8080008, 0xffffffffffffff5b}, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x5, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0x800, 0x7) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) 7m13.571482611s ago: executing program 5 (id=4887): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$setown(r0, 0x8, r1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x4) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x2, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) accept4(r2, &(0x7f0000000240)=@ieee802154={0x24, @short}, &(0x7f00000002c0)=0x80, 0x267ac7a065254c3b) 7m10.599541831s ago: executing program 5 (id=4898): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c004) 7m10.5615762s ago: executing program 5 (id=4899): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x28, 0x2, 0x200, "8a00000000b8af3e8f76f108000939492ff7e7ffffffffff4bee2000", 0x4745504d}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x28, 0x2, 0x200, "8a00000000b8af3e8f76f108000939492ff7e7ffffffffff4bee2000", 0x4745504d}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat64(r0, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae22c48b12864656f4"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3400000002030000000000000000000003000001080005400000000008000f000000002008000440000000180800054000000000d85f16ae22c48b12864656f4"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) syz_io_uring_setup(0x1619, &(0x7f0000001500)={0x0, 0x43d3, 0x40, 0x1, 0x48, 0x0, r0}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) (async) syz_io_uring_setup(0x1619, &(0x7f0000001500)={0x0, 0x43d3, 0x40, 0x1, 0x48, 0x0, r0}, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022cbd7000fedbdf2512000000080007000300000018000180140002000000000000000000000000000000000008000800f7ffff"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x800) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={0x0}) r4 = socket(0x1, 0x803, 0xfffffffc) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x67) (async) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x67) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="0000000014fd4428c786266d49af87ac06b1e55fed769cd6aaca141ea2795faadda366de01ae16a3eb3b1415567fcc1f1d9256b791651a36f5cb59f84333a3896926ff34013e03ca3b8d61827a58472669ff9db7a100a428ce76c216d7ef56ffa1467200000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250e000000380003800800030001000000060007004e20000014000200776c616e300000000000000000000000060007004e240000060004008d0700000800040000040000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt(r1, 0x5, 0x40, &(0x7f0000000440)="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", 0xfe0) (async) setsockopt(r1, 0x5, 0x40, &(0x7f0000000440)="8c008b740a25b51ec50795e4098bc9d8c2446d84d66a217d268a84ef1b25520153697c165c56a804e2989cf60662c180415a9455f5fa828cbf90f7a328fc587471a15515587d580675519f13e6e2f00abf6c14059b86e41687bee23aa349f4eed6fcb24ceb24c76d52833b9212ce5e69ac6a4df0e9443e29be5a02818f8780d7cdcacdbb93d89b4abd7621d11d7482486a3fde0d5c29d6f0ceb2af104594230e263bedff0b3d8ef1db4b8caf52a9c5c9914847d68f84f73bea1704a59cf2e078c284edb54c720773db64d6a989a55124b6b52d9c2cd3bcb3ea7bc1f3c8e9a69e467b0a1f413bc439e0a1ebc2675f8e4ff943b08270f08533cf2bda224d3e5594e2d145e1080e56061971c4804dd5e33642b1fd6b0792db8ea8a0c410cfc25496bae546ef66b2cbc5525a25c873d6852363ab6330f64c9bb42f451d3f57499877facd53ded17ad4835574eb674c318f06287af08f74f03bf3d58cd1fd84cd89ef1fe3115233f36c98de5331a25bcd7013886e69cc27996356f527e99f37db0855fbb3710462026d1285089a721f3f810b8f771cd3e648867f9135605dbeb7e0d525a94b6fba3fbda6a209bfe4fe8b978bd3886277ee53c3559e5c110de9717d7eec833446ddf8c2afdb7d5bcd86fe5b9d50a29f689db99fb84e6b91d4b7917d5091be171924b7408a9ffe47a36869eb5eb5de4d2128ad0374e7c2475f94eec062cefa985d011c8941675ef1b06681494900a8a06db57098080a048de2acc050b5fbf7e4f71b6d5cb625df0e6060245805ad88227c376e41da2eb370dae3dc656cba0b657f7245e9e58af74509695a6ec833249be2fb1f3815269f89d2f46b8b1b06b3eefab42a0f00fa6b71da894ea64c348c67e7bd5471922262424dc8aecfc47c0584c522d09e45ef911def02f85b49af900967ffe58f2da37dacc26f77b3f3ace48d75513e4ffbd030494640afc19f4139afe7f59f5644648543632df27a6d8785d54d9bb5c116d8daee24dc48da2ae939731d8b1c22810adefeeb5506d629681d5d334138035d2f703caf4839d9e78f70cc7342faa80e3d4f0e8d378b771299a3de595fb69fdebf7372990859b752ab15d028e1f95874596c048da246fa0cceee5eede0bde3736de1ae1787fde5076a299410cbd7204732e7d2d64906c29e80b8a763b7fca7227b1a76d83a722c5eaf6a8ed570f879b91165199247beee519a7805a4f051255287ea20d6a8d7a1cdcd041ff58c90b8b7a1bf7c409ddde460327b7bcd9a881ac3ed482ab5244ed23270e0357b12bd84cd8b0cd075399b705616036fdae2d368e5a18ee4f8f3ff7edc6d9c7302658c322488a22ecd14ca9fe182538ce2db6237349896289f309e0602dcf052fde7ff0cb63dc17925ffe49ed6dd5b3ed61ff82fa789a4501d2ad61265a085f1437bc7b8949390cdfb67280efe91dbdf86b200a04b17fc340c19cf164a9bfc1bccad220c3d3ad1815b0b85d8a4d5df5cae20a3a834f1b4398a8cfde44aaf6d57fba67f7631deffb565a8054e77c68142b8c80b62c045798a3b3f3565787dcedacf11ba708ee5c3790ac6fbd5fa5947c78ff2fa39e11702157f149108effa3ae5bb14895a2f5614cdcc97f88d9dc5b1fb3b62e946de97af20dc65f5e392e954f7b33cdc6349765d230e9289bb8c3ed560a8c0fba30fc4d0163acfa763a37bb2e66af91be98e842b60d8637e1b85905c97282c758d2d90f97db71bba16d46eea3b49374cf45a97dbe3f04dff63830761b574cd8545fb485bb17c1e5a2e4d66e6c23dbbaf26d2243567bf95ddc9be4a2efa4382cac388c5dcd60dab29c8503841c2d525094405d05b5f62ff933d9ed07049b7826e39e41829f55da4e5afc2dd49fce7ca4324b312ef9f8e9162264d680da09834aadca5a11baefe9f81eddde792f584b3711aa00f5407c2c6b648ff1b5b283986b0993002575d81647e4d800f2a70a8884b6e924d1b90b7c50e9ed6dd5827c579f7fcc711052b54ca7d00f7c659c2c713833179c66a856ae32794644a90b8aeb0e3ffdf63ed365e80bee76af6ccabd1a03ab5b474dd625ef8bef8fd1c8157d6bb1f6d7079a50208b0054ce889af5124b8e52d2fec0c3a1a95001b484feab8d6d2520fe1a2c291073f1f32d3643ddcc8325153d00719d0ea178fb14551d5c0a4102494c860092d5bbe14ba375bbd3060d0b5ef4b2af4aaebd74b0a4ba4c4239d375d3ddd9bf8fa90000695198e226d31b68e2576a6924ff44242bb8d1d1b201ce0faeaae58630dca64a3c8c7d25a511c60ed3e6f356f171527ae807fb8c718a88554bc329d43612091dd01e3fb3628d55c92eed30183b368073d2223606cd8914c3180604787a61cb5aa584e433454ce45ef29dbc6c66ad45a18f4c67908128bd2754376f251a5c59f49a012322460c9692072e4a3dcf8fd5955b940b2be5b9ecbda1bccb7895d77ef00adf237013c6b5f154fc484467299013da3119a85eab40effc3c4de0de99f107893049c469ef4b3369b863fc5d02391faab70a9c4e59dc4d66018a01e53a0927a332cf8373fbac0fab319f3c1e291dad9994a93f2e65dd55ee28045a7abc6a5ee1f7936df0d5be92cb8d4b87fe9479063899d7a44973bb7fb896dd2570e6d4f71902274e058dccc06cc0fe4bf22a3a82e6212f6cc9dd3e62475044c0c7cc33ef0feb8c07a9c3eb1c95a8c8dfda561b3ce7bd15445eeaa43957706fcf7e0584eb7ff006c5d53a3d471e5924fe615377fdcf7c05be4cd88782295caf775c40a5548f6dc586f8dc6fcec1652cafa146c7ce748bb6d5a5ee7790251743c005e5c7ca7d6c96b2266e4e93a6c68e8484123858ed68a4b5fc7b5635cdd60c9b09b3c1701356a6b5c4cfd383f788a2e6477cdc7a4dcde9555f44ed8b216ff73762350e27865a23c549686d7798bd5f5037c4b5e8b784fad4f0efbd92d6a2cbef5ca929727c223fae5179e42038dcf8c7fc240c6c0366e63eeb6e0adf90e5b9749872867c237edda560cc98d0acc9186a34225fd00b6e1f83485690061cf2d19121be1b76265bed0272c6e88d670a0f8f6f7540e493ba37ce418d49cefa7f685878da66749e80af4c176a439690b1d984beb239a09441c1b8c79349dbe1f3df65db17adb47a3c91bac002e75b692cb3a0f8aecb8d5c7aea37118121ab81eb4962b1ba5497dca44f2952fba7967d552f7ef68659a9fca363543b3b316699ab3f08e65f6cddedd1abf9f2d0da58c38a3263484f6550bc8af737de71e737cb56bdcd329161667b60f03f51e5d6e4a97b9db6b737da69bb9176098f26260f246425e537a6c4c0b7eb051eaba6d1129f2ef73308fccd03b395ca8e49a259e05c76cdc761fd2b85ac5d3b501e2691649804e21676d19231232e0b2c0f4d19fed226db0da43d4a0302dae1937ef4563b47ac2effba4f5bb51acf8b1b68402cc6b56b548a4bc9d432ec271838a40010055c45f766ece1e09f0e7624e8bfd2da0c2d6de75a6b93b942b2cb8fc7468463a6ace04fd180159a83e5a9a95b880e752ebbbded7b7d3c9dcb78e88293fb0c9dc7445acb13b8ccf74c54f1f89e040734ff16dd24ad848b61c999f369389e78724fbfcea9a05c6e4d2c59f38ff8d28a5303a572f18eb3eda3e4be7201f0143e30b8acf8065f040a5fe5f23246961dd975fc0bfd3b93ac8ef257c64253ac77ddc9dcd5b2e8b9f7600fb2396c90f19a01ecaee89bba00f6da6ce05a5a4b9f4e2d2641790f6d05343e67795385a28aa4fba1b2c48f3c444b74f9188b46f354947cb4a2ac318702c25a15f187fdbfd2733c972cee139b8ba8e3c1d7d74a6ddc855c605593ae3340ae5835e799d2660396beefb0fb05ba9fd9735e041ddc2b95b558a386c545d81b7ccb63c4a0c24ed81de68a70997e71618fab9bb0efd2ac1c22709bec38cb4d5cf0be113175a0a6c41144cb8836bca333fe1f3185cd044e0008579dc5b0e051e36fbe2c061b5bbc30dbd85464438f2484b80a22c768ebae4ffbb9e5cc205913fa3d7f6b005fa8b9137145e9c2a3e65ab80958a23c9a316b9991c56ff3513b6c322a0628eefb39969ed7a934637814bbdf09643ded83d56693d2645ab0292b0ef2505c3b296b51922a112564e19826ccafa6a5a4e2da43b504708be05b3e6245f37c25dea4b9f140828aba8bd906d216beb9872adddc9d0c5b89444f264bd546947865e7756da1c8b77edf4cccdc5165953dd9edd234d522743a281377b5dd1c21617ba4813219082ad2cf5785ada0537c48c6ce669f9255cddc7421d22cc86e3bb0eb50a6807aee145c4f3741478d559926d4e10d689dd95ac4315a27ce3e138025debe400bf1ecfdd2d253cb33984acd771900eed1ab2302b54f8ef1549360b49a429e18610247265e70e8a18a1dd48126db3ae3e8e24cb4200f0d3e1d6f0a138500a4f73e82cf7fa0c6c486d075d8f0cd9bdfc2e26472250759f8f42211b5183d469087d103ce391e356800332ab9c2dff430f9ab7d41a66851ee01d99e85c0a9f68b971520e9d2ddf687ec487a05f2827e7da4e70dadc8504487519bff9c1e2eb939544a7d9ea66d65f337c205d63d7ed55641dfa93106e4a520b5cc396699d3a5433167e75fd77fdbeae806f22167a65a842fd8357d9ca79771f3b734a315d66ec856644f64d8fa63910fe5b844071f72b337f0fe576360bc94daef8ace03e15cbc8aefce917009a3e2452d88cdfd0383e2cc2c2797a256866929011bb3c788daddb1b1107340e94fb0286fc5f4e06026037deb0d1e6996ea5d116cd76ad54f480cb0849fa65df8fb9743eab092f822c68661fb7c92c7c73e9c8577225938bef9a1eb1e9ea55e0d5bbe4c8356967d12601e09737f53c9f2f3f198594714e7324b0490925490b2ec521481e834569f294c3325c880ca7b984de9d927b4bc2ff8bb6d78de8dac756194a80f6657ce95725ca6bd39a101610ac8161c52c0f82699a9fec1a361d3423c4996b8dc98e90d3f78882d851cebd0536037194a4cf5ad8d84ff4e2128b7f857236088d5cde36cad013ca4e370aafe1d4989ece52c5cbc7d06e810d9c9a5d642bd79713c55100bddcf3ef1501242cb982d2ba82239aa2f68a80524e524526a71ae0c16c95497fc9e47417d4416de4fb51b11dce0ddf1a5dbc0dc83e8c9217aa8de3ba4aeb26081aa3045755e6dfa6a9f431365820e40c8d6e1169263e87a75aa2af9c02db1ffd041bfd8738641915a9d8c5d12dfe41b30bfa0787f0bbaa5a24aeba58ba63dd83bc27d2eed72df08b0c1f98031e0e247eb9fce4361b897f06b425cc4ba5ef0a579cbc87e4fed50b2a3cf5a98da212b600bec12e487c107ea2f9672c849371c83d82acaa3aa3ee5083b942a4b705762698303cb1fad4e6effb9c6db5c7f93403f781c0b29e65bcee1183cee850c7871ec0225d66587127217185410714bf2bb69cb91c358b7ca1ac08a7b636345ba92fef3b1110096d8bfe9c2a7830522aa43914089fcd7ed5a52b0fa01f3a1b34b7c7a7e5b56ada5ccb8efc8b3561b078534d511188ef8dd72403c82274da91b2f6cb641ee66bb2543efde041e719830ee4ffb444cc9ad32b9fb9ac0fc13540aebd17978bb2f61898409928aaa4da4bcd8d4d47b66b32e538c2a244c9ca80d025311032773df2db38d293d01ac594d7ae283ea7ab226303eee4b6fb799eed23becb82954636da39cde92aeb00f8da72c20b798726bfa1c67f714d1ed23981b11904bf3c6232f6b35fecfa", 0xfe0) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3) (async) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x3) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2700000001060101000000000000000001000003"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000004) 7m9.682560466s ago: executing program 5 (id=4902): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1e8, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x49ac25054474ad3e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40040}, 0x24000801) sendmmsg$sock(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003100)="0100000003000000640000000000003f420f000000000000020f580000000000000000000000000001000000000000000100000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xf}}, 0xe4) write(r1, &(0x7f0000000140), 0x1111) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4080) 7m9.180877824s ago: executing program 5 (id=4904): socket$alg(0x26, 0x5, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r2 = socket$inet(0x2, 0x1, 0x244) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) (async) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0008"], 0x4a) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, 0x0, 0x20008848) (async) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) listen(0xffffffffffffffff, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) (async) write$binfmt_script(r7, 0x0, 0x0) 7m8.881382632s ago: executing program 34 (id=4904): socket$alg(0x26, 0x5, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r2 = socket$inet(0x2, 0x1, 0x244) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) (async) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005000c0008"], 0x4a) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, 0x0, 0x20008848) (async) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) listen(0xffffffffffffffff, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) (async) write$binfmt_script(r7, 0x0, 0x0) 6m16.390922005s ago: executing program 2 (id=5131): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200"}) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) dup(r4) r5 = dup(r4) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x5, "8a6035ecc42317afad01009731ac3872b8dbe6000600", 0xffffffffffffffff}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(0xffffffffffffffff, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@weak_handle, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/81, 0x51, 0x2, 0xc}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1c}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff00000000000000020000000000000000035700", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r11}) dup(r0) pipe2$9p(&(0x7f0000000000), 0x100080) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1) r14 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r13, 0x4020aed2, &(0x7f0000000000)={0x200000, 0x113000, 0x8}) ioctl$KVM_IOEVENTFD(r13, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r14}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) 6m15.347882086s ago: executing program 2 (id=5134): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2076) ppoll(&(0x7f0000001080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x3, 0x2, 0xd, 0x1c07, 0x2f, "342d3f083860de2a1f98d62fb95ceaf091f1a0", 0x5, 0xa4}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90f, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x14e1, 0x10, 0x3, 0x400b2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4481, 0x440d, 0x1, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9406, 0x1000, 0xfffffffe, 0x2000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x1, 0x35a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1000, 0x1, 0x5b, 0x0, r4}}], 0x4, &(0x7f0000000540)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r8, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6m13.982590347s ago: executing program 2 (id=5139): socket(0x10, 0x803, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x5) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x48850) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0xb}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) pipe(&(0x7f0000000080)) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000180)={[0x800067a, 0x4d, 0xf3b8, 0x0, 0x1001, 0x3, 0x4002004c4, 0x1000, 0x0, 0x97, 0x11, 0x0, 0x3, 0x4, 0x0, 0x2], 0xeeee8000, 0x200400}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 6m12.517483158s ago: executing program 2 (id=5141): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffb}, 0x4) r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='=QAAAAAAAAAAAAAAABAAA=AAAAAAAAAAAAAAAA+=\x00', 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 6m11.495632377s ago: executing program 2 (id=5142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast2, 0x2, 0x6, 0xd1}}]}, 0x38}}, 0x4000800) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffff8) syz_usb_control_io(r1, &(0x7f0000000040)={0xffffff52, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 6m9.589203701s ago: executing program 2 (id=5148): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00b000002000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) write$snapshot(r0, 0x0, 0x20) 5m54.510996824s ago: executing program 35 (id=5148): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00b000002000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) write$snapshot(r0, 0x0, 0x20) 5m0.547458542s ago: executing program 6 (id=5406): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='**:\x00', 0x200, &(0x7f0000000040)={@align=0x6, {0xfa7f, 0x8, 0x9, 0x7fffffffffffffff}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x748}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x10000, 0x7, 0x100, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x2}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x1, '\x00', 0x0, r0, 0x2, 0x1, 0x2}, 0x50) r3 = dup3(r0, r2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000007, 0x30, r4, 0x1d4000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x101, 0x8}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x4, 0x25000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x6, 0x8, 0x8, 0xac, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x7800, 0x1800000, 0xad}}) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x8, 0x400000) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000500)={0x4da, 0xc0000103, &(0x7f0000000400)="dd56961d95791fc4b66f12091bb0414c50c5f25fcc23ff0bb1d9bb36bb", &(0x7f0000000440)="0f04ae8a2041097c7a25294af9b04d96d01c6ac0cc71ac3d3ed0bbc8c74b89d2b4cc6dcb0ab92888496dd10b24e86e57eee5c8ebcc111d07383a16e1bc919ec2208d4907e55b19ebac3f6e333efb0b1e4f6fae8a7408954b7cdde6eb899ebcd82fa5ba454dd85037998a44732571a6dc6f1b578a806abc479afe22cbd55a4b1890bbc1417f95a95794c378a4bad8812e7a873fe07ae2b204f4478054918b73a4742b7618b57dee80bf", 0x1d, 0xa9}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x7, 0x3c, 0x9, 0x48042, r0, 0x0, '\x00', r5, r0, 0x2, 0x4, 0x1, 0xf, @value=r3}, 0x50) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000005c0)={0x2021c9513c4a1e5e, 0x2, 0x8}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000600)={{0xffc, 0x10000, 0xe, 0x7, 0x4, 0x9, 0x0, 0xb6, 0x7f, 0xf, 0x0, 0x6}, {0xeeef0000, 0x100000, 0xa, 0xe5, 0xf, 0x5, 0xff, 0x6, 0x3, 0x6, 0x1, 0x9}, {0x30000, 0x8080000, 0x4, 0x4, 0x0, 0x3, 0xf9, 0x3, 0x80, 0x4, 0x4, 0xb6}, {0x30000, 0x33371004, 0x9, 0x8, 0x94, 0x2, 0x1, 0x10, 0x7, 0x52, 0xb, 0x4}, {0x7000, 0x70000, 0x8, 0xb0, 0x5, 0x0, 0x6, 0x9, 0x2, 0x5, 0x8}, {0x5adda61efeba70c1, 0x3000, 0xd, 0x4, 0x7, 0x3, 0x1f, 0xd6, 0x9, 0x7, 0x7c, 0x1}, {0xffc, 0xb000, 0x4, 0x4, 0x97, 0x7, 0xe, 0x3, 0x7, 0x3b, 0x27, 0x6}, {0xa000, 0x58000, 0x0, 0xf3, 0xdb, 0x7, 0x2, 0x1, 0xff, 0x7, 0x6, 0xb}, {0xeeee0000, 0x1}, {0x6000, 0x436d}, 0x80000004, 0x0, 0x1ffb, 0x200, 0x2, 0x100, 0x3000, [0x1, 0x3, 0x7, 0xfffffffffffffffe]}) fsopen(&(0x7f0000000740)='aufs\x00', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000780)={@empty, 0x5, 0x0, 0x0, 0x5, 0x8, 0xaf}, 0x20) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000007c0)) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000800)={0x0, @reserved}) r6 = socket(0x2c, 0x1, 0x1) r7 = accept4$tipc(r6, &(0x7f00000008c0)=@id, &(0x7f0000000900)=0x10, 0x80800) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000980)={0x1009, 0x18, '\x00', 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000009c0)=@x86={0x2, 0x94, 0x6, 0x0, 0xf, 0x75, 0xde, 0x3, 0x9, 0x0, 0xa, 0x1, 0x0, 0x8, 0x8, 0x4, 0x3, 0x3, 0xd, '\x00', 0x6, 0x7}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4014f50b, &(0x7f0000000a00)={0x1, 0x4, 0xf}) ioctl$KVM_RUN(r0, 0xae80, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000a40)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x4, 0x9, 0x59, 0x7, 0x8, 0x5, 0x0, 0x0, 0x9, 0x4, 0xff, 0x0, 0x7, 0xf2, 0x2}}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x6) 5m0.155366341s ago: executing program 6 (id=5409): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x11, 0x1, 0x3, 0x101, 0x1004e, 0xff, 0x7e, 0x4, 0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f00002eb000/0x2000)=nil, 0x2000, 0x15) r4 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x11, 0xd0, 0x1d, 0x4, 0x3, 0x40}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r3, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xf0f027, 0x0, '\x00', @p_u16=0x0}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x200001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x80000000000a, 0x2, 0x35}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x110000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='m'}) sendmsg$NL80211_CMD_NEW_STATION(r6, 0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xd0002016}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 4m59.819539002s ago: executing program 6 (id=5413): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000200)) close(r4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) 4m56.617627237s ago: executing program 6 (id=5425): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x29002c, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) umount2(&(0x7f0000000200)='./file0\x00', 0x2) ioctl$RTC_AIE_ON(r4, 0x7001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m55.474595805s ago: executing program 6 (id=5430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x118}}, 0x0) 4m54.631050846s ago: executing program 6 (id=5433): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) writev(r8, &(0x7f0000000900)=[{&(0x7f00000002c0)="8a49124722dc5b5c177f02be45ead1549fc88daba5d1c6886f470b33a5adc52c1426f70d78c22f44a6152b3a7d591edddb75fbfba22917c9471cf5b0d158a8cb9aa2b3a7c4ab472e865e0d0549dc1e333a349761a9efb97bb32ef0e29b49a806f01471212768f8b2c0e0b8b19746316bcc8719334d5ce445651d377a1c364efd19c047580230ed05ad9afb1335537e4a06e1626a8785b6dd34e3951d2cbc5e82b7b61befbcb161e598643d3f4b5cc0acbe4cef05c414e05a3625499525213881ee2e84ee4dc0", 0xc6}, {&(0x7f00000003c0)="7b741b2a67a97d236a6423a217c0423e420b37dbf8862c9a5213d0e035d2834366e1edf5e06cfcf1cabff0b24ee2902866a9710c7a77119f1a25b4324fd54e55a174c191dd82a5377de29144f35697b8de3dbf99cf5cad5a0f53ceb1e709c62e94a1d7ab98cd750d064de18104c1934f5c2dadab5172934bfc2475ec", 0x7c}, {&(0x7f00000004c0)="ebca62da0f427555c54511fe32e628399054f74eadc2fa9f4d06c13db2e9605a574aee1c29ff7c68aa6901abeb1bf124ea2d1e053553c30093bc1b2ac1977c46de88c7dfd3106f1762309d29020d44", 0x4f}, {&(0x7f00000001c0)="ac5687389b5b08ef423a10a93b9a33bde690641e5f290a8771f8cb4a14d9114bc568ace5f9e169c057f448a5dc462cbad834168c45264b1fca58b85e0b5ef99ca7f456c3fbc7374763cecdeeabaf28e7a30d4d38e1c6c0785d6259c61fe95f76e2102de63be10c7c4fa229a6bab8f4d2714b8c5674ede0ae0d5f", 0x7a}, {&(0x7f0000000980)="76cae92402ec9770d507c77c5e2610dfdf3d82f25de3172c95114de0b82f07a92161762b3b89321414b368c758852d1de2fc3e05de0a3247b95cfd7dde2d8e46efd809ff9ed78d33da8e433fb993123c397f179967dab1670e7971d0a2637e93caee2c908ea176796d1a609739164f9c5e53309e768eb7be54d960c463d43898377bb916d862d4493ccab85e7ff532a56cd58fa050ec29ca25eec824a082d90d25500000000000", 0x957352b4119b415c}, {&(0x7f0000000600)="9860c4fdd4b9cafc5dafdd50c56982f4a4512dea41636434f56a65895fe69378cd89a664b8f8f5b0dc48d40e02a999b1eb5383cbe093be05cfcaabbb997ddb671a14baabb74e9db52e6cee92f92dfb8213b60a01f1dd3e68966dc5d8621c649d5a1ffd4525f23f054e6a9614943f6ceadf76e7531e2148b9cd556943c7e8251dc1ee0268e2817fa1238a8e5e67f6fb79e563f744902d02f63998590ddd2003bf65978fab521e52ef", 0xa8}, {&(0x7f00000006c0)="7d407d8168d1273026fc1ef753ac0c962d72a9bba9634e183fa064433a292c98643997dc82f77e2faeaff466c313edd1e67c9a9b04a3a9e9284c8ec5ae48dbacd1a14fca140b48fd83cc1eb0ad2db82d45badc51dd03d68a247d39b641c9815675d0b93f2793b451e8e802d8cf32b072dee4", 0x72}, {&(0x7f0000000740)="b53cce73c9c92b430805da7cec9084bc7adacd00b432a44c3714e32f16f1ecd4c2958f1dff9d794e6aee2ad5c620eed433652994bd031406621366cffbba84f0cab892502eabb6737e22b2eb2381e7bd56b82a5c3fc299345b12665d4bdba33ab7cd22977c05c45606063730043f468877870debc859648fcf09c56f6ae4459da38b1eaf39639f4d83900c47ed8c2d62ec164105763c4255dcb694478408b9df8fe2060f637e105436c3382c", 0xac}, {&(0x7f0000000800)="73d849ee32dd5493ed5c8ba2c3a0c2c9f197abe6f706352184a50f2bd6c586cde2be00a666077a1c0c9e20e4ac7078dcfeef9a8c3c3c6031ece6accfc7ad958eb8eb7c485ac7e1b74a0bb8ade6047130b995ae14e921fe6a742e85e11154733942008e9c92d69d02c37a83e1e4360369e690c31697b913b29a7edd81b9bfb742d8fd8cbb7de5233efb", 0x89}, {&(0x7f00000008c0)="7a1342c98634f763fd4e870072b540642b387dae", 0x14}], 0xa) 4m53.827409638s ago: executing program 36 (id=5433): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) writev(r8, &(0x7f0000000900)=[{&(0x7f00000002c0)="8a49124722dc5b5c177f02be45ead1549fc88daba5d1c6886f470b33a5adc52c1426f70d78c22f44a6152b3a7d591edddb75fbfba22917c9471cf5b0d158a8cb9aa2b3a7c4ab472e865e0d0549dc1e333a349761a9efb97bb32ef0e29b49a806f01471212768f8b2c0e0b8b19746316bcc8719334d5ce445651d377a1c364efd19c047580230ed05ad9afb1335537e4a06e1626a8785b6dd34e3951d2cbc5e82b7b61befbcb161e598643d3f4b5cc0acbe4cef05c414e05a3625499525213881ee2e84ee4dc0", 0xc6}, {&(0x7f00000003c0)="7b741b2a67a97d236a6423a217c0423e420b37dbf8862c9a5213d0e035d2834366e1edf5e06cfcf1cabff0b24ee2902866a9710c7a77119f1a25b4324fd54e55a174c191dd82a5377de29144f35697b8de3dbf99cf5cad5a0f53ceb1e709c62e94a1d7ab98cd750d064de18104c1934f5c2dadab5172934bfc2475ec", 0x7c}, {&(0x7f00000004c0)="ebca62da0f427555c54511fe32e628399054f74eadc2fa9f4d06c13db2e9605a574aee1c29ff7c68aa6901abeb1bf124ea2d1e053553c30093bc1b2ac1977c46de88c7dfd3106f1762309d29020d44", 0x4f}, {&(0x7f00000001c0)="ac5687389b5b08ef423a10a93b9a33bde690641e5f290a8771f8cb4a14d9114bc568ace5f9e169c057f448a5dc462cbad834168c45264b1fca58b85e0b5ef99ca7f456c3fbc7374763cecdeeabaf28e7a30d4d38e1c6c0785d6259c61fe95f76e2102de63be10c7c4fa229a6bab8f4d2714b8c5674ede0ae0d5f", 0x7a}, {&(0x7f0000000980)="76cae92402ec9770d507c77c5e2610dfdf3d82f25de3172c95114de0b82f07a92161762b3b89321414b368c758852d1de2fc3e05de0a3247b95cfd7dde2d8e46efd809ff9ed78d33da8e433fb993123c397f179967dab1670e7971d0a2637e93caee2c908ea176796d1a609739164f9c5e53309e768eb7be54d960c463d43898377bb916d862d4493ccab85e7ff532a56cd58fa050ec29ca25eec824a082d90d25500000000000", 0x957352b4119b415c}, {&(0x7f0000000600)="9860c4fdd4b9cafc5dafdd50c56982f4a4512dea41636434f56a65895fe69378cd89a664b8f8f5b0dc48d40e02a999b1eb5383cbe093be05cfcaabbb997ddb671a14baabb74e9db52e6cee92f92dfb8213b60a01f1dd3e68966dc5d8621c649d5a1ffd4525f23f054e6a9614943f6ceadf76e7531e2148b9cd556943c7e8251dc1ee0268e2817fa1238a8e5e67f6fb79e563f744902d02f63998590ddd2003bf65978fab521e52ef", 0xa8}, {&(0x7f00000006c0)="7d407d8168d1273026fc1ef753ac0c962d72a9bba9634e183fa064433a292c98643997dc82f77e2faeaff466c313edd1e67c9a9b04a3a9e9284c8ec5ae48dbacd1a14fca140b48fd83cc1eb0ad2db82d45badc51dd03d68a247d39b641c9815675d0b93f2793b451e8e802d8cf32b072dee4", 0x72}, {&(0x7f0000000740)="b53cce73c9c92b430805da7cec9084bc7adacd00b432a44c3714e32f16f1ecd4c2958f1dff9d794e6aee2ad5c620eed433652994bd031406621366cffbba84f0cab892502eabb6737e22b2eb2381e7bd56b82a5c3fc299345b12665d4bdba33ab7cd22977c05c45606063730043f468877870debc859648fcf09c56f6ae4459da38b1eaf39639f4d83900c47ed8c2d62ec164105763c4255dcb694478408b9df8fe2060f637e105436c3382c", 0xac}, {&(0x7f0000000800)="73d849ee32dd5493ed5c8ba2c3a0c2c9f197abe6f706352184a50f2bd6c586cde2be00a666077a1c0c9e20e4ac7078dcfeef9a8c3c3c6031ece6accfc7ad958eb8eb7c485ac7e1b74a0bb8ade6047130b995ae14e921fe6a742e85e11154733942008e9c92d69d02c37a83e1e4360369e690c31697b913b29a7edd81b9bfb742d8fd8cbb7de5233efb", 0x89}, {&(0x7f00000008c0)="7a1342c98634f763fd4e870072b540642b387dae", 0x14}], 0xa) 3m35.785901448s ago: executing program 4 (id=5728): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7, 0x80000, 0xffffffffffffffff}) getdents64(r0, &(0x7f0000000040)=""/230, 0xe6) (async) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200000, 0x2) getdents(r1, &(0x7f0000000180)=""/165, 0xa5) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r2, 0x5}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000300)={r3, 0x1}) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) getdents64(r1, &(0x7f0000000340)=""/109, 0x6d) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000003c0)=[0xfd, 0x6], 0x2) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000400)='bridge_slave_0\x00') ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x8, 0x4, 0x3, 0x5, 0x8, 0x3e}, {0x400, 0x4, 0xb69c, 0x8, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) getdents(r0, &(0x7f00000006c0)=""/19, 0x13) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000700)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000740)={r5, 0x2}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xee34}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x88f6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xd79}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xffffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x80) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000008c0)={r0}) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000900)={0x0, 0xea60}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) syz_io_uring_setup(0x7fff, &(0x7f0000000940)={0x0, 0xc822, 0x100, 0x2, 0x221, 0x0, r0}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000a80)={0x1a}) syz_extract_tcp_res$synack(&(0x7f0000000ac0), 0x1, 0x0) (async, rerun: 64) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (rerun: 64) 3m34.839699785s ago: executing program 4 (id=5735): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8010000190001000000000010000000200100000000000000000000000000000a0101000000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1b8}}, 0x80c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)=0x0, {0x29}, &(0x7f0000000280)=""/61, 0x3d, &(0x7f00000002c0)=""/40, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000d, 0x20010, 0xffffffffffffffff, 0xd4237000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r3, 0x6) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffe9f, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x373}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0xfffffffffffffd38}], 0x3}, 0x8015) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) close_range(0xffffffffffffffff, r4, 0x2000000000000) 3m33.925819553s ago: executing program 4 (id=5744): r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r1, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000406d0495c200000000000109022d00010000000109040010020300020009210000000122180009058103", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES16, @ANYRES32=r0, @ANYRES16, @ANYRESHEX, @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x92) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000240)=0x6d) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYBLOB="31c5ca02dc5b081b145a883029ee53446a5489d91fb02601d465b16c1e37d78e541236d6ebc5254ea47f27bd3fd143c1833717089851976315e86472a79ec4108a0debfd4a26c590db985aec311d91344252ca2b22713e420a08a8caa1ffc1a38d580858c0a8fe859eb7575c077b7e04376694", @ANYRESHEX=r7, @ANYRES64=r7], 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x4081ff) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) sendfile(r8, r2, 0x0, 0x2000ef) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0xfed1, &(0x7f0000000380)={&(0x7f00000013c0)={0x18, 0x26, 0x400, 0x70bd2d, 0xfffffff9, {0x11}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c811}, 0x4040840) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r10, &(0x7f0000003a00)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x1000, @private0, 0x80000001}, 0x1c, 0x0, 0x0, &(0x7f0000003ac0)=ANY=[@ANYBLOB="00000000000000000000800000"], 0x18}}], 0x1, 0x8880) 3m30.431756713s ago: executing program 4 (id=5759): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/226, 0xe2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000041a9e50b000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3m30.33751918s ago: executing program 4 (id=5761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000) r3 = fsmount(r1, 0x0, 0x0) move_mount(r3, &(0x7f0000000000)='\x00', r0, &(0x7f0000000000)='\x00', 0x44) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) (async) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000) (async) fsmount(r1, 0x0, 0x0) (async) move_mount(r3, &(0x7f0000000000)='\x00', r0, &(0x7f0000000000)='\x00', 0x44) (async) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) (async) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) 3m27.211671276s ago: executing program 4 (id=5776): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7800) 3m11.473790342s ago: executing program 37 (id=5776): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7800) 1m37.654578004s ago: executing program 1 (id=6272): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) writev(r1, &(0x7f0000000900)=[{&(0x7f00000002c0)="8a49124722dc5b5c177f02be45ead1549fc88daba5d1c6886f470b33a5adc52c1426f70d78c22f44a6152b3a7d591edddb75fbfba22917c9471cf5b0d158a8cb9aa2b3a7c4ab472e865e0d0549dc1e333a349761a9efb97bb32ef0e29b49a806f01471212768f8b2c0e0b8b19746316bcc8719334d5ce445651d377a1c364efd19c047580230ed05ad9afb1335537e4a06e1626a8785b6dd34e3951d2cbc5e82b7b61befbcb161e598643d3f4b5cc0acbe4cef05c414e05a3625499525213881ee2e84ee4dc0", 0xc6}, {&(0x7f00000003c0)="7b741b2a67a97d236a6423a217c0423e420b37dbf8862c9a5213d0e035d2834366e1edf5e06cfcf1cabff0b24ee2902866a9710c7a77119f1a25b4324fd54e55a174c191dd82a5377de29144f35697b8de3dbf99cf5cad5a0f53ceb1e709c62e94a1d7ab98cd750d064de18104c1934f5c2dadab5172934bfc2475ec", 0x7c}, {&(0x7f00000004c0)="ebca62da0f427555c54511fe32e628399054f74eadc2fa9f4d06c13db2e9605a574aee1c29ff7c68aa6901abeb1bf124ea2d1e053553c30093bc1b2ac1977c46de88c7dfd3106f1762309d29020d44", 0x4f}, {&(0x7f00000001c0)="ac5687389b5b08ef423a10a93b9a33bde690641e5f290a8771f8cb4a14d9114bc568ace5f9e169c057f448a5dc462cbad834168c45264b1fca58b85e0b5ef99ca7f456c3fbc7374763cecdeeabaf28e7a30d4d38e1c6c0785d6259c61fe95f76e2102de63be10c7c4fa229a6bab8f4d2714b8c5674ede0ae0d5f", 0x7a}, {&(0x7f0000000980)="76cae92402ec9770d507c77c5e2610dfdf3d82f25de3172c95114de0b82f07a92161762b3b89321414b368c758852d1de2fc3e05de0a3247b95cfd7dde2d8e46efd809ff9ed78d33da8e433fb993123c397f179967dab1670e7971d0a2637e93caee2c908ea176796d1a609739164f9c5e53309e768eb7be54d960c463d43898377bb916d862d4493ccab85e7ff532a56cd58fa050ec29ca25eec824a082d90d25500000000000", 0xa7}, {&(0x7f0000000600)="9860c4fdd4b9cafc5dafdd50c56982f4a4512dea41636434f56a65895fe69378cd89a664b8f8f5b0dc48d40e02a999b1eb5383cbe093be05cfcaabbb997ddb671a14baabb74e9db52e6cee92f92dfb8213b60a01f1dd3e68966dc5d8621c649d5a1ffd4525f23f054e6a9614943f6ceadf76e7531e2148b9cd556943c7e8251dc1ee0268e2817fa1238a8e5e67f6fb79e563f744902d02f63998590ddd2003bf65978fab521e52ef", 0xa8}, {&(0x7f00000006c0)="7d407d8168d1273026fc1ef753ac0c962d72a9bba9634e183fa064433a292c98643997dc82f77e2faeaff466c313edd1e67c9a9b04a3a9e9284c8ec5ae48dbacd1a14fca140b48fd83cc1eb0ad2db82d45badc51dd03d68a247d39b641c9815675d0b93f2793b451e8e802d8cf32b072dee4", 0x72}, {&(0x7f0000000740)="b53cce73c9c92b430805da7cec9084bc7adacd00b432a44c3714e32f16f1ecd4c2958f1dff9d794e6aee2ad5c620eed433652994bd031406621366cffbba84f0cab892502eabb6737e22b2eb2381e7bd56b82a5c3fc299345b12665d4bdba33ab7cd22977c05c45606063730043f468877870debc859648fcf09c56f6ae4459da38b1eaf39639f4d83900c47ed8c2d62ec164105763c4255dcb694478408b9df8fe2060f637e105436c3382c", 0xac}, {&(0x7f0000000800)="73d849ee32dd5493ed5c8ba2c3a0c2c9f197abe6f706352184a50f2bd6c586cde2be00a666077a1c0c9e20e4ac7078dcfeef9a8c3c3c6031ece6accfc7ad958eb8eb7c485ac7e1b74a0bb8ade6047130b995ae14e921fe6a742e85e11154733942008e9c92d69d02c37a83e1e4360369e690c31697b913b29a7edd81b9bfb742d8", 0x81}, {&(0x7f00000008c0)="7a1342c98634f763fd4e870072b540642b387dae", 0x14}], 0xa) 1m37.391153541s ago: executing program 1 (id=6274): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x191000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0xac68, 0xd, 0x7fffffff}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat$full(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000180)={0x4, 0x80000, r1}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f00000001c0)="23d8e32ccc825f42b7dc4b65c25205b55454a85b6bc68dd5d13802359d40bb89d2f83ce39da18b26f5127c7a313e65a654a12d5a5040983b6996a32d01404f171f97badf7ec3eb990435abf6f2fe0268376afc9eb8189c899a85c5ac3a7d0994755de24aefcee94e5558a22e3ea6b98c0cbcb5c3090d2d26ed7491e8d8bcf53a2ea5dab056c226eb4ab730d756110f73fd8a", 0x92) write(r1, &(0x7f0000000280)="4bd6cef48066c75d2c9ef47fb98b37d14d3fc10aab6f6a2bd7c8c3898f46459304cee82816d2c304def3e0afac6034a8b18765a6c0972a29fa8cded2803a1604f701e7061f33f80b152e6e690dd1321f9b19211843e1245cfcc4da05eee7797744b39e45c5a96263208586018b0e07f2c3c359031cba8772d2c5fcd05a1119dc3a0610c97935ad3525333e023cab440b5832c4ae9f88c7619a998ba8c4a1bcebc098b494fb275796fca582a8", 0xac) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0x1, 0x0, 0x781, 0x3, 0xfffffff6}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="756c91c5a4764e90f92401b9d5aa5310e2ac7cec4b29528781acb227a4ec71aa901cc27208763ee147ae4f8d5ad2347f00f5b895bc8ad928f58dc849285730eef8c59c82bb6e430b4c0375cfadeeed32ef7f8915fbb6f0c2f16f90bede3c57125ab677d63f7ef62c625996a56050b10cc7bfa93bee8a59a84e2e63a94be5a96a45339566cdc55209497eaa", &(0x7f0000000540)=""/208, &(0x7f0000000640)="ef30a865b187f9e7610b7722037f211eac370051ac6a4a4c9875f42d683273bfb309d5ecc4dcd355ad773b4e89974b07eacb24e1c0de97a043da4c4e4bf84b94453fbabd77de186000ec3a7c1d557109a6a59f3f29fd1ed3eafe30da4302032e7e8060283a6f2417d3a794f5897922807a9e4ae042", &(0x7f00000006c0)="2ff7d2db81f5fc760f71c7709b684c92615b6cb674626cad6c4701b1f763cf9116210f0aeedc4093df721b1536b5e59ad4ba0b421ddb42ad27e22d26a462961e30bc6e24d9aef215e41054b292c5541bbf01008bae", 0xa3, r2}, 0x38) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), r2) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000008c0)={0x0, 0x0, "5aca4d1e1347c9a5a65e1cf5c388a791"}) openat$ptp0(0xffffff9c, &(0x7f0000000900), 0x400100, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000940)) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r7 = socket(0x28, 0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000c40)=0x0) sendmmsg$sock(r7, &(0x7f0000001100)=[{{&(0x7f0000000980)=@phonet={0x23, 0x3a}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9134cae18a3159fbe8e2388e9de93424051a776164f6f1a1a97a6e59515de55c64245fa6aab5cb0122be781c79d7aadfbf711dfef8d35fb2590591f47fdada5c27c1f38e58f6bf615f88af27601e94b0a9133054a2c1c719e5680f876a1ac0b82ebe1fb32823ad5b6177fc3fb0", 0x6d}, {&(0x7f0000000a80)="b29edd42c500eb90298afca8d93754e463cb9fa6c61dd5929730dc24d31e23a3fe0bf80ce11c0b7348b151fda95cbf053e55cc6b7bc08339ae63605e6dbe1da94cbdb8d64ec3ce7cbd6f089d0dd025dfd27a03e5b53c5c61bb3b453350dfc8fde78e5ed1a52730fd9344b1977b7ac728e6140cc52b4e16a8a693ba4d15e761f6f04b3dc30f3ffbc05056b3d1b3b23babd3fadae5b3e8645fade3aff9f98dc67871c0b24b42b36bc92000b6df229273ae46869515ac4439b75cfeaa662b2cdedb58da33d06e1b50334eb520d488304b0d4b6cde6500aacbc282ea1cb30489c9b79dbaa065aa6d2c7446fa5c6933a23c70f2563b1281c9652aaf0499", 0xfb}], 0x2, &(0x7f0000000bc0)=[@txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x6e20}}, @mark={{0x10, 0x1, 0x24, 0xc}}, @timestamping={{0x10}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0xde}}], 0x7c}}, {{&(0x7f0000000c80)=@nfc={0x27, r8, 0x1, 0x5}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)="06066dbe0bed2a670ad58a62b5992196c9016ae23b51a62ae44a69020642d20c354a358c52bfc7931f2c44c171d64ed7c1bc29fe8413f32f8b5aee859b33fba9c096f19ce005038368e1eb61f31362980281afc595ab59530b6a3f6158c30195233990edb663735acd4040e21db32d80d03f8d026b76532c2ecfc7437c29d194d3dd2fb553505246e7332e55f3de923c408b80869f6239db877eb3cf3579f75aeb689c2b97036815577f88f95368c6418b6ab79f08736a0fa41e5dea29dceb57920aea4de4d2dcd7312899b0", 0xcc}, {&(0x7f0000000e00)="c4c28a32a338d8d82a750660610d7220db46aebd0983ae4bfb9d4396", 0x1c}, {&(0x7f0000000e40)="00f04a0eefbcbe103bbee7048e3d5d25eaca447d08235858ee77252eb8f460f376f06ae34933bef77d53f1077e639a097e856168a7300011e43e5bc06e3c2029e6d1172d5716a85e320f447029ee1e31dc8d2d8e28a5bf084da193ebb95b43b9dd4867796d3f5fae82c0f2717ff83118f3341206676401f20d158f51", 0x7c}, {&(0x7f0000000ec0)="21c0e924820a3514e660079f7fd8bb5ce5dc1494dc05b850811ffabfe81ddc2bdd20c2df11a03ff54e11a29c9a04e1072e8965361b70346e04c2e6bf3777ac5dfb", 0x41}, {&(0x7f0000000f40)="9eb3dede03cd89150e5eaa8cc7160cc8207f63e3412ac70e4e8489", 0x1b}, {&(0x7f0000000f80)="4432c6da586835062b8d51fd21e020f76730a0ef334d039b5b1591b964ead629bd96e7146776af2392f5faadc906fbecf34685207085243aeac380d085cb5194940de7ad10fe0dcb9ef35c2bf7316544e3241548c2599066f2bfd33a15274e8e3ab413f5961a9c2778ad5f61568c685fc46b302ba13881dd271617b48f20b9b63ae229c3d239d5b67f19d7f5ebd78285e34ed437792d8a158c967dd3349253afbc357de9a3b5a81df15ff853a3d3142df634590e5df4db", 0xb7}], 0x6, &(0x7f0000001080)=[@timestamping={{0x10, 0x1, 0x25, 0x48000000}}, @mark={{0x10, 0x1, 0x24, 0xa}}, @txtime={{0x14, 0x1, 0x3d, 0x100}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x400}}], 0x58}}], 0x2, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000001140)={@mcast2, @empty, @local, 0x6, 0x7fff, 0x7, 0x0, 0x7, 0x2, r4}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000011c0), 0x3) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000001200)={0x18}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m37.187725483s ago: executing program 1 (id=6276): socket$inet6(0xa, 0x40002, 0x3) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) unshare(0x8040480) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x404, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xfffffff9}}}}, [@NL80211_ATTR_IE={0x119, 0x2a, [@mic={0x8c, 0x18, {0x43a, "836129417984", @long="71b1f892eb71ea03c129a322707a28f1"}}, @random={0x1, 0xf9, "b8d8c463f855d2fd9f20efac6bead43afcf22c0182bd6399e8666a68195fe268c6b851e9a3dccee1cbc1a12f26f9ff2fb475af20b36c8fb43aeeafe573826f08896788fb12e5b4207221ca2c7e3809b277c4b9b86429f53eb14313845deae4dedc3c1442c77cb0a6f7a0a0eed66ca2a2ecebb3449b0dc32fc531bc9111b14cac80ecca96e4006d40dc0a5af5d7e2bdd217710305432c65e60bfb4a2fb5be645923f03ca40d2705dbbbaca454e3091453a40c51caa34f95bfeeb3e1b76d2e9ef1f429a7fd850a90ab0f3ab38e65d97fb2c080531eff0ffdea30d77eaa2135115df2c6b4de8128d67b1608956e8c56c25861cd2bed41a4ee5ea1"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xe8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x86, 0x2, "1a8c51afadd80815f72e3e8939733fd495dcb691be35bf7409af3f2fc4ce6be0be38ca265c4d2d59f4b5c3592ecd4fe05665ee029f54f701dbeb344ebc117546fa30933d4ebb2a2aae20e248a30975884ebe934b6e82f169ba5f6f128e8d7e67beb5ec20455b8ad1d4679bc0914821862df1310eb26cf0312642b317a2eafdba6cd4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x56, 0x3, "64b6ad57e5f55748aa0a612f122cafced908673d3305341a679d75b9673b574a1319b474bf364014de4095168a59b639a0724d0af47517ebb54efe05a604beeaeb0fc8557c5bd3e3b2f56ddf7d5961964b0d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x54, 0xf, [@supported_rates, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x55, @device_a, 0x4, @value, 0x3, 0x2, @broadcast, 0x46}}, @rann={0x7e, 0x15, {{0x1, 0x78}, 0x3, 0x5, @device_b, 0x0, 0x2, 0x5e}}, @peer_mgmt={0x75, 0x8, {0x0, 0x95f7, @val, @val=0x2f, @void}}, @chsw_timing={0x68, 0x4, {0x48, 0x800}}]}, @NL80211_ATTR_BEACON_TAIL={0x180, 0xf, [@supported_rates={0x1, 0x2, [{0x12, 0x1}, {0x6c}]}, @random={0x8, 0x28, "dff62a0e09b942ad08ec373298c7263896a8c9edf37cacdf6943d8d967df6c3a938e2771f568bdf6"}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @random={0x9, 0xd1, "7e5e2ba06f022e4452114f7352cc0ab8e2f916fd94e4a6b57cd2f161f39a5cebbf0b3d4a4bd1314893f04b538805a283e3a9e59ebf40db7193bd7b4be100d1396bc8d76d368aa80bbb51d0eb85cd813365657085e502beed393ca984aef41087c5c4d92f265887ac716ed80b6d3ab17f1a4dc91efcd26346d6320b8bd5d016ab4b9e52ed7b29f43f8187fba1d77e8c7d203b88490b14e16f34e35ce3b308fbb37827bce05b86b85529c648fa619dc1aaa412bee3f70350325d10b781bbffb147e842478cfa12729380cdc0c8241414ff50"}, @challenge={0x10, 0x1, 0x7e}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x7}}, @mesh_chsw={0x76, 0x6, {0x61, 0x5, 0x1d, 0x3d9e}}, @challenge={0x10, 0x1, 0x4b}, @fast_bss_trans={0x37, 0x52, {0x9, 0x0, "b078b16726565ae6a0987c56787c6d97", "317db96ebaa7c0b79d7f8bfbfbc9694b54a7c7cb4066cce9fbb29948eac8e658", "f2280458f811bcbf5fa516f70f503f9f218d64eaca845773a1fa5e540e762a74"}}]}]}, 0x404}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000240)=0x1014408, 0x4) listen(r3, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r8, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdb97b2c4}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r9) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r10, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r11, 0x20}, {r11, 0x13}], 0x200000000000023e, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r11, 0x0) 1m36.251605258s ago: executing program 1 (id=6281): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x13, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000500)=0x0) read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xffffff4c}]) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_disconnect(r5) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) r9 = syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105d"], 0x0) sendto$inet6(r3, &(0x7f0000000200)="00aac563342822c10c46a60d80566c2756e0446aa26ee85a12dc818beb70d7f482adcfcd58daea66b2d743c6acd7b7928b21bc25bd7c64364ae49e4c4b75f8f190cc2a3a78e68ccef63a589473030251776dfd38f63be61b7ec085eefe761cff84c779a596dd5ba40843345a2fc6fae3fca1e6f597f1b60cd7f06f5d7673dd5707c570c9d75adab71b56d64c7dcf73463bc165d8158df4b9a771d1cf8f0a64bbdcf56d9cd380a19ccf8bb1bd3a9dc23fc8e5c0785d9fe96a94faf59d06f6019526187af205bb59a8a6ae260eab55eebc2a998d46acb81544471f3e975a3a43f9e4886aa5b64c2e0db05c2cea857e1e57", 0xf0, 0x4814, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) syz_usb_control_io(r9, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1m32.988477671s ago: executing program 1 (id=6296): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000100)='\a\x00\x00\x00\x00\x00\x00\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0xc, &(0x7f0000000140)={0x20, 0x22, 0xcc, {0xcc, 0x21, "c8248f2db901913e2f1ecda603207e89a7da7cbad17ab667f599a71f284bfba1de0892d12e9d3d8cb6f8d40ae32f99317bac61cfaaf0892f76b676bb0bb266abf7152acdb885954ca3ed651dea4052eb1049623824aed337bd5d424100d9b81ff662559be4c97ff1ba1726c70520f60dfbf30793783f94a520d43ad4c9ca37baff6bcdd3ca698813398378b22e014d8f0c70682f0ae4f803cecfb42a423b2a5a450426b14d1e28fdc8470533d3ebd3a758a9ec436edf46d44ec8dd60b6bb28954cefe78b9db595db1b5b"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x24, &(0x7f00000002c0)={0x40, 0xb, 0xa1, "20a157a8330576f2d087f10cfea8d8f74f1e26695882b56e62d05fc7b95604476d77a902bd6004274f5d5d07304a9044f4cf955233dade75dd6a42fd12f9e04a14fe596afaed95e63b5dfae536a9d7e96bd7032ff309c2050aebfb5492cef22dd904ee0a2d5e94b4ff6ecb718da647b914d5899903de37765d4dd7671d26ed0b0e904086595fbcb69321f6ab34642e4b8a227dee1e59ff8d9a45b87217516d2652"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x64}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x7ff, 0x0, 0x8, 0x1, 0x101, 0x6, 0x8001, 0x7fff, 0x7, 0x19, 0x2, 0x9}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x4d}, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x26) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x8, 0x4) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000013c0)={[{}]}) 1m32.783926245s ago: executing program 1 (id=6299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}, 0x1, 0x0, 0x20}, 0x0) 1m32.497808746s ago: executing program 38 (id=6299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}, 0x1, 0x0, 0x20}, 0x0) 11.415092072s ago: executing program 7 (id=6674): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0xa1, 0x9, 0x1, {{0x5, 0x4, 0x0, 0x21, 0x14, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @local}}}}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x9, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xe, 0x6f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0xc, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.51553518s ago: executing program 9 (id=6679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) (async) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)=' ', 0x1, 0xe3}]) (async) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x600000, 0x0) preadv2(r2, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/53, 0x35}, {&(0x7f0000001940)=""/193, 0xc1}, {&(0x7f0000001a40)=""/45, 0x2d}, {&(0x7f0000001a80)=""/218, 0xda}], 0x8, 0x9, 0x1, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}]}}]}, 0x48}}, 0x4000090) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x90000005}) (async) epoll_pwait(r8, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) (async) close(r6) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.352185208s ago: executing program 0 (id=6687): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) writev(r1, &(0x7f0000000900)=[{&(0x7f00000002c0)="8a49124722dc5b5c177f02be45ead1549fc88daba5d1c6886f470b33a5adc52c1426f70d78c22f44a6152b3a7d591edddb75fbfba22917c9471cf5b0d158a8cb9aa2b3a7c4ab472e865e0d0549dc1e333a349761a9efb97bb32ef0e29b49a806f01471212768f8b2c0e0b8b19746316bcc8719334d5ce445651d377a1c364efd19c047580230ed05ad9afb1335537e4a06e1626a8785b6dd34e3951d2cbc5e82b7b61befbcb161e598643d3f4b5cc0acbe4cef05c414e05a3625499525213881ee2e84ee4dc0", 0xc6}, {&(0x7f00000003c0)="7b741b2a67a97d236a6423a217c0423e420b37dbf8862c9a5213d0e035d2834366e1edf5e06cfcf1cabff0b24ee2902866a9710c7a77119f1a25b4324fd54e55a174c191dd82a5377de29144f35697b8de3dbf99cf5cad5a0f53ceb1e709c62e94a1d7ab98cd750d064de18104c1934f5c2dadab5172934bfc2475ec", 0x7c}, {&(0x7f00000004c0)="ebca62da0f427555c54511fe32e628399054f74eadc2fa9f4d06c13db2e9605a574aee1c29ff7c68aa6901abeb1bf124ea2d1e053553c30093bc1b2ac1977c46de88c7dfd3106f1762309d29020d44", 0x4f}, {&(0x7f00000001c0)="ac5687389b5b08ef423a10a93b9a33bde690641e5f290a8771f8cb4a14d9114bc568ace5f9e169c057f448a5dc462cbad834168c45264b1fca58b85e0b5ef99ca7f456c3fbc7374763cecdeeabaf28e7a30d4d38e1c6c0785d6259c61fe95f76e2102de63be10c7c4fa229a6bab8f4d2714b8c5674ede0ae0d5f", 0x7a}, {&(0x7f0000000980)="76cae92402ec9770d507c77c5e2610dfdf3d82f25de3172c95114de0b82f07a92161762b3b89321414b368c758852d1de2fc3e05de0a3247b95cfd7dde2d8e46efd809ff9ed78d33da8e433fb993123c397f179967dab1670e7971d0a2637e93caee2c908ea176796d1a609739164f9c5e53309e768eb7be54d960c463d43898377bb916d862d4493ccab85e7ff532a56cd58fa050ec29ca25eec824a082d90d25500000000000", 0xa7}, {&(0x7f0000000600)="9860c4fdd4b9cafc5dafdd50c56982f4a4512dea41636434f56a65895fe69378cd89a664b8f8f5b0dc48d40e02a999b1eb5383cbe093be05cfcaabbb997ddb671a14baabb74e9db52e6cee92f92dfb8213b60a01f1dd3e68966dc5d8621c649d5a1ffd4525f23f054e6a9614943f6ceadf76e7531e2148b9cd556943c7e8251dc1ee0268e2817fa1238a8e5e67f6fb79e563f744902d02f63998590ddd2003bf65978fab521e52ef", 0xa8}, {&(0x7f00000006c0)="7d407d8168d1273026fc1ef753ac0c962d72a9bba9634e183fa064433a292c98643997dc82f77e2faeaff466c313edd1e67c9a9b04a3a9e9284c8ec5ae48dbacd1a14fca140b48fd83cc1eb0ad2db82d45badc51dd03d68a247d39b641c9815675d0b93f2793b451e8e802d8cf32b072dee4", 0x72}, {&(0x7f0000000740)="b53cce73c9c92b430805da7cec9084bc7adacd00b432a44c3714e32f16f1ecd4c2958f1dff9d794e6aee2ad5c620eed433652994bd031406621366cffbba84f0cab892502eabb6737e22b2eb2381e7bd56b82a5c3fc299345b12665d4bdba33ab7cd22977c05c45606063730043f468877870debc859648fcf09c56f6ae4459da38b1eaf39639f4d83900c47ed8c2d62ec164105763c4255dcb694478408b9df8fe2060f637e105436c3", 0xaa}, {&(0x7f0000000800)="73d849ee32dd5493ed5c8ba2c3a0c2c9f197abe6f706352184a50f2bd6c586cde2be00a666077a1c0c9e20e4ac7078dcfeef9a8c3c3c6031ece6accfc7ad958eb8eb7c485ac7e1b74a0bb8ade6047130b995ae14e921fe6a742e85e11154733942008e9c92d69d02c37a83e1e4360369e690c31697b913b29a7edd81b9bfb742d8fd8cbb7de5233efb", 0x89}, {&(0x7f00000008c0)="7a1342c98634f763fd4e870072b540642b387dae", 0x14}], 0xa) 8.215985255s ago: executing program 7 (id=6689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000d0a010100000000000000000a0000010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 8.195720262s ago: executing program 0 (id=6690): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @private0, 0x97b}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000740)=0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @private0, 0xf}, {0xa, 0x4e25, 0x4, @private0, 0x5}, 0xffffffffffffffff, 0x1000}}, 0xffffffffffffff33) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r6 = socket$kcm(0x29, 0x2, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4bd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}]}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) (async) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000040)={0xf000000, 0x386, 0xa4, r3, 0x0, &(0x7f00000000c0)={0x9c0909, 0xfffffffc, '\x00', @ptr=0x9}}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x76506640d814710f, 0x1ff) write(r8, &(0x7f0000000080)='/dev/mapper/control', 0x13) (async) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000180)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @any, 0x8, 0xffffffffffffffff, 0x4000000f8, 0x8, 0x0, 0x4000002, 0xe}) (async) lseek(r8, 0x0, 0x0) 8.028774087s ago: executing program 0 (id=6691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0xd50a903038a00182}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usbip_server_init(0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x403c5404, &(0x7f0000000040)={{0x3, 0x2, 0x7, 0x2, 0x4}, 0x7, 0x8}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r8, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x2437b}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x2437b}, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r9 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r9) 7.98412729s ago: executing program 7 (id=6692): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f000058c000/0x1000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f041}) r8 = socket$inet6(0xa, 0x3, 0x40) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000000)={0x7, {{0xa, 0x4e22, 0xb202, @private0, 0xf87}}, {{0xa, 0x4e23, 0x8, @private1, 0x3}}}, 0x104) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x7ffffffe, 0x2) 7.887634425s ago: executing program 7 (id=6693): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) brk(0x55555ede6000) brk(0x55555ede6001) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.379860428s ago: executing program 9 (id=6697): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0xc, 0x29, 0x5}], 0xc}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x141000, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r8], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xc, 0x3fe25473c8df20c5}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x20000, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x1}) (async) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r6, &(0x7f0000000c40)={0xe000201c}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r12) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 6.208422038s ago: executing program 0 (id=6698): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x20, 0x3d, 0x6, "cfcae31be8ce"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000140)={0x35b000, 0x100000}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x40, 0x10, 0x4, "f1f9beac"}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "aa53"}, &(0x7f0000000640)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bac8"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x10}, 0x0, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x20, 0x3d, 0x6, "cfcae31be8ce"}, 0x0, 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r2, 0x8010aebb, &(0x7f0000000140)={0x35b000, 0x100000}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)={0x40, 0x10, 0x4, "f1f9beac"}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "aa53"}, &(0x7f0000000640)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "bac8"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x10}, 0x0, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x8}}) (async) 6.126278158s ago: executing program 9 (id=6699): r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x105000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x48, 0xe4945d2eb074039d}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x40, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x50, 0xffffffffffffffff, 0x1000) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x709080) dup3(r3, r5, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0xfffffff3, 0x80000000}, 0xc) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40000) 5.447394538s ago: executing program 8 (id=6702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r0, 0x26, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0x5, 0x100000001, 0x8, 0x3], &(0x7f0000000140)=[0x0], 0x2, 0x4, 0x1}}, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x5, 0x7fff, 0x28e9}], 0x2, 0xbff, 0x1e, 0x0, 0x2e, 0x6e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_usbip_server_init(0x5) ioctl$NILFS_IOCTL_GET_CPSTAT(r7, 0x80186e83, &(0x7f0000000000)) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x40402, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07bd7000fbdbdf250100000004000180100002800c0001800800340000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054) 4.790940995s ago: executing program 7 (id=6703): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffedd, 0xfffffffffffffffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000002980)={0x1c, &(0x7f0000001080)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x13) write$binfmt_elf64(r4, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0x7, 0x9, 0x1, 0x3, 0x3, 0x3e, 0xfff, 0x278, 0x40, 0x1fb, 0x8, 0xa, 0x38, 0x2, 0x9, 0xc7f4, 0x7}, [{0x5, 0x8000, 0x7, 0x0, 0x3, 0xff, 0x1000, 0x3}, {0x4, 0x4, 0xfffffffeffffffff, 0x6c, 0x80000000, 0x100000000, 0x7, 0xfffffffffffffffb}], "b098cd8a2cd8e2a3a5104c301f9262210189c2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c3) ioprio_set$pid(0x3, 0x0, 0x4007) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200000060000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c000280080002400000000208000140000000010800034000000003100001800900010068617368000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000000003ca000a"], 0xb4}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, r1) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0, 0x190}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 4.566980449s ago: executing program 8 (id=6704): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d00, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x7) r2 = syz_open_pts(r1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x1, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x91) 4.415736061s ago: executing program 9 (id=6705): timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x204030, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a03080003010107250108"], 0x0) 4.30327899s ago: executing program 8 (id=6706): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x40, 0x5, 0x0, 0xf}, {0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x6, 0x5}, {0x9, 0x5, 0x8, 0x3, 0x3ff, 0x2, 0x0, 0x9}}}}}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x18, &(0x7f0000000100)={0x40, 0xe, 0x51, {0x51, 0x29, "b6219ecb77c6a82bc665d751c32c5960d72bf49462d28783d7b635a12feb8a7721e4eba053adc0802b3d4c591195265b8b2c3baa55570e4a6eba433117c278f5859b72857f88bfe1f46e900ce7ed04"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000001c0)={0x0, 0xf, 0x70, {0x5, 0xf, 0x70, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x1, 0x8, 0x580, 0xd}, @generic={0x3c, 0x10, 0x2, "3d6afb2f391226c66d15e8374e2cc1daeaec06d65c626fe7d46a57b59cde398d173f9e226ef29e793bff3fb9e71f2bb503ab36625a6c0afd36"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0x1, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0bc6b20e6f6f0e9b7197c91dd390b91a"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x7b, 0x2, "d24b2ceb", "d9d68d04"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0xc0, 0x6b, 0x10, 0x11, 0x3}}}, &(0x7f0000000740)={0x44, &(0x7f0000000300)={0x20, 0x7, 0x42, "d2b5c980b91bc8c126d3ef5de6965f3b485a60cf1b14efa17de3fc5de22a03bb4fd8c299212ec483f4288af3241e434013c7afe89480ca3a08b86c51f5fcfbe649ca"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x80, 0x4}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "5381"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "b16e"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xcb}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d509050a"], 0x0) 4.119699778s ago: executing program 9 (id=6708): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x3, 0x8, 0x4e25, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x401, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0xffffffff, 0x2b}, 0xa, @in=@empty, 0x3504, 0x4, 0x1, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0xffffffff, 0x25dfdbfb, {{@in6=@local, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x2, 0x0, 0x20}}, [@mark={0xc, 0x15, {0x0, 0x100}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@bridge_getneigh={0x54, 0x1e, 0x200, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x1, 0xa302}, [@IFLA_CARRIER={0x5, 0x21, 0x4}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "58f3dcbf3cbd16fdd8ac38810dba9f1ffc6433e4c5"}, @IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3fc2a}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0xe23df1efaf6b6caf, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "df"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x201, 0x78, 0x50, 0xe, 0x8, 0x1e0e, 0x9200, 0xf99d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6a, 0x9, 0x80, 0x6, "", [{{0x9, 0x4, 0xdc, 0x0, 0x1, 0xff, 0xff, 0x0, 0x8, [], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x91, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x3bd7, &(0x7f0000000180)={0x0, 0xcc19, 0x110c0, 0x20, 0x30e}, &(0x7f0000000100), 0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_MTU={0x8}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) (async) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='changehat 0'], 0x36) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x64, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) 3.330761964s ago: executing program 3 (id=6710): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.947269922s ago: executing program 3 (id=6711): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0xfffe, 0x0, 0x53, 0x7fffffff, r4}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x5975}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x2080483) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x8001, 0xd) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x222, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d50a00", 0x1ec, 0x6, 0xff, @remote, @local, {[@dstopts={0x6c}, @fragment={0x5e, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x66}, @hopopts={0x3a6672e20ffe8611, 0x11, '\x00', [@generic={0xbc, 0x8d, "4f2c99642012fe6e1d6bd65f9f285194b53761a12a7f72ee7c528baaa108c8219e9bc01691bfb27a5cbe61036a5961e548435d481912ecaff4cbd1e3f84f1976fe8f8e449af4cc00b1521f56f78709ad1efef98440351b9cd9037893134faafb7e4ec9c8785c298db07ac47e271ed2121d729eb1db1dbe44bc3561bcfa737793fd2990305b561ee556188c4d1d"}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x5, 0x18, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00']}, @srh={0x6, 0x2, 0x4, 0x1, 0x9, 0x30, 0x32, [@private0]}, @srh={0x3c, 0xa, 0x4, 0x5, 0xec, 0x20, 0x8, [@local, @local, @mcast2, @mcast2, @rand_addr=' \x01\x00']}, @srh={0x1, 0xa, 0x4, 0x5, 0x8, 0x8, 0x1, [@private1, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0]}, @fragment={0x6, 0x0, 0x40, 0x0, 0x0, 0x9, 0x67}, @dstopts={0x29}], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x1000}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.829656197s ago: executing program 0 (id=6712): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a000002007379000000"], 0x30}}, 0x40010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x2, 0xcd9}) 2.529791993s ago: executing program 0 (id=6713): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0xbf85, 0x1) (rerun: 64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 2.354440488s ago: executing program 8 (id=6714): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x94000516) lsetxattr(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@random={'user.', 'trusted.overlay.metacopy\x00'}, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x609}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0xd368a27ed055b4d4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r3, 0x6, "5c97d6", "8d9aa8bac1d4ca4ce18b720d1a8f6b316d32464fd40f356add46e2729f5ce67076ec4fd7642505d89d1f071defa56b4a5540921ac67ea8cc893c629aee6dde7ebfee391bbcf51f156643efa662919ff8fad149594d267e5375c544f61e801aa727d77c6a80800f77cac73ceb0ca9672eb88b2e1fe6e54b68055cc9f1eda14ce0a31c2b50441b941786a4780901db2fb8448901e1a87b1cfac335942592db8a8a26a910625b71ea2594ec961b340a19eb93b78052b99280d387bc08cd07e15c7c389b4ee50ded6e5e00911658e05d994518b44997604d94cbf54eea917adcf3531610e82ef8d9ed93b0dfbbb24df438c94f74390609bab3894e967b5a50c70876"}}, 0x110) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x6c, 0x3ed, 0x200, 0x70bd26, 0x25dfdbfc, "3e5284d886cbf239d2149bd27f8ebdb2cf6c868075c600afa48c022f9dc924b9b4d22ebe91035a614efdb76b237e67baadcbb3dfde088ca4a2ed35b95826b32090980f306fcc379b3b38a328c19c65bfe85c19762d2673cbd540fbf6", ["", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x10880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000005ac0)=""/114) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000580)=0x91df) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) r8 = io_uring_setup(0xf0c, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x3, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) r9 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r5, &(0x7f0000000300)=""/212, 0xd4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1}) 1.951821098s ago: executing program 3 (id=6715): syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_io_uring_setup(0xd04, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r1 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', &(0x7f00000000c0)={0x400, 0x22, 0x4}, 0x18) r2 = openat(r1, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x51180, 0x8) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', r6, 0x29, 0x5a, 0x7, 0x91dc, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x1, 0x8, 0xa}}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe979}, 0x94) 1.144111431s ago: executing program 3 (id=6716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x350cc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "1e00", "799298c9493f4cbdfb5868d41337f3a2", "8df6c736", "ae7ebf0500e38175"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x350cc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) fcntl$dupfd(r1, 0x0, r1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) (async) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "1e00", "799298c9493f4cbdfb5868d41337f3a2", "8df6c736", "ae7ebf0500e38175"}, 0x28) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) (async) 1.141774778s ago: executing program 8 (id=6717): ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x62d7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRESHEX=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)="f79e1acd2106d64cac52b721830da8caf75b7436f283af217aecc4bc1bbaa549d465eb659c48cff4a7ee36b046958a3ef64313ac181254a4ade0487dba6e156d186f4e99d1a46414612583b40248be6282dd1f70951d09f22a7e9d70383741fb1f3ca7c3fd80a42b4a040d9b3f7d", 0x6e}, {&(0x7f0000000200)="2d696d87ca80811d85e30578431d07e2ead41c4a8a18d1a89854d96f36af1d9755229de74223bc82ad8ed53bd5ec30d650fc507fc4262b327c4ef667d40f70257be1e742354161730709ad1d0465e5b86e95", 0x52}], 0x2, 0x10001, 0x0) 739.814739ms ago: executing program 7 (id=6718): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) pause() r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 738.477972ms ago: executing program 9 (id=6719): syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x8740, 0x10000, 0x1, 0x81}, &(0x7f00000001c0), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) syz_ublk_setup_io_uring(0xe0a, &(0x7f0000000380)={0x0, 0x9de0, 0x0, 0x3, 0x379, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_submit(r5, r2, r3, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x28, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x835e, 0x20880, 0x0, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r6, 0x5) r7 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x46, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r8}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r8, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x1, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x200040]}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 660.226183ms ago: executing program 8 (id=6720): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) 400.142524ms ago: executing program 3 (id=6721): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r1, &(0x7f0000002200)=""/87, 0x57, 0xfffd) pread64(r0, &(0x7f0000000300)=""/4089, 0xff9, 0x4) 0s ago: executing program 3 (id=6722): syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000003000000e27f00000100000001010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000002010006612e2c4508d195c0432c2"], 0x50) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb100000000102000905", @ANYBLOB="fa36"], 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) sendmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000003b40)="fd3ad492dd5acdab7d1ccd5394ab06f345c2368e633d363a2c95544ccb45c28fad7043a4f39a335337d73b5d8dd7a814b1a3d6bf2c872d6f2bae6e9ba19ef9588aa44638a492f5213ae118b10b0295a4e0295cecd1c92e993c872e742b92a0c9e28f14442f439ba83b", 0x69}, {&(0x7f0000004140)="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", 0x5e0}], 0x2}}], 0x1, 0x4000001) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd1ec, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), &(0x7f0000000140)) (async) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a}, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) (async) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6fc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0x0, 0x81, 0x0, 0x0, 0x4, 0x0, 0x848a}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/80) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000d0a010800000000000004000a00fffe0900020073797a31000000000900020073797a310000000004"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) (async) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): t.0: fail, usb_ep_enable returned -22 [ 1658.050847][T16916] hub 1-1:1.0: bad descriptor, ignoring hub [ 1658.050872][T16916] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1658.053753][T16916] cdc_wdm 1-1:1.0: skipping garbage [ 1658.053769][T16916] cdc_wdm 1-1:1.0: skipping garbage [ 1658.058350][T16916] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1658.132346][T28326] loop4: detected capacity change from 0 to 7 [ 1658.148430][T28326] Dev loop4: unable to read RDB block 7 [ 1658.148474][T28326] loop4: unable to read partition table [ 1658.148734][T28326] loop4: partition table beyond EOD, truncated [ 1658.148752][T28326] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1658.308256][T32611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.354197][T16916] usb 1-1: USB disconnect, device number 118 [ 1658.469636][T28343] [U] IG"[\ETȍƈoG 3,& [ 1658.469656][T28343] [U] x/D+:}Yu)GX˚īG.^ [ 1658.469677][T28343] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1658.469704][T28343] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1658.469716][T28343] [U] DV8[B:;3d_) [ 1658.469728][T28343] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1658.469739][T28343] [U] M8x]bY_v-; |O)qKVt [ 1658.469751][T28343] [U] _v$p|^&=],M/!av+;2hX-> [ 1658.469767][T28343] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1658.469785][T28343] [U] %P [ 1658.469796][T28343] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1658.470414][T28342] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rsI2T\à5!+ņ [ 1658.875526][ T5706] usb 10-1: new low-speed USB device number 69 using dummy_hcd [ 1658.913923][T28364] netlink: 'syz.0.6460': attribute type 1 has an invalid length. [ 1658.972913][T28368] tipc: Enabled bearer , priority 0 [ 1658.973583][T28368] syzkaller0: entered promiscuous mode [ 1658.973602][T28368] syzkaller0: entered allmulticast mode [ 1659.034476][ T5706] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1659.035546][ T5706] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1659.035568][ T5706] usb 10-1: config 0 has no interface number 0 [ 1659.035599][ T5706] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1659.035621][ T5706] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1659.035662][ T5706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.041796][ T5706] usb 10-1: config 0 descriptor?? [ 1659.043308][T28348] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1659.121065][ T5706] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1659.234200][T17404] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1659.344153][T16916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.383870][T17404] usb 9-1: Using ep0 maxpacket: 32 [ 1659.385993][T17404] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1659.388645][T17404] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1659.388661][T17404] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1659.388716][T17404] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1659.388742][T17404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1659.388754][T17404] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1659.388767][T17404] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1659.388790][T17404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.392552][T17404] usb 9-1: config 0 descriptor?? [ 1659.446605][ T5706] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1659.531978][T32611] usb 10-1: USB disconnect, device number 69 [ 1659.606718][T17404] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1659.644236][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 1659.644825][T28374] tipc: Resetting bearer [ 1659.645004][ T5706] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1659.647928][ T5706] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1659.647952][ T5706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.647972][ T5706] usb 1-1: config 0 has no interface number 0 [ 1659.648010][ T5706] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1659.648031][ T5706] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1659.648058][ T5706] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1659.649239][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6461'. [ 1659.650903][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.650927][ T5706] usb 1-1: Product: syz [ 1659.650942][ T5706] usb 1-1: Manufacturer: syz [ 1659.650956][ T5706] usb 1-1: SerialNumber: syz [ 1659.659597][ T5706] usb 1-1: config 0 descriptor?? [ 1659.696740][ T5675] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1659.697168][ T5675] [drm:udl_init] *ERROR* Selecting channel failed [ 1659.789110][ T5706] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1659.789386][ T5706] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1659.792849][ T5675] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1659.792871][ T5675] [drm] Initialized udl on minor 1 [ 1659.828080][ T5675] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1659.829984][ T5675] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1659.831736][T32611] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1659.832334][T32611] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1659.832519][T32611] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1659.842264][ T5706] usb 9-1: USB disconnect, device number 120 [ 1659.855924][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.891661][ T5675] usb 4-1: USB disconnect, device number 72 [ 1659.892856][T28367] tipc: Resetting bearer [ 1659.918177][T32611] usb 1-1: USB disconnect, device number 119 [ 1659.938239][ T5706] usblp0: removed [ 1659.998044][T28367] tipc: Disabling bearer [ 1660.092279][T28433] fuse: Bad value for 'fd' [ 1660.319575][T28452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.364037][T14158] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1660.402810][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.462120][T28452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.514140][T14158] usb 1-1: Using ep0 maxpacket: 16 [ 1660.514609][T14158] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=69.ee [ 1660.517452][T14158] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1660.517475][T14158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.517494][T14158] usb 1-1: config 0 has no interface number 0 [ 1660.517531][T14158] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1660.517553][T14158] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1660.517578][T14158] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1660.520973][T14158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.520996][T14158] usb 1-1: Product: syz [ 1660.521010][T14158] usb 1-1: Manufacturer: syz [ 1660.521024][T14158] usb 1-1: SerialNumber: syz [ 1660.614295][T14158] usb 1-1: config 0 descriptor?? [ 1660.764741][T14158] ushc 1-1:0.184: probe with driver ushc failed with error -110 [ 1660.908088][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6466'. [ 1660.937165][T28482] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1660.978886][T28482] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1661.042670][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6466'. [ 1661.067192][T28487] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1661.091582][T28487] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1661.183149][T28365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.196289][T28365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.273232][T28503] [U] IG"[\ETȍƈoG 3,& [ 1661.273245][T28503] [U] x/D+:}Yu)GX˚īG.^ [ 1661.273257][T28503] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1661.273269][T28503] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1661.273275][T28503] [U] DV8[B:;3d_) [ 1661.273281][T28503] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1661.273287][T28503] [U] M8x]bY_v-; |O)qKVt [ 1661.273293][T28503] [U] _v$p|^&=],M/!av+;2hX-> [ 1661.273301][T28503] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1661.273309][T28503] [U] %P [ 1661.273327][T28503] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1661.320711][T28500] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rsI2T\à5!+ņ [ 1661.396704][T28512] loop4: detected capacity change from 0 to 7 [ 1661.398971][T28512] Dev loop4: unable to read RDB block 7 [ 1661.399013][T28512] loop4: unable to read partition table [ 1661.399253][T28512] loop4: partition table beyond EOD, truncated [ 1661.400293][T28512] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1661.429260][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.494054][T32611] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1661.525882][ T30] kauditd_printk_skb: 686 callbacks suppressed [ 1661.525900][ T30] audit: type=1326 audit(1789981168.227:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.526160][ T30] audit: type=1326 audit(1789981168.227:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.526523][ T30] audit: type=1326 audit(1789981168.227:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.526734][ T30] audit: type=1326 audit(1789981168.227:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.526983][ T30] audit: type=1326 audit(1789981168.227:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.527189][ T30] audit: type=1326 audit(1789981168.227:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.527470][ T30] audit: type=1326 audit(1789981168.227:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.528530][ T30] audit: type=1326 audit(1789981168.227:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.528855][ T30] audit: type=1326 audit(1789981168.227:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.529428][ T30] audit: type=1326 audit(1789981168.227:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28516 comm="syz.7.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe60ec code=0x7ffc0000 [ 1661.669868][T32611] usb 10-1: Using ep0 maxpacket: 8 [ 1661.670592][T32611] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1661.721309][T32611] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.721363][T32611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.798791][T32611] usb 10-1: config 0 descriptor?? [ 1661.812448][T28528] syzkaller1: entered promiscuous mode [ 1661.812469][T28528] syzkaller1: entered allmulticast mode [ 1661.855031][T32611] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1662.284189][ T1467] usb 1-1: USB disconnect, device number 120 [ 1662.422716][T28532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6472'. [ 1662.467308][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.677513][T28563] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6476'. [ 1662.851026][T28505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.864499][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.868645][T28505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.016836][T28586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6477'. [ 1663.125719][T32611] gspca_vc032x: reg_w err -71 [ 1663.125818][T32611] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1663.150922][T32611] usb 10-1: USB disconnect, device number 70 [ 1663.514045][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.768202][ T5675] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1663.818048][T28619] input: syz0 as /devices/virtual/input/input197 [ 1663.896699][T28622] [U] IG"[\ETȍƈoG 3,& [ 1663.896718][T28622] [U] x/D+:}Yu)GX˚īG.^ [ 1663.896739][T28622] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1663.896763][T28622] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1663.896774][T28622] [U] DV8[B:;3d_) [ 1663.896784][T28622] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1663.896794][T28622] [U] M8x]bY_v-; |O)qKVt [ 1663.896804][T28622] [U] _v$p|^&=],M/!av+;2hX-> [ 1663.896818][T28622] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1663.896833][T28622] [U] %P [ 1663.896843][T28622] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1663.902389][T28621] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rsI2T\à5!+ņ [ 1663.920000][ T5675] usb 9-1: Using ep0 maxpacket: 32 [ 1663.974685][ T5675] usb 9-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=f4.2d [ 1664.026025][ T5675] usb 9-1: config 5 has an invalid interface number: 117 but max is 0 [ 1664.026054][ T5675] usb 9-1: config 5 has no interface number 0 [ 1664.026084][ T5675] usb 9-1: config 5 interface 117 has no altsetting 0 [ 1664.102308][ T5675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.102335][ T5675] usb 9-1: Product: syz [ 1664.102349][ T5675] usb 9-1: Manufacturer: syz [ 1664.102363][ T5675] usb 9-1: SerialNumber: syz [ 1664.154187][T32611] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1664.171761][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6483'. [ 1664.183236][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6483'. [ 1664.236272][T28636] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6483'. [ 1664.236318][T28636] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6483'. [ 1664.305945][T32611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1664.307181][T32611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1664.307200][T32611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1664.307220][T32611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.312825][T28619] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1664.349093][T28636] netlink: 'syz.9.6483': attribute type 1 has an invalid length. [ 1664.372840][T32611] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1664.386685][ T5675] rndis_host 9-1:5.117: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1664.440291][ T5675] usb 9-1: USB disconnect, device number 121 [ 1664.556311][T32609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.691268][T17404] usb 4-1: USB disconnect, device number 73 [ 1664.864075][T14158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.301633][T28723] netlink: 'syz.3.6491': attribute type 10 has an invalid length. [ 1665.360911][T28723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6491'. [ 1665.390186][T28723] bridge3: entered promiscuous mode [ 1665.390209][T28723] bridge3: entered allmulticast mode [ 1665.511721][T28743] [U] IG"[\ETȍƈoG 3,& [ 1665.511741][T28743] [U] x/D+:}Yu)GX˚īG.^ [ 1665.511763][T28743] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1665.511786][T28743] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1665.511798][T28743] [U] DV8[B:;3d_) [ 1665.511808][T28743] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1665.511821][T28743] [U] M8x]bY_v-; |O)qKVt [ 1665.511832][T28743] [U] _v$p|^&=],M/!av+;2hX-> [ 1665.511848][T28743] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1665.511865][T28743] [U] %P [ 1665.511876][T28743] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1665.512170][T28742] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rsI2T\à5!+ņ [ 1665.613547][T32611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.717705][T28754] netlink: 'syz.3.6496': attribute type 1 has an invalid length. [ 1665.799147][T28770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6496'. [ 1665.802723][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6497'. [ 1665.883809][ T1467] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1665.890655][T28754] bond2: (slave gretap1): making interface the new active one [ 1665.911687][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.912417][T28754] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1665.932973][T28770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1666.033768][ T1467] usb 9-1: Using ep0 maxpacket: 32 [ 1666.034669][ T1467] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1666.035780][ T1467] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.035826][ T1467] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1666.035852][ T1467] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.035877][ T1467] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1666.038106][ T1467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.038130][ T1467] usb 9-1: Product: syz [ 1666.038144][ T1467] usb 9-1: Manufacturer: syz [ 1666.038158][ T1467] usb 9-1: SerialNumber: syz [ 1666.051761][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1666.063550][ T1467] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input198 [ 1666.263831][ T1467] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1666.263854][ T1467] (id 0x00) [ 1666.364030][ T1467] rc_core: IR keymap rc-imon-pad not found [ 1666.364043][ T1467] Registered IR keymap rc-empty [ 1666.364092][ T1467] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1666.364102][ T1467] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1666.475067][ T1467] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1666.515300][ T1467] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input199 [ 1666.568822][ T1467] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:122> initialized [ 1666.626755][T17404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.678208][T28818] hub 1-0:1.0: USB hub found [ 1666.718419][T28809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.718583][T28809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.718837][T28809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.732824][T28818] hub 1-0:1.0: 1 port detected [ 1666.827344][T28809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.827442][T28809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.083106][T28826] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 1667.190957][T28836] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6502'. [ 1667.288944][ T1467] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1667.382658][T28845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6503'. [ 1667.437363][ T1467] usb 1-1: Using ep0 maxpacket: 16 [ 1667.441469][ T1467] usb 1-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 1667.449454][ T1467] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 1667.449480][ T1467] usb 1-1: config 0 has no interface number 0 [ 1667.449544][ T1467] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1667.449569][ T1467] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1667.449606][ T1467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.474260][ T1467] usb 1-1: config 0 descriptor?? [ 1667.699573][ T1467] usb 1-1: USB disconnect, device number 121 [ 1667.742026][ T5706] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1667.781644][T28878] [U] IG"[\ETȍƈoG 3,& [ 1667.781662][T28878] [U] x/D+:}Yu)GX˚īG.^ [ 1667.781682][T28878] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1667.781708][T28878] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1667.781721][T28878] [U] DV8[B:;3d_) [ 1667.781732][T28878] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1667.781744][T28878] [U] M8x]bY_v-; |O)qKVt [ 1667.781756][T28878] [U] _v$p|^&=],M/!av+;2hX-> [ 1667.781771][T28878] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1667.781788][T28878] [U] %P [ 1667.781799][T28878] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1667.782159][T28877] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rsI2T\à5!+ņ [ 1667.895896][ T5706] usb 10-1: Using ep0 maxpacket: 16 [ 1667.898788][ T5706] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1667.900910][ T5706] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.900939][ T5706] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.900961][ T5706] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1667.901064][ T5706] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1667.901097][ T5706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.938199][ T5706] usb 10-1: config 0 descriptor?? [ 1668.166263][T28848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.166952][T28848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.219947][T28887] rB: renamed from lo [ 1668.341366][T28897] netlink: 'syz.0.6510': attribute type 5 has an invalid length. [ 1668.484358][ T5706] hid (null): report_id 49134 is invalid [ 1668.484396][ T5706] hid (null): unknown global tag 0xd [ 1668.484470][ T5706] hid (null): unknown global tag 0xc [ 1668.487013][ T5706] hid (null): unknown global tag 0xc [ 1668.487078][ T5706] hid (null): global environment stack overflow [ 1668.611572][T28826] imon:send_packet: task interrupted [ 1668.613383][T28826] imon:send_packet: packet tx failed (-512) [ 1668.616235][T28826] imon:vfd_write: send packet #1 failed [ 1668.673804][ T1465] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1668.696384][T17404] usb 10-1: USB disconnect, device number 71 [ 1668.707396][ T1467] usb 9-1: USB disconnect, device number 122 [ 1668.709428][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.709480][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.823900][ T1465] usb 1-1: Using ep0 maxpacket: 32 [ 1668.824610][ T1465] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1668.825589][ T1465] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.829858][ T1465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.829882][ T1465] usb 1-1: Product: syz [ 1668.829897][ T1465] usb 1-1: Manufacturer: syz [ 1668.829912][ T1465] usb 1-1: SerialNumber: syz [ 1668.841503][ T1465] usb 1-1: config 0 descriptor?? [ 1668.898916][ T1465] cdc_ether 1-1:0.0: missing cdc header descriptor [ 1668.899440][ T1465] usb 1-1: unsupported MDLM descriptors [ 1669.069542][T28903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.070585][T28903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.192289][T17404] usb 1-1: USB disconnect, device number 122 [ 1669.227459][ T1467] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1669.361802][T28977] could not allocate digest TFM handle sha1-ni [ 1669.378393][ T1467] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1669.383023][ T1467] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.383055][ T1467] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.383077][ T1467] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1669.383117][ T1467] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.389483][ T1467] usb 9-1: config 0 descriptor?? [ 1669.397090][ T1467] hub 9-1:0.0: USB hub found [ 1669.444031][ T5706] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1669.548417][T28991] [U] IG"[\ETȍƈoG 3,& [ 1669.548430][T28991] [U] x/D+:}Yu)GX˚īG.^ [ 1669.548443][T28991] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1669.548455][T28991] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1669.548462][T28991] [U] DV8[B:;3d_) [ 1669.548467][T28991] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1669.548474][T28991] [U] M8x]bY_v-; |O)qKVt [ 1669.548479][T28991] [U] _v$p|^&=],M/!av+;2hX-> [ 1669.548487][T28991] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1669.548496][T28991] [U] %P [ 1669.548501][T28991] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1669.548715][T28990] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r (046d:0825) [ 1671.969052][T29081] __nla_validate_parse: 5 callbacks suppressed [ 1671.969072][T29081] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6526'. [ 1671.989787][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.213749][T17404] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1672.385394][T17404] usb 9-1: Using ep0 maxpacket: 32 [ 1672.386094][T17404] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1672.389794][T17404] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1672.389818][T17404] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1672.389839][T17404] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1672.389860][T17404] usb 9-1: config 1 has no interface number 0 [ 1672.389898][T17404] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 1672.389924][T17404] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50436, setting to 1024 [ 1672.389950][T17404] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1672.389990][T17404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.456873][T29081] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1672.471647][T17404] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1672.663196][T29081] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1672.685010][T17404] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1672.720165][ T5706] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1672.720219][ T5706] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 1672.744184][ T5706] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 1672.762592][T29044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.766109][T29044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.864575][T17404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.888329][T29081] netlink: 'syz.8.6526': attribute type 15 has an invalid length. [ 1672.888424][T29081] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6526'. [ 1672.891521][T17404] usb 9-1: USB disconnect, device number 124 [ 1672.901395][T17404] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1673.050863][T29118] [U] IG"[\ETȍƈoG 3,& [ 1673.050882][T29118] [U] x/D+:}Yu)GX˚īG.^ [ 1673.050913][T29118] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1673.050935][T29118] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1673.050949][T29118] [U] DV8[B:;3d_) [ 1673.050960][T29118] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1673.050972][T29118] [U] M8x]bY_v-; |O)qKVt [ 1673.050983][T29118] [U] _v$p|^&=],M/!av+;2hX-> [ 1673.050997][T29118] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1673.051012][T29118] [U] %P [ 1673.051023][T29118] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1673.051242][T29116] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1674.192638][T29174] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1674.192650][T29174] [U] DV8[B:;3d_) [ 1674.192661][T29174] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1674.192672][T29174] [U] M8x]bY_v-; |O)qKVt [ 1674.192683][T29174] [U] _v$p|^&=],M/!av+;2hX-> [ 1674.192698][T29174] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1674.192715][T29174] [U] %P [ 1674.192726][T29174] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1674.192991][T29173] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r -90 [ 1675.340534][T29207] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6543'. [ 1675.366212][ T1465] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1675.414569][ T5675] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1675.448992][ T1465] usb 1-1: USB disconnect, device number 127 [ 1675.463201][T18588] udevd[18588]: setting owner of /dev/bus/usb/001/127 to uid=0, gid=0 failed: No such file or directory [ 1675.488051][T29165] netlink: 'syz.9.6537': attribute type 21 has an invalid length. [ 1675.554094][ T5675] usb 9-1: device descriptor read/64, error -71 [ 1675.556616][T29248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.557639][T29248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.754928][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.755256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.755664][T18773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.755974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.797347][ T5675] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1675.933789][ T5675] usb 9-1: device descriptor read/64, error -71 [ 1675.957241][ T1465] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1675.984079][T16916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.043946][ T5675] usb usb9-port1: attempt power cycle [ 1676.105681][ T1465] usb 4-1: Using ep0 maxpacket: 8 [ 1676.106405][ T1465] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1676.118070][ T1465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.118096][ T1465] usb 4-1: Product: syz [ 1676.118110][ T1465] usb 4-1: Manufacturer: syz [ 1676.118124][ T1465] usb 4-1: SerialNumber: syz [ 1676.125805][ T1465] usb 4-1: config 0 descriptor?? [ 1676.140156][ T1465] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1676.164020][ T1465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.393907][ T5675] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1676.414962][ T5675] usb 9-1: device descriptor read/8, error -71 [ 1676.664313][ T5675] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1676.684402][ T5675] usb 9-1: device descriptor read/8, error -71 [ 1676.700444][T29306] [U] IG"[\ETȍƈoG 3,& [ 1676.700464][T29306] [U] x/D+:}Yu)GX˚īG.^ [ 1676.700483][T29306] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1676.700506][T29306] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1676.700517][T29306] [U] DV8[B:;3d_) [ 1676.700528][T29306] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1676.700539][T29306] [U] M8x]bY_v-; |O)qKVt [ 1676.700551][T29306] [U] _v$p|^&=],M/!av+;2hX-> [ 1676.700566][T29306] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1676.700581][T29306] [U] %P [ 1676.700592][T29306] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1676.700614][T29306] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1678.693349][T29375] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1678.693360][T29375] [U] DV8[B:;3d_) [ 1678.693371][T29375] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1678.693382][T29375] [U] M8x]bY_v-; |O)qKVt [ 1678.693392][T29375] [U] _v$p|^&=],M/!av+;2hX-> [ 1678.693407][T29375] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1678.693421][T29375] [U] %P [ 1678.693427][T29375] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1678.693438][T29375] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1680.592395][T29525] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1680.592407][T29525] [U] DV8[B:;3d_) [ 1680.592419][T29525] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1680.592431][T29525] [U] M8x]bY_v-; |O)qKVt [ 1680.592443][T29525] [U] _v$p|^&=],M/!av+;2hX-> [ 1680.592459][T29525] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1680.592477][T29525] [U] %P [ 1680.592487][T29525] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1680.592511][T29525] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1683.296019][T29626] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1683.296031][T29626] [U] DV8[B:;3d_) [ 1683.296043][T29626] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1683.296055][T29626] [U] M8x]bY_v-; |O)qKVt [ 1683.296067][T29626] [U] _v$p|^&=],M/!av+;2hX-> [ 1683.296083][T29626] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1683.296100][T29626] [U] %P [ 1683.296110][T29626] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1683.296134][T29626] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1685.752149][T29698] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1685.752155][T29698] [U] DV8[B:;3d_) [ 1685.752161][T29698] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1685.752167][T29698] [U] M8x]bY_v-; |O)qKVt [ 1685.752173][T29698] [U] _v$p|^&=],M/!av+;2hX-> [ 1685.752181][T29698] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1685.752189][T29698] [U] %P [ 1685.752195][T29698] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1685.752206][T29698] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1687.770568][T29791] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1687.770580][T29791] [U] DV8[B:;3d_) [ 1687.770591][T29791] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1687.770603][T29791] [U] M8x]bY_v-; |O)qKVt [ 1687.770614][T29791] [U] _v$p|^&=],M/!av+;2hX-> [ 1687.770629][T29791] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1687.770645][T29791] [U] %P [ 1687.770651][T29791] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1687.770670][T29791] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1690.311999][T29894] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1690.312011][T29894] [U] DV8[B:;3d_) [ 1690.312022][T29894] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1690.312031][T29894] [U] M8x]bY_v-; |O)qKVt [ 1690.312043][T29894] [U] _v$p|^&=],M/!av+;2hX-> [ 1690.312057][T29894] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1690.312073][T29894] [U] %P [ 1690.312084][T29894] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1690.312107][T29894] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1694.132091][T29997] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1694.132097][T29997] [U] DV8[B:;3d_) [ 1694.132103][T29997] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1694.132109][T29997] [U] M8x]bY_v-; |O)qKVt [ 1694.132115][T29997] [U] _v$p|^&=],M/!av+;2hX-> [ 1694.132123][T29997] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1694.132140][T29997] [U] %P [ 1694.132146][T29997] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1694.132158][T29997] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1697.113323][T30081] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1697.113335][T30081] [U] DV8[B:;3d_) [ 1697.113347][T30081] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1697.113359][T30081] [U] M8x]bY_v-; |O)qKVt [ 1697.113371][T30081] [U] _v$p|^&=],M/!av+;2hX-> [ 1697.113387][T30081] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1697.113404][T30081] [U] %P [ 1697.113415][T30081] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1697.113439][T30081] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1698.247997][T30185] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1698.248009][T30185] [U] DV8[B:;3d_) [ 1698.248020][T30185] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1698.248031][T30185] [U] M8x]bY_v-; |O)qKVt [ 1698.248042][T30185] [U] _v$p|^&=],M/!av+;2hX-> [ 1698.248056][T30185] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1698.248072][T30185] [U] %P [ 1698.248083][T30185] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1698.248105][T30185] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1700.921717][T30298] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1700.921727][T30298] [U] DV8[B:;3d_) [ 1700.921736][T30298] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1700.921748][T30298] [U] M8x]bY_v-; |O)qKVt [ 1700.921760][T30298] [U] _v$p|^&=],M/!av+;2hX-> [ 1700.921774][T30298] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1700.921789][T30298] [U] %P [ 1700.921800][T30298] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1700.921823][T30298] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1703.141674][T30393] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1703.141680][T30393] [U] DV8[B:;3d_) [ 1703.141685][T30393] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1703.141691][T30393] [U] M8x]bY_v-; |O)qKVt [ 1703.141697][T30393] [U] _v$p|^&=],M/!av+;2hX-> [ 1703.141705][T30393] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1703.141714][T30393] [U] %P [ 1703.141719][T30393] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1703.141732][T30393] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2rB 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1705.370811][T30508] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1705.370823][T30508] [U] DV8[B:;3d_) [ 1705.370834][T30508] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1705.370846][T30508] [U] M8x]bY_v-; |O)qKVt [ 1705.370858][T30508] [U] _v$p|^&=],M/!av+;2hX-> [ 1705.370872][T30508] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1705.370888][T30508] [U] %P [ 1705.370899][T30508] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1705.370921][T30508] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r, priority 0 [ 1707.472732][T30593] tipc: Resetting bearer [ 1707.510297][T32611] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1707.526747][T32611] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.526810][T32611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.527922][T30593] tipc: Disabling bearer [ 1707.567243][T32611] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1707.772047][T30618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.773032][T30618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.803711][T32609] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1707.874600][ T5675] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1707.888000][T30627] [U] IG"[\ETȍƈoG 3,& [ 1707.888015][T30627] [U] x/D+:}Yu)GX˚īG.^ [ 1707.888036][T30627] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSα .׫u [ 1707.888059][T30627] [U] MO\-QrK$ubBuUE2(9TNM=`ZWJ)|hi$-5S [ 1707.888071][T30627] [U] DV8[B:;3d_) [ 1707.888082][T30627] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 1707.888093][T30627] [U] M8x]bY_v-; |O)qKVt [ 1707.888104][T30627] [U] _v$p|^&=],M/!av+;2hX-> [ 1707.888119][T30627] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 1707.888135][T30627] [U] %P [ 1707.888146][T30627] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 1707.888168][T30627] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r HID v0.00 Device [syz1] on syz0 [ 1708.627591][T32611] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1708.643862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.704117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.714684][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.770447][T30667] fido_id[30667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1708.784359][T32615] usb 10-1: USB disconnect, device number 85 [ 1708.838441][T32611] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1708.838457][T32611] stv0680 4-1:4.0: last error: 86, command = 0xc [ 1708.855682][T32611] usb 4-1: USB disconnect, device number 90 [ 1709.198712][T32609] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1709.202684][T32609] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1709.208651][T30608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.214314][T30608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.246046][T32609] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:a4:4f:84:43:1b [ 1709.627856][T30731] fuse: blksize only supported for fuseblk [ 1709.642407][T30741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.659465][T30741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.699570][T30741] netlink: 'syz.9.6708': attribute type 1 has an invalid length. [ 1709.807894][T32609] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1709.838004][T30747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.842161][T30747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.875525][T30741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1709.899716][T30747] AppArmor: change_hat: Invalid input '0@' [ 1709.946067][T30791] netlink: 'syz.3.6709': attribute type 4 has an invalid length. [ 1709.954249][T32609] usb 9-1: Using ep0 maxpacket: 16 [ 1709.970005][T32609] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1709.974031][ T5706] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1709.995060][T32609] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.995088][T32609] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1709.995129][T32609] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1709.995164][T32609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.037254][T32609] usb 9-1: config 0 descriptor?? [ 1710.080338][T30791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6709'. [ 1710.104170][ T5706] usb 10-1: device descriptor read/64, error -71 [ 1710.344117][ T5706] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1710.474800][ T5706] usb 10-1: device descriptor read/64, error -71 [ 1710.480193][T32609] elan 0003:04F3:074D.0064: failed to start in urb: -90 [ 1710.507247][T32609] input: HID 04f3:074d as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:04F3:074D.0064/input/input207 [ 1710.551088][T32609] elan 0003:04F3:074D.0064: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.8-1/input0 [ 1710.584114][ T5706] usb usb10-port1: attempt power cycle [ 1710.586593][T30810] netlink: 'syz.3.6710': attribute type 1 has an invalid length. [ 1710.712040][T30732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.718924][T30732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.731438][ T1465] usb 9-1: USB disconnect, device number 11 [ 1710.866231][ T5280] aqc111 1-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -71 [ 1710.866650][ T5280] aqc111 1-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -71 [ 1710.868752][ T5280] aqc111 1-1:1.105 eth5: Failed to read(0x1) reg index 0x0001: -71 [ 1710.872411][ T5280] aqc111 1-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -71 [ 1710.872958][ T5280] aqc111 1-1:1.105 eth5: Failed to write(0x61) reg index 0x0000: -71 [ 1710.891341][T14158] usb 1-1: USB disconnect, device number 12 [ 1710.902265][ T5280] aqc111 1-1:1.105 eth5: Error submitting the control message: status=-19 [ 1710.902567][ T5280] aqc111 1-1:1.105 eth5: Error submitting the control message: status=-19 [ 1710.908210][ T5280] aqc111 1-1:1.105 eth5: Error submitting the control message: status=-19 [ 1710.908344][ T5280] aqc111 1-1:1.105 eth5: Error submitting the control message: status=-19 [ 1710.944696][ T5706] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1710.966410][T14158] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1710.980463][ T5706] usb 10-1: device descriptor read/8, error -71 [ 1710.990824][T30831] sctp: [Deprecated]: syz.3.6711 (pid 30831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1710.990824][T30831] Use struct sctp_sack_info instead [ 1711.105616][T14158] aqc111 1-1:1.105 eth5: Failed to read(0x1) reg index 0x0002: -19 [ 1711.105765][T14158] aqc111 1-1:1.105 eth5: Failed to write(0x1) reg index 0x0002: -19 [ 1711.105903][T14158] aqc111 1-1:1.105 eth5: Failed to write(0x1) reg index 0x0002: -19 [ 1711.106123][T14158] aqc111 1-1:1.105 eth5: Failed to write(0x61) reg index 0x0000: -19 [ 1711.188042][ T1467] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1711.222378][ T5706] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1711.245908][ T5706] usb 10-1: device descriptor read/8, error -71 [ 1711.350458][T32609] net_ratelimit: 7 callbacks suppressed [ 1711.350478][T32609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.364314][ T5706] usb usb10-port1: unable to enumerate USB device [ 1711.388151][T14158] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1711.388268][T14158] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1711.388389][T14158] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1711.724686][T14158] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1711.825882][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.884360][T14158] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1711.885703][T14158] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.885758][T14158] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1711.885794][T14158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.062129][T30889] syz.3.6715: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1712.062250][T30889] CPU: 0 UID: 0 PID: 30889 Comm: syz.3.6715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1712.062280][T30889] Tainted: [L]=SOFTLOCKUP [ 1712.062289][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.062303][T30889] Call Trace: [ 1712.062312][T30889] [ 1712.062322][T30889] dump_stack_lvl+0xe8/0x150 [ 1712.062360][T30889] warn_alloc+0x24d/0x270 [ 1712.062389][T30889] ? __pfx_warn_alloc+0x10/0x10 [ 1712.062417][T30889] ? alloc_pages_mpol+0x256/0x390 [ 1712.062452][T30889] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1712.062507][T30889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1712.062536][T30889] ? bpf_check+0xb9/0x2e10 [ 1712.062558][T30889] ? rcu_is_watching+0x16/0xb0 [ 1712.062582][T30889] ? bpf_check+0xb9/0x2e10 [ 1712.062601][T30889] ? rcu_is_watching+0x16/0xb0 [ 1712.062625][T30889] ? bpf_check+0xb9/0x2e10 [ 1712.062643][T30889] __kvmalloc_node_noprof+0x5a1/0x820 [ 1712.062666][T30889] ? bpf_check+0xb9/0x2e10 [ 1712.062687][T30889] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1712.062712][T30889] ? bpf_check+0xb9/0x2e10 [ 1712.062739][T30889] bpf_check+0xb9/0x2e10 [ 1712.062761][T30889] ? lock_acquire+0x115/0x350 [ 1712.062788][T30889] ? ktime_get_with_offset+0x93/0x2d0 [ 1712.062814][T30889] ? __pfx_bpf_check+0x10/0x10 [ 1712.062838][T30889] ? __asan_memset+0x22/0x50 [ 1712.062866][T30889] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1712.062905][T30889] bpf_prog_load+0x14d6/0x1c20 [ 1712.062939][T30889] ? __pfx_bpf_prog_load+0x10/0x10 [ 1712.062984][T30889] __sys_bpf+0xd0d/0xd90 [ 1712.063016][T30889] ? __pfx___sys_bpf+0x10/0x10 [ 1712.063044][T30889] ? do_futex+0x458/0x4e0 [ 1712.063095][T30889] ? rcu_is_watching+0x16/0xb0 [ 1712.063132][T30889] __ia32_sys_bpf+0xba/0xd0 [ 1712.063157][T30889] __do_fast_syscall_32+0x27a/0x6a0 [ 1712.063185][T30889] ? do_fast_syscall_32+0x33/0x70 [ 1712.063208][T30889] ? irqentry_exit+0x10f/0x910 [ 1712.063232][T30889] do_fast_syscall_32+0x33/0x70 [ 1712.063265][T30889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1712.063292][T30889] RIP: 0023:0xf70bf0ec [ 1712.063312][T30889] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1712.063331][T30889] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1712.063353][T30889] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 1712.063368][T30889] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1712.063381][T30889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1712.063395][T30889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1712.063408][T30889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1712.063432][T30889] [ 1712.075415][T30889] Mem-Info: [ 1712.075429][T30889] active_anon:11904 inactive_anon:15 isolated_anon:0 [ 1712.075429][T30889] active_file:11396 inactive_file:9603 isolated_file:0 [ 1712.075429][T30889] unevictable:0 dirty:123 writeback:0 [ 1712.075429][T30889] slab_reclaimable:7162 slab_unreclaimable:128190 [ 1712.075429][T30889] mapped:31232 shmem:3407 pagetables:2255 [ 1712.075429][T30889] sec_pagetables:0 bounce:0 [ 1712.075429][T30889] kernel_misc_reclaimable:0 [ 1712.075429][T30889] free:1276832 free_pcp:10929 free_cma:0 [ 1712.075507][T30889] Node 0 active_anon:47616kB inactive_anon:60kB active_file:45580kB inactive_file:38108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124748kB dirty:492kB writeback:0kB shmem:13628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16344kB pagetables:8900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1712.075564][T30889] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1712.075622][T30889] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.075704][T30889] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1712.075739][T30889] Node 0 DMA32 free:1157432kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47616kB inactive_anon:60kB active_file:45580kB inactive_file:38108kB unevictable:0kB writepending:492kB zspages:564kB present:3129332kB managed:2546636kB mlocked:0kB bounce:0kB free_pcp:41564kB local_pcp:20084kB free_cma:0kB [ 1712.075821][T30889] lowmem_reserve[]: 0 0 0 0 0 [ 1712.075855][T30889] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.075910][T30889] lowmem_reserve[]: 0 0 0 0 0 [ 1712.075964][T30889] Node 1 Normal free:3934540kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:304kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:2152kB free_cma:0kB [ 1712.076023][T30889] lowmem_reserve[]: 0 0 0 0 0 [ 1712.076057][T30889] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1712.076264][T30889] Node 0 DMA32: 1242*4kB (UME) 2604*8kB (UME) 1493*16kB (UME) 1325*32kB (UME) 456*64kB (UME) 277*128kB (UME) 195*256kB (UME) 71*512kB (UME) 27*1024kB (UME) 5*2048kB (UME) 214*4096kB (UM) = 1157432kB [ 1712.076445][T30889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1712.076569][T30889] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 17*16kB (UM) 10*32kB (UM) 11*64kB (UM) 8*128kB (UM) 6*256kB (M) 3*512kB (M) 3*1024kB (UM) 7*2048kB (UM) 955*4096kB (UM) = 3934592kB [ 1712.076746][T30889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.076764][T30889] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1712.076805][T30889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.076822][T30889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.076838][T30889] 24419 total pagecache pages [ 1712.076851][T30889] 19 pages in swap cache [ 1712.076858][T30889] Free swap = 124760kB [ 1712.076867][T30889] Total swap = 124996kB [ 1712.076875][T30889] 2097051 pages RAM [ 1712.076882][T30889] 0 pages HighMem/MovableOnly [ 1712.076890][T30889] 428776 pages reserved [ 1712.076897][T30889] 0 pages cma reserved [ 1712.627055][T32611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.929254][T30913] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6717'. [ 1713.354011][T32615] usb 10-1: new full-speed USB device number 90 using dummy_hcd [ 1713.374211][T14158] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1713.519682][T32615] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1713.520444][T32615] usb 10-1: not running at top speed; connect to a high speed hub [ 1713.520500][T32615] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1713.521501][T32615] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1713.524630][T14158] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1713.525955][T14158] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.525989][T14158] usb 9-1: config 2 interface 0 has no altsetting 0 [ 1713.528663][T14158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.528686][T14158] usb 9-1: Product: syz [ 1713.528701][T14158] usb 9-1: Manufacturer: syz [ 1713.528715][T14158] usb 9-1: SerialNumber: syz [ 1713.539945][T32615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.539971][T32615] usb 10-1: Product: syz [ 1713.540014][T32615] usb 10-1: Manufacturer: syz [ 1713.540029][T32615] usb 10-1: SerialNumber: syz [ 1713.604528][T14158] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1713.604563][T14158] usb 9-1: selecting invalid altsetting 0 [ 1713.615201][T14158] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1713.672324][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.806806][T30944] macvtap1: entered promiscuous mode [ 1713.806999][T30944] macvtap1: entered allmulticast mode [ 1713.807009][T30944] veth1_vlan: entered allmulticast mode [ 1713.810697][ T1467] usb 9-1: USB disconnect, device number 12 [ 1713.900463][T16916] ================================================================== [ 1713.900480][T16916] BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1713.900607][T16916] Read of size 1 at addr ffff88807c640071 by task kworker/1:0/16916 [ 1713.900626][T16916] [ 1713.900640][T16916] CPU: 1 UID: 0 PID: 16916 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.900668][T16916] Tainted: [L]=SOFTLOCKUP [ 1713.900677][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1713.900690][T16916] Workqueue: events rtsx_usb_ms_handle_req [ 1713.900715][T16916] Call Trace: [ 1713.900724][T16916] [ 1713.900733][T16916] dump_stack_lvl+0xe8/0x150 [ 1713.900763][T16916] print_address_description+0x55/0x1e0 [ 1713.900791][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1713.900813][T16916] print_report+0x58/0x70 [ 1713.900837][T16916] kasan_report+0x117/0x150 [ 1713.900862][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1713.900888][T16916] rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1713.900910][T16916] ? lockdep_hardirqs_on+0x7b/0x110 [ 1713.900939][T16916] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1713.900963][T16916] ? rcu_is_watching+0x16/0xb0 [ 1713.900987][T16916] ? process_scheduled_works+0x97a/0x1630 [ 1713.901014][T16916] process_scheduled_works+0xc3d/0x1630 [ 1713.901052][T16916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1713.901079][T16916] ? assign_work+0x3cf/0x5d0 [ 1713.901105][T16916] worker_thread+0xa47/0xfb0 [ 1713.901141][T16916] kthread+0x38b/0x480 [ 1713.901160][T16916] ? __pfx_worker_thread+0x10/0x10 [ 1713.901185][T16916] ? __pfx_kthread+0x10/0x10 [ 1713.901203][T16916] ret_from_fork+0x514/0xb70 [ 1713.901224][T16916] ? __pfx_ret_from_fork+0x10/0x10 [ 1713.901252][T16916] ? load_gs_index+0x97/0xc0 [ 1713.901277][T16916] ? __switch_to+0xc89/0x1420 [ 1713.901304][T16916] ? __pfx_kthread+0x10/0x10 [ 1713.901323][T16916] ret_from_fork_asm+0x1a/0x30 [ 1713.901358][T16916] [ 1713.901366][T16916] [ 1713.901371][T16916] Allocated by task 7866: [ 1713.901381][T16916] kasan_save_track+0x3e/0x80 [ 1713.901400][T16916] __kasan_kmalloc+0x93/0xb0 [ 1713.901419][T16916] __kmalloc_cache_noprof+0x321/0x600 [ 1713.901437][T16916] memstick_check+0x1a7/0x1250 [ 1713.901455][T16916] process_scheduled_works+0xc3d/0x1630 [ 1713.901478][T16916] worker_thread+0xa47/0xfb0 [ 1713.901501][T16916] kthread+0x38b/0x480 [ 1713.901517][T16916] ret_from_fork+0x514/0xb70 [ 1713.901533][T16916] ret_from_fork_asm+0x1a/0x30 [ 1713.901559][T16916] [ 1713.901571][T16916] Freed by task 7866: [ 1713.901580][T16916] kasan_save_track+0x3e/0x80 [ 1713.901598][T16916] kasan_save_free_info+0x40/0x50 [ 1713.901622][T16916] __kasan_slab_free+0x5c/0x80 [ 1713.901640][T16916] kfree+0x1c5/0x650 [ 1713.901663][T16916] memstick_check+0x7b6/0x1250 [ 1713.901680][T16916] process_scheduled_works+0xc3d/0x1630 [ 1713.901704][T16916] worker_thread+0xa47/0xfb0 [ 1713.901727][T16916] kthread+0x38b/0x480 [ 1713.901743][T16916] ret_from_fork+0x514/0xb70 [ 1713.901758][T16916] ret_from_fork_asm+0x1a/0x30 [ 1713.901783][T16916] [ 1713.901789][T16916] The buggy address belongs to the object at ffff88807c640000 [ 1713.901789][T16916] which belongs to the cache kmalloc-2k of size 2048 [ 1713.901806][T16916] The buggy address is located 113 bytes inside of [ 1713.901806][T16916] freed 2048-byte region [ffff88807c640000, ffff88807c640800) [ 1713.901828][T16916] [ 1713.901833][T16916] The buggy address belongs to the physical page: [ 1713.901850][T16916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c640 [ 1713.901868][T16916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1713.901885][T16916] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1713.901903][T16916] page_type: f5(slab) [ 1713.901921][T16916] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1713.901938][T16916] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1713.901956][T16916] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1713.901972][T16916] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1713.901990][T16916] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1713.902007][T16916] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1713.902018][T16916] page dumped because: kasan: bad access detected [ 1713.902033][T16916] page_owner tracks the page as allocated [ 1713.902040][T16916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8081, tgid 8080 (syz.4.561), ts 188693796158 [ 1713.902072][T16916] post_alloc_hook+0x1f9/0x250 [ 1713.902098][T16916] get_page_from_freelist+0x2209/0x2280 [ 1713.902117][T16916] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1713.902137][T16916] allocate_slab+0x7d/0x620 [ 1713.902158][T16916] refill_objects+0x2d5/0x350 [ 1713.902181][T16916] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1713.902203][T16916] __kmalloc_cache_noprof+0x39b/0x600 [ 1713.902220][T16916] device_create+0x13d/0x300 [ 1713.902241][T16916] vcs_make_sysfs+0x32/0x80 [ 1713.902310][T16916] vc_allocate+0x5b5/0x690 [ 1713.902333][T16916] con_install+0x9f/0x770 [ 1713.902347][T16916] tty_init_dev+0xd7/0x4d0 [ 1713.902373][T16916] tty_open+0x7d9/0xcc0 [ 1713.902391][T16916] chrdev_open+0x4d9/0x600 [ 1713.902410][T16916] do_dentry_open+0x816/0x1380 [ 1713.902430][T16916] vfs_open+0x3b/0x340 [ 1713.902449][T16916] page last free pid 13 tgid 13 ts 187505193558 stack trace: [ 1713.902462][T16916] __free_frozen_pages+0xc93/0xd90 [ 1713.902488][T16916] skb_release_data+0x8db/0xab0 [ 1713.902511][T16916] __kfree_skb+0x5d/0x210 [ 1713.902531][T16916] batadv_forw_packet_free+0x65/0x1f0 [ 1713.902599][T16916] process_scheduled_works+0xc3d/0x1630 [ 1713.902621][T16916] worker_thread+0xa47/0xfb0 [ 1713.902643][T16916] kthread+0x38b/0x480 [ 1713.902659][T16916] ret_from_fork+0x514/0xb70 [ 1713.902674][T16916] ret_from_fork_asm+0x1a/0x30 [ 1713.902699][T16916] [ 1713.902704][T16916] Memory state around the buggy address: [ 1713.902714][T16916] ffff88807c63ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1713.902728][T16916] ffff88807c63ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1713.902740][T16916] >ffff88807c640000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1713.902750][T16916] ^ [ 1713.902761][T16916] ffff88807c640080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1713.902774][T16916] ffff88807c640100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1713.902784][T16916] ================================================================== [ 1713.902881][T16916] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1714.539584][T16916] CPU: 1 UID: 0 PID: 16916 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.550601][T16916] Tainted: [L]=SOFTLOCKUP [ 1714.554920][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1714.564967][T16916] Workqueue: events rtsx_usb_ms_handle_req [ 1714.570778][T16916] Call Trace: [ 1714.574048][T16916] [ 1714.576982][T16916] vpanic+0x56d/0xa60 [ 1714.580966][T16916] ? __pfx_vpanic+0x10/0x10 [ 1714.585470][T16916] panic+0xc5/0xd0 [ 1714.589190][T16916] ? __pfx_panic+0x10/0x10 [ 1714.593604][T16916] ? preempt_schedule_thunk+0x16/0x40 [ 1714.598970][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.604681][T16916] ? preempt_schedule_thunk+0x16/0x40 [ 1714.610049][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.615763][T16916] check_panic_on_warn+0x89/0xb0 [ 1714.620692][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.626400][T16916] end_report+0x73/0x170 [ 1714.630638][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.636347][T16916] kasan_report+0x128/0x150 [ 1714.640844][T16916] ? rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.646557][T16916] rtsx_usb_ms_handle_req+0x10d2/0x1900 [ 1714.652098][T16916] ? lockdep_hardirqs_on+0x7b/0x110 [ 1714.657294][T16916] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10 [ 1714.663192][T16916] ? rcu_is_watching+0x16/0xb0 [ 1714.667953][T16916] ? process_scheduled_works+0x97a/0x1630 [ 1714.673668][T16916] process_scheduled_works+0xc3d/0x1630 [ 1714.679231][T16916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1714.685208][T16916] ? assign_work+0x3cf/0x5d0 [ 1714.689791][T16916] worker_thread+0xa47/0xfb0 [ 1714.694385][T16916] kthread+0x38b/0x480 [ 1714.698449][T16916] ? __pfx_worker_thread+0x10/0x10 [ 1714.703553][T16916] ? __pfx_kthread+0x10/0x10 [ 1714.708131][T16916] ret_from_fork+0x514/0xb70 [ 1714.712715][T16916] ? __pfx_ret_from_fork+0x10/0x10 [ 1714.717821][T16916] ? load_gs_index+0x97/0xc0 [ 1714.722404][T16916] ? __switch_to+0xc89/0x1420 [ 1714.727079][T16916] ? __pfx_kthread+0x10/0x10 [ 1714.731660][T16916] ret_from_fork_asm+0x1a/0x30 [ 1714.736425][T16916] [ 1714.739692][T16916] Kernel Offset: disabled [ 1714.744026][T16916] Rebooting in 86400 seconds..