last executing test programs: 24m13.3937237s ago: executing program 32 (id=331): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/6, 0x6}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 19m2.504534259s ago: executing program 33 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2e}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18m36.806454922s ago: executing program 34 (id=1974): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000300)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r4) r5 = socket(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18m17.571491565s ago: executing program 35 (id=2116): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x100c8a1, 0xc000, 0x8, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000004140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "661f3491aebcaa5d67ec397255500bb91d50dc950000000069330a2fda11f896ba66fb23a356ed7f9ce0a53de37caa9da1646720714709fa654a21c741fef5f53f1738b4365ba27fcea5a8a83685df8c"}, 0xd8) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4844) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) 17m21.126452346s ago: executing program 36 (id=2390): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda0102030109021200010000000009"], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES64, @ANYRES32=0x0], 0x2c2) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f400000000010104000000000000000003000000300001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa3c0002802ca72b8014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000007400068014000500fe8800000000000000000000000000010400038024000380060002004e220000060001004e220000060001004e200000060001000008000008000100ac14141b14000400fc01000000000000000000000000000108000200ac1e0001080002000000000008000200e0000001"], 0xf4}}, 0x48004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xb3, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0xeb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x0, 0xbb7d145fe5634b7d, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe5, 0x2, 0x6, 0x3, "4c56ce"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1b, 0x80, 0x1, 0x3, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x9, 0x89, 0x9, 0xbb}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x7, "cf"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5, 0x2, "11d83d", "1ee2b6"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0x3, '&T', "9837"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) userfaultfd(0x80800) 10m41.780586142s ago: executing program 37 (id=3894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6004000}, 0x40000) (async) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg0\x00'}) 10m41.66512897s ago: executing program 38 (id=3897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) fstatfs(r0, &(0x7f0000000440)=""/254) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x635f, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x40080) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xdc, 0x6, @multicast}, 0x14) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fstatfs(r0, &(0x7f0000000440)=""/254) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x635f, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x40080) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) (async) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xdc, 0x6, @multicast}, 0x14) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 10m41.591109879s ago: executing program 39 (id=3887): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf25010000001400020077673100000000000000000000000000800008807c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5400098028000080060001000a0000001400020000000000000000000000ffffac1414aa050003000300000028000080090000000000000014000200000000000000000000000000000000010500030002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x48000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x1000000}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0], 0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080029bd7000fddbdf25050000000800090008000000fffffffffffff8010500020003000000"], 0x2c}}, 0x40008091) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) r8 = syz_io_uring_setup(0x492, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000006c0)) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0x10da81, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, r12, 0x0, {0x5, 0x7}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x5e6f, 0xa}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGRAWINFO(r14, 0x80084803, &(0x7f0000000480)=""/176) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 10m41.498698952s ago: executing program 40 (id=3892): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="002426000000d5cb2a809440b23d9a504a9f932cb44efc6243cb5684e0d6ed32ed7a2396fc8832f21a890fe397ec651252917ba9d564e58857a86ddabaf117d9e0a118646d23da80d7b1f5b81786371828b5a5fae8eccb1a42cd7d9bb4cdc0accc2094067164fae0703caad12f6efc6a6f6083f9cf610577ad05a5e0e53056338bc80082267c0cb05baf"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m41.382957269s ago: executing program 41 (id=3899): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) unshare(0x22020600) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x23, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r8 = dup2(r7, r5) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 5m47.113623294s ago: executing program 1 (id=5013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5m46.994823538s ago: executing program 1 (id=5015): syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902aa0003010070020904000000010100000a24010800040201020d2406000003080000000000000c24020601010608000010000c2402000000030000000031092406050601040002090401000001020000090401010101020000090501090000070000072501000080000904020000010200000904020101010200000e24020147010802ba3c51c39a1307240106000500082402010601fc080905820940000900030725"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x10000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e61700000400000081080981"]) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x5b7, 0x10, 0xff, 0xdf}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x5, 0xf9, 0xff, 0x2}, 0x59, &(0x7f0000000140)={0x5, 0xf, 0x59, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xa9dc, 0xf00, 0x2, [0x3f00, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x3, 0xff00, 0x9, [0x0, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x42, 0x1, 0x100, 0x0, 0xd, [0xc0d8]}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7, 0xf00, 0x7, [0xc000, 0xc00f, 0x30, 0xff3f00]}]}, 0x9, [{0x5f, &(0x7f00000001c0)=@string={0x5f, 0x3, "1a8c0c3891de8a568a5f629c50d71134e8e27c8f8f95e05fa915db009e26021f2538dfe4f26693b08ff26444d15c508c8b3c59607a3b0f0c93611aee77970a5897d972b28b44366e09eb7ee74995a3d5ba4346136ff0f11b379ee86434"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x408}}, {0xf9, &(0x7f0000000280)=@string={0xf9, 0x3, "52cf5af77eae944c86187264f6f13cfe2abf0ce0ddf39281732eebc11e24f9d943c52a51affc4a00b2a691fee1be3362eb33ae9dae20e04ccb776ed93a0dc77f256903a8bf1d538b9970eb640e6311f7a13c7dba5d9590056350e3d4ebec86c65ac5a36cfca816aacdd36e96762f13d1733e9ee39806c3cdbbee377ebede8e9fc3311894102d705631f909deafb1042234e6947842a64afc0180db2c6c38e458fd65d6f0621aec5d5ae9157a66f5b29c1f384200488e2f9c6e759af3782f9788db20be8c394d3f35793deb65bc7ff3aa27169ba6d15b220a30f3c289060bb9ad7ab36ac3f519804520850749c43ae8ec9cbc3e2108091c"}}, {0xa9, &(0x7f0000000380)=@string={0xa9, 0x3, "e4629e3fa4bb212070ff85550e6a883b4d1d0596a6e90a55c42eb3db4d0fd15d1a455707c950e397edb15cd7d3338515111c59be0cab329925438f40618d74db266934bf797b612f25f0be2dcde21a3085435e5f823b50c03690687bb0b19fb143483047d1e4d126080f247e1606c0d58074e0482e25d4661a5cf55f7b9b43b25d765cdcf583cf59a8d8d0e457d6ca0362de0c36dd95a5a51ca06e71f0b0598449453d08d8d63b"}}, {0xcc, &(0x7f0000000440)=ANY=[@ANYBLOB="cc036dac61d642dceb7f5e8e752a104cadcc06b17f6f577bb6efff86060068ac90ae6290b22501c1a311ff83878bf6a8704263671e093506aaadf11bb6e7ee1811e32359798cc5f1ed65283ffd148f81b480ae11aa598112decb999ad12cbe98284e91724cfe588ef91a3d05f0505de230c4c1485580bcbf47721eab8eed4f7ba2e0cd94880b2ddcb215ba3f17a76f4b982951eb69e43e5b2ff809f4b145e51059478b63aa8a937b2ec8194983a7a0e4cb17856c5d62e095eddbb02fdd32ce6ecaddef000000000000000000"]}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "97ad02c8def97a4e230e59768362645ca7050c9a247191d84810a4217e7a88259b5b"}}, {0xaa, &(0x7f00000007c0)=ANY=[@ANYBLOB="aa035e322c07e2db1567e75a3cdf455591986b2f4b89f250804cc3c8a3464502fa72d326f67ba07547f59f6a4d2a2e9e6afe752c79bb71bf09b487ffe22699379d45331a032214bfc69dca1506583f0d050898376229bfd840fcb998d8ac77804ae32dca29f483e7a7248edaebb0ab8efea01d28b6ab7a8a44d612c74d9d68130cf50d86a898e979530bfa958af5aa23b1ff38d41feb32d930765651d7cb9fd4a83474affef713d64511d0913cc36c939335bfbc3edcbae6a18cf3d36d4410e3081ede2e7be3a44ebfdacfd620af83d9a417363aedab5a2fda9730a60257fe9f44caea3610fd674d1cac3e367033b418752f6ca69e19b7a2"]}, {0x62, &(0x7f0000000640)=ANY=[@ANYBLOB="6203a94b4234271fe8ac9b854bd6ed18d64284466a572a277e825195733176da424d4e2f2c03c89a3a33f6fd22a52bfe658030dafa8610aaea76b260767164cb3217d9fb52385acf40f29cc6f2a5be3479e8c08ea55052c371d3460838b6f27e76f5"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x240a}}]}) 5m45.718973201s ago: executing program 1 (id=5021): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x1278, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1250, 0x3, 0x0, 0x1, [{0x124c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x1218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x32, 0x1, "d2a08e561b1ea8fe47974918e3a3941c3c9738c4577db5e8fa1dd8a7184d63df825c951bc06e07ed702d071c8ddb"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10000001}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "1e72047a4761ec9767407821925377b5cd026a85b2d7b194d25c42c23b49c2ab059fa4d5f36ad49d995bebfa312929e0e1869a4b2c9c0597d5fa6c6dc2eb8ab34fa7b262380382faabbb50c16726916bbb650ce13e2e36afb7455f9b5baed4c7eaea448921eca2148a2d1bcc88bab1b045960e54454c51aa66704f8195367e2185317d146f245343feba5872203725eec6cf939806c37e3701530b8ac305fe1fdd6361eba94dbe9e9fb4ea5977a8bc2eddf97a789230c76a1200f588c441a87f16cad133b82a2f35603d4ee53b4e0e60b58173dd4ad764e3793adff0882ad4090dd9b41b534abc0b717053e42cd4fe51ee4267993a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1318}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x3, 0x85, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) r5 = syz_open_dev$loop(0x0, 0x3, 0x1a7a40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0xad12, 0x1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001b00)=@urb_type_iso={0x0, {0x6}, 0x1000, 0x20, &(0x7f0000000500)="be4789de334b77326760f2c5531ad778a3a716a01e5da40f526c8a970552a5cf7b49e30d6ba36214f4ace1794bf57c2d7e13e43c5a769569db616adb1c2f787635b17bb4afccc63a4475349a77710a1a034dcc2bdb9dfb635b5d5d4d8cf174277319a482cc31a21abcb5663951be68fb5dfb8e9e4c319f31099506da2c0c52a434210fd3681ac00ea7ca6a57715aceeeef219728c5bbb6249cf96b783eb949510b1a6e402270d24278e4bd08b0b0635c5a0de85b1a878162a79cc42da954a5de46", 0xc1, 0x5, 0x0, 0x3a, 0x5, 0x6, &(0x7f0000000180)="4fcb3fbebd6f10d81b9adfa3802fceb5ae27529f5cbb87fca74cda4ce7d26fa33795c153efd6e55cf8b4a9e89d6402394d6999657daef630e13af8eed2e170cb6c570637ede1982426ea9de33296a8228d1b92096188e907264321b01d97e2501468c50b1b9abffa9123f71fb469b69cf72036b3fe9688b53531", [{0x9, 0x5f, 0xc2}, {0x5, 0x4, 0x7}, {0xf, 0x7f, 0x3}, {0xfff, 0x80000001, 0x1}, {0x8, 0x87, 0x9d}, {0x1, 0x3, 0x6}, {0x10001, 0x48000000, 0x6}, {0x5, 0x4, 0xf6ba}, {0x8, 0x4, 0x10000}, {0x7, 0x9, 0x8000}, {0x4, 0x387, 0xdd64}, {0xd4, 0x5, 0x8}, {0x800, 0x8000, 0x9}, {0x9, 0x2, 0x80}, {0x76, 0x7fffffff, 0x758b}, {0xf4, 0x8, 0x8}, {0x3, 0x7fff, 0x2}, {0xffffffff, 0x6, 0x9}, {0x9, 0x5, 0xfffffff9}, {0x10001, 0x4, 0x1}, {0x6, 0x0, 0x9}, {0x2, 0x8, 0x5}, {0x8, 0x2, 0x7fffffff}, {0x3, 0x9, 0x7}, {0x2, 0x8, 0x9}, {0x83a0, 0x1, 0xffffffff}, {0x8, 0x6, 0x6}, {0x1, 0x10000, 0x5e48}, {0xf, 0x4, 0x4}, {0x9aaa, 0xfffffeff, 0x934}, {0x2, 0x2}, {0x1, 0x3, 0x9}, {0x8, 0x9, 0x16}, {0x2e23, 0x4, 0x5}, {0x401, 0x7, 0x8}, {0x2, 0xfffffffb, 0xfff}, {0x8, 0xbb, 0x3}, {0x7, 0x2}, {0x2379, 0x936, 0x8}, {0xa7, 0x5, 0x10}, {0x4a27, 0x7, 0x6}, {0xfffffff3, 0x5, 0x7}, {0x9, 0x8, 0x7f}, {0x2, 0x7a, 0x7}, {0xecf, 0x0, 0x1c}, {0x8, 0x1, 0x10001}, {0x288, 0xa8, 0x4}, {0x1, 0x6, 0x7}, {0x3ff, 0x1000, 0x80000000}, {0xffff, 0x1000, 0x7}, {0x5, 0xfa6a, 0x8}, {0x4166, 0xfffffff9, 0x7}, {0x3, 0x1, 0x5}, {0x7, 0xc, 0x10}, {0x5, 0x200}, {0xafd6, 0x6, 0x4}, {0x3, 0x7, 0x5}, {0x80000001, 0xfffeffff, 0x2}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r7) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 5m44.518082771s ago: executing program 7 (id=5024): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r6, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) 5m44.313497635s ago: executing program 7 (id=5025): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048051}, 0x8000) preadv(r3, &(0x7f00000002c0)=[{0x0}], 0x1, 0xd4e, 0x17) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000040)={0x8000000000000001, 0xa0000000000, 0x9, 0x7, 0x1ff, 0xff, "980f00235ea8ee9c74686c1cada876bd", 0x1, 0x72, 0x2, 0x9, 0x7, 0xff, 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) fcntl$lock(r6, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0xff}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x100000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) 5m43.64979759s ago: executing program 5 (id=5029): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000190c0)={0x6a132308}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f0000000180)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) rt_sigsuspend(&(0x7f0000000000)={[0x480000000000]}, 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xfffffb82, 0x3, 0x2c4}, 0x10) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0xa, 0xffffffffffffdfff, 0xfffffffc, 0x3}, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0xa4a8}) (async) close(r6) (async) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000019100)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000001c0)={0x2000000d}) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs_stats\x00') pread64(r8, &(0x7f0000019280)=""/102356, 0x18fd4, 0x200) 5m43.522939939s ago: executing program 5 (id=5030): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404060000000000"], 0x40}, 0x0) 5m43.43297051s ago: executing program 5 (id=5031): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)={0x0, 0x3}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0x3, 0x2, 0x86f}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="2e8628956b5794e737069514114927f7cbe47cfa8c5a49af5a55baca92476ae9f7dfa2d70af27c06889e3738a8a0c95f3cc0d3d2df6436124d368e6a5f5063e09a0e9c26423130801860c7579244852c5e024ef1a7a7543f1f90e19e2f18722a05b8ec5a3b84adcd", @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES16=r3, @ANYRES16=0x0, @ANYRES32=0x0], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) socket(0x27, 0xa, 0x6) (async) listen(r2, 0x6) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000a80)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="20ee44000000450133ed4286ce10a804a83f83f226e6b33fafff0689fce2f335c61a248712cd81107f40e849bee5d5c2294fd5d33741c9894b95a902a639c7bff0afd4d11d0ee46b42df32"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280008e7", @ANYRES16=r3, @ANYBLOB="01032cbd700000dcdf25000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70200000100e0ff50b0000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea613e892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da21f6f57020dd4f1f4f15edd7a0b1e24c6f79e3ea72a29c7928f000000006c5c8dddea685405273c7967d2c1a14efe0d53cb4b95a1ed7203000000ed52e5c08822cdcf2bc058ff9aab481926312fc7c88b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c8b10ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e40891"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) 5m43.105157773s ago: executing program 7 (id=5032): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904", @ANYRES16=0x0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r2 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1b) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x29, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="2664260f01c3660faef39a00280000b70066ba2100b835a90000ef640f01c4b8efffffff0f23d00f21f835200000000f23f8b972000040b801000000ba000000000f300f082e660ff4580466b834000f00d0", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000002c0)={0x1, 0x0, @raw_data=[0x4, 0x5, 0x5, 0x3c4, 0x40, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x80000801, 0xae7, 0x5, 0x4, 0xff]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000400)={0x0, 0x6c0, 0x6c, 0xffff, 0x5, 0x35}) socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r9, &(0x7f0000000580)="6c738601081e00000000000000000010fb0ca3c8d9857031b5e6da9c593787908e78fad56c79cd339b91bf08a60d40af0300000000000080fb0fb54b952d0ea6db0ef70e2ea157ad", 0x2f, 0x20008895, &(0x7f0000000280)={0x11, 0x4, r10, 0x1, 0x5, 0x6, @local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x2400c800) 5m42.620985374s ago: executing program 1 (id=5034): socketpair(0x22, 0xa, 0xafd, &(0x7f0000000180)) syz_usb_connect$cdc_ecm(0x1, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025f00010180c007090400ff02020600ff0524060000052400fcff0d240200000000000400a10206152412"], &(0x7f0000000080)={0x0, 0x0, 0x15, 0x0, 0x0, [{0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003671a41404f30b1147bb2368ff1575ad3e8315b7260882d5989b593160bb2ada978de0e4931c06ef93e61ac14c4adbe4d9faf4a08a88c798bcfcad798b83b06d6c662abc9ff0205202b76f081538a163b8c4f6d07e4bf4e48af"]}]}) 5m38.280856049s ago: executing program 1 (id=5041): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x84}}, 0xc000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r5, &(0x7f00000003c0), 0x0, 0x2000, &(0x7f0000000400)={0x77359400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x1}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e20, @multicast1}}, [0x80000000, 0x4, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x4, 0x4, 0x100, 0x620, 0x8000000000000001, 0x8001, 0x4, 0xed338a, 0x4]}, &(0x7f00000005c0)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xc00a000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r8 = dup2(r5, r5) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {0x926, 0x9}}, './file0\x00'}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000007c0)={r8, 0x6, 0x2, r9}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x168, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x51869e91}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5fea}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0x35ef}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd99}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1e5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf0000000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8}, 0x4004) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f0000000ac0)={0x905f, 0x7}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r12, 0x400c6615, &(0x7f0000000b00)={0x0, @aes128, 0x0, @desc1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) connect$can_bcm(r8, &(0x7f0000000b40)={0x1d, r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000bc0)={'hsr0\x00'}) eventfd(0x4) io_uring_setup(0x1b92, &(0x7f0000000c00)={0x0, 0x7d8b, 0x20, 0x0, 0xd9, 0x0, r8}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000c80)) 5m38.280445942s ago: executing program 5 (id=5042): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getrlimit(0xa, &(0x7f0000000040)) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0x600) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r3, 0x8937, &(0x7f00000005c0)={'dummy0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x20700, 0x8e) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@arm64={0x9, 0x5, 0x4, '\x00', 0x80}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32b85c2c410900010073797a3000000000080005400000000f2c0000001d0a05080000000000000000010000000900020073797a30000000000900010073797a30"], 0xb0}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 5m38.180038705s ago: executing program 7 (id=5043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000fddbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="05002a"], 0x2c}, 0x1, 0x100000000000000, 0x0, 0x45}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x6a, 0x4, 0x20000000, 0x1c) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x2, 0x2002) ioctl$FIGETBSZ(r6, 0x2, &(0x7f00000004c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x55, 0x0, &(0x7f0000000980), 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00fedeffbf03000000000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 5m37.71194081s ago: executing program 1 (id=5045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48808}, 0x20004804) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m26.378910461s ago: executing program 5 (id=5047): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0xb}, {&(0x7f0000000080)=""/81, 0x51}, &(0x7f0000000100)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000240)=""/224, 0xe0}], 0x2, 0x3, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x2}, {&(0x7f0000000140)=""/65, 0x41}, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x4, 0x20, 0x8}}], 0x90, 0x45}, 0x44001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000580)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="93432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b88e7f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb188", 0x8e}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759ce58fc5bb9", 0x5e}, {0x0}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001b00)="fbaa5ccdf7e888b102b5dbc3e588f400066fc19c24cd43a481d8bd7dd15943edfe8ef6138c0656d6bda9e4d4544600c117970e65f2313c26a23e10ce210f605cde6560a61421b0a7e352175f62c72bd820440ecca59fc79c839b2b08885a9d953e2514d671affd1f8aa8eaec65e5a5b17130664dc53ff9114032cc8e243bda7eceed1440192dc93e182068249765abbfedebbfaa9b341942ca0155d1f88ab8957eae696cfd08a9f81ca0c058b997bf08faed20af6de55d7eaa08523a0c628e72fff7e652b80dcd777dadf0418e7aae215e094ec382bd4842e51ef55d", 0xdc}], 0x6, &(0x7f0000000740)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x70, 0x404}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5m24.756940473s ago: executing program 5 (id=5049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0x4, 0x7000, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) capset(&(0x7f0000002ffa)={0x19980330}, 0x0) 5m23.747170938s ago: executing program 7 (id=5051): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000004ff690000000100010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x161d21) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x14}}, 0x20008804) 5m23.583312365s ago: executing program 7 (id=5053): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xb, 0x79, {0x79, 0x22, "9572730d814e1a987e96e740b65dbae365ff7006df34036bca4ca89b2b7eaf4d52da92256aa05a65940397464b302236256f31aa8684c70f450aff92bb0905df2b2db590acbcf044a2eec72f240d4220c76a0ddc3d6d90b3b3b9d4c6b57561dd72e93d78e0b03c3eec9249e01dfa02be85f27b89412057"}}, &(0x7f00000000c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "9c410c0ca7bf817634cb4cd91ed92e30f2dfbce5c8d0fc086dbe6946db839cf9b4c21f570fdd4f4e3f9cff7476ed19a3b76cead748f66dd942590b551edac4e839ee791b1946f040a2b401858ed86c309c1301aafc84f4aacd7b9731400d582d4cdae66ebb9db830e390487ee67d9c4421d033f7426ce8a8f7a9d0055eadcbeedccc56f43cb7a562d66d84ef3be0f665cadfd632ef4b125acaefdce4814ba0ed732f540785c853ca6149"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x6, 0xc4, "1c128095834e9253e0f66ffe38914689c6632aa317c3f31e1ed9d767d6c36e0e999bcf6cdf282423979accf99a79878aa5556e8da5daac1b3e5be7a061bf9b665603e6b056d8d29e207c616dd407162fecac31a96dd8f7b6325c1febfe4769de2990ec3b7d2fb846cf4c56b553a00fb838f57456617031f61a8db863f3246f0c3993d866821161a87c808a6450302bfbd1863d937292429f21abf92f2292cdc9d1f5bd1f671805df0e21c467ef0ae0616ba9e9f35c0f51ebf239faa987f70aff65f132fc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000340)={0x20, 0x0, 0x71, {0x6f, "0c14fd560737ff3271f4924037eecfe4b9a1bcdb72fded694675f6cbcb6b065fe309ea32d24cbbe7e3aaeaef3d2716ae044516aa7547d09a62f08faab3b060840e9ef2f363685828af4f46d9daa3d758ad806387cd06acfd49377c8fe7b667ea760f64daf454af5f9ae98d69da59d9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xe5}}) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 5m20.729189574s ago: executing program 42 (id=5044): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x1278, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1250, 0x3, 0x0, 0x1, [{0x124c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x1218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x32, 0x1, "d2a08e561b1ea8fe47974918e3a3941c3c9738c4577db5e8fa1dd8a7184d63df825c951bc06e07ed702d071c8ddb"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10000001}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "1e72047a4761ec9767407821925377b5cd026a85b2d7b194d25c42c23b49c2ab059fa4d5f36ad49d995bebfa312929e0e1869a4b2c9c0597d5fa6c6dc2eb8ab34fa7b262380382faabbb50c16726916bbb650ce13e2e36afb7455f9b5baed4c7eaea448921eca2148a2d1bcc88bab1b045960e54454c51aa66704f8195367e2185317d146f245343feba5872203725eec6cf939806c37e3701530b8ac305fe1fdd6361eba94dbe9e9fb4ea5977a8bc2eddf97a789230c76a1200f588c441a87f16cad133b82a2f35603d4ee53b4e0e60b58173dd4ad764e3793adff0882ad4090dd9b41b534abc0b717053e42cd4fe51ee4267993a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "4e28cadaa68a276cfa06cd4084ffaa1c731e09ef038f0e16c1351d95139dc6b804606f32efb7be1fb4c28d1950c65897b780d8c6aed32b4406a153974458a5db654b4cd882bd2d6e572d50772b53462c4aac366dcaebcb7edbae89b258398a16e760f0a1d498ab9323d2f28b87720b406e05910f932f86da3acf7c8defa7d85eaffd4d2a769b9beb23d754b3d03132508386f042b69c10a574ac550521653f40809f14f021ff05724cb8601687ead4843f1fb804c5f8aa7b0b86f62acce69847ac6c6a936f58ca673d353d742cf5a3bbaec5c6cca033d041c01dd53c16b47aa90d38f0df952d7c3a489efb5ba8f4686944e0926fd11724ffe7853e608104adcc4ec8c46d804ddd9b3a11efade92fc4ab31e6fec547134d12f6ad5674f2e737ad9f6dcac440c4f634a72df183a1f4dbf5eeb418b5928b126df47cac785ddae84539cc0b06e17a5be6f5b7e6eaa5999ef12c10b1bc28045264ec79b381f540c36a7f8eaaf0c53d0c02a3c9745846f03f4d951e6144ad5e5cb09143b055ed721c59fe0ca446f9eca72f9669ac7607673a08261a0f4e1ffe5fdd93a2ee1f8504ea5c80b9e72d909cd85fb4d461d678feb017a563184ecf1288304656c639caa33e1e404a912958a9247e7a5d7539926521079717a0475cbdf9ffe53168cf78aad89b54d45dbadfff10337ee19aa6601a9de1f8a6dc3afb0e5c5cf345d88250aad7f3058837832cdcf5a4d98476d7e220378e3e266ec167ab80da9702bc6275fc5d42d966f6b2a6e04875c9c0c090a83a08d7363e8ad6af2795df62016b6039338628b401436d9e47afeda7b459dc33bf5312704b615eb1538b8bf41d06ca82b4c5ed1af7ea57474f704d6ab9b93880a05c3689887dad7fd453cd38c15f88f60ca844ae045051fc6b7e11721f5d011c450ad4dad6d352192530add0ea00f1ceac42a05372f2920b4d6cb70be31a1a72cc303408b626b1195b1ab30d3d86b910021597779604ede77aa6ac0238e24eabd6e3ad24d2592458de845f4df7ea64e16ac3d105e54217e3f8a81cd73ae53800aafb5c2145171457f0a585e0d4e7bb0ca05b1d800d96fe3a0180a915535c606c252e1613be8cfd7cd657002ad0ae43be7b67e3fba9bade193112be10d477e95718b70c08a03296e6772208929efdd64523e3160f271d20042c62dd7d5d5d1355a29ccb0847711584c3469773e515dae0e08ca1db35b8e2ab8feec69de4caeff9475ff7d318bc326a956267fbc02eac1fb74efba4544dbe727609fbfa2944007cd20197f9c6bae2dc0ed9728d1f98badb048a44a0e5dcb5cd740b2664b7d4a68a6d9e6fb0052f1a965eb15930bf650f5a3637afc3b3a7ecef255ebe7d8296ccaa504fabb6d9dbb14c432b38efb28ecfc1c830e1bac8185311000d1bc8fa6df2cc1c73e9eb1533611543d53cbfc6596b3deb077b150972a8b13050595a42aa5fbabcb70181995b6610c232c7ffdc8d2603ab446e61a4e7e4a7a155d15ea00a40a8e083fffb9bf0169b1331f8ef79a3ef9430b40ce1665b1296f7aba1ea2d455ef1e304dcbcec62192e6189552256dfaebe2d95a2533fcb9df17967201beabdf8fa176fcbc849f61f8e2c6985c95a4640ec5789395dcacb6313b30a2b28bb51d7e7288f84392f2afde507556bfd668a7e3403fab6993c33582a8cfc8027e7fbcb7a2f17fb8f01448e085900ff446b81565a505ab8679b5d776a07ac1c13eaf7e5afb66dc138416127c042f3977fdc0a8cd95394feaf072ad71dca549d574cb3aa15cb9c0ab88e1b327842aede05c8eb3b9f0fbcc65cdea83fae82fae120d9e0cb376d1f10313cbb8c04cbe35d97e0fcbb62d0542f98858743e1b66f3400e22a39fde6596841bbc83fc22c00a2c94804ebaa6cb288e53db2d40f442f0932d5b2a4998f8cd551f87bb3033b7c8b75d1e951fe4c0185e953ea9c1aaf0a9ea97eb64cd3ec44a860df3d4774497a92f0c92d7b7362fb6a7482281051a1ea7a5a40439e59a36392da9060b2da35bc9dc9259297facb3e9fac56502f2948e4d3c85a79df21d1ce02fe0a52b81b70236f663cc1dbac07d1f23047e3f01df71f9de30f5b7b9dba482ed124cec70ccc6ea7dd4197179dfeb2111586ffd49dca3eedc0c4dd875fdaea8dc46aea07e5f73de2bcef078faf9f0f3cf09443e8a783691295d96f76a83d7e6dcc8bf93e9e60db2ba085e93a026e1de3c4d928aab2628960e02dada60bb27b0a097337d3860cef5ee78eb1ec012dc81331590eda3fd047c99d363bd1071d559e9d199fc817e480eecf8b41ef8fa10aa2dfc4a02ce35394d6cd2031a40eb64e821f45b9fa5f4c770a7b37a5baf8175ba54d47c3e4e9c91bd832fa0ad55bf661f7056599c3238299daf3fe2fd7ce0daf45f935a3f7a986d6a7ca0e84837bfea7fb8b0e6f7f91b29e0729a808380db7742242c9a8433283903f592334bcf31bd2993c2666711c877ce8f82a4f47d227f4a5f89c87e17b16f796632e197f3f2c83eb414083e5dbf3353b534b43118a599184caf8c21494e17864c9b8bb82bec69b9f3e35234c42a782ad7e1630c9c703f5e609290363464a7def16976a99f16f3055242500e9eda5f9093deaba86f99fb02b11334a559edbaa47ab9b39c6b89d3880a14c8c861cedae4d928872dae0c4e4b27c45584e4b12c6a1c7af57785cafb13cde9a50a5f8c6b12bb7c9db937462e5e608a6889ab1ce8177eca670a3a1517f9c6116878610ea6ce42137e6b4410e7e4634b839a808528cccb0a5a2c9675be3013d74e8a63226114c79b46082d07c84914f76ab8a2e9b514886e0f5db245160d40180111c8cad158108869fa71eef85471c6436b7120701d7283bc8a8ea36b9ce36584e621738b3c1bcf5c6134a7ecb2f42916fac2dc0c6fe96cd2b64e3595c8f8e1cb0de85b751dea18a9467898fb8cbe622254043614566bcd991cd840f31c70ad7f10f30b4f25a31aeaf0797a38145db23f99eb32b93bace1a721961e42d7495fc3b304cdbbd6736b32ae966c7da2915e435330a8600442701ff1b185e31b03d7684f7ae273e6626b0ea59e77992751607440207822791596470e645f06dee5940790fa7a12d68069e9271d16a64b0f66ff0c75758b3091a5c08edd297ac1c5fd481508d89415b58f195326a71fdc2c5dea1cbf9c7fddf6caa586e381effa3d608710ad7a5a6cc7f2c9bedf37ff7ad1cc564fae5a786487b125cfb9e7fe68bacb6285a3aace2f5d5581397b59a7bb203d950f8e8eddf7ed040794112f17a573db210015fcbc8efa79e05381c577b9f583760e36115f6aa02d64687825c29f5f14d9442c7c04a3d900c2064f478b5296391b86c26284b56894a2def341a8fc2855f08d591e967e605112cfc72f268f86d5810cf11c440861ff135e8af0166195e383177da8c347f5b57cac61e0e453bd941dacb422b1654fe9049dbc917cfb69b16f131a8018b647c13eb6986f61b7f22a39517ea51e8d90440644a0f09ea06fd82f60db506a545928c37e8b2b7492862b822cc63532a080bb06af1e21caedc5c16839992aaf2b4a9473ecdd11e0508495ea322d8581d9272efcf3c3e721c58c4a44c75e4528ba77f61c79d091dc61b44e65f30acc779929b78227af2989bb927ec80821efa39583230c349bd9682c9cde93d3f9cb0134fd09c7a2a897c2c7d1f6a53ed907796ff30a17d657607a445592805a74ac997737958b50b9bae46eb82b2f4cfa4daea074c4f5d776dff49d253f50c369657e8fdb430760f56cf82f7151e36958762a3e111b359bf7868cd4d3b847874d91ff2f058ec244fd54fd54f12ca500a7f35854703ad98e17f4a5cabda95b5a55d3bbc5a7eee2d4c4eb36bb17b5ed3e2f3a7b81f8c2e29cb12ea33ffeb32b50094b64acc4791a84f47e467879fe7b0d0f3a1ba50b9f50a516b7492c4e4a1198b1cb93c4c191a2d84bd3e0d5e48c36e4bc406c123310461a1a6a32312c7b46ca3cd985ca604884f9a35b53a26efc537ecb9ed23d18430ab8cecf05b6098c9b779491bd9a6038b9ffc68bd3a59d23ef314e4437c937c6b896daa802a48438364399416bf12128c9d1ce55d9350fc818240532cbe6dcb8cef6aa617614ac5d2aadcbd8458ba48c5907069e857878563f66b025f478f9bba689367d26edb2e750198ab7d0da5b7583bdb1ca15dbf9ad0c64034235d83fd795119c78a7939e0cb377633ca8b0e92309cccfb0e0ce20ae36a468fc422c16cabeba03fb6abd8098b2de5a6332ed711c117d8cd790491381caa908dc835a5241258c65d8c1f41c879b2f3fc0af5b8e103d0d3693b2b2edbd6d3c18da71db8600483b37ad9bd3002dedb589cacdfc563954f71aa91a92095bec221a972deee333c7001517ede9cdf11929a40e3f62e81ee228da99bcdb8771c634a243cd083ed4158701b6dc584b87661cc6d02d6ef834ca8c7e0c6d8eeed8ff8498c20be3e74da2aa639ab78d7375bb22f07cdbf5ae5ed07e20341d189364554c9d6f7dc8beb0b0f4e06ecb12470c2a2931b16ae182b16e4f20f93508d458262920f427d3e4735bdb2e3c0e7b7e79f77100acc96d6dbb284edc80e76fbebd49adc501dd2d85eefa80acc45e160d7161a019e77c1d6f2e2bb416fc1adc1f64021b44849143f8b6a8190419ac64015b19083b080b98e9249612d1633db310c188432288251f8657ae44f1dc5e606c3917b30fc49029ca68d51d167e58a388ed6c0ceff55cb6bf48c61615cdd9194534abe56d8f43f2580db8cb8e6b9067d8490e2853bfa34b0248b3f8d013c60b25990a87f036089e99d1ac515af28cc0e4826c125d22e2507f3e5ed4f6a04d9a0a35932c6e1e8c7c3c6c3745f5c73d2679d6e476b1d2a9e438a907af4d25fa26952eebf9ee4b09ddf168a08780b4145846364d687d698a92a84b4838f733adc9311aabcf7a9ce548fcae451a20f7611e3396adfcb3dc9396263cb1d2a0429583ccd96b15860a8d71a9eee5f11f223cc66c3cd821c60e6065d915b752214de9ddb36f8d8cc3256efcc98c6459d319f596010dbf2c5a70d03b607e46228b88f6cbcfc448fb7fdb491e3290246e05e2aa8f1e92ed70bf51e0b6e47922e908813bd94c4bcbc67022e2ddc2d0c652eda606fc9b1fddb4c1e0d996337d8a2e94505fbcff63783de8f31b215b3f55ea8c92d6b3b882c5135262119e9ed21ce40ee6d58cfec237e5ed1b2f4899d425697e114256e5e657bdc39bfd6fa0037c5c6de3a10b2792f09874f13582031ac1d248fa0171986b538e3dbb4338a216efb23e6d1c5fdfac4304389ac872c762c7c64554c28c9220af34817680dc969f58a8b4e874d483feb99e698fc231f4f6aad206cd5b38f812260874f3d34c326ad3d66fda4483d2866619d320fff3273754e85b5646be35e988ae80fb09436015578285d1956410088ecfc913de4df688cd12b362f8a58919720dfd4cf8cefd3d10c13253f8a7f0803307682b6f5fd5102d49d5235d4b4d4e57105b0176eb846ae9ca7c9a0a0847a42818bccd89c2cac9806b81d213707e87a6aab60e12a189098447c6eaf342ecc045d4d7f29bdbf773ef3352579a6e7a6adf27eb39c1de816fea4b37572a978b91dbc53d078e556d68cf0ac7fe5b895425bb4448284c37cab713a1f61ef5270a92e343c44649ed0a5e784ab4bb2df0d24bbea0372afb37b11637ce7692fedcb2355d0d530df2cd48dde55e6fe21efeab78757b711373fadb0c95f807f0e3f057d40c14437ed1d4a4d2e2549a84228aca1ffee3736db3983e6f704c1bf92f77c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1318}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x3, 0x85, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) r5 = syz_open_dev$loop(0x0, 0x3, 0x1a7a40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0xad12, 0x1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001b00)=@urb_type_iso={0x0, {0x6}, 0x1000, 0x20, &(0x7f0000000500)="be4789de334b77326760f2c5531ad778a3a716a01e5da40f526c8a970552a5cf7b49e30d6ba36214f4ace1794bf57c2d7e13e43c5a769569db616adb1c2f787635b17bb4afccc63a4475349a77710a1a034dcc2bdb9dfb635b5d5d4d8cf174277319a482cc31a21abcb5663951be68fb5dfb8e9e4c319f31099506da2c0c52a434210fd3681ac00ea7ca6a57715aceeeef219728c5bbb6249cf96b783eb949510b1a6e402270d24278e4bd08b0b0635c5a0de85b1a878162a79cc42da954a5de46", 0xc1, 0x5, 0x0, 0x3a, 0x5, 0x6, &(0x7f0000000180)="4fcb3fbebd6f10d81b9adfa3802fceb5ae27529f5cbb87fca74cda4ce7d26fa33795c153efd6e55cf8b4a9e89d6402394d6999657daef630e13af8eed2e170cb6c570637ede1982426ea9de33296a8228d1b92096188e907264321b01d97e2501468c50b1b9abffa9123f71fb469b69cf72036b3fe9688b53531", [{0x9, 0x5f, 0xc2}, {0x5, 0x4, 0x7}, {0xf, 0x7f, 0x3}, {0xfff, 0x80000001, 0x1}, {0x8, 0x87, 0x9d}, {0x1, 0x3, 0x6}, {0x10001, 0x48000000, 0x6}, {0x5, 0x4, 0xf6ba}, {0x8, 0x4, 0x10000}, {0x7, 0x9, 0x8000}, {0x4, 0x387, 0xdd64}, {0xd4, 0x5, 0x8}, {0x800, 0x8000, 0x9}, {0x9, 0x2, 0x80}, {0x76, 0x7fffffff, 0x758b}, {0xf4, 0x8, 0x8}, {0x3, 0x7fff, 0x2}, {0xffffffff, 0x6, 0x9}, {0x9, 0x5, 0xfffffff9}, {0x10001, 0x4, 0x1}, {0x6, 0x0, 0x9}, {0x2, 0x8, 0x5}, {0x8, 0x2, 0x7fffffff}, {0x3, 0x9, 0x7}, {0x2, 0x8, 0x9}, {0x83a0, 0x1, 0xffffffff}, {0x8, 0x6, 0x6}, {0x1, 0x10000, 0x5e48}, {0xf, 0x4, 0x4}, {0x9aaa, 0xfffffeff, 0x934}, {0x2, 0x2}, {0x1, 0x3, 0x9}, {0x8, 0x9, 0x16}, {0x2e23, 0x4, 0x5}, {0x401, 0x7, 0x8}, {0x2, 0xfffffffb, 0xfff}, {0x8, 0xbb, 0x3}, {0x7, 0x2}, {0x2379, 0x936, 0x8}, {0xa7, 0x5, 0x10}, {0x4a27, 0x7, 0x6}, {0xfffffff3, 0x5, 0x7}, {0x9, 0x8, 0x7f}, {0x2, 0x7a, 0x7}, {0xecf, 0x0, 0x1c}, {0x8, 0x1, 0x10001}, {0x288, 0xa8, 0x4}, {0x1, 0x6, 0x7}, {0x3ff, 0x1000, 0x80000000}, {0xffff, 0x1000, 0x7}, {0x5, 0xfa6a, 0x8}, {0x4166, 0xfffffff9, 0x7}, {0x3, 0x1, 0x5}, {0x7, 0xc, 0x10}, {0x5, 0x200}, {0xafd6, 0x6, 0x4}, {0x3, 0x7, 0x5}, {0x80000001, 0xfffeffff, 0x2}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r7) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 5m20.132348359s ago: executing program 43 (id=5045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48808}, 0x20004804) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5m8.708045992s ago: executing program 44 (id=5049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0x4, 0x7000, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) capset(&(0x7f0000002ffa)={0x19980330}, 0x0) 5m8.318012893s ago: executing program 45 (id=5053): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xb, 0x79, {0x79, 0x22, "9572730d814e1a987e96e740b65dbae365ff7006df34036bca4ca89b2b7eaf4d52da92256aa05a65940397464b302236256f31aa8684c70f450aff92bb0905df2b2db590acbcf044a2eec72f240d4220c76a0ddc3d6d90b3b3b9d4c6b57561dd72e93d78e0b03c3eec9249e01dfa02be85f27b89412057"}}, &(0x7f00000000c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "9c410c0ca7bf817634cb4cd91ed92e30f2dfbce5c8d0fc086dbe6946db839cf9b4c21f570fdd4f4e3f9cff7476ed19a3b76cead748f66dd942590b551edac4e839ee791b1946f040a2b401858ed86c309c1301aafc84f4aacd7b9731400d582d4cdae66ebb9db830e390487ee67d9c4421d033f7426ce8a8f7a9d0055eadcbeedccc56f43cb7a562d66d84ef3be0f665cadfd632ef4b125acaefdce4814ba0ed732f540785c853ca6149"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x6, 0xc4, "1c128095834e9253e0f66ffe38914689c6632aa317c3f31e1ed9d767d6c36e0e999bcf6cdf282423979accf99a79878aa5556e8da5daac1b3e5be7a061bf9b665603e6b056d8d29e207c616dd407162fecac31a96dd8f7b6325c1febfe4769de2990ec3b7d2fb846cf4c56b553a00fb838f57456617031f61a8db863f3246f0c3993d866821161a87c808a6450302bfbd1863d937292429f21abf92f2292cdc9d1f5bd1f671805df0e21c467ef0ae0616ba9e9f35c0f51ebf239faa987f70aff65f132fc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000340)={0x20, 0x0, 0x71, {0x6f, "0c14fd560737ff3271f4924037eecfe4b9a1bcdb72fded694675f6cbcb6b065fe309ea32d24cbbe7e3aaeaef3d2716ae044516aa7547d09a62f08faab3b060840e9ef2f363685828af4f46d9daa3d758ad806387cd06acfd49377c8fe7b667ea760f64daf454af5f9ae98d69da59d9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xe5}}) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 4m33.624459133s ago: executing program 0 (id=5072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="58ab8f32713528", 0x7, 0x84, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x64, "8d41acbe03886a848bf0132f1bb1ab19b2bfa6c58630a08c24e8af0c8da7827453fcea03fcac678367903c59ffc786bf749f565308cc5168b81ada00427999f8e73ad0fef9fd3bdcc678ea2a92137a2a68b2d63d8d0763dfcfc200dbd16eb4a4cc9b1e5e"}, &(0x7f0000000000)=0x6c) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r0, &(0x7f0000000100)="58ab8f32713528", 0x7, 0x84, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x64, "8d41acbe03886a848bf0132f1bb1ab19b2bfa6c58630a08c24e8af0c8da7827453fcea03fcac678367903c59ffc786bf749f565308cc5168b81ada00427999f8e73ad0fef9fd3bdcc678ea2a92137a2a68b2d63d8d0763dfcfc200dbd16eb4a4cc9b1e5e"}, &(0x7f0000000000)=0x6c) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) (async) 4m33.374031029s ago: executing program 0 (id=5073): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r3, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) 4m32.933519083s ago: executing program 0 (id=5074): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008004) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x14, 0x1cb, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000018000003000000000000000002000000000000090000000008000500ac1414bb14001680100008800c00038008000200000000096a5abb3fb36725af066c7fe18c799822bd043ce3a889a8bfda61d7ea78aaa796ea1ce8f456092afbc10f96322bf9ae8d13fde588d9d8ad51891c26"], 0x38}}, 0x0) 4m32.737333544s ago: executing program 0 (id=5075): openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x200000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet(0x2b, 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0xcbb, 0x3) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) utimensat(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={{0x0, 0xea60}, {0x77359400}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x55, 0xfffffffc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="808a9b74cfe3bea14abb082cffe67aaa2cdb617f92bf7bc170e35783ebd66c2060793a179436f836ac5d34fd983e9f13380df6a32aef80f4bde18b9b6a6506d89a789748536b9c02d84cf59a4c8c275e11c2870f481d932addf1bdef119278545ee009fd783b4ef70ab331bd2763d1145bf41226b9e6e68050ba97e135ff272c5882a05a4410c1ff1eb6a41f406a81a0815a", @ANYRESHEX=r4, @ANYRES8=r6, @ANYRES64=r3], 0x10}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2600c2) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x400000, 0x0) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 4m32.51718946s ago: executing program 0 (id=5076): r0 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x62, 0x5, 0x3f0, 0x248, 0xa8, 0xffffffff, 0x248, 0x150, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @local, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast1, @rand_addr=0x64010101, @gre_key, @icmp_id}}}}, {{@ip={@multicast2, @loopback, 0xffffffff, 0xffffffff, 'veth1_to_bridge\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x6c, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @rand_addr=0x64010100, @loopback, @gre_key=0x2, @gre_key=0x7}}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 'lo\x00', 'wg1\x00', {0xff}, {}, 0xaa, 0x2, 0x169ed6ff8f602177}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x2, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@rand_addr=0x64010101, @ipv4=@loopback, @icmp_id=0x65, @gre_key=0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) keyctl$read(0xb, r0, 0x0, 0x0) 4m32.508252129s ago: executing program 0 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000000300)="1768d46b2ff77862ae337b815454") r5 = socket(0x11, 0x2, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}, {&(0x7f0000000500)="b4e58a13947c8b9401340d78990e2732e765c9c62e8dc367b0377566d0d307f23682466f8bd5989688c5614254dc0318bc89a1bc31328e38b8c24f6905585c229f2845ebbf2c1830c2f844685506c3b377464f2d068d1b87b4de84db74ec66cdc95aa3df8663d68c9af1736ddc0eae9361f3ac72d7bbd6f7bf65a269", 0x7c}, {&(0x7f0000000380)="db2b8e0dc7adba54df11005a1530b4ca937ccef7238775005557f5f15b793317fba0e0034b9e82cab2e7cbb6d4637fb5f5303f8b3e257322468ca59cb5ee7c4f8693df3dc0de967069e95f84a6ac4301206edfd6053fc344ff4e620f2445b4809cc499d69a9bdcf40300e70fd6f38fa644d5761e26643a9c02a65ede1ff97763d9d906bbfe544798cb51fb953dabe642ae1c3221c17ecc16e9abdcf3cd54519f10bee5952104ac7cba981c6ca13b05a2351724d2e6f488650d168dba9be414fbdb789e968fdc27933b8c9dda2d5c57d169dd6196d459dcbf35c74e44dd93d6938d590e30bdb6c48f8942aae49e3716c57b368b718d6ee2836adeba45", 0xfc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp6\x00') socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cd0100000102008100080017004e234e2008000e002ab500000f49093d658d9caf40296de77ac72a7948e1db569bba1f37f2e4cd49a8bdadce05223d88f576da49be90ed2f40b881b1cb633659aa92"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r9, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 4m17.301804429s ago: executing program 46 (id=5077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000000300)="1768d46b2ff77862ae337b815454") r5 = socket(0x11, 0x2, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}, {&(0x7f0000000500)="b4e58a13947c8b9401340d78990e2732e765c9c62e8dc367b0377566d0d307f23682466f8bd5989688c5614254dc0318bc89a1bc31328e38b8c24f6905585c229f2845ebbf2c1830c2f844685506c3b377464f2d068d1b87b4de84db74ec66cdc95aa3df8663d68c9af1736ddc0eae9361f3ac72d7bbd6f7bf65a269", 0x7c}, {&(0x7f0000000380)="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", 0xfc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp6\x00') socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cd0100000102008100080017004e234e2008000e002ab500000f49093d658d9caf40296de77ac72a7948e1db569bba1f37f2e4cd49a8bdadce05223d88f576da49be90ed2f40b881b1cb633659aa92"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r9, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 1m18.124624818s ago: executing program 4 (id=5139): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) (async) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000003000000030000000000000000000000000000000000000017b04966ca387d45931415d02010cc8461fa3ecfdefbe5c870902e91fb50e8346122ef5e36a0eccf43836828aed63ca2a8761c9493fd4eb8e348ad2cbe6947"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r5 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) fstatfs(r5, &(0x7f00000003c0)=""/146) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x3f77, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) 1m17.821334951s ago: executing program 4 (id=5142): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x5, "8be0"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_4={0x3, 0x2, 0x1, '41%4'}, @global=@item_012={0x1, 0x1, 0x1, "84"}]}}, 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz '], 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, 0x0) (async) close(r0) 1m15.929741923s ago: executing program 4 (id=5147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m15.620817841s ago: executing program 4 (id=5148): syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0x0, 0x8, 0x0, 0x10000007, 0x20000000, 0x4, 0xffffffff], [0x1, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xffffffff}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe}, {}, {0xffffffff, 0xa}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x101c02) keyctl$session_to_parent(0x12) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000300)={0x1, 0x51b5, 0x2e7fe873, 0x5, 0xa, 0x1ff, 0x7f, 0x6, 0x1, 0x0, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x40, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000240)=0x5) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m14.709084816s ago: executing program 4 (id=5150): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0xb7, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x1, 0x1, 0x82, 0x10, 0xac, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x80, {{0xa, 0x24, 0x6, 0x0, 0x0, "7648f1c48a"}, {0x5, 0x24, 0x0, 0xfc0b}, {0xd, 0x24, 0xf, 0x1, 0x49fc3f12, 0x3, 0x3, 0x81}, [@obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0x7f, 0x9, 0x1000, 0x5}, @mdlm_detail={0x35, 0x24, 0x13, 0x1, "aa453a5584da69b5a89814be37a84fc08515ed21430710a3b96e4afaa22ed9c61fd7de9ac9f17d5af026428da10e5eb603"}, @acm={0x4, 0x24, 0x2, 0xa}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x1, [0xe805, 0x7, 0x0, 0x2, 0xb2a3, 0x3]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe, 0x5, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2e, 0x8, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x4, 0x2, 0x8, 0xc}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0xd}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xe4, 0x7, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x9, 0x4}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xfdc, &(0x7f0000000640)={0x0, 0xbecc, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clock_settime(0xfffffffb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x321, 0x270bd1f, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m11.316716634s ago: executing program 4 (id=5156): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfcf2, 0x40c0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) 56.104673408s ago: executing program 47 (id=5156): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfcf2, 0x40c0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) 7.427512997s ago: executing program 8 (id=5360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000080f01f10810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0xfffffffffffffffe, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000282060001000400000008000500", @ANYRES32, @ANYBLOB="0a0002000180c200000e00000a000100aa"], 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 6.341548548s ago: executing program 6 (id=5364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) (async) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (rerun: 32) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2}) (async, rerun: 32) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000080)=ANY=[]) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000000)={0xce, 0x0, r4}) 6.133035584s ago: executing program 6 (id=5365): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x60}}], 0x1, 0x810) (async) futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x4040000) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r5 = open(&(0x7f0000000180)='./bus\x00', 0x169a7c, 0x41) copy_file_range(r5, 0x0, r5, 0x0, 0x1, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000280)=0x8000000000000001, 0x9e, &(0x7f0000000b40)=[{}, {}, {}], &(0x7f0000000300)}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.773477001s ago: executing program 6 (id=5368): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x44081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0xa000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000007, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x5000, 0x0, 0x1f, 0x7, 0x8, 0x0, 0xf1, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xb, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0xff}, {0x2000, 0x60000, 0xc, 0x9, 0x7, 0xc4, 0x0, 0x4, 0x8, 0x3, 0x0, 0xfc}, {0xc000, 0x33331000, 0xc, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0xff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x3c, 0x0, 0x3}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0xff, 0x2, 0x0, 0xfc, 0xff, 0x1, 0x4}, {0xb000, 0x70000, 0x10, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xe, 0x0, 0x0, 0x7, 0x8, 0x8, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xfdf8ffdb, 0x0, 0x8000000, 0x2001b0, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='vcan0\x00'}) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 4.821741945s ago: executing program 8 (id=5370): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async, rerun: 32) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendfile(r0, r0, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7, 0x480000) (async, rerun: 64) r2 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x2004c014) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000000100)={&(0x7f0000001400)="c2a8843e0d0bda37b2e6f26bd17f1f6c52e53258ab153972d7a3077466700e8c911149c8f62072ec32a7cb36866f211b2dba0dac4dd11f914a73db169fad22ae10fc1e9a30d2c55e70e4f3660b2fe8401c3b1b6a7a9626716288c8275154f22688694cbe2bebcdc1418f4f2ae95c15aad1b3691d83e4a6e58f872cf6e584f43ab377271626ace44c536cd17e88c7d7ba9acd6e931a73f6dd87348c458b20c958b42e2d6b4398fb06f804264698a8bd52e4cbdafc35e1ebf2f41327dff8a08d9d826a380bf156ce0f985b5e5f69c6c13763c5d200827604759fc7b8472c", 0xdd}) (async) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 4.663650579s ago: executing program 6 (id=5371): socket$inet6_udp(0xa, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000c79919c6e2f713db1ada8e"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.572768036s ago: executing program 8 (id=5373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r2) r3 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x6a4e, 0x3180, 0x2, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) socket$alg(0x26, 0x5, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) 4.099804965s ago: executing program 2 (id=5374): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2de99be75b1ee43901ed328e8db2", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000002400018006000500000000000600010002000000080003"], 0x38}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x73}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) 3.83454751s ago: executing program 2 (id=5375): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182245", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x0, 0x9}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061109b00000000001fa000000000d5ee950000000d000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xa1dd, 0x40, 0x1, 0x180}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9a0d, 0x7}}}}]}, 0x40}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56141, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r6, {}, {0xe}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x4d9b6eaf) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "e553c43e", {0x3, 0x2, 0x0, 0x6, 0x8, 0x5b, 0x7}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.492282323s ago: executing program 3 (id=5377): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), 0x0) close_range(r0, r0, 0x0) 3.436583343s ago: executing program 9 (id=5378): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x8983, &(0x7f0000000000)={0x18, 0x0, {0x3, @random="bf0500", 'macvlan0\x00'}}) 3.289802325s ago: executing program 9 (id=5379): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0xb, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x1000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = syz_usb_connect$sierra_net(0xee53fb18f3f4ec35, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3, 0x8}, {0x9, 0x5, 0x4, 0x2, 0x20, 0x5, 0x5, 0x6}, {0x9, 0x5, 0xb, 0x3, 0x10, 0x3, 0x2, 0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r4) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) 3.282690447s ago: executing program 3 (id=5380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x460, 0x460, 0xd0, 0x1b8, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1000000, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x4}}, @common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@multicast2, 0x4e23}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {0x0, 0x4000000000000}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 3.26945712s ago: executing program 6 (id=5381): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x100, {0xfffffffffffffc20, 0x23, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0x20000, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x2, 0x100, {0xfffffffffffffc20, 0x23, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x20000, 0x0, 0xfffffffffffffdfa, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) 3.053322095s ago: executing program 3 (id=5382): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x8000) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async, rerun: 64) read(r1, &(0x7f0000000240)=""/28, 0xffd2) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) (async) r3 = io_uring_setup(0x1e89, &(0x7f0000000100)={0x0, 0x65b9, 0x2000, 0x1, 0xcb}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000180)={0x9ba7, r1, 0x10, {0xff, 0x497c93b}, 0x4}, 0x1) 2.928857437s ago: executing program 3 (id=5383): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x41, 0x0, 0x6}]}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x1f1}], 0x1}}], 0x2, 0x44008004) r1 = syz_clone(0x80002200, &(0x7f0000000380)="40f56b4470ea5dbc6ed00a7131344df7ccad002a3392101dcc1d39272b29bde8f9a9eb1551712469b31093d1d968469fc044e1d8ed259d554f05924ef61584105a99fce8cbe105b8e144229e30d67b82684d43aa4f4570d8b3cbad1aa4cc1b834cf7af7b61941ccac1f449f12d2912456339ea", 0x73, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000440)="226bc75e5e79e3ab8f19f74ff82633638bbbdebaeb7c6e1e678c2b5237be68810d12a25fdd72873cbbe1a6573f8319aeab868357ff6a49a02a75ee30cee61050af1d63875d4f2235ef54ca2dd5643eaf2a05529e2a7d668bb8c79f22cfd9e72b580fed9d2f5caeb16d47289600bcd1f1a7925ac6e4f21ac29535313960c345d74afec2a2501ef6150a84a3677f53e49b9b55ee93cf6e390973867b803a98fbff0c0428f7493453f6890af127c961fe4056375345fe4ebcdd21dd0c3787d72e706cb4f7") syz_open_procfs(r1, &(0x7f0000000540)='net/raw6\x00') r2 = fsopen(&(0x7f0000000580)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 2.832365846s ago: executing program 8 (id=5384): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "0000883e00000000"}}}}}, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r4 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4004005) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x29020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @pic={0x5, 0x1, 0x9, 0xf9, 0x30, 0x69, 0x7, 0xa, 0x7f, 0x7, 0x2, 0x9, 0xa1, 0xe, 0x5, 0x7}}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r10) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r10}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, "fe"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.684963604s ago: executing program 3 (id=5385): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301", @ANYBLOB=' '], 0x16) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, 0x2b, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4040000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000005000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000021}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/10, 0xa}], 0x1}, 0x140) unshare(0x28000600) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200402, 0x40, 0x6}, 0x18) r6 = openat(r5, &(0x7f0000000240)='./file0\x00', 0x123000, 0x32) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x18, 0x2, 0xa) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x5}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) shutdown(r0, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r9 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000580)) getpgid(r9) 2.466897003s ago: executing program 9 (id=5386): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x28, r2, 0x1, 0x70bd2a, 0x27dfdbfa, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x940}]}]}, 0x28}}, 0x4004890) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd03, 0x25dfdbf9, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) 2.325949905s ago: executing program 3 (id=5387): futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f0000000340), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094, 0x0, 0xfffffffffffffffd}]}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4a3b, 0xc, 0x1, {0x22, 0xd18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x2c, 0xbf}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x6, 0xef, 0x0, 0x10, 0x6}, 0x1a, &(0x7f0000000b40)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0xf8, 0x40, 0x5, 0x81}]}, 0x8, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc44}}, {0x64, &(0x7f0000000bc0)=@string={0x64, 0x3, "1e20f38215701c7ab8a04897fe37de363f9daad27c1d8333cefd31985da91f4f87b0900fd38ebae5b2f6cf0145184ca6ffafd0c7a2fd3a5642a6f6a9c28dc155da7e55d6735400deab4dedfdfa7fa8052802017b6ad9587aad46358fae684b1aae8f"}}, {0xa5, &(0x7f0000000c40)=@string={0xa5, 0x3, "3ea92cf2f92890e659e8faf3d7d9a4508c309e3fedf5578158b4a7d9e7961042baf06551e119e5aa78f4ec52f6dae2d0c1a6c3bc7258b5af1990af14f0759e2aba0a5f17fea4db1d011f8f7f2d0cce1343cee0efafc9d5e5d5161769e6c2a29fa76f6f665d47813d77088e5d81bba885cf665280b544ce6b32450e51ea7997827615d94ef01ba5d9eb19c3dd0e3e42643bea18542cfc955afb6c8238b7107d8db102e6"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4}}]}) syz_usb_disconnect(r3) r4 = syz_usb_connect$midi(0x0, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x6, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x0, [@midi_out_jack={0xd, 0x24, 0x3, 0x4, 0x5c, 0x3, [{0xd, 0x75}, {0x4, 0x8}, {0x2, 0xef}], 0x1}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x3, 0x3, [{0x40, 0x5}, {0x5}, {0xff, 0x6}], 0x2}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0xc, 0x3, [{0xe7, 0x40}, {0x9}, {0xc, 0xa}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xf, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xda, 0x2}], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x10, 0x3, 0xa6, {0x9, 0x25, 0x1, 0x5, "fe59c581c3"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x2, 0x4, 0x40, 0xe7}, 0xcb, &(0x7f0000000200)={0x5, 0xf, 0xcb, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "6bc3873b2de0bf8152bba2cd5a38ae34"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x8, 0xf, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0x0, 0xb, 0x4, 0x2, 0x2, 0x6}, @generic={0x88, 0x10, 0xa, "600217ade5ea530db24c73d3cfa3d29b090a649510e643484352177be963f9aefa3dff5fbb6134be2f4963bdd43a3fe737a9a39e9fbc83742ffbac05e0db232155e60d93cef2fe7cb210b749a6f71a2f9d1f3ea96ef23b88cd5efd2e16f5abd4c127d252e37ebd840cfe112672ca6b0601ab3aa1898cd3c30bfd921ec37675a32c0207e00b"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7d45dd5551f1e411b8b814a35a367f08"}]}, 0x2, [{0x85, &(0x7f0000000300)=ANY=[@ANYBLOB="85038699be85035019886ad632378a23fbc78cc8c6ff6365dd035bd6ad5c33d88896aeb4a8cdbd1ef8790ea0159bbdc4cd84940196fc30b3e1754895b06212dbbdf1ffb6753f5f686ae6a24acc209abf2954f7653cce456f28f202d7fdb89fb65110f7e63bda97e4975145b5251c06c408ed02eff006bf9c4aad78be2b2f4e41"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000900)=0x1) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0x4, 0x37, {0x37, 0x23, "2c87fb86c0adff7f76354aed662f272a9afb378d18a7a1b4c2e93b56f46440b182e75868724e36f27c75fd17c0f4a55b80cd501781"}}, &(0x7f0000000440)={0x0, 0x3, 0x22, @string={0x22, 0x3, "49e878617b11680b13906fb23a04b82c8d5895298e9d4d15ce857353a041cc52"}}, &(0x7f0000000f00)={0x0, 0xf, 0x7e, {0x5, 0xf, 0x7e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "eb56ff957e96ce3421f9042a1acb0c1f"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x59, 0x10, 0x4, "bbff9b1669892cc7153147cadcdac156eb0d526eb699afcfe3c004d4115714d51fe45c8fa662f2bda5fc7b7550368e28598c6364777affc61626be61c48e2432192f142bdb303f11200352af5649667b3d89e878f55b"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x7, 0x1, "9e524808", "0200"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x6, 0xfe, 0x5, 0x29d, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x40, 0xc, 0x82, "161a9887c94383d4d3a7af43d5130d94d6350bf4ddc05ad1e0ebfa6455724a15b201933fe12bcae9433151f6b0cf5414764c0f366bd457860d13f89f09ac9b771fd8834e513c7f012df9c80583b1902446fb50972bcabf5c10acecb54cdc0f8f6950bed5edc6310737dd58013958de995b9ebb8ae70c5535fc2f85e827546c46b15d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1000, 0x1}}, &(0x7f0000000740)={0x40, 0x7, 0x2}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xc1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "e9b1"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "f72a"}, &(0x7f0000000480)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000009c0)={0x40, 0x21, 0x1}}) 2.303699081s ago: executing program 9 (id=5388): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001200", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.056142993s ago: executing program 9 (id=5389): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da5ef908030410600005fdff00010902127765000000000904"], 0x0) r1 = io_uring_setup(0x27d8, &(0x7f0000000100)={0x0, 0x6d85, 0x2000, 0x0, 0x288}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180), 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r3, r2, 0x0, 0x7ffffffd) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x24000041) 589.137697ms ago: executing program 2 (id=5390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fa, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca) 318.661217ms ago: executing program 8 (id=5391): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), 0x0) close_range(r0, r0, 0x0) 263.900751ms ago: executing program 8 (id=5392): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000001c0000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 209.356816ms ago: executing program 2 (id=5393): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000540)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x5, 0x6, 0x100a, 0x8, 0x3, 0x4, 0x0, 0x6}}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) read(r3, &(0x7f00000003c0)=""/163, 0xa3) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000200)=0x1b) fchmod(r3, 0x181) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x200) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)) removexattr(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000100026bd7000fbdbdf6500000000", @ANYRES32=r8, @ANYBLOB="80210004121e000008000d090000000000000089cba61b85ed994ddbdd1166a742"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder0\x00', 0x1, 0x0) dup3(r10, r9, 0x0) 150.240769ms ago: executing program 2 (id=5394): syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x70) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40485404, &(0x7f0000000140)={{0x3, 0x3, 0x1, 0x2, 0x8}, 0x37, 0x5}) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)={0x0, 0x0, @c}, 0x29, r0) keyctl$update(0x2, r2, &(0x7f00000000c0)="d2bcab5024ab970dc3a7c2dbe73531d0f47ad81821fd1160d4af3fe60b243b6f448aa2ab0bc917286ff614ec9eaf831c3565155e7456b1b4fc7ee3b3cf37ef46cefa5dc9ff9840ea7808fcffc5c6b147a009708c1744bd978d0b131e6e7aad9385ac4451cc27d98f13dbde882528639438d6cf425098111802918fbabb3b6992f61de8421413cc69acbc0864ac792cf3edfce3ab771b90589dffc75eea8177a7b6aee0c6f7b98662897e9656ab2a9e5f7549e6c85101d807047400c9e93d40", 0xbf) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x0) 119.853409ms ago: executing program 6 (id=5395): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) syz_usb_connect(0x6, 0x36, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x0) 1.308252ms ago: executing program 9 (id=5396): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4, 0x60b921, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x5, 0xb}, {0x6, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x1, 0x1, 0xfffffffffffffffe, 0x8000000000000, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 2 (id=5397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x2, r3, 0x0, 0x80000}) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x5}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): dress as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1464.541153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1464.554956][T13213] Bluetooth: hci2: command tx timeout [ 1464.776601][T13213] Bluetooth: hci7: command tx timeout [ 1466.294860][T13213] Bluetooth: hci1: command tx timeout [ 1466.615068][T13213] Bluetooth: hci2: command tx timeout [ 1466.855071][T13213] Bluetooth: hci7: command tx timeout [ 1467.334041][T22800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.358320][T22800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.017847][T22833] team0: Port device team_slave_1 added [ 1468.342563][T22582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1468.359405][T22582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1468.369014][T22582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1468.376695][ T51] Bluetooth: hci1: command tx timeout [ 1468.397244][T22582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1468.407823][T22582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1468.599398][T22833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.614989][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.691599][T22833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.709127][T22582] Bluetooth: hci2: command tx timeout [ 1468.770790][T22833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.782271][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.836575][T22833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.935117][T22582] Bluetooth: hci7: command tx timeout [ 1469.258098][ T2016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.436795][ C1] net_ratelimit: 25572 callbacks suppressed [ 1469.436816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.455152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.467585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.480025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.492451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.504945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.517405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.529809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.542605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1469.555065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1470.129892][T13213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1470.163855][T13213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1470.184347][T13213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1470.194446][T13213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1470.202451][T13213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1470.534993][T22582] Bluetooth: hci4: command tx timeout [ 1472.194561][ T2016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.614877][T13213] Bluetooth: hci4: command tx timeout [ 1473.015173][T13213] Bluetooth: hci0: command tx timeout [ 1473.441025][ T2016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.643509][T23629] chnl_net:caif_netlink_parms(): no params data found [ 1473.856715][ T2016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.009786][T23639] chnl_net:caif_netlink_parms(): no params data found [ 1474.444867][ C1] net_ratelimit: 24218 callbacks suppressed [ 1474.444885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.463205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.475635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.485906][T23644] chnl_net:caif_netlink_parms(): no params data found [ 1474.488071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.506792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.519241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.531672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.544095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.556507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.568929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:a4:a1:01:29:43, vlan:0) [ 1474.640639][T23629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.687180][T23629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.694490][T23629] bridge_slave_0: entered allmulticast mode [ 1474.702271][T13213] Bluetooth: hci4: command tx timeout [ 1474.755972][T23629] bridge_slave_0: entered promiscuous mode [ 1474.786366][T23629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.793502][T23629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.836647][T23629] bridge_slave_1: entered allmulticast mode [ 1474.849541][T23629] bridge_slave_1: entered promiscuous mode [ 1475.108475][T13213] Bluetooth: hci0: command tx timeout [ 1475.118298][T23629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.131457][T23629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.267839][T23639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.286750][T23639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.294057][T23639] bridge_slave_0: entered allmulticast mode [ 1475.323077][T23639] bridge_slave_0: entered promiscuous mode [ 1475.340333][T23802] chnl_net:caif_netlink_parms(): no params data found [ 1475.475253][T23639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.488130][T23639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.505385][T23639] bridge_slave_1: entered allmulticast mode [ 1475.527185][T23639] bridge_slave_1: entered promiscuous mode [ 1475.581213][T23629] team0: Port device team_slave_0 added [ 1475.681514][T23629] team0: Port device team_slave_1 added [ 1475.719639][T23639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.831120][T23639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.899508][T23644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.908641][T23644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.916532][T23644] bridge_slave_0: entered allmulticast mode [ 1475.924541][T23644] bridge_slave_0: entered promiscuous mode [ 1475.990723][ T2016] bridge_slave_1: left allmulticast mode [ 1475.996569][ T2016] bridge_slave_1: left promiscuous mode [ 1476.002317][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.046553][ T2016] bridge_slave_0: left allmulticast mode [ 1476.052239][ T2016] bridge_slave_0: left promiscuous mode [ 1476.058908][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.128974][ T2016] bridge_slave_1: left allmulticast mode [ 1476.134668][ T2016] bridge_slave_1: left promiscuous mode [ 1476.141285][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.240520][ T2016] bridge_slave_0: left allmulticast mode [ 1476.246672][ T2016] bridge_slave_0: left promiscuous mode [ 1476.252410][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.316072][ T2016] bridge_slave_1: left allmulticast mode [ 1476.321751][ T2016] bridge_slave_1: left promiscuous mode [ 1476.327939][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.502887][ T2016] bridge_slave_0: left allmulticast mode [ 1476.509789][ T2016] bridge_slave_0: left promiscuous mode [ 1476.520993][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.777194][T13213] Bluetooth: hci4: command tx timeout [ 1476.906564][ T2016] bridge_slave_1: left allmulticast mode [ 1476.912253][ T2016] bridge_slave_1: left promiscuous mode [ 1476.926166][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.077996][ T2016] bridge_slave_0: left allmulticast mode [ 1477.083681][ T2016] bridge_slave_0: left promiscuous mode [ 1477.092465][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.146081][ T2016] bridge_slave_1: left allmulticast mode [ 1477.151771][ T2016] bridge_slave_1: left promiscuous mode [ 1477.157953][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.180581][T13213] Bluetooth: hci0: command tx timeout [ 1477.225663][ T2016] bridge_slave_0: left allmulticast mode [ 1477.231337][ T2016] bridge_slave_0: left promiscuous mode [ 1477.240763][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.298433][ T2016] veth0_to_bridge: left allmulticast mode [ 1477.304192][ T2016] veth0_to_bridge: left promiscuous mode [ 1477.310513][ T2016] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1477.365507][ T2016] bridge_slave_1: left allmulticast mode [ 1477.371161][ T2016] bridge_slave_1: left promiscuous mode [ 1477.379400][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.465746][ T2016] bridge_slave_0: left allmulticast mode [ 1477.471419][ T2016] bridge_slave_0: left promiscuous mode [ 1477.477350][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.575391][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.646036][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.705777][ T2016] bond0 (unregistering): Released all slaves [ 1478.858795][ T2016] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1479.217011][ T2016] bond0 (unregistering): Released all slaves [ 1479.226730][ T2016] bond1 (unregistering): Released all slaves [ 1479.238954][ T2016] bond2 (unregistering): Released all slaves [ 1479.255850][T13213] Bluetooth: hci0: command tx timeout [ 1479.345321][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.425382][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.486217][ T2016] bond0 (unregistering): Released all slaves [ 1479.610935][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.685555][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.746182][ T2016] bond0 (unregistering): Released all slaves [ 1479.836916][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.915484][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.978273][ T2016] bond0 (unregistering): Released all slaves [ 1480.189462][ T2016] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1480.386986][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.475464][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.496574][ T2016] bond0 (unregistering): Released all slaves [ 1480.506368][ T2016] bond1 (unregistering): Released all slaves [ 1480.518881][ T2016] bond2 (unregistering): Released all slaves [ 1480.855803][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.915479][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.936706][ T2016] bond0 (unregistering): Released all slaves [ 1481.201983][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.256555][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.307361][ T2016] bond0 (unregistering): Released all slaves [ 1481.358190][T23629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.365683][T23629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.404175][T23629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.416085][T23644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.434044][T23644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.441755][T23644] bridge_slave_1: entered allmulticast mode [ 1481.449979][T23644] bridge_slave_1: entered promiscuous mode [ 1481.689078][T23629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.697297][T23629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.724033][T23629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.752788][T23639] team0: Port device team_slave_0 added [ 1481.788835][T23644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.799809][T23639] team0: Port device team_slave_1 added [ 1481.820020][T23802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.827864][T23802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.835393][T23802] bridge_slave_0: entered allmulticast mode [ 1481.842335][T23802] bridge_slave_0: entered promiscuous mode [ 1481.876082][T23644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.925992][T23802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.933121][T23802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.940883][T23802] bridge_slave_1: entered allmulticast mode [ 1481.948582][T23802] bridge_slave_1: entered promiscuous mode [ 1482.009668][T23644] team0: Port device team_slave_0 added [ 1482.016180][T23639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.023130][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.051599][T23639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.094692][T23802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.107230][T23644] team0: Port device team_slave_1 added [ 1482.113646][T23639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.121301][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.147577][T23639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.170085][T23895] chnl_net:caif_netlink_parms(): no params data found [ 1482.196492][T23802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.216689][ T2016] tipc: Left network mode [ 1482.254407][T23629] hsr_slave_0: entered promiscuous mode [ 1482.260838][T23629] hsr_slave_1: entered promiscuous mode [ 1482.358177][T23644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.376450][T23644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.420178][T23644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.433121][T23644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.442133][T23644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.474426][T23644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.621429][T23639] hsr_slave_0: entered promiscuous mode [ 1482.630168][T23639] hsr_slave_1: entered promiscuous mode [ 1482.640142][T23639] debugfs: 'hsr0' already exists in 'hsr' [ 1482.646871][T23639] Cannot create hsr debugfs directory [ 1482.935223][T23802] team0: Port device team_slave_0 added [ 1483.123389][T23802] team0: Port device team_slave_1 added [ 1483.258925][T23644] hsr_slave_0: entered promiscuous mode [ 1483.275707][T23644] hsr_slave_1: entered promiscuous mode [ 1483.282515][T23644] debugfs: 'hsr0' already exists in 'hsr' [ 1483.289859][T23644] Cannot create hsr debugfs directory [ 1483.377597][T23802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.384569][T23802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.417357][T23802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.554108][T23895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.562400][T23895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.583043][T23895] bridge_slave_0: entered allmulticast mode [ 1483.591098][T23895] bridge_slave_0: entered promiscuous mode [ 1483.599855][T23895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.607920][T23895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.615373][T23895] bridge_slave_1: entered allmulticast mode [ 1483.623069][T23895] bridge_slave_1: entered promiscuous mode [ 1483.644342][T23802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.651627][T23802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.677935][T23802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.038282][T23895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.109600][T23802] hsr_slave_0: entered promiscuous mode [ 1484.117508][T23802] hsr_slave_1: entered promiscuous mode [ 1484.123599][T23802] debugfs: 'hsr0' already exists in 'hsr' [ 1484.131084][T23802] Cannot create hsr debugfs directory [ 1484.163573][T23895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.379255][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.385864][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.555843][T23895] team0: Port device team_slave_0 added [ 1484.707071][T23895] team0: Port device team_slave_1 added [ 1485.024127][T23895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.031281][T23895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.058445][T23895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.447179][T23895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.454131][T23895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.482007][T23895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.691984][T23895] hsr_slave_0: entered promiscuous mode [ 1485.702653][T23895] hsr_slave_1: entered promiscuous mode [ 1485.709101][T23895] debugfs: 'hsr0' already exists in 'hsr' [ 1485.714918][T23895] Cannot create hsr debugfs directory [ 1486.765350][ T2016] hsr_slave_0: left promiscuous mode [ 1486.784986][ T2016] hsr_slave_1: left promiscuous mode [ 1486.790841][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.835406][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.975606][ T2016] hsr_slave_0: left promiscuous mode [ 1486.995072][ T2016] hsr_slave_1: left promiscuous mode [ 1487.115306][ T2016] hsr_slave_0: left promiscuous mode [ 1487.134985][ T2016] hsr_slave_1: left promiscuous mode [ 1487.140773][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.195602][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.284933][ T2016] hsr_slave_0: left promiscuous mode [ 1487.334925][ T2016] hsr_slave_1: left promiscuous mode [ 1487.340815][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.366762][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.455187][ T2016] hsr_slave_0: left promiscuous mode [ 1487.495234][ T2016] hsr_slave_1: left promiscuous mode [ 1487.501135][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.535569][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.675361][ T2016] hsr_slave_0: left promiscuous mode [ 1487.695503][ T2016] hsr_slave_1: left promiscuous mode [ 1487.701412][ T2016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.708933][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.854891][ T2016] hsr_slave_0: left promiscuous mode [ 1487.874943][ T2016] hsr_slave_1: left promiscuous mode [ 1487.880816][ T2016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.888257][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.945456][ T2016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.952849][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.124871][ T2016] hsr_slave_0: left promiscuous mode [ 1488.144939][ T2016] hsr_slave_1: left promiscuous mode [ 1488.150784][ T2016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.158256][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.206195][ T2016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.213579][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.298122][ T2016] veth0_macvtap: left promiscuous mode [ 1488.303707][ T2016] veth1_vlan: left promiscuous mode [ 1488.434987][ T2016] veth1_macvtap: left promiscuous mode [ 1488.440478][ T2016] veth0_macvtap: left promiscuous mode [ 1488.447034][ T2016] veth1_vlan: left promiscuous mode [ 1488.452287][ T2016] veth0_vlan: left promiscuous mode [ 1488.585067][ T2016] veth1_macvtap: left promiscuous mode [ 1488.590555][ T2016] veth0_macvtap: left promiscuous mode [ 1488.596164][ T2016] veth1_vlan: left promiscuous mode [ 1488.601395][ T2016] veth0_vlan: left promiscuous mode [ 1488.745004][ T2016] veth1_macvtap: left promiscuous mode [ 1488.750504][ T2016] veth0_macvtap: left promiscuous mode [ 1488.757394][ T2016] veth1_vlan: left promiscuous mode [ 1488.762615][ T2016] @: left promiscuous mode [ 1489.306723][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1489.345689][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1490.063226][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1490.115307][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1490.298082][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1490.355691][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1490.587923][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1490.615525][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1490.878048][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1490.915245][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1491.455305][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1491.525257][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1491.970858][ T2016] team_slave_1 (unregistering): left promiscuous mode [ 1492.000473][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1492.013131][ T2016] team_slave_0 (unregistering): left promiscuous mode [ 1492.066852][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1493.539886][T23639] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1493.587895][T23639] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1493.857485][T23639] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1493.868922][T23639] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1494.398620][T23639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.567683][T23639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.579421][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.586562][T15395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.603135][T15395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.610251][T15395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.656542][T23639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1494.704115][T23639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.771904][T23639] veth0_vlan: entered promiscuous mode [ 1494.816687][T23639] veth1_vlan: entered promiscuous mode [ 1494.905584][T23629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1494.952494][T23629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1494.989249][T23629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.043062][T23629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.099994][T23639] veth0_macvtap: entered promiscuous mode [ 1495.109517][T23639] veth1_macvtap: entered promiscuous mode [ 1495.207117][T23644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1495.248202][T23644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1495.314044][T23639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.336523][T23639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.343789][T23644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1495.372034][T23644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1495.421139][ T3017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.431861][ T3017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.462282][ T3017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.472600][ T3017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.603284][T23802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1495.713744][T23802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1495.739223][T23802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1495.780307][T23802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1495.937276][T23629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.999022][T23629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.021432][T23895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1496.067678][T23895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1496.104351][T23895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1496.144157][T15395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.154591][T15395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.187917][T23644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.197206][T23895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1496.219515][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.226679][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.256417][T15396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.264257][T15396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.276644][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.283713][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.319544][T23644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.391160][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.398274][T15395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.416229][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.423346][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.500755][T23802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.533730][T25333] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1496.642488][T23802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.692584][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.699754][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.743735][T23629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.782478][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.789650][T15396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.884709][T23644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.032651][T23895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.092174][T23629] veth0_vlan: entered promiscuous mode [ 1497.183181][T23802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.200480][T23629] veth1_vlan: entered promiscuous mode [ 1497.234583][T23644] veth0_vlan: entered promiscuous mode [ 1497.287384][T23895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.340319][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.347474][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.388459][T23644] veth1_vlan: entered promiscuous mode [ 1497.423266][T23629] veth0_macvtap: entered promiscuous mode [ 1497.485946][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.493040][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.545566][T23629] veth1_macvtap: entered promiscuous mode [ 1497.677091][ T5927] usb 10-1: new full-speed USB device number 82 using dummy_hcd [ 1497.739940][T23629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.859206][ T5927] usb 10-1: not running at top speed; connect to a high speed hub [ 1497.870292][ T5927] usb 10-1: config 127 has an invalid interface number: 136 but max is 0 [ 1497.880637][T23802] veth0_vlan: entered promiscuous mode [ 1497.891998][ T5927] usb 10-1: config 127 has no interface number 0 [ 1497.900551][ T5927] usb 10-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4 [ 1497.915242][T23644] veth0_macvtap: entered promiscuous mode [ 1497.932286][ T5927] usb 10-1: config 127 interface 136 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1497.948109][T23629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.963684][ T5927] usb 10-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 1497.984610][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.005341][ T5927] usb 10-1: Product: syz [ 1498.009621][ T5927] usb 10-1: Manufacturer: syz [ 1498.017296][ T5927] usb 10-1: SerialNumber: syz [ 1498.100205][T23802] veth1_vlan: entered promiscuous mode [ 1498.112016][T23644] veth1_macvtap: entered promiscuous mode [ 1498.124522][T23895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1498.180503][T15394] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.191121][T15394] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.259327][T23644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.275026][T15394] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.304971][T15394] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.352227][T23644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.392505][ T2016] IPVS: stop unused estimator thread 0... [ 1498.446494][ T2016] IPVS: stop unused estimator thread 0... [ 1498.520702][T15396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.578011][T15396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.654920][T15396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.673914][T15396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.787358][T23802] veth0_macvtap: entered promiscuous mode [ 1498.830285][T23895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.909160][T23802] veth1_macvtap: entered promiscuous mode [ 1499.143299][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.170743][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.404644][T23802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.580088][ T2015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.600113][ T2015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.671638][T23802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.721652][T15394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.775089][T15394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.793788][ T2016] bridge_slave_1: left allmulticast mode [ 1499.802970][ T2016] bridge_slave_1: left promiscuous mode [ 1499.827406][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.908758][ T2016] bridge_slave_0: left allmulticast mode [ 1499.934944][ T2016] bridge_slave_0: left promiscuous mode [ 1499.954735][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.019754][ T2016] bridge_slave_1: left allmulticast mode [ 1500.036107][ T2016] bridge_slave_1: left promiscuous mode [ 1500.063661][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.138530][ T2016] bridge_slave_0: left allmulticast mode [ 1500.150082][ T2016] bridge_slave_0: left promiscuous mode [ 1500.165715][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.219663][ T5927] kaweth 10-1:127.136: couldn't find required endpoints [ 1500.250674][ T2016] bridge_slave_1: left allmulticast mode [ 1500.269905][ T5927] usb 10-1: USB disconnect, device number 82 [ 1500.277471][ T2016] bridge_slave_1: left promiscuous mode [ 1500.291019][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.348832][ T2016] bridge_slave_0: left allmulticast mode [ 1500.354604][ T2016] bridge_slave_0: left promiscuous mode [ 1500.362001][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.407930][ T2016] bridge_slave_1: left allmulticast mode [ 1500.413580][ T2016] bridge_slave_1: left promiscuous mode [ 1500.425191][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.476184][ T2016] bridge_slave_0: left allmulticast mode [ 1500.481859][ T2016] bridge_slave_0: left promiscuous mode [ 1500.495025][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.537957][ T2016] bridge_slave_1: left allmulticast mode [ 1500.543645][ T2016] bridge_slave_1: left promiscuous mode [ 1500.549785][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.625997][ T2016] bridge_slave_0: left allmulticast mode [ 1500.631675][ T2016] bridge_slave_0: left promiscuous mode [ 1500.640466][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.698285][ T2016] bridge_slave_1: left allmulticast mode [ 1500.703977][ T2016] bridge_slave_1: left promiscuous mode [ 1500.716277][ T2016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.777236][ T2016] bridge_slave_0: left allmulticast mode [ 1500.782889][ T2016] bridge_slave_0: left promiscuous mode [ 1500.798505][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.877843][ T2016] bridge_slave_0: left allmulticast mode [ 1500.883608][ T2016] bridge_slave_0: left promiscuous mode [ 1500.889732][ T2016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.148244][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.245252][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.315606][ T2016] bond0 (unregistering): Released all slaves [ 1501.405308][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.476243][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.555661][ T2016] bond0 (unregistering): Released all slaves [ 1501.698146][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.785354][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.848312][ T2016] bond0 (unregistering): Released all slaves [ 1501.956242][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.036157][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.095722][ T2016] bond0 (unregistering): Released all slaves [ 1502.268033][ T2016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.355848][ T2016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.435638][ T2016] bond0 (unregistering): Released all slaves [ 1502.527513][ T2016] bond0 (unregistering): Released all slaves [ 1502.637815][ T2016] bond0 (unregistering): Released all slaves [ 1502.748063][ T2016] bond0 (unregistering): Released all slaves [ 1502.861854][ T2016] bond0 (unregistering): Released all slaves [ 1502.918035][ T2016] bond0 (unregistering): Released all slaves [ 1502.967852][T15391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.989312][T15391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.061900][T23895] veth0_vlan: entered promiscuous mode [ 1503.097878][T15391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.124993][T15391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.272882][ T2015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.290041][T23895] veth1_vlan: entered promiscuous mode [ 1503.310264][ T2015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.390847][T25495] netlink: 'syz.9.5085': attribute type 2 has an invalid length. [ 1503.417870][T25495] : entered promiscuous mode [ 1503.569045][T15396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.589592][T15396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.612302][T25511] FAULT_INJECTION: forcing a failure. [ 1503.612302][T25511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.661611][T25511] CPU: 1 UID: 0 PID: 25511 Comm: syz.9.5086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.661639][T25511] Tainted: [L]=SOFTLOCKUP [ 1503.661646][T25511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1503.661656][T25511] Call Trace: [ 1503.661663][T25511] [ 1503.661671][T25511] dump_stack_lvl+0xe8/0x150 [ 1503.661700][T25511] should_fail_ex+0x412/0x560 [ 1503.661730][T25511] _copy_from_user+0x2d/0xb0 [ 1503.661749][T25511] ___sys_sendmsg+0x1c6/0x360 [ 1503.661775][T25511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.661823][T25511] ? __fget_files+0x2a/0x420 [ 1503.661844][T25511] ? __fget_files+0x3a0/0x420 [ 1503.661872][T25511] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1503.661895][T25511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1503.661921][T25511] ? __pfx_ksys_write+0x10/0x10 [ 1503.661948][T25511] do_syscall_64+0x14d/0xf80 [ 1503.661967][T25511] ? trace_irq_disable+0x3b/0x150 [ 1503.661989][T25511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.662006][T25511] ? clear_bhb_loop+0x40/0x90 [ 1503.662032][T25511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.662048][T25511] RIP: 0033:0x7f74f7d9c799 [ 1503.662066][T25511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.662079][T25511] RSP: 002b:00007f74f8c50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.662098][T25511] RAX: ffffffffffffffda RBX: 00007f74f8015fa0 RCX: 00007f74f7d9c799 [ 1503.662110][T25511] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1503.662120][T25511] RBP: 00007f74f8c50090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.662131][T25511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.662140][T25511] R13: 00007f74f8016038 R14: 00007f74f8015fa0 R15: 00007f74f813fa48 [ 1503.662166][T25511] [ 1503.877510][T23895] veth0_macvtap: entered promiscuous mode [ 1503.890146][T23895] veth1_macvtap: entered promiscuous mode [ 1503.914257][T23895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.925288][T23895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.938510][ T2015] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.988128][T10779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.998039][T10779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.034723][ T2015] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.111330][ T2015] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.157503][ T2015] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.474388][T15395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.499185][T15395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.574016][T15396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.599869][T15396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.652839][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.677013][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.708430][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.751928][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.809284][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.863472][ T2016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.044856][ T980] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1505.132054][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1505.181380][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1505.262248][T25602] netlink: 'syz.9.5095': attribute type 2 has an invalid length. [ 1505.265898][ T980] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1505.289275][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.308544][ T980] usb 3-1: Product: syz [ 1505.325136][ T980] usb 3-1: Manufacturer: syz [ 1505.325156][ T980] usb 3-1: SerialNumber: syz [ 1505.331151][ T980] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1505.351004][T12609] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1505.634848][ T5874] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1505.793516][ T5874] usb 9-1: device descriptor read/64, error -71 [ 1505.819706][T25575] fuse: Bad value for 'fd' [ 1505.840782][T25575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.864930][T25575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.897432][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1506.044868][ T5874] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1506.125593][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1506.184852][ T5874] usb 9-1: device descriptor read/64, error -71 [ 1506.297304][ T5874] usb usb9-port1: attempt power cycle [ 1506.381574][T12609] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1506.388997][T12609] ath9k_htc: Failed to initialize the device [ 1506.395799][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1506.423872][T12609] usb 3-1: ath9k_htc: USB layer deinitialized [ 1506.445273][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1506.585227][ T2016] team0 (unregistering): Port device team_slave_1 removed [ 1506.625241][ T2016] team0 (unregistering): Port device team_slave_0 removed [ 1506.634870][ T5874] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1506.665443][ T5874] usb 9-1: device descriptor read/8, error -71 [ 1506.925063][ T5874] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1506.975044][ T5874] usb 9-1: device descriptor read/8, error -71 [ 1507.090532][ T5874] usb usb9-port1: unable to enumerate USB device [ 1507.207619][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1507.207634][ T29] audit: type=1326 audit(1773502786.377:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25648 comm="syz.9.5098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74f7d9c799 code=0x0 [ 1507.745377][T11839] usb 3-1: USB disconnect, device number 120 [ 1509.073318][ T29] audit: type=1800 audit(1773502788.237:4316): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5107" name="/" dev="fuse" ino=2 res=0 errno=0 [ 1510.604444][T25781] input: syz0 as /devices/virtual/input/input103 [ 1510.645181][T23757] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1510.704939][ T5874] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1510.866453][T23757] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 1510.905128][ T5874] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.915505][T23757] usb 3-1: config index 0 descriptor too short (expected 65016, got 133) [ 1510.935413][ T5874] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.955521][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.988066][ T5874] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1511.010112][T23757] usb 3-1: config index 1 descriptor too short (expected 65016, got 133) [ 1511.033037][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.067786][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1511.077779][T23757] usb 3-1: config index 2 descriptor too short (expected 65016, got 133) [ 1511.109689][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.124859][ T5935] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1511.153075][ T5874] usb 9-1: SerialNumber: syz [ 1511.159037][T23757] usb 3-1: config index 3 descriptor too short (expected 65016, got 133) [ 1511.184515][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.237077][T23757] usb 3-1: config index 4 descriptor too short (expected 65016, got 133) [ 1511.267579][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.312261][T23757] usb 3-1: config index 5 descriptor too short (expected 65016, got 133) [ 1511.350274][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.381096][ T5935] usb 5-1: config 245 has an invalid descriptor of length 123, skipping remainder of the config [ 1511.404349][T25779] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5119'. [ 1511.420536][T23757] usb 3-1: config index 6 descriptor too short (expected 65016, got 133) [ 1511.443321][ T5935] usb 5-1: config 245 has 0 interfaces, different from the descriptor's value: 1 [ 1511.453010][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.471030][T25819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.492823][T23757] usb 3-1: config index 7 descriptor too short (expected 65016, got 133) [ 1511.506053][T25819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.520070][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1511.530938][T23757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.553439][T25779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.555772][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.609131][T25779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.611785][ T5935] usb 5-1: Product: syz [ 1511.632163][T23757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1511.649752][ T5935] usb 5-1: Manufacturer: syz [ 1511.660454][T25779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.673741][T23757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.690925][ T5935] usb 5-1: SerialNumber: syz [ 1511.708539][T25779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.717445][T23757] usb 3-1: Product: syz [ 1511.722583][T23757] usb 3-1: Manufacturer: syz [ 1511.739787][T23757] usb 3-1: SerialNumber: syz [ 1511.776674][T23757] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1511.802857][ T980] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1511.953021][T25779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.005830][T25779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.116658][ T5874] usb 9-1: invalid UAC_HEADER (v1) [ 1512.386415][ T5874] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1512.454070][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5122'. [ 1512.475655][ T5874] usb 9-1: USB disconnect, device number 123 [ 1512.506304][T25867] net_ratelimit: 11874 callbacks suppressed [ 1512.506321][T25867] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1512.542580][T23757] usb 3-1: USB disconnect, device number 121 [ 1512.577239][T25484] udevd[25484]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.629405][T25867] openvswitch: netlink: Message has 16 unknown bytes. [ 1512.828594][T25883] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1512.849394][T25882] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5123'. [ 1512.935233][ T980] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1512.942533][ T980] ath9k_htc: Failed to initialize the device [ 1512.951376][T23757] usb 3-1: ath9k_htc: USB layer deinitialized [ 1513.227868][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5124'. [ 1513.263756][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5124'. [ 1513.300670][T25909] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5126'. [ 1513.380678][T25901] vlan2: entered allmulticast mode [ 1513.459992][T25926] netlink: 'syz.6.5127': attribute type 2 has an invalid length. [ 1513.552710][T25926] : entered promiscuous mode [ 1513.945059][ T47] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1513.978378][T25949] netlink: 'syz.6.5129': attribute type 4 has an invalid length. [ 1514.119683][ T47] usb 9-1: too many configurations: 151, using maximum allowed: 8 [ 1514.168774][ T47] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1514.223418][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1514.275494][ T47] usb 9-1: Product: syz [ 1514.298503][ T47] usb 9-1: Manufacturer: syz [ 1514.320694][ T47] usb 9-1: SerialNumber: syz [ 1514.380060][ T47] usb 9-1: config 0 descriptor?? [ 1514.604338][ T5874] usb 9-1: USB disconnect, device number 124 [ 1515.209622][T26013] netlink: 'syz.9.5131': attribute type 1 has an invalid length. [ 1515.268465][T26013] netlink: 280 bytes leftover after parsing attributes in process `syz.9.5131'. [ 1515.308547][T26010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1515.469412][ T5935] usb 5-1: USB disconnect, device number 68 [ 1515.506802][ T5913] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1515.719561][ T5913] usb 10-1: device descriptor read/64, error -71 [ 1515.726195][T23757] usb 9-1: new full-speed USB device number 125 using dummy_hcd [ 1515.955544][T23757] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.995010][ T5913] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1516.069556][T23757] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1516.208728][T23757] usb 9-1: config 1 has no interface number 1 [ 1516.223804][T23757] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1516.236747][ T5913] usb 10-1: device descriptor read/64, error -71 [ 1516.283572][T23757] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1516.345942][ T5913] usb usb10-port1: attempt power cycle [ 1516.357599][T23757] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1516.390204][T23757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.437141][T23757] usb 9-1: Product: syz [ 1516.441325][T23757] usb 9-1: Manufacturer: syz [ 1516.488122][T23757] usb 9-1: SerialNumber: syz [ 1516.715008][ T5913] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1516.764631][ T5913] usb 10-1: device descriptor read/8, error -71 [ 1516.816459][T23757] usb 9-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1516.984917][T23757] usb 9-1: USB disconnect, device number 125 [ 1517.054844][ T5913] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1517.116032][ T5913] usb 10-1: device descriptor read/8, error -71 [ 1517.154587][T26086] netlink: 'syz.4.5136': attribute type 3 has an invalid length. [ 1517.165875][T25878] udevd[25878]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.305932][ T5913] usb usb10-port1: unable to enumerate USB device [ 1517.491058][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5137'. [ 1517.782803][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5141'. [ 1517.802727][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5141'. [ 1517.840411][T26143] netlink: 'syz.2.5141': attribute type 11 has an invalid length. [ 1517.863083][T26143] netlink: 'syz.2.5141': attribute type 12 has an invalid length. [ 1517.894928][ T5935] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1518.058441][ T5935] usb 9-1: Using ep0 maxpacket: 8 [ 1518.077835][ T5935] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1518.099581][ T5935] usb 9-1: config 179 has no interface number 0 [ 1518.114859][ T5913] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1518.132905][ T5935] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1518.162620][ T5935] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1518.213808][ T5935] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1518.276663][ T5935] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1518.288438][T20899] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1518.299236][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.324292][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.334725][ T5935] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1518.367460][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1518.392991][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1518.404103][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.413404][ T5935] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1518.424650][ T5913] usb 5-1: config 0 descriptor?? [ 1518.448354][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.468179][T20899] usb 3-1: config 0 has no interfaces? [ 1518.487072][T26136] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1518.504795][T20899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1518.525628][T20899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.533823][T20899] usb 3-1: Product: syz [ 1518.551650][T20899] usb 3-1: Manufacturer: syz [ 1518.557862][T20899] usb 3-1: SerialNumber: syz [ 1518.589331][T20899] usb 3-1: config 0 descriptor?? [ 1518.846434][T26156] netlink: 'syz.2.5143': attribute type 10 has an invalid length. [ 1518.874265][ T5913] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1518.924032][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1518.979271][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1519.010234][ T5913] usb 9-1: USB disconnect, device number 126 [ 1519.010315][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1519.024806][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1519.137959][ T5935] usb 5-1: USB disconnect, device number 69 [ 1520.557254][T26156] veth0_vlan: left promiscuous mode [ 1520.563789][T26156] veth0_vlan: entered promiscuous mode [ 1520.581496][T26156] team0: Device veth0_vlan failed to register rx_handler [ 1520.621033][ T5913] usb 3-1: USB disconnect, device number 122 [ 1521.237775][T20899] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1521.254989][ T5935] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1521.409690][T20899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1521.421021][T20899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1521.432011][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 1521.446967][T20899] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1521.450746][ T5913] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1521.460879][T20899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.473356][ T5935] usb 9-1: config 0 has no interfaces? [ 1521.479358][ T5935] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1521.490120][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.512104][T20899] usb 5-1: config 0 descriptor?? [ 1521.526950][ T5935] usb 9-1: config 0 descriptor?? [ 1521.624838][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 1521.635420][ T5913] usb 3-1: config 0 has no interfaces? [ 1521.640928][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1521.656737][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.676036][ T5913] usb 3-1: config 0 descriptor?? [ 1521.732669][T26297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.751746][T26297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.772402][T20899] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1521.930790][T26370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.967945][T26297] iowarrior 5-1:0.0: Error -90 while submitting URB [ 1521.980486][T26370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.078434][T26376] xt_hashlimit: max too large, truncated to 1048576 [ 1522.116637][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5150'. [ 1522.127569][T26377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.180210][T26376] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1522.211993][T26377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.485083][T20899] usb 3-1: USB disconnect, device number 123 [ 1524.030310][T20899] usb 9-1: USB disconnect, device number 127 [ 1524.187823][ T5935] usb 5-1: USB disconnect, device number 70 [ 1524.655068][ T5935] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1524.824836][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 1524.832161][ T5935] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.843555][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1524.850268][ T5935] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1524.859816][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.883963][ T5935] usb 5-1: config 0 descriptor?? [ 1530.154959][ T5935] usbhid 5-1:0.0: can't add hid device: -32 [ 1530.160951][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1532.640957][T26440] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5158'. [ 1532.793310][T26432] syzkaller0: entered promiscuous mode [ 1532.815088][T26432] syzkaller0: entered allmulticast mode [ 1533.131111][T26466] netlink: 'syz.2.5163': attribute type 2 has an invalid length. [ 1533.168146][T26466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1533.291640][T26474] openvswitch: netlink: Multiple metadata blocks provided [ 1533.323138][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5162'. [ 1539.661046][T22582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1539.670755][T22582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1539.695073][T22582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1539.703111][T22582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1539.710977][T22582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1541.814902][T13213] Bluetooth: hci3: command tx timeout [ 1543.895060][T13213] Bluetooth: hci3: command tx timeout [ 1544.055089][T26458] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5161'. [ 1544.068589][T20899] usb 5-1: USB disconnect, device number 71 [ 1544.211003][T26542] FAULT_INJECTION: forcing a failure. [ 1544.211003][T26542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.237576][T26542] CPU: 1 UID: 0 PID: 26542 Comm: syz.8.5166 Tainted: G L syzkaller #0 PREEMPT(full) [ 1544.237602][T26542] Tainted: [L]=SOFTLOCKUP [ 1544.237609][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1544.237618][T26542] Call Trace: [ 1544.237626][T26542] [ 1544.237633][T26542] dump_stack_lvl+0xe8/0x150 [ 1544.237660][T26542] should_fail_ex+0x412/0x560 [ 1544.237688][T26542] _copy_to_user+0x31/0xb0 [ 1544.237717][T26542] simple_read_from_buffer+0xe1/0x170 [ 1544.237742][T26542] proc_fail_nth_read+0x1bb/0x230 [ 1544.237765][T26542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.237790][T26542] ? rw_verify_area+0x2a6/0x4d0 [ 1544.237807][T26542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.237829][T26542] vfs_read+0x20c/0xa70 [ 1544.237845][T26542] ? fdget_pos+0x246/0x320 [ 1544.237871][T26542] ? __pfx___mutex_lock+0x10/0x10 [ 1544.237890][T26542] ? __pfx_vfs_read+0x10/0x10 [ 1544.237908][T26542] ? __fget_files+0x2a/0x420 [ 1544.237932][T26542] ? __fget_files+0x3a0/0x420 [ 1544.237951][T26542] ? __fget_files+0x2a/0x420 [ 1544.237979][T26542] ksys_read+0x150/0x270 [ 1544.237998][T26542] ? __pfx_ksys_read+0x10/0x10 [ 1544.238017][T26542] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1544.238039][T26542] do_syscall_64+0x14d/0xf80 [ 1544.238056][T26542] ? trace_irq_disable+0x3b/0x150 [ 1544.238077][T26542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.238093][T26542] ? clear_bhb_loop+0x40/0x90 [ 1544.238113][T26542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.238128][T26542] RIP: 0033:0x7f091af5cfce [ 1544.238145][T26542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1544.238157][T26542] RSP: 002b:00007f091bd7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1544.238175][T26542] RAX: ffffffffffffffda RBX: 00007f091bd7e6c0 RCX: 00007f091af5cfce [ 1544.238185][T26542] RDX: 000000000000000f RSI: 00007f091bd7e0a0 RDI: 0000000000000004 [ 1544.238195][T26542] RBP: 00007f091bd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.238205][T26542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.238214][T26542] R13: 00007f091b216038 R14: 00007f091b215fa0 R15: 00007f091b33fa48 [ 1544.238242][T26542] [ 1544.624809][ T5935] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1544.731318][T26574] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1544.780259][ T5935] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1544.791285][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.810322][ T5935] usb 3-1: Product: syz [ 1544.817032][ T5935] usb 3-1: Manufacturer: syz [ 1544.821714][ T5935] usb 3-1: SerialNumber: syz [ 1544.962417][ T2015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.251825][ T2015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.682806][ T2015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.823377][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.829951][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.949179][T26661] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5175'. [ 1545.961251][ T2015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.978711][T13213] Bluetooth: hci3: command tx timeout [ 1546.317375][T26520] chnl_net:caif_netlink_parms(): no params data found [ 1546.426288][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1546.465692][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1546.488922][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1546.535648][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1546.570092][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1546.641599][ T5935] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1546.673895][ T2015] bridge_slave_1: left allmulticast mode [ 1546.680907][ T5935] usb 3-1: USB disconnect, device number 124 [ 1546.694444][ T2015] bridge_slave_1: left promiscuous mode [ 1546.715423][ T2015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.748533][ T2015] bridge_slave_0: left allmulticast mode [ 1546.754298][ T2015] bridge_slave_0: left promiscuous mode [ 1546.766101][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.465781][ T2015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.530552][ T2015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.590365][ T2015] bond0 (unregistering): Released all slaves [ 1547.677813][T26520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.694977][T26520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.724107][T26520] bridge_slave_0: entered allmulticast mode [ 1547.732751][T26520] bridge_slave_0: entered promiscuous mode [ 1547.745835][T26520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.756478][T26520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.787716][T26520] bridge_slave_1: entered allmulticast mode [ 1547.802180][T26520] bridge_slave_1: entered promiscuous mode [ 1547.891915][T26900] loop5: detected capacity change from 0 to 7 [ 1547.902174][T26900] Dev loop5: unable to read RDB block 7 [ 1547.910015][T26900] loop5: unable to read partition table [ 1547.929955][T26900] loop5: partition table beyond EOD, truncated [ 1547.938054][T26900] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1548.014394][T26520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.056848][T13213] Bluetooth: hci3: command tx timeout [ 1548.060450][T26520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.280172][T26520] team0: Port device team_slave_0 added [ 1548.341684][T26520] team0: Port device team_slave_1 added [ 1548.434871][T11839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1548.441274][ T2015] hsr_slave_0: left promiscuous mode [ 1548.455047][ T5913] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1548.469252][ T2015] hsr_slave_1: left promiscuous mode [ 1548.480392][ T2015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.491697][ T2015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.518205][ T2015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.525917][ T2015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.579133][ T2015] veth1_macvtap: left promiscuous mode [ 1548.584622][ T2015] veth0_macvtap: left promiscuous mode [ 1548.594798][T11839] usb 9-1: Using ep0 maxpacket: 8 [ 1548.600176][ T2015] veth1_vlan: left promiscuous mode [ 1548.607211][ T2015] veth0_vlan: left promiscuous mode [ 1548.613561][T11839] usb 9-1: config 1 has no interfaces? [ 1548.622633][T11839] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1548.636026][T11839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.636137][ T5913] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 1548.653115][T11839] usb 9-1: Product: syz [ 1548.657447][T11839] usb 9-1: Manufacturer: syz [ 1548.662173][T11839] usb 9-1: SerialNumber: syz [ 1548.670275][ T5913] usb 3-1: config 0 has no interface number 0 [ 1548.678294][ T5913] usb 3-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1548.690024][ T5913] usb 3-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1548.703546][ T5913] usb 3-1: config 0 interface 84 has no altsetting 0 [ 1548.710673][ T5913] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1548.723165][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.738957][ T5913] usb 3-1: config 0 descriptor?? [ 1548.744636][T26943] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1548.786762][ T5913] option 3-1:0.84: GSM modem (1-port) converter detected [ 1548.901936][T11839] usb 9-1: USB disconnect, device number 2 [ 1549.390812][ T2015] team0 (unregistering): Port device team_slave_1 removed [ 1549.471999][ T2015] team0 (unregistering): Port device team_slave_0 removed [ 1549.985306][T11839] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1550.053914][T26520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.077549][T26520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.104378][T26520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.146895][T26520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.162283][T11839] usb 9-1: Using ep0 maxpacket: 16 [ 1550.187870][T26520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.220823][T26520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.233994][T11839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.262352][T11839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.301828][T11839] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1550.361126][T11839] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1550.404554][T11839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.432295][T26520] hsr_slave_0: entered promiscuous mode [ 1550.466211][T11839] usb 9-1: config 0 descriptor?? [ 1550.485844][T26520] hsr_slave_1: entered promiscuous mode [ 1550.519564][T26520] debugfs: 'hsr0' already exists in 'hsr' [ 1550.550611][T26520] Cannot create hsr debugfs directory [ 1550.921081][T27014] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1550.973858][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.001868][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.053164][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.079448][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.117428][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.144978][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.180021][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.216764][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.240712][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.276286][T11839] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 1551.317510][T11839] gembird 0003:11FF:3331.004E: hidraw0: USB HID v1.00 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0 [ 1551.357328][T11839] usb 9-1: USB disconnect, device number 3 [ 1551.403232][ T47] usb 3-1: USB disconnect, device number 125 [ 1551.452306][ T47] option 3-1:0.84: device disconnected [ 1551.534463][T27156] fido_id[27156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1551.572097][T27180] loop5: detected capacity change from 0 to 7 [ 1551.593737][T27180] Dev loop5: unable to read RDB block 7 [ 1551.622307][T27180] loop5: unable to read partition table [ 1551.646671][T27180] loop5: partition table beyond EOD, truncated [ 1551.652869][T27180] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1552.081496][T27228] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5199'. [ 1553.125499][T23757] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1553.294928][T23757] usb 10-1: Using ep0 maxpacket: 32 [ 1553.318029][T23757] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1553.335115][T23757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.340821][T27329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.350985][T27329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.364001][T23757] usb 10-1: config 0 descriptor?? [ 1553.489517][ T29] audit: type=1326 audit(1773502832.657:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27343 comm="syz.8.5204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f091af9c799 code=0x0 [ 1553.581917][T23757] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1553.596230][T23757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1553.613643][T23757] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1553.622151][T23757] usb 10-1: media controller created [ 1553.640276][T23757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.748566][T27329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.759606][T27329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.944868][T11839] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1554.096767][T11839] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1088, setting to 1024 [ 1554.109151][T11839] usb 9-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.119954][T11839] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.135898][T11839] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1554.145200][T11839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.153187][T11839] usb 9-1: Product: syz [ 1554.158112][T11839] usb 9-1: Manufacturer: syz [ 1554.162716][T11839] usb 9-1: SerialNumber: syz [ 1554.170767][T27346] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1554.179561][T11839] usblp0: Disabling reads from problematic bidirectional printer [ 1554.382922][T11839] usblp 9-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1554.485809][ T3017] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.495570][ T3017] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.504502][ T3017] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.522653][T27363] loop7: detected capacity change from 0 to 16384 [ 1554.605842][ T3017] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.665424][T23757] stb0899_attach: Driver disabled by Kconfig [ 1554.671453][T23757] az6027: no front-end attached [ 1554.671453][T23757] [ 1554.685767][ C0] usblp0: nonzero write bulk status received: -71 [ 1554.712900][T26520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1554.741056][T23757] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1554.761418][T26520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1554.790304][T23757] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input104 [ 1554.827700][T26520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1554.861476][T23757] dvb-usb: schedule remote query interval to 400 msecs. [ 1554.868549][T23757] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1554.886958][T26520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1554.936157][T27367] loop7: detected capacity change from 16384 to 0 [ 1555.140148][T26520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.208155][T26520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.241994][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.249228][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.275066][T10779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.282233][T10779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.423609][T26520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.474558][T27422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5211'. [ 1555.483384][T26520] veth0_vlan: entered promiscuous mode [ 1555.502480][T27422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5211'. [ 1555.510399][T26520] veth1_vlan: entered promiscuous mode [ 1555.591752][T26520] veth0_macvtap: entered promiscuous mode [ 1555.678565][T26520] veth1_macvtap: entered promiscuous mode [ 1555.758846][T26520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.787055][T26520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.823365][ T8638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.847775][ T8638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.858171][ T8638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.870995][ T8638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.013554][ T47] usb 10-1: USB disconnect, device number 87 [ 1556.170793][ T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1556.383730][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.413913][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.543151][ T8638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.545758][T23757] usb 9-1: USB disconnect, device number 4 [ 1556.574406][ T8638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.665509][T23757] usblp0: removed [ 1557.124849][ T47] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1557.165290][ T5935] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1557.286302][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1557.297131][ T47] usb 4-1: config 0 has no interfaces? [ 1557.302673][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1557.325440][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.335332][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 1557.342413][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.363932][ T47] usb 4-1: config 0 descriptor?? [ 1557.369378][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1557.396932][ T5935] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1557.415267][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.428949][ T5935] usb 3-1: Product: syz [ 1557.433130][ T5935] usb 3-1: Manufacturer: syz [ 1557.445975][ T5935] usb 3-1: SerialNumber: syz [ 1557.470873][ T5935] usb 3-1: config 0 descriptor?? [ 1557.485837][ T5935] appledisplay 3-1:0.0: Could not find int-in endpoint [ 1557.521256][ T5935] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1557.700228][ T5935] usb 3-1: USB disconnect, device number 126 [ 1557.823345][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.900941][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.050922][ T980] usb 4-1: USB disconnect, device number 69 [ 1558.485008][ T5935] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1558.676532][ T5935] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1558.714797][ T5935] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.759746][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1558.785121][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.809895][ T5935] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1558.870205][ T5935] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1558.885638][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.914664][ T5935] usb 10-1: config 0 descriptor?? [ 1558.962404][T27614] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1559.459133][T27614] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5224'. [ 1560.460118][T27714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1561.035558][T23757] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1561.101354][T27746] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5239'. [ 1561.215096][T23757] usb 4-1: Using ep0 maxpacket: 32 [ 1561.229331][T23757] usb 4-1: config 0 has no interfaces? [ 1561.242216][T23757] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1561.285094][T23757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.288185][ T5935] usbhid 10-1:0.0: can't add hid device: -71 [ 1561.357571][T23757] usb 4-1: config 0 descriptor?? [ 1561.372529][ T5935] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1561.555766][ T5935] usb 10-1: USB disconnect, device number 88 [ 1561.886476][T27790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.924254][T27790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.998402][T27798] xt_NFQUEUE: number of total queues is 0 [ 1562.152793][ T5927] usb 4-1: USB disconnect, device number 70 [ 1562.164057][T11839] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1562.367831][T11839] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1562.385074][T11839] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1562.443301][T11839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1562.487838][T11839] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1562.515243][T11839] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1562.547360][T11839] usb 3-1: Product: syz [ 1562.551560][T11839] usb 3-1: Manufacturer: syz [ 1562.584946][T11839] usb 3-1: SerialNumber: syz [ 1562.602301][T11839] usb 3-1: config 0 descriptor?? [ 1562.622052][T11839] hub 3-1:0.0: bad descriptor, ignoring hub [ 1562.640610][T11839] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1562.669503][T27822] adf_ctl_ioctl: 15 callbacks suppressed [ 1562.669519][T27822] QAT: Invalid ioctl 26124 [ 1562.677929][T11839] usb 3-1: selecting invalid altsetting 0 [ 1562.945930][T11839] usb 3-1: USB disconnect, device number 127 [ 1563.014430][T27848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1563.027760][ T5927] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1563.098038][T27871] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1563.278076][ T5927] usb 10-1: Using ep0 maxpacket: 32 [ 1563.300743][ T5927] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.343204][ T5927] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1563.358965][ T5927] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1563.375314][ T5927] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1563.400901][ T5927] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59354, setting to 1024 [ 1563.436644][ T5927] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1563.452312][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.468010][ T5927] usb 10-1: Product: syz [ 1563.474897][T11839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1563.482532][ T5927] usb 10-1: Manufacturer: syz [ 1563.488039][ T5927] usb 10-1: SerialNumber: syz [ 1563.617277][T23757] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1563.646619][T11839] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1563.655531][T11839] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1563.667164][T11839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1563.687197][T11839] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1563.708799][T11839] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1563.723937][T27822] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1563.726246][T11839] usb 3-1: Product: syz [ 1563.744656][T11839] usb 3-1: Manufacturer: с [ 1563.752386][T11839] usb 3-1: SerialNumber: syz [ 1563.765874][T11839] usb 3-1: config 0 descriptor?? [ 1563.781369][T11839] hub 3-1:0.0: bad descriptor, ignoring hub [ 1563.787372][T23757] usb 4-1: Using ep0 maxpacket: 8 [ 1563.792529][T11839] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1563.801331][T23757] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.819130][T11839] usb 3-1: selecting invalid altsetting 0 [ 1563.827354][T23757] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.844150][T23757] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1563.862083][T23757] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1563.884821][T23757] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1563.893871][T23757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.926409][T23757] usb 4-1: config 0 descriptor?? [ 1564.073861][T27787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.105307][T27787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.235763][ T980] usb 3-1: USB disconnect, device number 2 [ 1564.345098][T27822] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1564.373994][T23757] hid_parser_main: 28 callbacks suppressed [ 1564.374016][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.398664][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.412596][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.424375][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.431588][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.439526][T23757] lenovo 0003:17EF:60FE.004F: unknown main item tag 0x0 [ 1564.446945][T23757] lenovo 0003:17EF:60FE.004F: unexpected long global item [ 1564.455203][T23757] lenovo 0003:17EF:60FE.004F: hid_parse failed [ 1564.461458][T23757] lenovo 0003:17EF:60FE.004F: probe with driver lenovo failed with error -22 [ 1564.475543][ T5935] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1564.650465][ T5935] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 1564.667981][T23757] usb 4-1: USB disconnect, device number 71 [ 1564.679158][ T5935] usb 9-1: config 0 has no interface number 0 [ 1564.697389][ T5935] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.730144][ T5935] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.753810][ T5935] usb 9-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.776075][ T5935] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1564.785845][ T5935] usb 9-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0 [ 1564.793981][ T5935] usb 9-1: Manufacturer: syz [ 1564.825728][ T5935] usb 9-1: config 0 descriptor?? [ 1564.894083][ T5927] cdc_ncm 10-1:1.0: bind() failure [ 1564.920683][ T5927] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1564.937757][ T5927] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1564.967794][ T5927] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1564.994134][ T5927] usb 10-1: USB disconnect, device number 89 [ 1565.126247][T28010] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1565.141072][T28010] bridge1: entered promiscuous mode [ 1565.379140][T28025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1565.477906][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1565.527924][ T5935] uclogic 0003:28BD:0935.0050: interface is invalid, ignoring [ 1565.674862][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 1565.682601][ T5874] usb 3-1: config 0 has no interfaces? [ 1565.700306][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1565.711698][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.718067][T23757] usb 9-1: USB disconnect, device number 5 [ 1565.727977][ T5874] usb 3-1: config 0 descriptor?? [ 1566.107954][T28074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.137402][T28074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.296691][ T5927] usb 3-1: USB disconnect, device number 3 [ 1567.125439][T28140] futex_wake_op: syz.2.5263 tries to shift op by -1; fix this program [ 1568.234414][T28174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5268'. [ 1568.265899][T28174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5268'. [ 1568.793754][T28206] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1568.913191][T28196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.415250][ T5935] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1569.628153][ T5935] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1569.662829][ T5935] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1569.709882][ T5935] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.738801][ T5935] usb 4-1: config 220 has no interface number 2 [ 1569.773452][ T5935] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1569.815826][ T5935] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1569.858644][ T5935] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1569.882380][ T5935] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1569.923041][ T5935] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1569.940704][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.959808][ T5935] usb 4-1: Product: syz [ 1569.963972][ T5935] usb 4-1: Manufacturer: syz [ 1569.980231][ T5935] usb 4-1: SerialNumber: syz [ 1570.008787][T28254] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5276'. [ 1570.169388][T28269] bridge0: port 3(hsr0) entered blocking state [ 1570.188806][T28269] bridge0: port 3(hsr0) entered disabled state [ 1570.195414][T28269] hsr0: entered allmulticast mode [ 1570.201816][T28269] hsr_slave_0: entered allmulticast mode [ 1570.206241][T28266] xt_hashlimit: max too large, truncated to 1048576 [ 1570.221102][T28269] hsr_slave_1: entered allmulticast mode [ 1570.234666][ T5935] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1570.250884][T28269] hsr0: entered promiscuous mode [ 1570.281364][ T5935] uvcvideo 4-1:220.0: No valid video chain found. [ 1570.284036][T28269] bridge0: port 3(hsr0) entered blocking state [ 1570.294162][T28269] bridge0: port 3(hsr0) entered forwarding state [ 1570.315080][ T5935] usb 4-1: selecting invalid altsetting 0 [ 1570.359691][ T5935] usb 4-1: selecting invalid altsetting 0 [ 1570.398169][ T5935] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1570.481509][ T5935] usb 4-1: USB disconnect, device number 72 [ 1571.108205][T28319] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5280'. [ 1571.494966][T11839] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1571.662608][T11839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1571.671675][T11839] usb 4-1: not running at top speed; connect to a high speed hub [ 1571.681786][T11839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.693071][T11839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1571.706084][T11839] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1571.716295][T11839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.724299][T11839] usb 4-1: Product: syz [ 1571.729201][T11839] usb 4-1: Manufacturer: syz [ 1571.733803][T11839] usb 4-1: SerialNumber: syz [ 1572.195116][T11839] usb 4-1: 0:1 : does not exist [ 1572.209219][T11839] usb 4-1: BAAD GENERIC IO: no channels? [ 1572.282198][T11839] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1572.312289][T11839] usb 4-1: USB disconnect, device number 73 [ 1572.337755][T26544] udevd[26544]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.655226][ T47] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1572.785290][ T47] usb 9-1: device descriptor read/64, error -71 [ 1572.927656][T28447] loop5: detected capacity change from 0 to 7 [ 1572.941193][T26544] Dev loop5: unable to read RDB block 7 [ 1572.950533][T26544] loop5: unable to read partition table [ 1572.957035][T28435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.964671][T28435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.978502][T26544] loop5: partition table beyond EOD, truncated [ 1572.989205][T28447] Dev loop5: unable to read RDB block 7 [ 1572.999248][T28447] loop5: unable to read partition table [ 1573.005606][T28447] loop5: partition table beyond EOD, truncated [ 1573.014986][T28447] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1573.038055][ T5197] Dev loop5: unable to read RDB block 7 [ 1573.045726][ T47] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1573.050472][ T5197] loop5: unable to read partition table [ 1573.061379][ T5197] loop5: partition table beyond EOD, truncated [ 1573.132665][T13213] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1573.174983][ T47] usb 9-1: device descriptor read/64, error -71 [ 1573.295447][ T47] usb usb9-port1: attempt power cycle [ 1573.339374][T28435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.359421][T28435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.654935][ T47] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1573.675766][ T47] usb 9-1: device descriptor read/8, error -71 [ 1573.914844][ T47] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1573.946945][ T47] usb 9-1: device descriptor read/8, error -71 [ 1574.055296][ T47] usb usb9-port1: unable to enumerate USB device [ 1574.066175][ T2015] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.077452][ T2015] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.096691][ T2015] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.115586][ T2015] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.212146][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1574.366387][ T47] usb 3-1: device descriptor read/64, error -71 [ 1574.514860][ T5874] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1574.645651][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1574.684809][ T5874] usb 10-1: Using ep0 maxpacket: 16 [ 1574.699042][ T5874] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.711451][ T5874] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1574.725412][ T5874] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1574.735106][ T5935] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1574.754911][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.763394][ T5874] usb 10-1: Product: syz [ 1574.769850][ T5874] usb 10-1: Manufacturer: syz [ 1574.774649][ T5874] usb 10-1: SerialNumber: syz [ 1574.794827][ T47] usb 3-1: device descriptor read/64, error -71 [ 1574.916194][ T47] usb usb3-port1: attempt power cycle [ 1574.936488][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 1574.946042][ T5935] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1574.957162][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.968207][ T5935] usb 4-1: Product: syz [ 1574.972427][ T5935] usb 4-1: Manufacturer: syz [ 1574.977338][ T5935] usb 4-1: SerialNumber: syz [ 1574.987160][ T5935] usb 4-1: config 0 descriptor?? [ 1575.005588][ T5935] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1575.246000][T28541] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 1575.273539][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1575.274664][T28541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.296365][T28541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.310196][T28494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.321430][T28485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.333747][T28494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.347784][T28485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.348389][ T47] usb 3-1: device descriptor read/8, error -71 [ 1575.369113][T28485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.382062][T28485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.394355][T28485] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1575.407262][T28485] .30XD: renamed from gretap0 [ 1575.418207][T28485] .30XD: entered allmulticast mode [ 1575.444264][T28485] A link change request failed with some changes committed already. Interface .30XD may have been left with an inconsistent configuration, please check. [ 1575.477553][T28544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.503074][T28494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.513380][T28544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.531156][T28494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.540023][T28565] loop5: detected capacity change from 0 to 7 [ 1575.549789][T28565] loop5: [ 1575.552910][T28565] loop5: partition table partially beyond EOD, truncated [ 1575.564200][ T5913] usb 4-1: USB disconnect, device number 74 [ 1575.644954][ T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1575.677561][ T47] usb 3-1: device descriptor read/8, error -71 [ 1575.805435][ T47] usb usb3-port1: unable to enumerate USB device [ 1576.765174][ T5927] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1576.795058][ T5913] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1576.944819][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 1576.958410][ T5927] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.976627][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1576.982996][ T5927] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1576.993252][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.009199][ T5913] usb 4-1: Product: syz [ 1577.019158][ T5913] usb 4-1: Manufacturer: syz [ 1577.023944][ T5913] usb 4-1: SerialNumber: syz [ 1577.045385][ T5913] usb 4-1: config 0 descriptor?? [ 1577.053987][ T5927] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1577.072393][ T5927] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1577.104810][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.112830][ T5927] usb 9-1: Product: syz [ 1577.136896][ T5927] usb 9-1: Manufacturer: syz [ 1577.142074][ T5927] usb 9-1: SerialNumber: syz [ 1577.261432][ T5913] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1577.358620][T28624] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5307'. [ 1577.381473][T28674] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5307'. [ 1577.415532][ T5927] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1577.435050][ T5927] uvcvideo 9-1:220.0: No valid video chain found. [ 1577.455197][ T5927] usb 9-1: USB disconnect, device number 10 [ 1577.516493][T28686] binder: 28685:28686 ioctl c0306201 200000000180 returned -14 [ 1577.557775][ T5874] usb 10-1: 0:2 : does not exist [ 1577.579037][ T5874] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1577.615818][T28694] loop5: detected capacity change from 0 to 7 [ 1577.622922][T28694] Dev loop5: unable to read RDB block 7 [ 1577.638335][T28694] loop5: unable to read partition table [ 1577.644225][T28694] loop5: partition table beyond EOD, truncated [ 1577.652539][T28694] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1577.735630][ T5874] usb 10-1: USB disconnect, device number 90 [ 1577.874625][T28626] trusted_key: encrypted_key: insufficient parameters specified [ 1577.883734][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 1577.904658][T28626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.944062][T28626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.967050][ T5913] usb write operation failed. (-71) [ 1577.980921][T28721] netem: incorrect gi model size [ 1578.002019][T28721] netem: change failed [ 1578.011939][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1578.031922][ T5913] dvbdev: DVB: registering new adapter (Terratec H7) [ 1578.042348][ T5913] usb 4-1: media controller created [ 1578.049105][ T5913] usb read operation failed. (-71) [ 1578.054705][ T5913] usb write operation failed. (-71) [ 1578.074405][T28739] random: crng reseeded on system resumption [ 1578.078797][ T5913] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1578.095642][ T5913] usb 4-1: USB disconnect, device number 75 [ 1578.121320][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 1578.205910][T28721] netlink: 'syz.9.5312': attribute type 1 has an invalid length. [ 1578.233571][T28721] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5312'. [ 1578.270585][T28747] netlink: 'syz.2.5313': attribute type 1 has an invalid length. [ 1578.297359][T28747] netlink: 'syz.2.5313': attribute type 2 has an invalid length. [ 1578.486956][T28761] fuse: Unknown parameter 'fl0x0000000000000003' [ 1579.688817][T28823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1580.043609][T28843] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5323'. [ 1580.113228][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5323'. [ 1580.127413][ T47] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1580.165288][ T5884] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1580.334846][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 1580.369747][ T5884] usb 10-1: Using ep0 maxpacket: 16 [ 1580.393666][ T47] usb 9-1: config 115 has too many interfaces: 121, using maximum allowed: 32 [ 1580.402893][ T5884] usb 10-1: config 0 has no interfaces? [ 1580.424694][ T5884] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1580.435376][ T5884] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1580.444506][ T47] usb 9-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.454238][ T5884] usb 10-1: Manufacturer: syz [ 1580.477315][ T5884] usb 10-1: config 0 descriptor?? [ 1580.631817][ T47] usb 9-1: config 115 has 0 interfaces, different from the descriptor's value: 121 [ 1580.695361][ T47] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1580.739899][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.768410][ T47] usb 9-1: Product: syz [ 1580.788851][ T47] usb 9-1: Manufacturer: syz [ 1580.806449][ T47] usb 9-1: SerialNumber: syz [ 1581.427429][T28868] all (unregistering): Released all slaves [ 1581.787024][T28971] netlink: 304 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1581.844847][ T5927] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1582.007530][ T5927] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 1582.034392][ T5927] usb 3-1: config 2 has no interface number 0 [ 1582.094567][ T5927] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1582.174400][ T5927] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1582.195625][T29006] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 1582.232265][ T5927] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1582.279852][ T5927] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1582.299134][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.339126][ T5927] usb 3-1: Product: syz [ 1582.364530][ T5927] usb 3-1: Manufacturer: syz [ 1582.373841][ T5927] usb 3-1: SerialNumber: syz [ 1582.401465][T28965] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1582.538617][ T5913] usb 9-1: USB disconnect, device number 11 [ 1582.634002][ T5927] usb 3-1: probing VID:PID(0424:012C) [ 1582.651069][ T5927] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 1582.659457][ T5927] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 1582.667488][ T5927] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1582.688580][ T5927] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 1582.704251][ T5927] usb 3-1: USB disconnect, device number 8 [ 1583.004837][ T5874] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1583.045041][ T5913] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1583.156734][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 1583.181504][T29082] loop5: detected capacity change from 0 to 7 [ 1583.190323][T29082] loop5: [ 1583.194460][T29082] loop5: partition table partially beyond EOD, truncated [ 1583.194486][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1583.237933][ T5913] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1583.248816][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.277235][ T5874] usb 4-1: Product: syz [ 1583.283259][ T5913] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1104, setting to 1023 [ 1583.296684][ T5874] usb 4-1: Manufacturer: syz [ 1583.308147][ T5874] usb 4-1: SerialNumber: syz [ 1583.327517][ T5913] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1583.349284][ T5874] usb 4-1: config 0 descriptor?? [ 1583.369050][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.417324][ T5913] usb 9-1: Product: syz [ 1583.421529][ T5913] usb 9-1: Manufacturer: syz [ 1583.460252][ T5913] usb 9-1: SerialNumber: syz [ 1583.488102][ T5884] usb 10-1: USB disconnect, device number 91 [ 1583.578602][ T5874] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1583.741066][T13213] Bluetooth: hci2: command 0x0406 tx timeout [ 1583.741199][T13502] Bluetooth: hci1: command 0x0406 tx timeout [ 1583.847882][ T5913] usb 9-1: 1:1 : unsupported sample bitwidth 7 in 5 bytes [ 1583.877235][ T5913] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1584.670452][ T5913] usb 9-1: USB disconnect, device number 12 [ 1584.819739][T26544] udevd[26544]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.944216][ T5874] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1585.022320][ T5874] usb 4-1: USB disconnect, device number 76 [ 1585.204883][ T5913] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1585.388531][ T5913] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1585.405398][ T5913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.421118][ T5913] usb 9-1: config 0 has no interface number 0 [ 1585.434465][ T5913] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1585.449859][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.458185][ T5913] usb 9-1: Product: syz [ 1585.478211][ T5913] usb 9-1: Manufacturer: syz [ 1585.489247][ T5913] usb 9-1: SerialNumber: syz [ 1585.512822][ T5913] usb 9-1: config 0 descriptor?? [ 1585.525220][T29184] netdevsim netdevsim2: Direct firmware load for _team failed with error -2 [ 1585.547733][ T5913] ims_pcu 9-1:0.41: Missing CDC union descriptor [ 1585.554137][ T5913] ims_pcu 9-1:0.41: probe with driver ims_pcu failed with error -22 [ 1585.571692][T29184] netdevsim netdevsim2: Falling back to sysfs fallback for: _team [ 1585.951011][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5347'. [ 1586.067012][T29204] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (944 ns). Using initial count to start timer. [ 1586.230783][T29216] loop5: detected capacity change from 0 to 7 [ 1586.253819][T29216] loop5: [ 1586.259560][T29216] loop5: partition table partially beyond EOD, truncated [ 1586.458563][ T5874] usb 9-1: USB disconnect, device number 13 [ 1586.797058][T29260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1586.904923][ T5874] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1587.118076][ T5874] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1587.128893][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.145486][ T5874] usb 9-1: config 0 descriptor?? [ 1587.154843][ T5884] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1587.161486][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1587.348666][ T5884] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 1587.362039][ T5884] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1587.402999][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.455571][ T5884] usb 4-1: config 0 has no interface number 0 [ 1587.461803][ T5884] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1587.472207][ T5884] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1587.482349][ T5884] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1587.502110][ T5884] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1587.512942][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.532413][ T5884] usb 4-1: config 0 descriptor?? [ 1587.580447][ T5884] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1587.838531][ T5874] gp8psk: usb in 128 operation failed. [ 1587.886109][ T5874] gp8psk: usb in 137 operation failed. [ 1587.923068][ T5874] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1587.972889][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1588.040380][ T5874] usb 9-1: USB disconnect, device number 14 [ 1588.427301][ T3017] usb 4-1: Failed to submit usb control message: -71 [ 1588.428331][ T5874] usb 4-1: USB disconnect, device number 77 [ 1588.455530][ T3017] usb 4-1: unable to send the bmi data to the device: -71 [ 1588.480525][ T3017] usb 4-1: unable to get target info from device [ 1588.527564][ T3017] usb 4-1: could not get target info (-71) [ 1588.563695][T29334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1588.575543][ T3017] usb 4-1: could not probe fw (-71) [ 1588.609880][T29340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1588.634955][T12609] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1588.793255][T29278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.827352][T12609] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.877682][T12609] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1588.931370][T12609] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1588.955336][T12609] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.010673][T12609] usb 9-1: Product: syz [ 1589.034839][T12609] usb 9-1: Manufacturer: syz [ 1589.062068][T12609] usb 9-1: SerialNumber: syz [ 1589.091529][T29361] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5362'. [ 1589.140507][T12609] cdc_mbim 9-1:1.0: skipping garbage [ 1589.317653][T29323] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1589.364831][T29241] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1589.559841][T29241] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1589.584921][T29241] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1589.621092][T29241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1589.655927][T29241] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1589.681621][T29241] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1589.713266][T29241] usb 4-1: Product: syz [ 1589.733282][T29241] usb 4-1: Manufacturer: syz [ 1589.747212][T29241] usb 4-1: SerialNumber: syz [ 1589.773280][T29241] usb 4-1: config 0 descriptor?? [ 1589.803263][T29241] hub 4-1:0.0: bad descriptor, ignoring hub [ 1589.843743][T29241] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1589.863005][T29241] usb 4-1: selecting invalid altsetting 0 [ 1589.973504][T29323] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1589.988072][T12609] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 1590.024405][T12609] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1590.024838][ T47] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 1590.052503][T29241] usb 4-1: USB disconnect, device number 78 [ 1590.127313][T12609] wwan wwan0: port wwan0mbim0 attached [ 1590.201014][T12609] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 76:67:ba:f8:97:74 [ 1590.258221][ T47] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1590.269577][ T47] usb 10-1: config 0 has no interface number 0 [ 1590.285659][ T47] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1590.315191][T12609] usb 9-1: USB disconnect, device number 15 [ 1590.318244][ T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.347605][ T47] usb 10-1: Product: syz [ 1590.353556][ T47] usb 10-1: Manufacturer: syz [ 1590.359879][T12609] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1590.367864][ T47] usb 10-1: SerialNumber: syz [ 1590.387501][ T47] usb 10-1: config 0 descriptor?? [ 1590.508261][T12609] wwan wwan0: port wwan0mbim0 disconnected [ 1590.544904][T29241] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1590.738601][T29241] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1590.777463][T29241] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1590.805832][T29241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1590.832212][ T980] IPVS: starting estimator thread 0... [ 1590.848542][T29241] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1590.878192][T29241] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1590.910136][T29241] usb 4-1: Product: syz [ 1590.932459][T29241] usb 4-1: Manufacturer: с [ 1590.948864][T29241] usb 4-1: SerialNumber: syz [ 1590.954972][T29485] IPVS: using max 35 ests per chain, 84000 per kthread [ 1591.002124][T29241] usb 4-1: config 0 descriptor?? [ 1591.021518][T29241] hub 4-1:0.0: bad descriptor, ignoring hub [ 1591.033769][T29241] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1591.073661][T29241] usb 4-1: selecting invalid altsetting 0 [ 1591.089488][ T47] usb 10-1: Firmware version (0.0) predates our first public release. [ 1591.112795][ T47] usb 10-1: Please update to version 0.2 or newer [ 1591.506966][ T47] usb 10-1: USB disconnect, device number 92 [ 1591.552363][T29241] usb 4-1: USB disconnect, device number 79 [ 1592.295301][T20894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1592.452580][T29597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1592.500487][T20894] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1592.531905][T20894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.560822][T20894] usb 3-1: Product: syz [ 1592.581033][T20894] usb 3-1: Manufacturer: syz [ 1592.586133][T20894] usb 3-1: SerialNumber: syz [ 1592.644926][T20894] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1592.692889][T21835] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1593.115046][ T980] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1593.275757][ T980] usb 9-1: Using ep0 maxpacket: 32 [ 1593.310509][ T980] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.334345][ T980] usb 9-1: config 0 has no interface number 0 [ 1593.364831][ T980] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.388870][ T980] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.419507][ T980] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1593.438985][T29650] loop5: detected capacity change from 0 to 7 [ 1593.450789][T29650] loop5: [ 1593.453818][ T980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.469918][T29650] loop5: partition table partially beyond EOD, truncated [ 1593.499126][ T980] usb 9-1: config 0 descriptor?? [ 1593.714927][T12609] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1593.803620][T29627] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1593.829857][T21835] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1593.858162][T21835] ath9k_htc: Failed to initialize the device [ 1593.876807][T12609] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1593.901390][T12609] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1593.907906][T21835] usb 3-1: ath9k_htc: USB layer deinitialized [ 1593.921659][T12609] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1593.940944][T12609] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1593.972255][T12609] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1593.986516][T12609] usb 4-1: Product: syz [ 1593.991101][T12609] usb 4-1: Manufacturer: syz [ 1593.994811][T13502] Bluetooth: hci4: command 0x0406 tx timeout [ 1593.996388][T13213] Bluetooth: hci0: command 0x0406 tx timeout [ 1594.015071][T12609] usb 4-1: SerialNumber: syz [ 1594.035930][T12609] usb 4-1: config 0 descriptor?? [ 1594.053611][T12609] hub 4-1:0.0: bad descriptor, ignoring hub [ 1594.072689][T12609] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1594.086473][ T980] ft260 0003:0403:6030.0051: unknown main item tag 0x0 [ 1594.096959][T12609] usb 4-1: selecting invalid altsetting 0 [ 1594.270597][ T980] ft260 0003:0403:6030.0051: chip code: 6424 8183 [ 1594.449269][T20894] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1594.485020][ T980] ft260 0003:0403:6030.0051: uart interface is not supported [ 1594.644864][T20894] usb 10-1: Using ep0 maxpacket: 8 [ 1594.652517][T20894] usb 10-1: config index 0 descriptor too short (expected 30482, got 18) [ 1594.662765][T20894] usb 10-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1594.673848][T20894] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1594.687190][T20894] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1594.702307][T20894] usb 10-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1594.712693][T20894] usb 10-1: Product: syz [ 1594.717262][T20894] usb 10-1: Manufacturer: syz [ 1594.733319][T20894] usb 10-1: config 0 descriptor?? [ 1594.742979][T20894] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1594.753568][T20894] usb 10-1: Detected FT2232C/D [ 1594.786567][ T980] usb 9-1: USB disconnect, device number 16 [ 1594.890931][T29241] usb 3-1: USB disconnect, device number 9 [ 1594.954033][T20894] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1594.969641][T20894] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1594.979313][T20894] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1595.007952][T20894] usb 10-1: USB disconnect, device number 93 [ 1595.029322][T20894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1595.051861][T20894] ftdi_sio 10-1:0.0: device disconnected [ 1595.062987][T29652] usb 4-1: reset high-speed USB device number 80 using dummy_hcd [ 1595.113608][T29759] syzkaller1: entered promiscuous mode [ 1595.120968][T29759] syzkaller1: entered allmulticast mode [ 1595.492666][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1595.525912][T29769] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1595.544463][T29769] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5392'. [ 1595.570627][T29781] trusted_key: encrypted_key: insufficient parameters specified [ 1595.589638][T29769] bridge0: entered promiscuous mode [ 1595.596705][T29769] ip6gretap0: entered promiscuous mode [ 1595.645441][ T980] [ 1595.647810][ T980] ============================================ [ 1595.649616][T29786] geneve2: entered promiscuous mode [ 1595.653949][ T980] WARNING: possible recursive locking detected [ 1595.653969][ T980] syzkaller #0 Tainted: G L [ 1595.653980][ T980] -------------------------------------------- [ 1595.659248][T29786] geneve2: entered allmulticast mode [ 1595.665275][ T980] kworker/0:2/980 is trying to acquire lock: [ 1595.665288][ T980] ffff88807cf92f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1595.665337][ T980] [ 1595.665337][ T980] but task is already holding lock: [ 1595.672605][ T5935] usb 4-1: USB disconnect, device number 80 [ 1595.677413][ T980] ffff88808bcd4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1595.697579][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5396'. [ 1595.697645][ T980] [ 1595.697645][ T980] other info that might help us debug this: [ 1595.736670][ T980] Possible unsafe locking scenario: [ 1595.736670][ T980] [ 1595.744101][ T980] CPU0 [ 1595.747361][ T980] ---- [ 1595.750618][ T980] lock(&hsr->seqnr_lock); [ 1595.755106][ T980] lock(&hsr->seqnr_lock); [ 1595.759588][ T980] [ 1595.759588][ T980] *** DEADLOCK *** [ 1595.759588][ T980] [ 1595.767710][ T980] May be due to missing lock nesting notation [ 1595.767710][ T980] [ 1595.776004][ T980] 13 locks held by kworker/0:2/980: [ 1595.781177][ T980] #0: ffff888030b55d48 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1595.791862][ T980] #1: ffffc9000437fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1595.804970][ T980] #2: ffff88807b8f3538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 1595.814289][ T980] #3: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 1595.823575][ T980] #4: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1595.832607][ T980] #5: ffffffff8e75e4c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1595.842510][ T980] #6: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1595.851648][ T980] #7: ffff88808bcd4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1595.861121][ T980] #8: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1595.870592][ T980] #9: ffffffff8e75e4c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1595.880495][ T980] #10: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1595.889864][ T980] #11: ffffffff8e75e4c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1595.899845][ T980] #12: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1595.909047][ T980] [ 1595.909047][ T980] stack backtrace: [ 1595.914918][ T980] CPU: 0 UID: 0 PID: 980 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1595.914937][ T980] Tainted: [L]=SOFTLOCKUP [ 1595.914942][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1595.914951][ T980] Workqueue: mld mld_ifc_work [ 1595.914971][ T980] Call Trace: [ 1595.914976][ T980] [ 1595.914983][ T980] dump_stack_lvl+0xe8/0x150 [ 1595.915003][ T980] print_deadlock_bug+0x279/0x290 [ 1595.915022][ T980] __lock_acquire+0x253f/0x2cf0 [ 1595.915039][ T980] ? __lock_acquire+0x6b5/0x2cf0 [ 1595.915054][ T980] ? unwind_next_frame+0xa5/0x23c0 [ 1595.915070][ T980] ? unwind_next_frame+0x1aaf/0x23c0 [ 1595.915087][ T980] lock_acquire+0xf0/0x2e0 [ 1595.915101][ T980] ? hsr_dev_xmit+0x237/0x360 [ 1595.915117][ T980] ? hsr_dev_xmit+0x237/0x360 [ 1595.915133][ T980] _raw_spin_lock_bh+0x36/0x50 [ 1595.915206][ T980] ? hsr_dev_xmit+0x237/0x360 [ 1595.915235][ T980] hsr_dev_xmit+0x237/0x360 [ 1595.915250][ T980] ? hsr_dev_xmit+0x2d/0x360 [ 1595.915265][ T980] dev_hard_start_xmit+0x2d8/0x870 [ 1595.915283][ T980] __dev_queue_xmit+0x16d1/0x3890 [ 1595.915299][ T980] ? __dev_queue_xmit+0x277/0x3890 [ 1595.915312][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 1595.915325][ T980] ? ebt_do_table+0x2665/0x2830 [ 1595.915399][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 1595.915414][ T980] ? ebt_do_table+0x2665/0x2830 [ 1595.915431][ T980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1595.915451][ T980] ? br_nf_post_routing+0x219/0xfe0 [ 1595.915468][ T980] br_dev_queue_push_xmit+0x370/0x4a0 [ 1595.915483][ T980] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1595.915497][ T980] NF_HOOK+0x360/0x3f0 [ 1595.915511][ T980] ? NF_HOOK+0xa2/0x3f0 [ 1595.915523][ T980] ? __pfx_NF_HOOK+0x10/0x10 [ 1595.915535][ T980] ? ret_from_fork+0x51e/0xb90 [ 1595.915557][ T980] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1595.915574][ T980] br_forward_finish+0xd3/0x130 [ 1595.915587][ T980] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1595.915600][ T980] ? __pfx_br_forward_finish+0x10/0x10 [ 1595.915613][ T980] NF_HOOK+0x360/0x3f0 [ 1595.915633][ T980] ? NF_HOOK+0xa2/0x3f0 [ 1595.915646][ T980] ? __pfx_NF_HOOK+0x10/0x10 [ 1595.915659][ T980] ? __pfx_br_forward_finish+0x10/0x10 [ 1595.915672][ T980] ? __skb_clone+0x483/0x7a0 [ 1595.915686][ T980] ? br_handle_vlan+0x61/0x530 [ 1595.915721][ T980] __br_forward+0x397/0x540 [ 1595.915734][ T980] ? __pfx_br_forward_finish+0x10/0x10 [ 1595.915749][ T980] br_flood+0x6ee/0xb80 [ 1595.915765][ T980] ? br_dev_xmit+0x193/0x1980 [ 1595.915781][ T980] br_dev_xmit+0x12bd/0x1980 [ 1595.915797][ T980] ? br_dev_xmit+0x193/0x1980 [ 1595.915814][ T980] ? __pfx_br_dev_xmit+0x10/0x10 [ 1595.915829][ T980] ? __skb_get_hash_net+0x13f/0x2e0 [ 1595.915872][ T980] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1595.915885][ T980] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1595.915899][ T980] ? skb_network_protocol+0x23d/0x3f0 [ 1595.915913][ T980] ? __pfx_passthru_features_check+0x10/0x10 [ 1595.915928][ T980] dev_hard_start_xmit+0x2d8/0x870 [ 1595.915945][ T980] __dev_queue_xmit+0x16d1/0x3890 [ 1595.915961][ T980] ? __dev_queue_xmit+0x277/0x3890 [ 1595.915975][ T980] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1595.915992][ T980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1595.916005][ T980] ? __asan_memcpy+0x40/0x70 [ 1595.916017][ T980] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1595.916031][ T980] ? __asan_memcpy+0x40/0x70 [ 1595.916041][ T980] ? __pskb_copy_fclone+0x9c8/0xff0 [ 1595.916056][ T980] ? hsr_create_tagged_frame+0x500/0xe10 [ 1595.916074][ T980] ? __asan_memmove+0x40/0x70 [ 1595.916085][ T980] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 1595.916101][ T980] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1595.916118][ T980] hsr_forward_skb+0x157b/0x2860 [ 1595.916135][ T980] ? ret_from_fork_asm+0x1a/0x30 [ 1595.916154][ T980] ? hsr_forward_skb+0xb3/0x2860 [ 1595.916171][ T980] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1595.916187][ T980] ? do_raw_spin_lock+0x12b/0x2f0 [ 1595.916200][ T980] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1595.916212][ T980] ? hsr_dev_xmit+0x237/0x360 [ 1595.916228][ T980] hsr_dev_xmit+0x242/0x360 [ 1595.916241][ T980] ? hsr_dev_xmit+0x2d/0x360 [ 1595.916256][ T980] dev_hard_start_xmit+0x2d8/0x870 [ 1595.916273][ T980] __dev_queue_xmit+0x16d1/0x3890 [ 1595.916289][ T980] ? __dev_queue_xmit+0x277/0x3890 [ 1595.916304][ T980] ? ___neigh_create+0x1c5f/0x2280 [ 1595.916342][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 1595.916358][ T980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1595.916371][ T980] ? neigh_connected_output+0x1ea/0x460 [ 1595.916410][ T980] ? eth_header+0x11b/0x200 [ 1595.916424][ T980] ? __asan_memcpy+0x40/0x70 [ 1595.916435][ T980] ? eth_header+0x11b/0x200 [ 1595.916446][ T980] ? __pfx_eth_header+0x10/0x10 [ 1595.916458][ T980] ? neigh_connected_output+0x3b6/0x460 [ 1595.916477][ T980] ? ip6_output+0x126/0x550 [ 1595.916494][ T980] ip6_output+0x340/0x550 [ 1595.916510][ T980] ? __pfx_ip6_output+0x10/0x10 [ 1595.916526][ T980] NF_HOOK+0x177/0x4f0 [ 1595.916539][ T980] ? __pfx_NF_HOOK+0x10/0x10 [ 1595.916550][ T980] ? __pfx_dst_output+0x10/0x10 [ 1595.916560][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 1595.916572][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 1595.916586][ T980] ? icmp6_dst_alloc+0x3a6/0x440 [ 1595.916633][ T980] mld_sendpack+0x8b4/0xe40 [ 1595.916644][ T980] ? look_up_lock_class+0x57/0x110 [ 1595.916660][ T980] ? mld_sendpack+0x213/0xe40 [ 1595.916671][ T980] ? __pfx_mld_sendpack+0x10/0x10 [ 1595.916687][ T980] mld_ifc_work+0x835/0xe70 [ 1595.916705][ T980] ? process_scheduled_works+0xa8d/0x18c0 [ 1595.916720][ T980] process_scheduled_works+0xb6e/0x18c0 [ 1595.916741][ T980] ? __pfx_process_scheduled_works+0x10/0x10 [ 1595.916757][ T980] ? assign_work+0x3d5/0x5e0 [ 1595.916772][ T980] worker_thread+0xa53/0xfc0 [ 1595.916792][ T980] kthread+0x388/0x470 [ 1595.916809][ T980] ? __pfx_worker_thread+0x10/0x10 [ 1595.916823][ T980] ? __pfx_kthread+0x10/0x10 [ 1595.916834][ T980] ret_from_fork+0x51e/0xb90 [ 1595.916849][ T980] ? __pfx_ret_from_fork+0x10/0x10 [ 1595.916862][ T980] ? __switch_to+0xc7d/0x1450 [ 1595.916884][ T980] ? __pfx_kthread+0x10/0x10 [ 1595.916895][ T980] ret_from_fork_asm+0x1a/0x30 [ 1595.916914][ T980] [ 1596.601775][T29241] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 1596.620195][T29241] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1596.739978][T29796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5397'.