last executing test programs: 10m41.63782127s ago: executing program 32 (id=9): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 10m37.987509296s ago: executing program 33 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4m33.615615739s ago: executing program 34 (id=1034): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m53.00929495s ago: executing program 35 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m45.871972513s ago: executing program 36 (id=1151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m35.39601332s ago: executing program 7 (id=1169): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m34.100521501s ago: executing program 7 (id=1170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140), 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m31.68585369s ago: executing program 7 (id=1175): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 3m29.180079101s ago: executing program 7 (id=1180): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m28.172215275s ago: executing program 7 (id=1184): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 3m27.901045838s ago: executing program 7 (id=1186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m27.29883804s ago: executing program 37 (id=1186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m44.772550924s ago: executing program 4 (id=1272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x0, 0x8000008}, 0x1, {0x0, 0x4}, 0x67, 0x2, 0x2}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f00000004c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x82, &(0x7f0000000740)={r10, 0xfffffffa}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r10, 0xd5f}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7a4df1d35cc9bede168d3d8dca779293dd9564877b009d93c99a7a0f983e33e937bfb13b06e611c8c33313821f110e6911643cfabc2c75c42af256a07c8fee22c7795cb5a57dda8df2b668d893dd7a6bbfada01b49c6c96156bd5ebc10f16fd30579fa059207c4c9f69fff76a3e83839697324adc1037b64db5fe6f55a72fc9311a414c88488850", 0x3f1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m43.790917951s ago: executing program 4 (id=1275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2m40.766240781s ago: executing program 4 (id=1280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m39.291092879s ago: executing program 3 (id=1284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m38.396814508s ago: executing program 4 (id=1286): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m37.455210271s ago: executing program 4 (id=1291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m37.330431154s ago: executing program 3 (id=1292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m37.116911266s ago: executing program 4 (id=1293): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, 0x0, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 2m36.538193635s ago: executing program 38 (id=1293): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, 0x0, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 2m35.63953642s ago: executing program 0 (id=1296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m34.616581622s ago: executing program 3 (id=1298): socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2m33.562317865s ago: executing program 3 (id=1301): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000004300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m32.890922636s ago: executing program 0 (id=1302): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, 0x0, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 2m32.475493307s ago: executing program 3 (id=1303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m30.893284695s ago: executing program 3 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m30.056650883s ago: executing program 39 (id=1306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m29.944544665s ago: executing program 0 (id=1308): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 2m27.908431512s ago: executing program 0 (id=1312): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m26.922204091s ago: executing program 0 (id=1314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m25.901956381s ago: executing program 9 (id=1315): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(0x0, &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2m25.496610913s ago: executing program 0 (id=1316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m25.107975134s ago: executing program 40 (id=1316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m24.175759738s ago: executing program 9 (id=1319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m24.072666896s ago: executing program 9 (id=1320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESOCT], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m22.134668472s ago: executing program 9 (id=1322): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m21.155400861s ago: executing program 9 (id=1324): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2m20.57303249s ago: executing program 9 (id=1325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r11, 0xffffffffffffffff, 0x0) 2m20.189495441s ago: executing program 41 (id=1325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000150a0102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) pipe(0x0) ustat(0x40, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r10, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r11, 0xffffffffffffffff, 0x0) 14.048475427s ago: executing program 2 (id=1579): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000001f80), &(0x7f0000001fc0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x120202) 13.043989844s ago: executing program 6 (id=1583): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 10.276991969s ago: executing program 8 (id=1587): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)="36e2365320", 0x5, 0xc17) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r4}, 0x38) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.099427798s ago: executing program 5 (id=1588): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.892282879s ago: executing program 2 (id=1589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a", 0x88}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3c8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.419692411s ago: executing program 8 (id=1591): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 9.215604992s ago: executing program 2 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000700)) ioctl$FS_IOC_GETVERSION(r8, 0x80047601, &(0x7f00000003c0)) close(0x3) 9.14243002s ago: executing program 6 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r10, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_GET_XSAVE(r10, 0x9000aea4, &(0x7f0000000700)) ioctl$FS_IOC_GETVERSION(r11, 0x80047601, &(0x7f00000003c0)) close(0x3) 8.505571486s ago: executing program 5 (id=1594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.906900596s ago: executing program 6 (id=1595): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 7.48380706s ago: executing program 1 (id=1596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.963937846s ago: executing program 2 (id=1597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.810017457s ago: executing program 8 (id=1598): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 6.356612032s ago: executing program 1 (id=1599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.292538137s ago: executing program 1 (id=1600): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 4.991307502s ago: executing program 6 (id=1601): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c000000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 4.869122306s ago: executing program 5 (id=1602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a", 0x88}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3c8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.399970794s ago: executing program 5 (id=1603): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000700)) ioctl$FS_IOC_GETVERSION(r9, 0x80047601, &(0x7f00000003c0)) close(0x3) 4.312010699s ago: executing program 2 (id=1604): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @empty, 0x0}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000048}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="8c0000", @ANYBLOB="000128bd7000fedbdf25050000000800090007000000050002000500000005000200000000000800038004000100080005000b000000050006000200000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="08000300030000000800030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x30000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001ac0)=""/107, 0x6b}, {&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003180)=""/243, 0xf3}], 0x5}, 0x81}], 0x4, 0x40010132, 0x0) listen(0xffffffffffffffff, 0x40000b0) r9 = io_uring_setup(0x1124, &(0x7f0000000000)={0x0, 0xddc3, 0x1, 0x1, 0x14e}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f00000000c0)=[0x807c0000, 0xd], 0x2) 4.115409244s ago: executing program 8 (id=1605): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 4.101277021s ago: executing program 5 (id=1606): socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 2.898693851s ago: executing program 1 (id=1607): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x1f9}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.718150013s ago: executing program 1 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(r8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) 2.590208555s ago: executing program 6 (id=1609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.665194868s ago: executing program 8 (id=1610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = timerfd_create(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) unshare(0xa000200) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8c4) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) 1.578110267s ago: executing program 2 (id=1611): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac3(0x1, 0xd2, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x2, 0x0, 0x15, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x22, 0x2000000}, [@cluster_info_segment={0x6, 0x20, 0x1, 0x8b, 0x2}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x0, 0x949, 0x8, 0x8}, @cluster_info_segment={0x6, 0x20, 0x1, 0xb1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x0, 0x3, {0xa, 0x25, 0x25, 0x2, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}, @as_header={0x17, 0x24, 0x1, 0x0, 0x3, 0x3ae8, 0x5e6d72df59037a2e, 0x3, 0xb, 0xc0, 0x5}, @as_header={0x17, 0x24, 0x1, 0x5, 0x9, 0x8001, 0x3, 0xa, 0x2, 0x0, 0xe}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0xc2, {0xa, 0x25, 0x25, 0x7fff, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x9, 0x7, 0xfa, 0xff, 0x4}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x6, 0x6}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect$uac2(0x3, 0xfc, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1a86, 0x752d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x63, 0x40, 0xa, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x8, 0x20, 0x8f}, [@sample_rate={0xf, 0x24, 0xd, 0x5, 0x0, 0x2, [0x2, 0x2, 0x2, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x8d, 0x4, 0x9, 0x9, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7fff, 0x2, 0xc7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x59, 0xa0, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x61, 0x0, 0x54, 0x2, 0xff}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x40, 0x9, "f3c0", '#R'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9c, 0x2, 0x9, "c7cb4f8bc173ba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xe, 0xe, {0x8, 0x25, 0x1, 0x3, 0xc, 0x6, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x8, "", "ae"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x7, "a2262d", "08edb9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x2, 0xd, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3b, 0xf, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0xa, 0x37, {0x8, 0x25, 0x1, 0x80, 0xf, 0xd, 0xb}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x3, 0x1, 0xcc, 0x40, 0xfb}, 0x2a, &(0x7f0000000b80)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "cdce1901100009e8e04ab16febd12748"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x3, 0xffff}]}, 0x2, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x21, &(0x7f0000000c00)=@string={0x21, 0x3, "c9f9c21371a9b7954a9ffeb9f42a7d982c40c4c0355d747d165f69a2d65c4f"}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000000d80)={0x14, &(0x7f0000000c80)={0x40, 0xf, 0xb1, {0xb1, 0x3, "f2fb29fb1cfe369b58d552115181cc6955b3e6fd32a881fa964298596c5a8ad1e0cbdb0c76e5e7210aa0f36e0911d5d6a5d1ddb6f5c55c459347be6676bcbc1c922b4dc51eec0e7aabf9cc9a5d66f10f429ff5f9d75139e0dd4743c3b542d0041374c6c46fe640e2b792a37949200775294e18e64362c824bab511ff795eb599170c1688af2b745f540bd64140f6ae53afbd6c95ead155de45a4e8f01d8ced6c168437ce1b443a7defc49ca6948040"}}, &(0x7f0000000d40)={0x0, 0x3, 0x28, @string={0x28, 0x3, "2fa8ce9b01e589c4e5cded8c66a6ad0513835a5958c8e4b3d545f41f7005dea05d853695486d"}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x20, 0x18, 0x95, "9aaf9b3a409bf4de911dee9419855a99011a260483ef35348ec83860f901a2bcd91bc0d633ebea64214cb37cbad2e236d6f7d551fa8e09b7c24aa728b2aa2f625a1454ee881e0af539db0e1b00c2face2fef0f2e63edd3af3e26045376bf7726d2dbd91886dd13c632b12d4e2ef66c509056dc5f17a47f627aa56687bbad7e36b529ee21a5b1fdb7c930ff439ee10b457815811cde"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f00)={0x20, 0x81, 0x1, '\v'}, &(0x7f0000000f40)={0x20, 0x82, 0x2, "bd84"}, &(0x7f0000000f80)={0x20, 0x83, 0x2, "73c9"}, &(0x7f0000000fc0)={0x20, 0x84, 0x4, "fbd3577b"}, &(0x7f0000001000)={0x20, 0x85, 0x3, "666f0f"}}) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000140)={0x4, 0x5, 0x7, 0x2, 0xe, '\x00\x00\x00\t\x00'}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x4000) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000000180), 0x0, 0x44000) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8, 0xe0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xdb, 0x7c, {0x7, 0x25, 0x1, 0x4, 0x18, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x8, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd9, 0x2, 0x40, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) 1.382853037s ago: executing program 6 (id=1612): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 949.290423ms ago: executing program 1 (id=1613): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) socket(0x27, 0x1, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001180)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="000000c88ba9929cfb1274cab1e2bfc50000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/125], 0xb8}}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) 511.763101ms ago: executing program 8 (id=1614): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x62040200) unshare(0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xfdff) 0s ago: executing program 5 (id=1615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): .047066][ T8610] syz.6.562 (8610): drop_caches: 2 [ 289.074645][ T8624] fuse: Bad value for 'fd' [ 290.881629][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 290.952158][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'. [ 291.090259][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 292.826127][ T8674] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.862339][ T8666] kvm: kvm [8663]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 292.899631][ T8666] kvm: kvm [8663]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 292.913328][ T8666] kvm: kvm [8663]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 293.025083][ T8680] fuse: Bad value for 'fd' [ 295.056390][ T8703] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.822604][ T8725] xt_ecn: cannot match TCP bits for non-tcp packets [ 297.034081][ T8732] syz.3.590 (8732): drop_caches: 2 [ 297.080609][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.125106][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.152893][ T8732] dvb-usb: bulk message failed: -22 (7/0) [ 297.171600][ T8732] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 297.214672][ T8732] ttusb2: i2c transfer failed. [ 297.326377][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.349662][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.712780][ T8741] fuse: Bad value for 'fd' [ 299.329385][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.597'. [ 300.712630][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 301.929744][ T8794] xt_ecn: cannot match TCP bits for non-tcp packets [ 302.066627][ T8794] kvm: kvm [8791]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 302.613730][ T8806] fuse: Bad value for 'fd' [ 303.086113][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'. [ 303.228150][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 304.661969][ T8840] syz.1.614 (8840): drop_caches: 2 [ 304.710322][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.745116][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.770688][ T8840] dvb-usb: bulk message failed: -22 (7/0) [ 304.821282][ T8840] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 304.836817][ T8840] ttusb2: i2c transfer failed. [ 305.715728][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 306.453675][ T8863] fuse: Bad value for 'fd' [ 307.203036][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.622'. [ 307.571710][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.622'. [ 307.700324][ T8884] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.950825][ T8897] usb usb7: usbfs: process 8897 (syz.3.627) did not claim interface 0 before use [ 310.834842][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'. [ 311.777055][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.805993][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.826713][ T8928] dvb-usb: bulk message failed: -22 (7/0) [ 311.868405][ T8928] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 311.937858][ T8933] syz.1.635 (8933): drop_caches: 2 [ 311.967755][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.991506][ T8928] ttusb2: i2c transfer failed. [ 312.000648][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.023479][ T8933] dvb-usb: bulk message failed: -22 (7/0) [ 312.035201][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 312.051279][ T8933] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 312.078615][ T8933] ttusb2: i2c transfer failed. [ 312.365115][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.637'. [ 312.616785][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 312.753009][ T8952] usb usb7: usbfs: process 8952 (syz.5.638) did not claim interface 0 before use [ 314.486254][ T8981] xt_ecn: cannot match TCP bits for non-tcp packets [ 315.511168][ T8991] usb usb7: usbfs: process 8991 (syz.1.648) did not claim interface 0 before use [ 316.035386][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 316.365441][ T9006] xt_ecn: cannot match TCP bits for non-tcp packets [ 317.126121][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138482][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.205112][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 317.556520][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 317.965358][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.006961][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.056332][ T9026] dvb-usb: bulk message failed: -22 (7/0) [ 318.081900][ T9026] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 318.135506][ T9026] ttusb2: i2c transfer failed. [ 318.688038][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 319.219636][ T9043] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.282788][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.308449][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.194622][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'. [ 320.931034][ T9067] xt_ecn: cannot match TCP bits for non-tcp packets [ 321.789306][ T9081] xt_ecn: cannot match TCP bits for non-tcp packets [ 321.854878][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.665'. [ 324.108478][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 326.445728][ T9144] fuse: Bad value for 'rootmode' [ 326.460314][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 329.047561][ T9175] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.371222][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 330.632122][ T9200] usb usb7: usbfs: process 9200 (syz.6.694) did not claim interface 0 before use [ 330.958549][ T9204] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.046090][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 332.487758][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.699'. [ 334.926245][ T9260] usb usb7: usbfs: process 9260 (syz.5.706) did not claim interface 0 before use [ 336.295792][ T9268] syz.1.710 (9268): drop_caches: 2 [ 336.387110][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.413873][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.444339][ T9272] dvb-usb: bulk message failed: -22 (7/0) [ 336.474883][ T9272] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 336.513854][ T9272] ttusb2: i2c transfer failed. [ 337.146256][ T9282] usb usb7: usbfs: process 9282 (syz.5.712) did not claim interface 0 before use [ 338.292441][ T9303] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.509025][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.718'. [ 338.677162][ T9307] syz.6.719 (9307): drop_caches: 2 [ 339.384319][ T9312] syz.1.721 (9312): drop_caches: 2 [ 339.423259][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.463113][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.504307][ T9312] dvb-usb: bulk message failed: -22 (7/0) [ 339.518342][ T9312] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 339.550825][ T9312] ttusb2: i2c transfer failed. [ 340.732661][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.754697][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.533595][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 341.640117][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 342.030488][ T9355] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.064124][ T9358] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.504017][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 344.282259][ T9379] syz.5.738 (9379): drop_caches: 2 [ 344.367832][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.437574][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.486986][ T9382] dvb-usb: bulk message failed: -22 (7/0) [ 344.509547][ T9382] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 344.554159][ T9382] ttusb2: i2c transfer failed. [ 345.080138][ T9396] syz.3.742 (9396): drop_caches: 2 [ 345.125362][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.161212][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.197699][ T9396] dvb-usb: bulk message failed: -22 (7/0) [ 345.221136][ T9396] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 345.249100][ T9396] ttusb2: i2c transfer failed. [ 345.307685][ T9402] usb usb7: usbfs: process 9402 (syz.0.743) did not claim interface 0 before use [ 345.390857][ T9407] usb usb7: usbfs: process 9407 (syz.6.744) did not claim interface 0 before use [ 345.536913][ T9410] xt_ecn: cannot match TCP bits for non-tcp packets [ 346.098536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 346.194779][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 347.146214][ T9427] xt_ecn: cannot match TCP bits for non-tcp packets [ 348.744605][ T9448] syz.5.754 (9448): drop_caches: 2 [ 348.835569][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.884650][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.914893][ T9450] dvb-usb: bulk message failed: -22 (7/0) [ 348.921426][ T9450] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 348.943875][ T9450] ttusb2: i2c transfer failed. [ 349.697332][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.756'. [ 351.306189][ T9476] usb usb7: usbfs: process 9476 (syz.3.759) did not claim interface 0 before use [ 351.588608][ T9481] usb usb7: usbfs: process 9481 (syz.1.760) did not claim interface 0 before use [ 352.384192][ T9487] syz.6.762 (9487): drop_caches: 2 [ 354.412675][ T9520] usb usb7: usbfs: process 9520 (syz.3.770) did not claim interface 0 before use [ 355.574935][ T9523] xt_ecn: cannot match TCP bits for non-tcp packets [ 355.787317][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 356.512019][ T9540] xt_ecn: cannot match TCP bits for non-tcp packets [ 359.692008][ T9571] usb usb7: usbfs: process 9571 (syz.3.781) did not claim interface 0 before use [ 361.488053][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 363.221906][ T9620] usb usb7: usbfs: process 9620 (syz.1.794) did not claim interface 0 before use [ 363.714068][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 365.894723][ T9648] xt_ecn: cannot match TCP bits for non-tcp packets [ 366.024307][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 366.428708][ T9660] xt_ecn: cannot match TCP bits for non-tcp packets [ 369.716492][ T9701] xt_ecn: cannot match TCP bits for non-tcp packets [ 371.006973][ T9727] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.071341][ T9753] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.049915][ T9778] xt_ecn: cannot match TCP bits for non-tcp packets [ 378.371151][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 378.486865][ T9811] xt_ecn: cannot match TCP bits for non-tcp packets [ 378.555737][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.567224][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.262486][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 380.441789][ T9834] syz.6.840 (9834): drop_caches: 2 [ 381.554556][ T9849] syz.0.843 (9849): drop_caches: 2 [ 381.565175][ T9849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.587349][ T9849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.616969][ T9849] dvb-usb: bulk message failed: -22 (7/0) [ 381.644252][ T9849] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 381.661115][ T9849] ttusb2: i2c transfer failed. [ 381.783460][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 381.861825][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 382.019202][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 382.659893][ T9872] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.094825][ T9887] syz.5.852 (9887): drop_caches: 2 [ 384.149608][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.206363][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.333451][ T9887] dvb-usb: bulk message failed: -22 (7/0) [ 384.348960][ T9887] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 384.406077][ T9887] ttusb2: i2c transfer failed. [ 384.549028][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 386.522173][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.583257][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.897461][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.860'. [ 387.088377][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.860'. [ 387.217941][ T9930] xt_ecn: cannot match TCP bits for non-tcp packets [ 387.869533][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.905310][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.376427][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 388.487644][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 390.812727][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.850041][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.886831][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.909171][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.954656][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.974402][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.233571][ T9976] IPv6: addrconf: prefix option has invalid lifetime [ 391.757675][ T9985] xt_ecn: cannot match TCP bits for non-tcp packets [ 392.205441][ T9996] xt_ecn: cannot match TCP bits for non-tcp packets [ 394.234660][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 394.681530][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'. [ 394.813941][T10032] xt_ecn: cannot match TCP bits for non-tcp packets [ 397.392149][T10051] xt_ecn: cannot match TCP bits for non-tcp packets [ 397.590248][T10063] syz.6.891 (10063): drop_caches: 2 [ 398.144801][T10066] syz.0.892 (10066): drop_caches: 2 [ 398.204340][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.233853][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.265606][T10066] dvb-usb: bulk message failed: -22 (7/0) [ 398.280400][T10066] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 398.308451][T10066] ttusb2: i2c transfer failed. [ 399.190356][T10076] xt_ecn: cannot match TCP bits for non-tcp packets [ 399.301323][T10080] xt_ecn: cannot match TCP bits for non-tcp packets [ 399.939968][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.984523][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.817117][T10098] xt_ecn: cannot match TCP bits for non-tcp packets [ 402.096711][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 402.665950][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'. [ 402.697832][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 402.861743][T10128] syz.0.906 (10128): drop_caches: 2 [ 402.953345][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.072677][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.132324][T10128] dvb-usb: bulk message failed: -22 (7/0) [ 403.155228][T10128] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 403.228913][T10128] ttusb2: i2c transfer failed. [ 404.176295][T10151] xt_ecn: cannot match TCP bits for non-tcp packets [ 404.212542][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 405.520997][T10165] xt_ecn: cannot match TCP bits for non-tcp packets [ 406.297923][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.918'. [ 406.418111][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 406.702837][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.919'. [ 408.113099][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 408.127339][T10203] usb usb7: usbfs: process 10203 (syz.0.923) did not claim interface 0 before use [ 408.157014][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 410.202222][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.234858][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.834776][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.930'. [ 410.986490][T10239] xt_ecn: cannot match TCP bits for non-tcp packets [ 411.082275][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 412.161219][T10252] usb usb7: usbfs: process 10252 (syz.3.934) did not claim interface 0 before use [ 412.190693][T10254] syz.0.935 (10254): drop_caches: 2 [ 412.279674][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.308857][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.388817][T10254] dvb-usb: bulk message failed: -22 (7/0) [ 412.491067][T10254] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 412.531657][T10254] ttusb2: i2c transfer failed. [ 412.610116][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 412.904100][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.938'. [ 412.950173][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.938'. [ 413.361464][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.389545][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.836827][T10294] xt_ecn: cannot match TCP bits for non-tcp packets [ 414.952188][T10299] usb usb7: usbfs: process 10299 (syz.6.946) did not claim interface 0 before use [ 415.187941][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.947'. [ 415.491232][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.947'. [ 415.899890][T10313] syz.0.949 (10313): drop_caches: 2 [ 415.941706][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.975983][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.418563][T10319] xt_ecn: cannot match TCP bits for non-tcp packets [ 417.025437][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 417.038309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 417.057263][T10336] xt_ecn: cannot match TCP bits for non-tcp packets [ 417.131618][T10340] syz.1.955 (10340): drop_caches: 2 [ 417.153339][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.166291][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.195684][T10340] dvb-usb: bulk message failed: -22 (7/0) [ 417.219958][T10340] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 417.262521][T10340] ttusb2: i2c transfer failed. [ 418.119693][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.155525][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.212129][T10347] dvb-usb: bulk message failed: -22 (7/0) [ 418.236515][T10347] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 418.280720][T10347] ttusb2: i2c transfer failed. [ 418.807380][T10358] syz.0.959 (10358): drop_caches: 2 [ 418.849386][T10358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.895425][T10358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.943196][T10358] dvb-usb: bulk message failed: -22 (7/0) [ 418.970031][T10358] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 419.018339][T10358] ttusb2: i2c transfer failed. [ 419.158973][T10363] xt_ecn: cannot match TCP bits for non-tcp packets [ 419.230528][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.278708][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.291176][T10366] dvb-usb: bulk message failed: -22 (7/0) [ 419.298312][T10366] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 419.319821][T10366] ttusb2: i2c transfer failed. [ 419.656534][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 420.016519][T10383] fuse: Unknown parameter '00000000000000000000003' [ 420.797039][T10391] syz.0.967 (10391): drop_caches: 2 [ 420.824584][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.857659][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.879308][T10391] dvb-usb: bulk message failed: -22 (7/0) [ 420.900769][T10391] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 420.940998][T10391] ttusb2: i2c transfer failed. [ 421.175779][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 421.967999][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 422.019272][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 422.423680][T10421] xt_ecn: cannot match TCP bits for non-tcp packets [ 423.474699][T10430] syz.5.975 (10430): drop_caches: 2 [ 423.520087][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.578660][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.663772][T10430] dvb-usb: bulk message failed: -22 (7/0) [ 423.698459][T10430] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 423.769405][T10430] ttusb2: i2c transfer failed. [ 423.824319][T10435] xt_ecn: cannot match TCP bits for non-tcp packets [ 424.205247][T10447] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.357462][T10462] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.818372][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.837599][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.914417][T10467] dvb-usb: bulk message failed: -22 (7/0) [ 425.931287][T10467] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 425.993576][T10467] ttusb2: i2c transfer failed. [ 426.096669][T10472] xt_ecn: cannot match TCP bits for non-tcp packets [ 426.616159][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 426.807237][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.818263][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.832482][T10485] dvb-usb: bulk message failed: -22 (7/0) [ 426.840078][T10485] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 426.908849][T10485] ttusb2: i2c transfer failed. [ 430.143586][T10525] xt_ecn: cannot match TCP bits for non-tcp packets [ 431.159903][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.176404][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.206368][T10544] dvb-usb: bulk message failed: -22 (7/0) [ 431.221597][T10544] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 431.259170][T10544] ttusb2: i2c transfer failed. [ 432.538139][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 432.596000][T10564] fuse: Unknown parameter 'fd00000000000000000000003' [ 434.527320][T10583] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.440584][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.484613][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.598116][T10609] syz.6.1013 (10609): drop_caches: 2 [ 437.083060][T10614] fuse: Unknown parameter 'fd00000000000000000000003' [ 437.511994][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 437.761674][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 438.222220][T10638] xt_ecn: cannot match TCP bits for non-tcp packets [ 440.003604][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.010001][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.593585][T10658] xt_ecn: cannot match TCP bits for non-tcp packets [ 440.991355][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.035130][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.898681][T10670] syz.0.1027 (10670): drop_caches: 2 [ 441.929345][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.963188][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.001322][T10670] dvb-usb: bulk message failed: -22 (7/0) [ 442.018016][T10670] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 442.047414][T10670] ttusb2: i2c transfer failed. [ 442.281932][T10678] xt_ecn: cannot match TCP bits for non-tcp packets [ 442.840938][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 442.916316][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 443.030182][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 443.642909][ T5697] usb 6-1: USB disconnect, device number 3 [ 443.800098][ T5697] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 444.017815][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.377107][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.532432][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.761503][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.896446][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.930916][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.339270][ T48] bridge_slave_1: left allmulticast mode [ 445.343218][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.361044][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.367192][ T48] bridge_slave_1: left promiscuous mode [ 445.374506][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.382923][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.386274][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.398050][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.469486][ T48] bridge_slave_0: left allmulticast mode [ 445.497890][ T48] bridge_slave_0: left promiscuous mode [ 445.516901][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.022071][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.053614][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.082986][ T48] bond0 (unregistering): Released all slaves [ 447.107049][T10739] xt_ecn: cannot match TCP bits for non-tcp packets [ 447.208782][ T48] hsr_slave_0: left promiscuous mode [ 447.242090][ T48] hsr_slave_1: left promiscuous mode [ 447.255725][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.284416][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.333755][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.381287][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.497542][ T48] veth1_macvtap: left promiscuous mode [ 447.521844][ T5632] Bluetooth: hci3: command tx timeout [ 447.533814][ T48] veth0_macvtap: left promiscuous mode [ 447.546583][ T48] veth1_vlan: left promiscuous mode [ 447.558388][ T48] veth0_vlan: left promiscuous mode [ 448.379497][ T48] team0 (unregistering): Port device team_slave_1 removed [ 448.442678][ T48] team0 (unregistering): Port device team_slave_0 removed [ 449.003275][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 449.078455][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 449.588701][ T5632] Bluetooth: hci3: command tx timeout [ 449.891166][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.937409][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.968392][T10707] bridge_slave_0: entered allmulticast mode [ 449.994430][T10707] bridge_slave_0: entered promiscuous mode [ 450.036819][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.058003][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.077100][T10707] bridge_slave_1: entered allmulticast mode [ 450.104328][T10707] bridge_slave_1: entered promiscuous mode [ 450.221219][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.250609][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.484834][T10707] team0: Port device team_slave_0 added [ 450.546628][T10707] team0: Port device team_slave_1 added [ 450.714299][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.744655][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.837628][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.888855][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.921455][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.038879][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.145472][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 451.265932][T10707] hsr_slave_0: entered promiscuous mode [ 451.275020][T10707] hsr_slave_1: entered promiscuous mode [ 451.283038][T10707] debugfs: 'hsr0' already exists in 'hsr' [ 451.289209][T10707] Cannot create hsr debugfs directory [ 451.678307][ T5632] Bluetooth: hci3: command tx timeout [ 451.977016][T10707] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 452.014737][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.063004][T10707] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 452.125705][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.166250][T10707] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 452.206833][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.232541][T10707] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 452.297229][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.601527][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 452.772343][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.863738][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.916684][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.923826][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.024904][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.032644][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.370836][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.692786][T10707] veth0_vlan: entered promiscuous mode [ 453.758327][ T5632] Bluetooth: hci3: command tx timeout [ 453.819112][T10707] veth1_vlan: entered promiscuous mode [ 453.939963][T10707] veth0_macvtap: entered promiscuous mode [ 454.019957][T10707] veth1_macvtap: entered promiscuous mode [ 454.043109][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 454.065615][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 454.150361][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.186361][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.238069][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.270885][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.306052][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.342526][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.598139][ T518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.625349][ T518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.791798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.859128][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.848277][T10700] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 457.010556][T10700] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.029203][T10700] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 457.039802][T10700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.077967][T10700] usb 8-1: config 0 descriptor?? [ 457.111406][T10700] pwc: Askey VC010 type 2 USB webcam detected. [ 457.596877][T10700] pwc: recv_control_msg error -71 req 02 val 2b00 [ 457.605026][T10700] pwc: recv_control_msg error -71 req 02 val 2700 [ 457.631690][T10700] pwc: recv_control_msg error -71 req 02 val 2c00 [ 457.653450][T10700] pwc: recv_control_msg error -71 req 04 val 1000 [ 457.680397][T10700] pwc: recv_control_msg error -71 req 04 val 1300 [ 457.700368][T10700] pwc: recv_control_msg error -71 req 04 val 1400 [ 457.735381][T10700] pwc: recv_control_msg error -71 req 02 val 2000 [ 457.760084][T10700] pwc: recv_control_msg error -71 req 02 val 2100 [ 457.779108][T10700] pwc: recv_control_msg error -71 req 04 val 1500 [ 457.804198][T10700] pwc: recv_control_msg error -71 req 02 val 2500 [ 457.825853][T10700] pwc: recv_control_msg error -71 req 02 val 2400 [ 457.843486][T10700] pwc: recv_control_msg error -71 req 02 val 2600 [ 457.864296][T10700] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.884454][T10700] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.898935][T10700] pwc: recv_control_msg error -71 req 04 val 1100 [ 457.914891][T10700] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.956389][T10700] pwc: Registered as video103. [ 457.982051][T10700] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6 [ 458.043281][T10700] usb 8-1: USB disconnect, device number 2 [ 458.788129][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 459.842375][T10946] xt_ecn: cannot match TCP bits for non-tcp packets [ 459.902512][T10948] xt_ecn: cannot match TCP bits for non-tcp packets [ 461.953332][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.018571][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.534735][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 464.268277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 464.475238][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 465.494631][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 467.040780][T11046] xt_ecn: cannot match TCP bits for non-tcp packets [ 467.238640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 467.381789][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.438794][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.786525][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 473.428787][ T5696] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 473.601790][ T5696] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.642603][ T5696] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 473.659984][ T5696] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.686055][ T5696] usb 8-1: config 0 descriptor?? [ 473.709102][ T5696] pwc: Askey VC010 type 2 USB webcam detected. [ 474.199332][ T5696] pwc: recv_control_msg error -71 req 02 val 2b00 [ 474.220999][ T5696] pwc: recv_control_msg error -71 req 02 val 2700 [ 474.240918][ T5696] pwc: recv_control_msg error -71 req 02 val 2c00 [ 474.259256][ T5696] pwc: recv_control_msg error -71 req 04 val 1000 [ 474.276647][ T5696] pwc: recv_control_msg error -71 req 04 val 1300 [ 474.307025][ T5696] pwc: recv_control_msg error -71 req 04 val 1400 [ 474.340623][ T5696] pwc: recv_control_msg error -71 req 02 val 2000 [ 474.369965][ T5696] pwc: recv_control_msg error -71 req 02 val 2100 [ 474.400598][ T5696] pwc: recv_control_msg error -71 req 04 val 1500 [ 474.423047][ T5696] pwc: recv_control_msg error -71 req 02 val 2500 [ 474.442964][ T5696] pwc: recv_control_msg error -71 req 02 val 2400 [ 474.462429][ T5696] pwc: recv_control_msg error -71 req 02 val 2600 [ 474.498507][ T5696] pwc: recv_control_msg error -71 req 02 val 2900 [ 474.525491][ T5696] pwc: recv_control_msg error -71 req 02 val 2800 [ 474.550307][ T5696] pwc: recv_control_msg error -71 req 04 val 1100 [ 474.574991][ T5696] pwc: recv_control_msg error -71 req 04 val 1200 [ 474.614608][ T5696] pwc: Registered as video103. [ 474.642354][ T5696] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input7 [ 474.737563][ T5696] usb 8-1: USB disconnect, device number 3 [ 475.236886][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1107'. [ 475.652000][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 476.010336][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 477.138033][T11195] usb usb7: usbfs: process 11195 (syz.7.1112) did not claim interface 0 before use [ 478.236775][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 479.003452][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'. [ 480.015727][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 484.884972][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1135'. [ 485.151563][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.384950][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.608872][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.636846][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.665829][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.691954][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.712882][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.738089][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.000736][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.854046][ T13] bridge_slave_1: left allmulticast mode [ 486.860830][ T13] bridge_slave_1: left promiscuous mode [ 486.882376][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.895874][ T13] bridge_slave_0: left allmulticast mode [ 486.905327][ T13] bridge_slave_0: left promiscuous mode [ 486.913102][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.067618][T11315] usb usb7: usbfs: process 11315 (syz.0.1141) did not claim interface 0 before use [ 487.308227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 487.575173][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.598037][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.649872][ T13] bond0 (unregistering): Released all slaves [ 487.748371][ T50] Bluetooth: hci0: command tx timeout [ 488.044911][T11334] usb usb7: usbfs: process 11334 (syz.7.1142) did not claim interface 0 before use [ 488.167623][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.194076][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.209305][T11295] bridge_slave_0: entered allmulticast mode [ 488.219248][T11295] bridge_slave_0: entered promiscuous mode [ 488.317111][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.346637][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.381648][T11295] bridge_slave_1: entered allmulticast mode [ 488.405362][T11295] bridge_slave_1: entered promiscuous mode [ 488.513759][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 488.637026][ T13] hsr_slave_0: left promiscuous mode [ 488.663422][ T13] hsr_slave_1: left promiscuous mode [ 488.688602][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.718689][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.749209][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.788908][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.839834][ T13] veth1_macvtap: left promiscuous mode [ 488.849855][ T13] veth0_macvtap: left promiscuous mode [ 488.885743][ T13] veth1_vlan: left promiscuous mode [ 488.904124][ T13] veth0_vlan: left promiscuous mode [ 489.286354][T11349] usb usb7: usbfs: process 11349 (syz.0.1145) did not claim interface 0 before use [ 489.838350][ T50] Bluetooth: hci0: command tx timeout [ 489.952719][ T13] team0 (unregistering): Port device team_slave_1 removed [ 490.020455][ T13] team0 (unregistering): Port device team_slave_0 removed [ 490.358841][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.428976][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.567576][T11295] team0: Port device team_slave_0 added [ 490.641895][T11295] team0: Port device team_slave_1 added [ 490.813279][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.853050][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.935716][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.025862][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.063555][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.188212][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.206624][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 491.354563][ T5696] usb 2-1: USB disconnect, device number 4 [ 491.546314][ T5696] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 491.693608][T11295] hsr_slave_0: entered promiscuous mode [ 491.704131][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 491.718673][T11295] hsr_slave_1: entered promiscuous mode [ 491.737082][T11295] debugfs: 'hsr0' already exists in 'hsr' [ 491.797591][T11295] Cannot create hsr debugfs directory [ 491.908956][ T50] Bluetooth: hci0: command tx timeout [ 492.186643][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.678092][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.741330][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 492.775803][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.793148][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.807413][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.832325][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.851029][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.948074][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.972806][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1153'. [ 493.132567][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.443368][T11295] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 493.479127][T11295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.566367][T11295] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 493.622466][T11295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.657998][T11295] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 493.697694][T11295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.781528][T11295] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.848439][T11295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.988534][ T5632] Bluetooth: hci0: command tx timeout [ 494.242959][ T5290] 8021q: adding VLAN 0 to HW filter on device eth15 [ 494.459579][ T12] bridge_slave_1: left allmulticast mode [ 494.466266][ T12] bridge_slave_1: left promiscuous mode [ 494.483156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.516657][ T12] bridge_slave_0: left allmulticast mode [ 494.535887][ T12] bridge_slave_0: left promiscuous mode [ 494.542220][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.948323][ T5632] Bluetooth: hci1: command tx timeout [ 495.086480][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.134358][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.171257][ T12] bond0 (unregistering): Released all slaves [ 496.014847][ T12] hsr_slave_0: left promiscuous mode [ 496.022336][ T12] hsr_slave_1: left promiscuous mode [ 496.033045][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.048557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.066390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.080376][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.121020][ T12] veth1_macvtap: left promiscuous mode [ 496.131032][ T12] veth0_macvtap: left promiscuous mode [ 496.156164][ T12] veth1_vlan: left promiscuous mode [ 496.185234][ T12] veth0_vlan: left promiscuous mode [ 497.028450][ T5632] Bluetooth: hci1: command tx timeout [ 497.142990][ T12] team0 (unregistering): Port device team_slave_1 removed [ 497.185308][ T12] team0 (unregistering): Port device team_slave_0 removed [ 497.532511][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.552780][ T5290] 8021q: adding VLAN 0 to HW filter on device eth16 [ 497.573199][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.586216][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.597304][T11394] bridge_slave_0: entered allmulticast mode [ 497.605835][T11394] bridge_slave_0: entered promiscuous mode [ 497.695534][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.716478][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.740663][T11394] bridge_slave_1: entered allmulticast mode [ 497.750887][T11394] bridge_slave_1: entered promiscuous mode [ 497.925090][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.986393][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.081248][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.197613][T11394] team0: Port device team_slave_0 added [ 498.253683][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.260825][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.333569][T11394] team0: Port device team_slave_1 added [ 498.460143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.467345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.516648][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.538450][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.635279][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.685707][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.702817][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.780313][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.020984][T11394] hsr_slave_0: entered promiscuous mode [ 499.042775][T11394] hsr_slave_1: entered promiscuous mode [ 499.064345][T11394] debugfs: 'hsr0' already exists in 'hsr' [ 499.076193][T11394] Cannot create hsr debugfs directory [ 499.108261][ T5632] Bluetooth: hci1: command tx timeout [ 499.344669][T11494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1162'. [ 499.388260][ T5290] 8021q: adding VLAN 0 to HW filter on device eth17 [ 499.507982][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 499.582359][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.075132][T11394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 500.136196][T11394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.163552][T11394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 500.197385][T11394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.236678][T11394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 500.277097][T11394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.316344][T11394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 500.354937][T11394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.387581][T11295] veth0_vlan: entered promiscuous mode [ 500.469969][T11295] veth1_vlan: entered promiscuous mode [ 500.658829][T11295] veth0_macvtap: entered promiscuous mode [ 500.729917][T11295] veth1_macvtap: entered promiscuous mode [ 500.813734][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.877069][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.954594][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.995397][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.043903][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.072755][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.117602][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.199924][ T5632] Bluetooth: hci1: command tx timeout [ 501.312775][T11394] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.430881][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.443875][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.443968][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.461174][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.546138][ T5290] 8021q: adding VLAN 0 to HW filter on device eth18 [ 501.574759][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.582273][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.625359][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.636349][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.814180][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.841746][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.967078][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.202795][T11394] veth0_vlan: entered promiscuous mode [ 502.307886][T11394] veth1_vlan: entered promiscuous mode [ 502.500109][T11394] veth0_macvtap: entered promiscuous mode [ 502.510239][T11550] usb usb7: usbfs: process 11550 (syz.8.1138) did not claim interface 0 before use [ 502.568331][T11394] veth1_macvtap: entered promiscuous mode [ 502.671338][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.738340][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.830939][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.884391][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.896359][ T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.942390][ T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.254790][T11565] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.265772][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.316293][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.451616][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.539646][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.754294][ T5290] 8021q: adding VLAN 0 to HW filter on device eth19 [ 505.644955][ T5290] 8021q: adding VLAN 0 to HW filter on device eth20 [ 506.577023][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1174'. [ 506.710048][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1174'. [ 509.463860][T11653] fuse: Bad value for 'fd' [ 510.546222][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.805219][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.073769][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.265091][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.392115][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.416388][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.429167][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.446582][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.454261][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.165398][ T57] bridge_slave_1: left allmulticast mode [ 512.178331][ T57] bridge_slave_1: left promiscuous mode [ 512.207443][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.265847][ T57] bridge_slave_0: left allmulticast mode [ 512.285768][ T57] bridge_slave_0: left promiscuous mode [ 512.318297][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.972062][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1189'. [ 513.178579][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.229525][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.250487][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 513.283930][ T57] bond0 (unregistering): Released all slaves [ 513.434953][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1191'. [ 513.508309][ T50] Bluetooth: hci3: command tx timeout [ 514.195897][ T5290] 8021q: adding VLAN 0 to HW filter on device eth21 [ 514.367160][ T57] hsr_slave_0: left promiscuous mode [ 514.385279][ T57] hsr_slave_1: left promiscuous mode [ 514.413526][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.449586][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.493475][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.518252][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.570456][ T57] veth1_macvtap: left promiscuous mode [ 514.599890][ T57] veth0_macvtap: left promiscuous mode [ 514.626244][ T57] veth1_vlan: left promiscuous mode [ 514.653545][ T57] veth0_vlan: left promiscuous mode [ 515.218244][ T5749] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 515.408413][ T5749] usb 9-1: Using ep0 maxpacket: 32 [ 515.429562][ T5749] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.461687][ T5749] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.488867][ T57] team0 (unregistering): Port device team_slave_1 removed [ 515.505475][ T5749] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 515.530716][ T57] team0 (unregistering): Port device team_slave_0 removed [ 515.544711][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.563003][ T5749] usb 9-1: Product: syz [ 515.583245][ T5749] usb 9-1: Manufacturer: syz [ 515.589107][ T50] Bluetooth: hci3: command tx timeout [ 515.598790][ T5749] usb 9-1: SerialNumber: syz [ 515.645888][ T5749] usb 9-1: config 0 descriptor?? [ 515.908962][T11725] dvb-usb: bulk message failed: -22 (7/0) [ 515.954027][T11725] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 515.991082][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.020643][T11725] ttusb2: i2c transfer failed. [ 516.025680][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.053585][T11676] bridge_slave_0: entered allmulticast mode [ 516.103305][T11676] bridge_slave_0: entered promiscuous mode [ 516.122532][T11676] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.146756][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.166185][T11676] bridge_slave_1: entered allmulticast mode [ 516.202111][T11676] bridge_slave_1: entered promiscuous mode [ 516.291494][T11676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.346912][T11676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.495456][T11676] team0: Port device team_slave_0 added [ 516.510403][T11676] team0: Port device team_slave_1 added [ 516.605955][T11676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.633421][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.780347][T11676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.829586][T11676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.856514][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.948338][T11676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.215843][T11676] hsr_slave_0: entered promiscuous mode [ 517.258918][T11676] hsr_slave_1: entered promiscuous mode [ 517.282411][T11676] debugfs: 'hsr0' already exists in 'hsr' [ 517.309222][T11676] Cannot create hsr debugfs directory [ 517.668430][ T50] Bluetooth: hci3: command tx timeout [ 517.719526][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 519.334092][ T5290] 8021q: adding VLAN 0 to HW filter on device eth22 [ 519.344458][T11676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 519.364649][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.381132][T11676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.400793][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.445290][T11676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 519.514062][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.588375][T11676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.652327][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 519.758229][ T50] Bluetooth: hci3: command tx timeout [ 520.040782][T11676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.172372][T11676] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.246480][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.253655][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.350123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.357397][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.408490][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1201'. [ 520.527736][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 520.684098][T11676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.846131][T11676] veth0_vlan: entered promiscuous mode [ 520.910296][T11676] veth1_vlan: entered promiscuous mode [ 521.057003][T11676] veth0_macvtap: entered promiscuous mode [ 521.095380][T11676] veth1_macvtap: entered promiscuous mode [ 521.176807][T11676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.233132][T11676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.319258][ T518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.367318][ T518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.427043][ T5290] 8021q: adding VLAN 0 to HW filter on device eth23 [ 521.503714][ T518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.574296][ T518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.005290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.074818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.162722][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.201267][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.059882][ T5290] 8021q: adding VLAN 0 to HW filter on device eth24 [ 527.185717][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 527.646383][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.703342][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.755852][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1227'. [ 533.593678][ T5697] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 533.760881][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.807384][ T5697] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 533.839810][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.932021][ T5697] usb 5-1: config 0 descriptor?? [ 533.997751][ T5697] pwc: Askey VC010 type 2 USB webcam detected. [ 534.176011][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 534.496873][ T5697] pwc: recv_control_msg error -71 req 02 val 2b00 [ 534.527992][ T5697] pwc: recv_control_msg error -71 req 02 val 2700 [ 534.565595][ T5697] pwc: recv_control_msg error -71 req 02 val 2c00 [ 534.613246][ T5697] pwc: recv_control_msg error -71 req 04 val 1000 [ 534.715179][ T5697] pwc: recv_control_msg error -71 req 04 val 1300 [ 534.752958][ T5697] pwc: recv_control_msg error -71 req 04 val 1400 [ 534.781472][ T5697] pwc: recv_control_msg error -71 req 02 val 2000 [ 534.816044][ T5697] pwc: recv_control_msg error -71 req 02 val 2100 [ 534.867045][ T5697] pwc: recv_control_msg error -71 req 04 val 1500 [ 534.910377][ T5697] pwc: recv_control_msg error -71 req 02 val 2500 [ 534.933507][ T5697] pwc: recv_control_msg error -71 req 02 val 2400 [ 535.025455][ T5697] pwc: recv_control_msg error -71 req 02 val 2600 [ 535.095793][ T5697] pwc: recv_control_msg error -71 req 02 val 2900 [ 535.143270][ T5697] pwc: recv_control_msg error -71 req 02 val 2800 [ 535.186564][ T5697] pwc: recv_control_msg error -71 req 04 val 1100 [ 535.226752][ T5697] pwc: recv_control_msg error -71 req 04 val 1200 [ 535.312479][ T5697] pwc: Registered as video103. [ 535.367871][ T5697] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 535.592748][ T5697] usb 5-1: USB disconnect, device number 2 [ 539.700250][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 539.899870][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.938566][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 539.979943][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.040629][ T9] usb 5-1: config 0 descriptor?? [ 540.066030][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 540.717622][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 540.784562][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 540.912085][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 540.947078][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 540.993320][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 541.015159][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 541.062559][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 541.138443][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 541.154264][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 541.199937][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 541.232284][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 541.245246][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 541.305834][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 541.337246][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 541.376486][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 541.434103][T12200] team0: Port device team_slave_1 removed [ 541.443761][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 541.484131][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.536755][ T9] pwc: Registered as video103. [ 541.569859][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 541.685730][ T9] usb 5-1: USB disconnect, device number 3 [ 543.072094][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1246'. [ 543.567029][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1247'. [ 546.824315][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 550.244172][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1264'. [ 550.864259][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1266'. [ 550.925172][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 552.683042][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 553.795567][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1271'. [ 554.905469][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 561.436414][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.548497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 561.653346][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.879208][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.175604][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.419306][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.442642][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.453662][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.465452][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.475377][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.871770][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.878181][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.095677][ T35] bridge_slave_1: left allmulticast mode [ 563.105382][ T35] bridge_slave_1: left promiscuous mode [ 563.147110][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.255217][ T35] bridge_slave_0: left allmulticast mode [ 563.274210][ T35] bridge_slave_0: left promiscuous mode [ 563.292673][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.018545][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.124771][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.168867][ T35] bond0 (unregistering): Released all slaves [ 564.548701][ T50] Bluetooth: hci3: command tx timeout [ 564.730537][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1300'. [ 564.975336][ T35] hsr_slave_0: left promiscuous mode [ 565.033757][ T35] hsr_slave_1: left promiscuous mode [ 565.063017][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.091209][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.192608][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.257182][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.321084][ T35] veth1_macvtap: left promiscuous mode [ 565.356072][ T35] veth0_macvtap: left promiscuous mode [ 565.397617][ T35] veth1_vlan: left promiscuous mode [ 565.415569][ T35] veth0_vlan: left promiscuous mode [ 566.295315][ T5629] usb 4-1: USB disconnect, device number 3 [ 566.476928][ T5629] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 566.628492][ T50] Bluetooth: hci3: command tx timeout [ 566.752786][ T35] team0 (unregistering): Port device team_slave_0 removed [ 567.673272][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.697266][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.768562][T12551] bridge_slave_0: entered allmulticast mode [ 567.812215][T12551] bridge_slave_0: entered promiscuous mode [ 567.872749][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.910398][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.938189][T12551] bridge_slave_1: entered allmulticast mode [ 567.957918][T12551] bridge_slave_1: entered promiscuous mode [ 568.064721][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.103057][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.274475][T12551] team0: Port device team_slave_0 added [ 568.341209][T12551] team0: Port device team_slave_1 added [ 568.659532][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.687773][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.698696][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.708781][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.709323][T11674] Bluetooth: hci3: command tx timeout [ 568.733917][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.741485][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 568.775121][T12649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 568.850303][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.890356][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.004453][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.035246][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 569.047836][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.057899][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.140573][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.384718][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.567746][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.949573][T12551] hsr_slave_0: entered promiscuous mode [ 569.983037][T12551] hsr_slave_1: entered promiscuous mode [ 570.034977][T12551] debugfs: 'hsr0' already exists in 'hsr' [ 570.058890][T12551] Cannot create hsr debugfs directory [ 570.121378][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.780575][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 570.788375][ T5632] Bluetooth: hci3: command tx timeout [ 570.788383][ T50] Bluetooth: hci4: command tx timeout [ 570.980402][ T35] bridge_slave_1: left allmulticast mode [ 570.999714][ T35] bridge_slave_1: left promiscuous mode [ 571.015426][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.050719][ T35] bridge_slave_0: left allmulticast mode [ 571.068107][ T35] bridge_slave_0: left promiscuous mode [ 571.081209][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.450415][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.477319][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.491931][ T35] bond0 (unregistering): Released all slaves [ 571.852842][T10873] usb 1-1: USB disconnect, device number 3 [ 572.317221][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.342531][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.365112][T12652] bridge_slave_0: entered allmulticast mode [ 572.387328][T12652] bridge_slave_0: entered promiscuous mode [ 572.428052][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.477713][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.514311][T12652] bridge_slave_1: entered allmulticast mode [ 572.560180][T12652] bridge_slave_1: entered promiscuous mode [ 572.868273][ T50] Bluetooth: hci4: command tx timeout [ 572.917161][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 573.022123][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.068696][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.384695][ T35] hsr_slave_0: left promiscuous mode [ 573.480144][ T35] hsr_slave_1: left promiscuous mode [ 573.506267][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.537617][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.548807][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.556558][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.565469][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.578071][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.586692][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.653472][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.695807][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.743578][ T35] veth1_macvtap: left promiscuous mode [ 573.757817][ T35] veth0_macvtap: left promiscuous mode [ 573.777135][ T35] veth1_vlan: left promiscuous mode [ 573.793522][ T35] veth0_vlan: left promiscuous mode [ 574.257134][ T35] team0 (unregistering): Port device team_slave_1 removed [ 574.299852][ T35] team0 (unregistering): Port device team_slave_0 removed [ 574.590787][T12652] team0: Port device team_slave_0 added [ 574.630270][T12652] team0: Port device team_slave_1 added [ 574.800896][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.809359][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.884117][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.958468][ T5632] Bluetooth: hci4: command tx timeout [ 574.974963][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.011238][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.098249][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.415776][T12652] hsr_slave_0: entered promiscuous mode [ 575.438940][T12652] hsr_slave_1: entered promiscuous mode [ 575.668370][ T5632] Bluetooth: hci2: command tx timeout [ 575.771935][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.938664][T12551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.971858][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.980806][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 576.046312][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.134321][T12551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 576.160745][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.172285][T12551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 576.200345][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.342431][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.394140][T12551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 576.417750][T12551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.561367][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.029219][ T5632] Bluetooth: hci4: command tx timeout [ 577.227751][ T35] bridge_slave_1: left allmulticast mode [ 577.236170][ T35] bridge_slave_1: left promiscuous mode [ 577.253058][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.270256][ T35] bridge_slave_0: left allmulticast mode [ 577.276473][ T35] bridge_slave_0: left promiscuous mode [ 577.282338][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.528569][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.552624][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.572322][ T35] bond0 (unregistering): Released all slaves [ 577.628814][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 577.672856][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.695183][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.713831][T12728] bridge_slave_0: entered allmulticast mode [ 577.723576][T12728] bridge_slave_0: entered promiscuous mode [ 577.748375][ T5632] Bluetooth: hci2: command tx timeout [ 577.760279][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.767968][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.776023][T12728] bridge_slave_1: entered allmulticast mode [ 577.807114][T12728] bridge_slave_1: entered promiscuous mode [ 577.957008][T12728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.021992][T12728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.116345][ T35] hsr_slave_0: left promiscuous mode [ 578.146658][ T35] hsr_slave_1: left promiscuous mode [ 578.168648][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.209022][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.242951][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.262998][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.310675][ T35] veth1_macvtap: left promiscuous mode [ 578.316276][ T35] veth0_macvtap: left promiscuous mode [ 578.330398][ T35] veth1_vlan: left promiscuous mode [ 578.341304][ T35] veth0_vlan: left promiscuous mode [ 578.376514][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 578.390068][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 578.399341][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 578.407600][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 578.415287][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 578.632150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 578.937196][ T35] team0 (unregistering): Port device team_slave_1 removed [ 578.970812][ T35] team0 (unregistering): Port device team_slave_0 removed [ 579.186120][ T5290] 8021q: adding VLAN 0 to HW filter on device eth25 [ 579.212252][T12728] team0: Port device team_slave_0 added [ 579.303068][T12728] team0: Port device team_slave_1 added [ 579.371004][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.401105][T12728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.414283][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.459911][T12728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.584554][T12728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.603481][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.638436][T12728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.827777][T12728] hsr_slave_0: entered promiscuous mode [ 579.839026][ T5632] Bluetooth: hci2: command tx timeout [ 579.851143][T12728] hsr_slave_1: entered promiscuous mode [ 579.872584][T12728] debugfs: 'hsr0' already exists in 'hsr' [ 579.903481][T12728] Cannot create hsr debugfs directory [ 579.920150][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.048060][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.055260][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.277102][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.328143][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.335275][ T518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.381365][ T5290] 8021q: adding VLAN 0 to HW filter on device eth26 [ 580.468295][ T5632] Bluetooth: hci1: command tx timeout [ 580.476972][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.636929][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.701760][T12652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 580.734406][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.775632][T12652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 580.793193][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.839631][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.893241][T12652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 580.928946][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.960365][T12652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 580.991711][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.406878][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.414539][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.425855][T12797] bridge_slave_0: entered allmulticast mode [ 581.437395][T12797] bridge_slave_0: entered promiscuous mode [ 581.446199][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.453684][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.461212][T12797] bridge_slave_1: entered allmulticast mode [ 581.469799][T12797] bridge_slave_1: entered promiscuous mode [ 581.629037][ T5290] 8021q: adding VLAN 0 to HW filter on device eth27 [ 581.653749][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.679414][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.721242][T12797] team0: Port device team_slave_0 added [ 581.731038][T12797] team0: Port device team_slave_1 added [ 581.775603][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.786754][ T35] bridge_slave_1: left allmulticast mode [ 581.793767][ T35] bridge_slave_1: left promiscuous mode [ 581.801949][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.812015][ T35] bridge_slave_0: left allmulticast mode [ 581.817688][ T35] bridge_slave_0: left promiscuous mode [ 581.824117][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.911043][ T5632] Bluetooth: hci2: command tx timeout [ 581.978937][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.991604][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.001464][ T35] bond0 (unregistering): Released all slaves [ 582.013292][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.020860][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.047205][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.075282][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.083185][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.110183][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.231828][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.248856][T12797] hsr_slave_0: entered promiscuous mode [ 582.250976][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.255442][T12797] hsr_slave_1: entered promiscuous mode [ 582.269542][T12797] debugfs: 'hsr0' already exists in 'hsr' [ 582.275307][T12797] Cannot create hsr debugfs directory [ 582.275612][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.292683][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.409129][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.426393][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.542130][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.549469][ T5632] Bluetooth: hci1: command tx timeout [ 582.605764][ T35] hsr_slave_0: left promiscuous mode [ 582.613111][ T35] hsr_slave_1: left promiscuous mode [ 582.621196][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.631708][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.640294][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.656266][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.674103][ T35] veth1_macvtap: left promiscuous mode [ 582.680594][ T35] veth0_macvtap: left promiscuous mode [ 582.686246][ T35] veth1_vlan: left promiscuous mode [ 582.697118][ T35] veth0_vlan: left promiscuous mode [ 582.975691][ T35] team0 (unregistering): Port device team_slave_1 removed [ 582.989939][ T35] team0 (unregistering): Port device team_slave_0 removed [ 583.118525][ T5290] 8021q: adding VLAN 0 to HW filter on device eth28 [ 583.127543][T12551] veth0_vlan: entered promiscuous mode [ 583.236821][T12551] veth1_vlan: entered promiscuous mode [ 583.409285][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.452879][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.460008][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.527608][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.534785][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.586333][T12551] veth0_macvtap: entered promiscuous mode [ 583.626904][T12728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.665832][T12728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.860264][T12728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.877627][T12728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.890610][T12728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.906281][T12728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.924609][T12728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.942693][T12728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.953072][T12551] veth1_macvtap: entered promiscuous mode [ 584.167831][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.288311][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.344396][ T518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.377277][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.424364][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.448982][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.628401][ T5632] Bluetooth: hci1: command tx timeout [ 584.758001][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.826067][T12797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.860977][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.882419][ T518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.900650][T12797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.911876][ T518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.928628][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.997428][T12797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.040240][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.075924][T12797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.105910][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.137021][ T518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.154199][ T518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.177122][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.323798][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.380742][T12652] veth0_vlan: entered promiscuous mode [ 585.413382][T12807] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.420630][T12807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.454445][T12652] veth1_vlan: entered promiscuous mode [ 585.490026][T12807] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.497147][T12807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.618276][ T5629] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 585.654691][T12652] veth0_macvtap: entered promiscuous mode [ 585.694539][T12652] veth1_macvtap: entered promiscuous mode [ 585.756356][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.788279][ T5629] usb 3-1: Using ep0 maxpacket: 32 [ 585.811082][ T5629] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 585.837926][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.848533][ T5629] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 585.868565][ T5629] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 585.898597][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 585.935569][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.947080][ T5629] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 585.962710][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 585.977594][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.995516][ T5629] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 585.995979][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.011716][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.019333][ T5629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.041812][ T5629] usb 3-1: config 0 descriptor?? [ 586.084276][T12728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.094026][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.107352][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.143292][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.163629][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.210371][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.217630][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.263094][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.324933][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.414201][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.470952][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.471181][ T5629] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 586.527909][T12728] veth0_vlan: entered promiscuous mode [ 586.562452][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.597069][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.646880][T12728] veth1_vlan: entered promiscuous mode [ 586.697447][T12807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.709390][ T5632] Bluetooth: hci1: command tx timeout [ 586.721199][T12807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.731546][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.778933][T12932] IPv6: addrconf: prefix option has invalid lifetime [ 586.875497][T12728] veth0_macvtap: entered promiscuous mode [ 586.899480][ T5629] usb 3-1: USB disconnect, device number 2 [ 586.952753][ T5629] usblp0: removed [ 586.960608][T12797] veth0_vlan: entered promiscuous mode [ 586.997175][T12728] veth1_macvtap: entered promiscuous mode [ 587.046240][T12797] veth1_vlan: entered promiscuous mode [ 587.134436][T12728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.238478][T12728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.333788][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.402353][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.423747][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.457705][T12797] veth0_macvtap: entered promiscuous mode [ 587.481824][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.543632][T12797] veth1_macvtap: entered promiscuous mode [ 587.655074][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.695975][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.710686][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.729473][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.783398][T12807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.806419][T12807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.892078][T12807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.912230][T12807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.941664][T12807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.978613][T12807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.214794][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.248568][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.417138][T12807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.443963][T12807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.479268][T11608] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 592.679831][T11608] usb 3-1: Using ep0 maxpacket: 32 [ 592.727221][T11608] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 592.843843][T11608] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 592.903401][T11608] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 592.999140][T11608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 593.043363][T11608] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 593.093451][T11608] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 593.138075][T11608] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 593.177783][T11608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.308025][T11608] usb 3-1: config 0 descriptor?? [ 593.545960][T13026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.600898][T13026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.837219][T13026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.851134][T11608] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 593.886531][T13026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.229509][T13026] IPv6: addrconf: prefix option has invalid lifetime [ 594.347043][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.378799][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.450150][T11608] usb 3-1: USB disconnect, device number 3 [ 594.489548][T11608] usblp0: removed [ 595.323772][T13087] xt_ecn: cannot match TCP bits for non-tcp packets [ 608.764511][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1378'. [ 608.872163][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1378'. [ 609.888782][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 611.040761][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 611.501043][T10700] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 611.706946][T10700] usb 3-1: Using ep0 maxpacket: 32 [ 611.732954][T10700] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 611.761568][T10700] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 611.790744][T10700] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 611.819842][T10700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 611.862983][T10700] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 611.890595][T10700] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 611.933462][T10700] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 611.972595][T10700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.009517][T10700] usb 3-1: config 0 descriptor?? [ 612.242167][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.284731][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.399648][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.410242][T10700] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 612.428763][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.832278][T13381] IPv6: addrconf: prefix option has invalid lifetime [ 613.003578][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.091553][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.181066][T10700] usb 3-1: USB disconnect, device number 4 [ 613.231506][T10700] usblp0: removed [ 616.117265][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1394'. [ 616.383480][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1394'. [ 620.430478][ T5749] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 620.609494][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 620.636624][ T5749] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 620.660824][ T5749] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 620.713292][ T5749] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 620.762584][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 620.815336][ T5749] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.875353][ T5749] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 620.921358][ T5749] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 620.953225][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.986229][ T5749] usb 3-1: config 0 descriptor?? [ 621.220633][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.258801][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.401282][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.435476][ T5749] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 621.466066][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.976103][ T5629] usb 3-1: USB disconnect, device number 5 [ 622.091846][ T5629] usblp0: removed [ 623.157722][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 623.327960][T13605] veth1_macvtap: left promiscuous mode [ 624.313475][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.326350][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.617791][T13632] usb usb7: usbfs: process 13632 (syz.8.1411) did not claim interface 0 before use [ 631.061759][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 644.963830][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 652.471418][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 662.199269][ T5629] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 662.392236][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 662.438436][ T5629] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 662.466630][ T5629] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 662.493262][ T5629] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 662.557720][ T5629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 662.621498][ T5629] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 662.687218][ T5629] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 662.815669][ T5629] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 662.881001][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.915029][ T5629] usb 2-1: config 0 descriptor?? [ 663.147630][T14326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.186285][T14326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.362624][T14326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.376739][ T5629] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 663.446880][T14326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.595120][T14326] IPv6: addrconf: prefix option has invalid lifetime [ 663.637635][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 663.754691][ T5629] usb 2-1: USB disconnect, device number 5 [ 663.847616][ T5629] usblp0: removed [ 665.122631][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 666.586731][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 669.109896][T14457] xt_ecn: cannot match TCP bits for non-tcp packets [ 676.518584][ T5696] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 676.698225][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 676.726879][ T5696] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 676.766962][ T5696] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 676.803443][ T5696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 676.841154][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.888320][ T5696] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 676.929383][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 677.017706][ T5696] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 677.068540][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.178590][ T5696] usb 3-1: config 0 descriptor?? [ 677.425491][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.501597][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.701934][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.716769][ T5696] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 677.737860][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.098551][T14602] IPv6: addrconf: prefix option has invalid lifetime [ 678.255764][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.330567][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.462867][ T5696] usb 3-1: USB disconnect, device number 6 [ 678.545089][ T5696] usblp0: removed [ 681.908289][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 682.108313][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 682.123084][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 682.137343][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 682.165859][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 682.219397][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 682.257328][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 682.358704][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 682.442810][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 682.457300][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.483486][ T24] usb 3-1: config 0 descriptor?? [ 682.715848][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.738685][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.851594][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.862394][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 682.950609][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.379552][T14715] IPv6: addrconf: prefix option has invalid lifetime [ 683.502869][T10872] usb 3-1: USB disconnect, device number 7 [ 683.583493][T10872] usblp0: removed [ 683.938367][T10872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 684.118995][T10872] usb 3-1: Using ep0 maxpacket: 32 [ 684.146746][T10872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.170137][T10872] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.226591][T10872] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 217, changing to 7 [ 684.285560][T10872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.342176][T10872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.380148][T10872] usb 3-1: Product: syz [ 684.444611][T10872] usb 3-1: Manufacturer: syz [ 684.465630][T10872] usb 3-1: SerialNumber: syz [ 684.638214][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 684.843027][T10872] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 684.859989][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 684.913222][ T46] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.924887][T10872] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 685.004395][ T46] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 685.055605][ T46] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 685.117840][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 685.146581][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.240941][ T46] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.289587][T10872] usb 3-1: USB disconnect, device number 8 [ 685.365536][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 685.446968][ T46] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 685.541511][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.581917][ T46] usb 6-1: config 0 descriptor?? [ 685.754303][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.762155][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.934225][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.948014][ T46] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 686.038586][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.363200][T14759] IPv6: addrconf: prefix option has invalid lifetime [ 686.537783][T10872] usb 6-1: USB disconnect, device number 4 [ 686.560390][T10872] usblp0: removed [ 686.826941][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 686.928793][T10872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 687.099381][T10872] usb 6-1: Using ep0 maxpacket: 32 [ 687.121482][T10872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 687.141092][T10872] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 687.173860][T10872] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 217, changing to 7 [ 687.226866][T10872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.248225][T10872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.274573][T10872] usb 6-1: Product: syz [ 687.291347][T10872] usb 6-1: Manufacturer: syz [ 687.305545][T10872] usb 6-1: SerialNumber: syz [ 687.537849][T10872] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 687.574732][T10872] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 687.828573][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 687.925801][T10872] usb 6-1: USB disconnect, device number 5 [ 688.124079][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.972222][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 690.513329][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 692.948460][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 695.597769][T14920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1557'. [ 696.027272][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 696.347063][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 696.484850][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 696.771184][ T5696] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 696.967987][ T5696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.993048][ T5696] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 697.082142][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.204736][ T5696] usb 6-1: config 0 descriptor?? [ 697.234188][ T5696] pwc: Askey VC010 type 2 USB webcam detected. [ 697.874436][T14950] xt_ecn: cannot match TCP bits for non-tcp packets [ 698.076033][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 698.102185][ T5696] pwc: send_video_command error -71 [ 698.135623][ T5696] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 698.183646][ T5696] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 698.277973][ T5696] usb 6-1: USB disconnect, device number 6 [ 698.388923][T14959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 698.435406][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1563'. [ 698.792027][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 698.868519][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 698.893035][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1564'. [ 699.202548][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1564'. [ 700.795246][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 700.908199][T10700] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 701.158174][T10700] usb 6-1: Using ep0 maxpacket: 32 [ 701.165688][T10700] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 701.175362][T10700] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 701.194750][T10700] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.224699][T10700] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 701.236913][T10700] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 701.271786][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 701.286880][T10700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.325347][T10700] usb 6-1: config 0 descriptor?? [ 701.592382][T14993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.610382][T14993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.139199][T15022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.173374][T15022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.444559][T15022] IPv6: addrconf: prefix option has invalid lifetime [ 702.564250][T10700] usb 6-1: USB disconnect, device number 7 [ 702.977327][T15035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1574'. [ 703.199347][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 703.272438][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1574'. [ 704.842148][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1581'. [ 705.035841][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 705.379074][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 705.450566][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1581'. [ 705.464743][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 705.573494][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.607678][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 705.645934][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.675634][ T24] usb 6-1: config 0 descriptor?? [ 705.714321][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 706.484959][ T24] pwc: send_video_command error -71 [ 706.564253][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 706.651828][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 706.732651][ T24] usb 6-1: USB disconnect, device number 8 [ 707.371821][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.400765][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.291188][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.366078][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.658139][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 708.884797][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.943602][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 708.973353][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.015365][ T24] usb 6-1: config 0 descriptor?? [ 709.046244][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 709.212794][T15158] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1591'. [ 709.288198][ T5689] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 709.464649][ T5689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.590823][ T5689] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 709.600162][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.652638][ T5689] usb 2-1: config 0 descriptor?? [ 709.661033][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1591'. [ 709.686174][ T5689] pwc: Askey VC010 type 2 USB webcam detected. [ 709.734914][ T24] pwc: recv_control_msg error -71 req 02 val 2b00 [ 709.759911][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 709.772736][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 709.796631][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 709.820416][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 709.857802][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 709.879132][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 709.902208][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 709.922016][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 709.946275][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 709.979809][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 710.018362][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 710.050094][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 710.087046][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 710.118541][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 710.171833][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 710.209769][ T24] pwc: Registered as video103. [ 710.301799][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 710.409386][ T24] usb 6-1: USB disconnect, device number 9 [ 710.773418][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1595'. [ 710.787051][ T5689] pwc: send_video_command error -71 [ 710.803200][ T5689] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 710.816549][ T5689] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 710.872556][ T5689] usb 2-1: USB disconnect, device number 6 [ 711.235756][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1595'. [ 711.815934][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1598'. [ 712.137550][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1598'. [ 713.356026][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1600'. [ 713.750018][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1601'. [ 713.930023][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 714.471904][T15269] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1605'. [ 714.956516][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1605'. [ 717.128186][ T1638] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 717.243415][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1612'. [ 717.298584][ T1638] usb 3-1: Using ep0 maxpacket: 32 [ 717.313747][ T1638] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 717.345457][ T1638] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 717.457360][ T1638] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 717.485286][ T1638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.536491][ T1638] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 717.562794][ T1638] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 717.583835][ T1638] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 717.597058][ T1638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.654728][ T1638] usb 3-1: config 0 descriptor?? [ 717.701586][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 717.756577][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1612'. [ 717.935247][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.974202][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.095905][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.106425][ T1638] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 718.153828][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.274654][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 718.388409][ T30] INFO: task kworker/0:6:10873 blocked for more than 143 seconds. [ 718.405013][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 718.441236][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.454851][ T30] task:kworker/0:6 state:D stack:24640 pid:10873 tgid:10873 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 718.479710][T15297] IPv6: addrconf: prefix option has invalid lifetime [ 718.519510][ T30] Workqueue: usb_hub_wq hub_event [ 718.559900][ T30] Call Trace: [ 718.596486][ T30] [ 718.610438][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.619052][ T30] __schedule+0x1821/0x5740 [ 718.663603][ T30] ? __pfx___schedule+0x10/0x10 [ 718.677680][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.699483][ T30] ? schedule+0x90/0x360 [ 718.714453][ T30] schedule+0x164/0x360 [ 718.738892][ T30] schedule_timeout+0xc3/0x2c0 [ 718.756092][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 718.771270][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 718.806513][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.830494][ T30] ? wait_for_completion+0x274/0x5e0 [ 718.844686][T10873] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 718.855744][ T30] console_unlock+0x150/0x1c0 [ 718.865189][T11525] usb 9-1: USB disconnect, device number 2 [ 718.880279][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 718.914471][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 718.952531][ T30] ? __schedule+0x2a66/0x5740 [ 718.979709][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 719.010344][ T30] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 719.032334][ T30] ? update_load_avg+0x1b0/0x1eb0 [ 719.065844][ T30] ? psi_group_change+0xab8/0x1050 [ 719.088839][ T30] ? __schedule+0x2a66/0x5740 [ 719.108485][ T30] ? __schedule+0x17ef/0x5740 [ 719.134887][ T30] ? __schedule+0x1821/0x5740 [ 719.160246][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 719.194685][ T30] ? arch_stack_walk+0x11b/0x150 [ 719.220071][ T30] ? __pfx___schedule+0x10/0x10 [ 719.248166][ T30] ? _raw_spin_unlock_irq+0x45/0x50 [ 719.266421][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 719.287071][ T30] ? rpm_suspend+0x122f/0x1720 [ 719.307755][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 719.327264][ T30] ? trace_rpm_return_int+0x83/0x200 [ 719.358651][ T30] ? rcu_is_watching+0x15/0xb0 [ 719.376358][ T30] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 719.400672][ T30] ? ktime_get+0x1f5/0x220 [ 719.416156][ T30] ? lapic_next_event+0x11/0x20 [ 719.437444][ T30] ? clockevents_program_event+0x491/0x630 [ 719.463351][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 719.485525][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 719.502509][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 719.522135][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 719.542332][ T30] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 719.562363][ T30] ? __rb_erase_color+0x63d/0xa70 [ 719.581564][ T30] ? psi_group_change+0xab8/0x1050 [ 719.590086][ T30] ? __schedule+0x2a66/0x5740 [ 719.598865][ T30] ? __schedule+0x17ef/0x5740 [ 719.606007][ T30] ? __schedule+0x1821/0x5740 [ 719.614985][ T30] ? __pfx___schedule+0x10/0x10 [ 719.622650][ T30] ? schedule+0x90/0x360 [ 719.632554][ T30] ? schedule+0x164/0x360 [ 719.648649][ T30] ? worker_thread+0xc21/0xfc0 [ 719.667455][ T30] ? kthread+0x389/0x470 [ 719.686344][ T30] ? __pfx_worker_thread+0x10/0x10 [ 719.704355][ T30] ? __pfx_kthread+0x10/0x10 [ 719.717887][ T30] ? ret_from_fork+0x514/0xb70 [ 719.722888][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 719.728613][ T30] ? __switch_to+0xc79/0x1410 [ 719.733314][ T30] ? __pfx_kthread+0x10/0x10 [ 719.737902][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 719.742977][ T30] [ 719.751298][ T30] [ 719.751298][ T30] Showing all locks held in the system: [ 719.827998][ T30] 3 locks held by kworker/u8:0/12: [ 719.833875][ T5696] usb 3-1: USB disconnect, device number 9 [ 719.833910][ T30] #0: ffff888032675140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 719.854338][ T30] #1: ffffc90000117c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 719.895979][ T30] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 719.917434][ T5696] usblp0: removed [ 719.925616][ T30] 1 lock held by khungtaskd/30: [ 719.938103][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 719.958171][ T30] 3 locks held by kworker/u8:6/518: [ 719.968130][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 719.998146][ T30] #1: ffffc90003d37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 720.009548][ T30] #2: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 720.019072][ T30] 2 locks held by getty/5382: [ 720.023796][ T30] #0: ffff8880369e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 720.036159][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 720.047025][ T30] 3 locks held by kworker/1:4/5696: [ 720.052965][ T30] #0: ffff8880202ed940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 720.065920][ T30] #1: ffffc90004d3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 720.078406][ T30] #2: ffff88802ae3a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 720.088591][ T30] 4 locks held by kworker/0:8/11525: [ 720.093919][ T30] 1 lock held by syz-executor/12551: [ 720.099709][ T30] #0: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 720.109172][ T30] 1 lock held by syz.6.1612/15303: [ 720.114336][ T30] #0: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 720.125315][ T30] 2 locks held by syz.1.1613/15309: [ 720.130819][ T30] #0: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 720.143193][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 720.154754][ T30] 2 locks held by syz.8.1614/15312: [ 720.160017][ T30] #0: ffffffff8fdc2628 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 720.170397][ T30] #1: ffffffff8fdd1300 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 720.180585][ T30] 4 locks held by syz.5.1615/15319: [ 720.185784][ T30] #0: ffff88807c0dcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 720.195848][ T30] #1: ffff88807c0dc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 720.205669][ T30] #2: ffffffff8ff54aa0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 720.216076][ T30] #3: ffff8880459dcaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 720.243265][ T30] [ 720.245784][ T30] ============================================= [ 720.245784][ T30] [ 720.258695][ T30] NMI backtrace for cpu 1 [ 720.258725][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 720.258744][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 720.258754][ T30] Call Trace: [ 720.258760][ T30] [ 720.258767][ T30] dump_stack_lvl+0xe8/0x150 [ 720.258790][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 720.258809][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 720.258827][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 720.258854][ T30] sys_info+0x135/0x170 [ 720.258872][ T30] watchdog+0xfd3/0x1030 [ 720.258923][ T30] ? watchdog+0x1c9/0x1030 [ 720.258953][ T30] kthread+0x389/0x470 [ 720.258977][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.259000][ T30] ? __pfx_kthread+0x10/0x10 [ 720.259025][ T30] ret_from_fork+0x514/0xb70 [ 720.259048][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 720.259068][ T30] ? __switch_to+0xc79/0x1410 [ 720.259091][ T30] ? __pfx_kthread+0x10/0x10 [ 720.259110][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.259142][ T30] [ 720.259152][ T30] Sending NMI from CPU 1 to CPUs 0: [ 720.370390][ C0] NMI backtrace for cpu 0 [ 720.370408][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 720.370427][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 720.370438][ C0] RIP: 0010:unwind_next_frame+0x9a/0x2550 [ 720.370486][ C0] Code: ed 03 41 0f b6 44 2d 00 84 c0 0f 85 c6 1b 00 00 41 8b 06 85 c0 0f 84 4e 02 00 00 89 84 24 8c 00 00 00 4c 89 bc 24 90 00 00 00 c1 a0 34 00 4c 8d 3d 00 00 00 00 48 c7 c7 a0 cc 95 8e 31 f6 31 [ 720.370507][ C0] RSP: 0018:ffffc90000006c78 EFLAGS: 00000202 [ 720.370573][ C0] RAX: 0000000000000001 RBX: ffffffff8ba9412f RCX: 0000000080000300 [ 720.370585][ C0] RDX: dffffc0000000000 RSI: ffffffff8ba9412f RDI: ffffc90000006d48 [ 720.370597][ C0] RBP: dffffc0000000000 R08: ffffc90000006e10 R09: 0000000000000013 [ 720.370609][ C0] R10: ffffc90000006d98 R11: ffffffff81b0f020 R12: ffffc90000006d80 [ 720.370621][ C0] R13: 1ffff92000000da9 R14: ffffc90000006d48 R15: ffffffff8e607dc0 [ 720.370633][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 720.370647][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.370657][ C0] CR2: 0000200000404030 CR3: 0000000047016000 CR4: 00000000003526f0 [ 720.370672][ C0] Call Trace: [ 720.370678][ C0] [ 720.370687][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.370709][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.370741][ C0] ? pv_native_safe_halt+0xf/0x20 [ 720.370766][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.370791][ C0] arch_stack_walk+0x11b/0x150 [ 720.370813][ C0] ? pv_native_safe_halt+0xf/0x20 [ 720.370838][ C0] stack_trace_save+0xa9/0x100 [ 720.370860][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 720.370887][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.370905][ C0] kasan_save_track+0x3e/0x80 [ 720.370950][ C0] ? kasan_save_track+0x3e/0x80 [ 720.370969][ C0] ? kasan_save_free_info+0x46/0x50 [ 720.370987][ C0] ? __kasan_slab_free+0x5c/0x80 [ 720.371007][ C0] ? kfree+0x1c5/0x640 [ 720.371030][ C0] ? ieee80211_inform_bss+0xc75/0x1160 [ 720.371111][ C0] ? cfg80211_inform_single_bss_data+0xcf9/0x1af0 [ 720.371186][ C0] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 720.371206][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 720.371227][ C0] ? ieee80211_bss_info_update+0x794/0xa40 [ 720.371244][ C0] ? ieee80211_scan_rx+0x552/0xa40 [ 720.371260][ C0] ? ieee80211_rx_list+0x29f8/0x3740 [ 720.371300][ C0] ? ieee80211_rx_napi+0x1b1/0x3e0 [ 720.371318][ C0] ? ieee80211_handle_queued_frames+0xe8/0x1e0 [ 720.371357][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 720.371383][ C0] ? handle_softirqs+0x22a/0x840 [ 720.371398][ C0] ? __irq_exit_rcu+0xca/0x220 [ 720.371413][ C0] ? irq_exit_rcu+0x9/0x30 [ 720.371428][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 720.371450][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.371467][ C0] ? pv_native_safe_halt+0xf/0x20 [ 720.371509][ C0] kasan_save_free_info+0x46/0x50 [ 720.371528][ C0] __kasan_slab_free+0x5c/0x80 [ 720.371549][ C0] kfree+0x1c5/0x640 [ 720.371568][ C0] ? ieee80211_inform_bss+0xc75/0x1160 [ 720.371587][ C0] ieee80211_inform_bss+0xc75/0x1160 [ 720.371608][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 720.371624][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.371649][ C0] ? __kmalloc_noprof+0x37d/0x760 [ 720.371672][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 720.371690][ C0] cfg80211_inform_single_bss_data+0xcf9/0x1af0 [ 720.371717][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 720.371751][ C0] ? cfg80211_inform_bss_data+0x253/0x3c40 [ 720.371774][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 720.371796][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.371816][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.371835][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.371853][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.371870][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 720.371893][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.371910][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.371929][ C0] ? lock_acquire+0x106/0x350 [ 720.371946][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.371964][ C0] ? lock_acquire+0x106/0x350 [ 720.371982][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.372000][ C0] ? lock_acquire+0x106/0x350 [ 720.372018][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.372036][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.372060][ C0] ? unwind_next_frame+0xa6/0x2550 [ 720.372080][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 720.372098][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 720.372123][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 720.372142][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 720.372162][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 720.372187][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 720.372235][ C0] ieee80211_scan_rx+0x552/0xa40 [ 720.372256][ C0] ieee80211_rx_list+0x29f8/0x3740 [ 720.372278][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 720.372299][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 720.372324][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 720.372341][ C0] ? lock_acquire+0x106/0x350 [ 720.372357][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 720.372387][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 720.372404][ C0] ieee80211_rx_napi+0x1b1/0x3e0 [ 720.372424][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 720.372443][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 720.372466][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 720.372489][ C0] ? skb_dequeue+0x124/0x160 [ 720.372508][ C0] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 720.372527][ C0] tasklet_action_common+0x2da/0x4b0 [ 720.372548][ C0] handle_softirqs+0x22a/0x840 [ 720.372566][ C0] ? __irq_exit_rcu+0xca/0x220 [ 720.372586][ C0] __irq_exit_rcu+0xca/0x220 [ 720.372602][ C0] irq_exit_rcu+0x9/0x30 [ 720.372617][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 720.372640][ C0] [ 720.372645][ C0] [ 720.372651][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.372668][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 720.372692][ C0] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 720.372706][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 720.372720][ C0] RAX: 0000000000ad7bff RBX: ffffffff819a958a RCX: 0000000080000001 [ 720.372732][ C0] RDX: 0000000000000001 RSI: ffffffff8dfacd5d RDI: ffffffff8c28b660 [ 720.372743][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 720.372755][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 720.372767][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 720.372780][ C0] ? do_idle+0x36a/0x5f0 [ 720.372803][ C0] default_idle+0x9/0x20 [ 720.372818][ C0] default_idle_call+0x72/0xb0 [ 720.372834][ C0] do_idle+0x36a/0x5f0 [ 720.372851][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.372871][ C0] ? __pfx_do_idle+0x10/0x10 [ 720.372893][ C0] cpu_startup_entry+0x43/0x60 [ 720.372911][ C0] rest_init+0x2de/0x300 [ 720.372930][ C0] start_kernel+0x38a/0x3e0 [ 720.373026][ C0] x86_64_start_reservations+0x24/0x30 [ 720.373068][ C0] x86_64_start_kernel+0x143/0x1c0 [ 720.373085][ C0] common_startup_64+0x13e/0x147 [ 720.373113][ C0] [ 721.095794][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 721.102679][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 721.111806][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.121887][ T30] Call Trace: [ 721.125182][ T30] [ 721.128126][ T30] vpanic+0x56c/0xa60 [ 721.132142][ T30] ? __pfx___schedule+0x10/0x10 [ 721.137129][ T30] ? __pfx_vpanic+0x10/0x10 [ 721.141650][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 721.147850][ T30] panic+0xc5/0xd0 [ 721.152021][ T30] ? __pfx_panic+0x10/0x10 [ 721.156447][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 721.161831][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 721.167990][ T30] watchdog+0x102c/0x1030 [ 721.173130][ T30] ? watchdog+0x1c9/0x1030 [ 721.177566][ T30] kthread+0x389/0x470 [ 721.181639][ T30] ? __pfx_watchdog+0x10/0x10 [ 721.186320][ T30] ? __pfx_kthread+0x10/0x10 [ 721.190919][ T30] ret_from_fork+0x514/0xb70 [ 721.195515][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 721.200621][ T30] ? __switch_to+0xc79/0x1410 [ 721.205296][ T30] ? __pfx_kthread+0x10/0x10 [ 721.209884][ T30] ret_from_fork_asm+0x1a/0x30 [ 721.214846][ T30] [ 721.218530][ T30] Kernel Offset: disabled [ 721.222859][ T30] Rebooting in 86400 seconds..