last executing test programs: 12m22.456190919s ago: executing program 4 (id=1099): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="84", 0x1}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800) 12m22.136570569s ago: executing program 4 (id=1103): r0 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_open_dev$evdev(0x0, 0x9, 0x4000) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000380)={0x5, 0x0, &(0x7f0000000340)}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006ad36c080a113011a3b3010203010902240001020010030904f10202048f4500090509020002022000090582", @ANYBLOB], 0x0) semop(0x0, &(0x7f0000001140)=[{0x2}, {0x4, 0xe038, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) 12m20.650878939s ago: executing program 4 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x1, r4, 0x3c, r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x7}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 12m20.181169581s ago: executing program 4 (id=1119): r0 = syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r2 = io_uring_setup(0x7898, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = io_uring_setup(0x195c, &(0x7f0000000440)={0x0, 0x2f59, 0x2000, 0x3, 0x34c}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000000540)={0x28, 0x31, 0x0, r4, &(0x7f00000004c0)="90d20bb45c7c31c8602b2a3610ef4f097e460942313993ffdfe4909c825f4bf238e137c33df6358476acaa9c269deb6095d5f63d9ed3c39750f2feca5eebc3416738950877f3c7797704b190654400f3654598cf5cd49fa458b4d9b760834fab82ac93ff646632f774740293de44e4453df2606366", 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r5, 0x2}}, 0x1) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x42000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r8, 0x3, 0x1) syz_usb_ep_write(r0, 0x7, 0x93, &(0x7f0000000300)="e4c0e2aec40db4c74d6cc45ef2430d7ab0cc3007375169ae578f3704b7ef44f0d0d79f9211bc174d51771226788868f736597cd3e721dc25a8b0b35cd01753e6a18cd845d29b47f300e142076f4406b1185a8a8673bdea7b36f246b2a867028ddb9545bd65001d369dda97cd820c21231df0faf267f6623cc0ee2f45c4cd12e60a722b9a56656afae9f1331ab628dcc3f616e3") 12m16.861417465s ago: executing program 4 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50}}, 0x90) 12m15.080354865s ago: executing program 4 (id=1134): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x600) 12m14.81130862s ago: executing program 32 (id=1134): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x600) 9m2.464921316s ago: executing program 3 (id=2377): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e0014000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000fc0000000100000000001c0009"], 0x4c}}, 0x4000040) 9m2.443103358s ago: executing program 3 (id=2378): unshare(0x60000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) (async) socket$kcm(0x29, 0x8, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2408000066f18e85ced2b051d9dbdffaff002258d3a501e59df7fa0008b50200248e81f89abe65c0acb23791e9db913176bfca94cbfdc33e5034496f948730d91587780eae702e30cfbf1281fa0e9c1150fb11d7f8120392c09f09edf06ed31ef4cdf15b7220b382c8d1f9b99e115caaf9eaf17c77b6eb4ae73f8633d790255efac62a0a1aa71b57f64efbf75d5151bd195775f57564b5c84e14716056dfb469d47ed4fd561aeae4db7f03e6b7b4ddc0ba24ad043d9a506105a7ddb95b2c31876b960e2bdda7e13d900542e1c66cc910c2dadecf33a295b0d4ce6d35d77543ffd29c18ffc6d09b1b8a09aa3fa7276bd18c2aac5575c05a9c8b1fd41d1e312d45b5a8da64ccbbfe6910f6d74939edfc9938360694110c62567348e1e17466dca0f23db1fc58e8ad55ebf93390f8e80fe7ea1765b6e3478bc8015147ee3436b9ceaa5efd6ed45c7d491ca082ba84dad639b0f5a9898fcd0a468889f46bf13cc61e3b1f939cd7ba98785a3fac02235102f9066e2ae9922b1da6d7d99cc93cdbaa7c94782c7a22acba8a7ec2f72a9c841771bfa00b8ec650e340d812c4a92891e39968c8361d9031d286cef264cf29ccb8d17bcb7c9c1f3439bc9ced3b10414f8e462bb3633fdfad0d9308d6728f2c2dcbb3b6d2d7645f8b5318a8a215b3c033648b1415d252d796cc4c3a744105d9e3f221380161956119e020807458478db72ed38ec44cd992958b37a6b72e4d3b55a1e023bf0f0d61b042e89dd8778dacce4000cef99a6f74a0f302c4f6c2a04950230dc13b2f5d37f2504e04a0b6b16a133709864003f3f22c8fe0c8e75c34554e2b5c3da033eaefee8bd7b47171648ca4c5c45996ef35b9cd2347592c9deffdaf24fb24cd4e79620c253c70417386"], 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x9, @empty, 0xfffffe01}}}, 0x108) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) capset(0x0, &(0x7f0000000040)={0xae, 0x8, 0x3f13, 0x400, 0x800, 0x100090}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000979000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0x10, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 9m0.465497084s ago: executing program 3 (id=2388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, 0x100, 0xd, 0x400, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x4000, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x48, 0x4, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9m0.314885141s ago: executing program 3 (id=2389): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x3}) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9m0.095354924s ago: executing program 3 (id=2393): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0xfffffffa, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000200000000000aa00000000", @ANYRES8], 0x0) 8m59.902195337s ago: executing program 3 (id=2395): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000005f3ff006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 8m59.736712209s ago: executing program 33 (id=2395): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000005f3ff006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 4m5.156151832s ago: executing program 0 (id=4032): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x303, 0x70bd27, 0x25dfdbfb, {0x2a}}, 0x21}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82f}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24048884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcc8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80000}, 0x4040004) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000740)=[@nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa75}}, @rdmsr={0x66, 0x18, {0x60c}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x60, 0x6, 0x6a, 0x100000001}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x5459, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x52, 0x4, 0x6, 0x1}}, @in_dx={0x69, 0x20, {0x7319, 0x1}}, @wr_drn={0x68, 0x20, {0x5, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc06, 0x72d6, 0x452fd328, 0xfff}}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x3162, 0x5, 0x1}}, @cpuid={0x64, 0x18, {0x5, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x22, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x3f, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xb8bd}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3, 0x5, 0x1}}, @rdmsr={0x66, 0x18, {0x2fb}}, @out_dx={0x6a, 0x28, {0xdf38, 0x0, 0x2}}, @wr_drn={0x68, 0x20, {0x2, 0x80000001}}], 0x360}) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4m2.786154194s ago: executing program 0 (id=4038): r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) io_uring_enter(r1, 0x154d, 0x79c6, 0x0, &(0x7f0000000100)={[0x54]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'caif0\x00', 0x200}) keyctl$setperm(0x5, r0, 0x100400) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4m2.165753967s ago: executing program 0 (id=4040): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfd}, {0x16}]}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x82, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m0.237071668s ago: executing program 0 (id=4046): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000ffb000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x4ed32f83ddbb7538}, 0x94) 3m58.598328609s ago: executing program 0 (id=4047): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x303, 0x70bd27, 0x25dfdbfb, {0x2a}}, 0x21}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x27}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82f}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24048884) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcc8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80000}, 0x4040004) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000740)=[@nested_create_vm={0x12d, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa75}}, @rdmsr={0x66, 0x18, {0x60c}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x60, 0x6, 0x6a, 0x100000001}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x5459, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x52, 0x4, 0x6, 0x1}}, @in_dx={0x69, 0x20, {0x7319, 0x1}}, @wr_drn={0x68, 0x20, {0x5, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc06, 0x72d6, 0x452fd328, 0xfff}}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x3162, 0x5, 0x1}}, @cpuid={0x64, 0x18, {0x5, 0x9}}, @set_irq_handler={0xc8, 0x20, {0x22, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x3f, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xb8bd}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3, 0x5, 0x1}}, @rdmsr={0x66, 0x18, {0x2fb}}, @out_dx={0x6a, 0x28, {0xdf38, 0x0, 0x2}}, @wr_drn={0x68, 0x20, {0x2, 0x80000001}}], 0x360}) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 3m56.996779788s ago: executing program 0 (id=4049): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000001640)}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x28202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x1) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) capset(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008004) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, 0x0}) r4 = syz_clone(0x40800000, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ptrace(0x8, r4) 3m44.532421668s ago: executing program 1 (id=4066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2848000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{&(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="40b275a00babf5ad40b8e27ab7efa73e1b29489db8af5b12ed0c1aeda5ee14f9d45870f100b0473ca3d127c322c8f5c5e258100e83a8a5e6ddb933e51731af4b22886318135a7a426d85fefa3ff9e08f82c90d03698f3c5bce3d07229fa4753c9d407fb8bc30e9eb4e70c48c14e81f708ea3fbb9eb3bdbb5210dab05ef30d7d24a2e956665d772c90ad1da06cef4b6afd6954def6a8675bbde2eedfc0f30cf10e4a5"}, {&(0x7f00000003c0)="8450ddaaeaa099732e6d3376958f9a338699107fd4ed008ff26834785c2f1aca120192b451e156f0f7ae4393896dfa5df563bd14234c1ad3925bd9b67070b9dc455093cddffb186f9b1a05e9ed54401770802168f0e0ffa6bf1d02044634b7a8dd56ea033a77d5ee6ac5f4248df66974f3decc388da8b79b377d717999e45478a968e61ec394cc3a37cb41c873729eda81ed87c9ebd0ff82630a35f2dd9bab8a1ee9a1c7d0101dd05d7c3b685db87730e5967f301439fd2ab4139ac5c4a2aa9570dd8d1fb0c2a36c19d38f1a70abbbcfca87ff6c893ce951de5cc93a5b6dc2c2320d718f697981"}, {&(0x7f00000004c0)="b0a808c1f9843b3715956999e9f105c1b4a7ff294db94d012cf5ba8c0500e9d812e10943fcf0ef6c883984ea913dc472bfa36d88c7c50ca4c4e15a606c6edf75b3c0e8ceebb367e9e436c517efd0b3ccacd1875268d0ed1476e8937cb5334326f00920b10362805e5a7e069aad8ea9489a1de48635cd1276c1a5798491c038725fae43f5205c1c7ecef91f44fcb092"}], 0x0, &(0x7f0000000700)=[@rights, @cred={{0x0, 0x1, 0x2, {r3}}}, @cred, @rights={{0x0, 0x1, 0x1, [r1]}}, @rights={{0x0, 0x1, 0x1, [r1]}}, @cred={{0x0, 0x1, 0x2, {r3}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0x0, 0x4000000}}, {{&(0x7f00000007c0)=@file={0x1, './bus\x00'}, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)="288f7ecde2cc67506d301ad6924d460e12a83a2f9fbe1198e11c4436a3a4aed809219298a045f0ac3a59171f0fb614aa91f191c4a753e23aa23aeede9cf99226ce87d6a0bc9f2ce9653abfd3fa3f809538cccd130e436bbc487b7c791de76a965c7a9fd532cf18fa3111be95b8d03fbdd818bad4818d66d48bef3d6d5c3e7f90fd583df5f753e26c3a161bf3d4ef1e9428"}, {&(0x7f0000000940)="e67cd8a3fd412d925b7b9d6648f6ab58e2c83fe8729a6bc6ea0286d3f601a17b0872ebcc87c61e012b4d25db3b"}, {&(0x7f0000000980)="92b7b675f7872efd7283d4f08fcf3a44310d4c85690a6e0d6f7145cd74a311b1f01126b19e01f606763261393b72fe7e6e5bf802d0f7f5f383706dfd367402643efb10a531f851b4cc44096814494f7680047a0619cb96bfe9ca9a908b1a8cacde950c9e9ca37044a7b74ce5d11893654f4eebd1e992cceb38265a"}], 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5ad735a299ba7eeb952618c2937b8b9b"], 0x0, 0xc1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000ec0)="e384b5295ede3093315b7208b470715099ea2f726d441bcbf830ff9a9929b6bf2f85137833"}, {&(0x7f0000000f00)="dc4f82b63a859646eed548517553cd2009138597cc304133ef5487a40dd61eaed7e75dcddde7103d074b2a7592ff1d347502802a784542718bc56f44575e21f0ab5064aec7271e12b5784afcf143593ae9e5eff1b4d75d7abb93ab844a3c6d93f25a59de8613c148872400c31dc4c7a27fae7328f30a999fc55372b94cae8b9cc481ca6835241b03a913ed16b880038cabafb73788c7d0be937bbb9d2d5ced56330eec3247cd4dea56c87ec5e3b152247e3bb6d9853eb312581e7f304160b6f2f5680916f8d1dbe9c7f30333d7d371fb73eec7f44a2f1be6d88b3c593ac43edf2c074b14c9362cb7f33559ec4b0c7482daa0c6beacdf35955b"}, {&(0x7f0000001000)="2773c988ba0e9921ca489508dd62436a5c2bbe796d8a35eb331789df025bb39694f99b20242984ed0a50a925dfe89a9ab3bd788cd29d88b8d8ba8c9387cff89622988b8243017bfea191ab4db9e0a7f576e1effac93971432480a9b1ee5bea60a6f2ede1e4a7e412be6cb77c762fb9fbcf2ca3b8463059fc3e5ace3d4426622c3c447bf46133c42f6d935d5ac9a7075a8706a1efef2722ba98f2d523cd6107ccd74efaab6f903e7fbc613049f2c607c818a2de4e659c0dea23feee34"}, {&(0x7f00000010c0)="0f988446fd1e907a765e4dfa438682a28bcd70083575284957f911dde0e7172b1ed92cab7154b1fdc34ee78d28d78d75cdf29d54dd2d7649f544eb4c5c40db2bc0efc05ef31562bb920e128e2fb019ad76e7a91f20dff61dae580ace1f12d8e6d1cd85c3cca3b8b0bc057a47afc6cf094e1f573f69037c90dc"}, {&(0x7f0000001140)="8da99511f878e351aae845a53c284a0a267db64265db3e6483b3439c15285850dbd2cc59da224fdbcc4a4cefacc9bbc7988636ac60b37312f7f5693eb142ffa0a7d1fed4c6d1eeda7b9fa4fd37e34f98d6886e9bf52c5978f1f6e15e3d74af05e81f38ec5fb8a9f64d4053d5eae2b6058b9b185df810"}, {&(0x7f00000011c0)="915f82f3561adcebdd9e4b51048536d0a8be7b94fde4477658c2fc97d45f26c6ab91b86e80f8edc096f93cef39590cccb640917f7b151486f3d52de39eddb856200be9868b1fa621a4932aa22ae0f488ec1aa890c292d5a324bea00e7142e5dd2ecc3c41d0c224e74e2f4aefd79e9c1489e80c168034f39513160cbea53f8136ba6aadfaec2160203b022843135d366b704f915a125d2a6ac202825c05ed662b4aae04521b5ddf667e1d7269d9a4c61e924c64665dbd602d3e1636b606e1c94856803722c3539ac9f33acd41594f9337217a574902ec25808f6b9887844a7bad18285cd6"}, {&(0x7f00000012c0)="1fa58005be8eb7dcbcf272e000ce20fcbec8c62d6341a8a3c087b197fa6b8b67f4e6867803ebfe126d8c757140600e97531b96991a7da73e7c0102babaefcc218b9cbbef38db4f5388f970c02502dd52b6679e54c3f6db48fcf3d9fa29715138e2e7fba20431998928e75e8aa5e7bb6898e7ab5b4344082e5924f904cc8fb1c798db9ece3993b83f036da9429b8ecb05ab69f1ba175fdfd3123dd24006285d14dbac3e34e5eb51b0d5e8b82efce17a4a38adb0d01be1673b64e2b944d6465fb96a45eec2721d63e07c8e06401265aa8d907f2c935a13f9c4a514b0fbbd712bdd7306"}, {&(0x7f00000013c0)="3bc9ad6c"}], 0x0, &(0x7f0000001480)=[@cred={{0x0, 0x1, 0x2, {r3}}}, @cred], 0x0, 0x20004044}}], 0x40000000000006f, 0x24004000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x2046e7c4ac1d1537}) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0xc080) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x6, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r12, 0x2007ffd) sendfile(r8, r10, 0x0, 0x1000a3) 3m42.709623979s ago: executing program 1 (id=4067): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) socket$inet6(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000b00), 0x91) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4002876d910002000a402200"/23, @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fe880000000000000000000000000101"], 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x1000, 0xa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r12) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) 3m40.755511175s ago: executing program 34 (id=4049): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000001640)}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x28202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x1) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) capset(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008004) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, 0x0}) r4 = syz_clone(0x40800000, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ptrace(0x8, r4) 3m40.024648832s ago: executing program 1 (id=4071): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000005800413bf417a2f90085b3a85c91fddf080001000501009f080001000000000056", 0x25) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYRES64=r1, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800c002}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x772c7000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x772c7000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) (async) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) socket(0x11, 0x6, 0xc) (async) socket(0x11, 0x6, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000002c0)) (async) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 3m33.158532533s ago: executing program 1 (id=4078): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r8}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x26, 0x4, 0x2, 0x9, 0x98, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x6, 0x2}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@loopback, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @private=0xa010102, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r10, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0), 0x4) close_range(r8, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x67}], 0x1, 0x40000102, 0x0) 3m31.201990418s ago: executing program 1 (id=4083): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xd4, r1, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xc000}, @NL80211_ATTR_IE={0x9d, 0x2a, [@cf={0x4, 0x6, {0x3, 0x0, 0x2, 0xfffa}}, @chsw_timing={0x68, 0x4, {0xa, 0x5c5}}, @link_id={0x65, 0x12, {@random="358ac67ae303", @device_a, @broadcast}}, @perr={0x84, 0x75, {0x2, 0x7, [{{}, @device_a, 0x0, @void, 0x1}, {{}, @broadcast, 0x7fffffff, @void, 0x26}, {{0x0, 0x1}, @device_a, 0x3f1ac12f, @value=@device_b, 0x2f}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_b, 0xfffffffc, @value, 0x13}, {{}, @broadcast, 0x4, @void, 0xd}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x1e}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x1800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x18, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c811}, 0x4040840) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003"], 0x0) 3m29.545732349s ago: executing program 1 (id=4086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{}, {}]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x80000, r3}) r6 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x1c680}) shmdt(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e1, 0xe4b, 0x559]}) r8 = syz_io_uring_setup(0x1d13, &(0x7f0000000340)={0x0, 0x1991, 0x400, 0x2, 0x20000157}, &(0x7f0000000000), &(0x7f00000005c0), &(0x7f0000000300)) io_uring_enter(r8, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x200) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0xb, 0x1, 0x3, 0x1}, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="bc1eeb39b98680b3cbd64618068199c8510e9e95896195c24b7ef0e623ece1ceb9a568452a906eaf4ccda5018c1aedebebe8fed0d8003493a40259c041fe1817e15267d25215c7df8c4122ed8d91627e68d54ee22e636fe73b8bf572e40834bf618d3e667028f1de359a3e768dd74acf479430f15d7376859102ed44a79199040fc9f3f75342a546225991636e1c54bfc6ae1067909d4e5551fcff85f0cd8a3ac109022b9d8e3100930f4a5b57d528a9417894cb15058da0c18c53a6899cc234947988a9cf2c3ee910d1221fa64360a6e42431ad192cbadc9ae719b90b1f3d8e5e6176087e2705bdf69342f6d95356e6", 0xf0}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r9, r3]}}, @rights={{0x30, 0x1, 0x1, [r9, r12, r1, r7, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r12, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, r7, r4, r3, r11, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r8, r0]}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x138, 0x4000004}}], 0x1, 0x0) 3m7.599488479s ago: executing program 35 (id=4086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{}, {}]}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x80000, r3}) r6 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x1c680}) shmdt(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e1, 0xe4b, 0x559]}) r8 = syz_io_uring_setup(0x1d13, &(0x7f0000000340)={0x0, 0x1991, 0x400, 0x2, 0x20000157}, &(0x7f0000000000), &(0x7f00000005c0), &(0x7f0000000300)) io_uring_enter(r8, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x200) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0xb, 0x1, 0x3, 0x1}, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="bc1eeb39b98680b3cbd64618068199c8510e9e95896195c24b7ef0e623ece1ceb9a568452a906eaf4ccda5018c1aedebebe8fed0d8003493a40259c041fe1817e15267d25215c7df8c4122ed8d91627e68d54ee22e636fe73b8bf572e40834bf618d3e667028f1de359a3e768dd74acf479430f15d7376859102ed44a79199040fc9f3f75342a546225991636e1c54bfc6ae1067909d4e5551fcff85f0cd8a3ac109022b9d8e3100930f4a5b57d528a9417894cb15058da0c18c53a6899cc234947988a9cf2c3ee910d1221fa64360a6e42431ad192cbadc9ae719b90b1f3d8e5e6176087e2705bdf69342f6d95356e6", 0xf0}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r9, r3]}}, @rights={{0x30, 0x1, 0x1, [r9, r12, r1, r7, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r12, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, r7, r4, r3, r11, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r8, r0]}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x138, 0x4000004}}], 0x1, 0x0) 1m8.179667322s ago: executing program 5 (id=4733): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xc400, 0x4a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={{r2}, 0x1, 0x2, 0x7}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e0000000014000280060001000100e2ff0500f84288a8000008000500", @ANYRES16=r4, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000070005c000000019078ac1e000164a27f4d03009078000800004500000000000000008900007f000001ac1e0101443c00010000000000000000ffffffff000000007f000001000000000000000000000000ac1414aa00000000e000000100000000ac1414000000000083031000aecd23ad0f23d74421d9f7857cbb753915362e950621bbbac03e61473b451c09573a948274221b29a65380563844174d95d23315ad1dbee9a8c5e8f8f353076c85eb2d304a2b2a186b281b57308023fd285c90792306c2346a6a10cb03e51fb2111dc08a30e2f76777cf2867dc2070d8b18deb5f1143be4010540902ae99bd7c1aa0f9b137c5248619c8e4dc955b94c0"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4048800) 1m7.159280408s ago: executing program 8 (id=4736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000005240)=[{&(0x7f0000003f40)=""/118}, {&(0x7f0000003fc0)=""/7}, {&(0x7f0000004000)=""/4096}, {&(0x7f0000005000)=""/147}, {&(0x7f00000050c0)=""/235}, {&(0x7f00000051c0)=""/102}], 0xffffffffffffffb7, 0x40, 0xd373) preadv2(r2, &(0x7f0000003e80)=[{&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000002b80)=""/248, 0xf8}, {&(0x7f0000002c80)=""/93, 0x5d}, {&(0x7f0000002d00)=""/204, 0xcc}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/11, 0xb}], 0xa, 0x7fffffff, 0x4, 0x19) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c03209040000010202010005"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002380), 0x24a9c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000780)={0x40000, 0x80, 0x1, 'queue0\x00', 0x9}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) r7 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005300)=@deltaction={0xe4, 0x31, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5000}}]}]}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000052c0)=@newtfilter={0x34, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r8, 0x1, 0xfd46, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r10, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x2000}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0x5}, {0x5, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x6c, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xc}, {0xa, 0xb}, {0xfff2, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000002780)) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000700)=@vmx={0x3, 0x0, 0x20c8, {0x70000, 0xffff1000}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0), 0x4) 1m6.465388369s ago: executing program 5 (id=4738): unshare(0x60000000) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008041}, 0x4008000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfffffffffffffd86, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x2, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffff00}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040054) ioctl$LOOP_CLR_FD(r2, 0x4c01) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$RTC_AIE_ON(r6, 0x7001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1159, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r8, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x8fb5, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x9, 0x3, 0xf47, 0x1010, 0x51060704]}, &(0x7f00000000c0)=0x54) 1m2.425299759s ago: executing program 8 (id=4743): timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_connect$uac3(0x3, 0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff023000090402010101023000090506"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffff0}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@dstopts={{0x12, 0x29, 0x37, {0x67}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x1, 0xc}}}], 0x30}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r3, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="57d7ef507296d3348a74411a82a0f8da5562f7bbd3fa2952a3e35fb0bbb90002571dea4c3c30d828ce19b4e7e389d170fc80cb8f83bd952194379b1bf33b098e8073ca353d3123d37df8fea05b4a4037f41713bcaa1d9950f3e6bf0c638833850ec025fe9f857cd09eda0b02e3dc514bd749c80fd58136cb91d30896020cd2b725ed8da4fd1d4e9af25c91388e39dfd4486d993a403bc38e962b57f9a86421919a00522070867532e3d8d2483dba91", @ANYRES16=r4, @ANYBLOB="04002cbd7000ffdbdf25020000000500050003000000100004000900000081000000010000000500060009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x30, r4, 0x524, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x4, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4011) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='1000000\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000040)=""/189) write(r7, &(0x7f0000000280)='0\x00', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e220000000000000000000000000000000000000000000000000000fcffffff03000008", @ANYRES32=0x0, @ANYBLOB="00001000000000000440000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000881}, 0x20008004) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000100)=0x4, 0x4) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r11}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r12, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) 1m2.040724255s ago: executing program 7 (id=4746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000070d90001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200200924030201010001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r5, 0x2000) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0xb0090199) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0xe71, &(0x7f0000000f40)=ANY=[@ANYBLOB="0180c200000000000000000088a83e0081"], 0x0) 1m1.575852933s ago: executing program 2 (id=4750): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) close(r0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x39, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0x2ed, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x29}}}, 0xfffffffffffffffe) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x4, 0x200, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000440)=0x10b1, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x440) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000200)={0xdc, 0x800, 0x10, 0x6, 0x81, 0x401}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000280)=0x84) 1m1.39535973s ago: executing program 5 (id=4752): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0xfffffffa, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe800000000000f5ffffff00000000aa00000000", @ANYRES8], 0x0) 1m1.187024879s ago: executing program 5 (id=4753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000005240)=[{&(0x7f0000003f40)=""/118}, {&(0x7f0000003fc0)=""/7}, {&(0x7f0000004000)=""/4096}, {&(0x7f0000005000)=""/147}, {&(0x7f00000050c0)=""/235}, {&(0x7f00000051c0)=""/102}], 0xffffffffffffffb7, 0x40, 0xd373) preadv2(r2, &(0x7f0000003e80)=[{&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000002b80)=""/248, 0xf8}, {&(0x7f0000002c80)=""/93, 0x5d}, {&(0x7f0000002d00)=""/204, 0xcc}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/11, 0xb}], 0xa, 0x7fffffff, 0x4, 0x19) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c03209040000010202010005"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002380), 0x24a9c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000780)={0x40000, 0x80, 0x1, 'queue0\x00', 0x9}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0203ff03300000002abd7000fbdbdf2505000900c8000000c19b3c4c497b4056a509e035b7e065060d90dd67e2aad7d2e100000000000000030006003c00000002004e22ac1414bb000000000000000002000100000004d40000070300000000030005000000000002004e21ac1e010100000000000000002100080000080000d8e6b73de1565eb69b90a1694434e07191e7ceac6a3956da53b20e194418aa2cb237c098c3af9c79bb964a3ecb2297858b053748dd739436ce090b9123d1c34aa46119f131b1d518ec338f488987ae326b6c2b9633a74147af202b6e0d6047b7e6d5194973bd8e3f12cbd4df664acd0126992d53021d09dcbbfba4bad2022165d5bd35c378f3c03fa9351935d86cab231c91538fe968a588c8010cbe9435ad33885868f46b968d86ce37d1366679c7634432bbb06ed3a845e37972fdafa21c4fa13c3804d4579175d3eb99c63f36789836ecc0aa73046d25709f4229f2830ae7ca66b42fc8a62d33a08f6dbec1901c7ac90ed4"], 0x180}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) r7 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005300)=@deltaction={0xe4, 0x31, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5000}}]}]}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000052c0)=@newtfilter={0x34, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r8, 0x1, 0xfd46, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r10, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x2000}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0x5}, {0x5, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x6c, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xc}, {0xa, 0xb}, {0xfff2, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000002780)) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000700)=@vmx={0x3, 0x0, 0x20c8, {0x70000, 0xffff1000}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0), 0x4) 1m0.210099507s ago: executing program 5 (id=4755): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea440000000000000000000000000000000000000000000000000100000000000000090000000000000000000000000000000000000000000000010000000200000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd3, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0xff, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x8ed, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0xc03e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m0.199407673s ago: executing program 2 (id=4765): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000300)={0xc9, "9ff97e8a24ab093f4a8d92292b86d230b9d0a79f51fa56aa24bff96164ade79f", 0x2}) r1 = syz_io_uring_setup(0x7962, &(0x7f00000000c0)={0x0, 0xc20079ea, 0x200, 0x800, 0x800000cf}, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001, 0xb7], 0xfec00000, 0x4fb40}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20010871}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000a000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a01040000000000000000010000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000808000b40000000000900010073797a30"], 0xc8}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3805cacc74f372fe815c00ed1d8063a000000000000000e433a0ef3d440d4a0ce3d57bf7fabf0d675ce3ddada79d4a16751817f6ea47d6066e772d21f148621a84ad751683a3dd2eaceef9b88b776e677ab60c68d7e288c30bc33a1c8e63320044d18ec8d59274c0e5543267c71b2bf18f623077ec5e52bef5a941ec543b60f8cd273ba33352deab8d08168190415532bcf295be88e80615f2b89e6ab384d92d53ad47c11f1533a7", @ANYRES16=r12, @ANYBLOB="000108000000fddbdf251200000008002c000800000008003c000000000008003100070000000a0009000000000000000000"], 0x38}}, 0x4040015) r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/udp\x00') r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r14, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000000b14010026bd7200fddbdf25080001"], 0x28}}, 0x0) preadv(r13, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/197, 0xc5}, {0x0}], 0x2, 0x0, 0x2) write$ppp(r13, &(0x7f00000001c0)="9fccf0f648d90d7b699d04f3f139da9fe067edb60fe48c63da4b8381b3287507de569e38ac6be27f3bfdeb54b772326695b875c9d49ef18b7c3815746a73a19ffc3ba1407e3af182aa9769d440eb11703784cc8d148d2d16c782fc8b217ddb55f1c387055458d459dcfb9a31fdb503b41ae28bdd3e6a6d038066a479c999d627e848e27bd73cd4f0ffe1f0251ea03df38cf37dd57f33510564", 0x99) 1m0.194808812s ago: executing program 6 (id=4756): syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x3d3002) 59.569466249s ago: executing program 6 (id=4757): fsopen(0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe800000f5ffffff00000000000000aa00000000", @ANYRES8], 0x0) 59.275588732s ago: executing program 2 (id=4758): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e00140002800800030003"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000140005002001000000000000000b0100000000001c0009"], 0x4c}}, 0x4000040) 58.020640127s ago: executing program 6 (id=4759): pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$set_timeout(0xf, r1, 0x2) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) tee(r3, r4, 0x404, 0x0) (async) tee(r3, r4, 0x404, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x5e) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0xa, 0x5, 0xfff, 0x80000000, 0x8, 0x9, 0xfffffffe, 0x92e}}) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) (async) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) 57.333799086s ago: executing program 8 (id=4760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x3, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0xffffffff, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x0, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x10000081, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000002000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 57.243164857s ago: executing program 2 (id=4761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010101, 0x100, 0xd, 0x400, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x48, 0x4, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a4dd860000000000007d01ff020000000000000000000000000001"], 0xfdef) 57.223018172s ago: executing program 7 (id=4762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000040)) syz_emit_ethernet(0xdd, &(0x7f0000000140)={@random="3f2e6c346ac2", @broadcast, @void, {@x25={0x805, {0x1, 0x2, 0xff, "de654e54bba1b6646437d68816bc65b97e1f52e278d0ba47e1a2f480803516273bec65f8b5998b1fc315e8371b4d12490e946017f01182722a909ed285c01b80dfa6d08e123bfa0c17d4525cdc8fcc0a95d76f93fff3ef857cc44964967cb29a083a0d6b4ce67c09de443042a9bc4be1f213b4109d7ede79bd939dd74d8fce868b4c686e57e90830de81c02d64f523a021dc54626ab2773dd536238edab6ae66f45374fc495029573ad7f3655836b23f8806d473e75068b809872ddf91b3388e0f65451614a4ad403cfc9686"}}}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7fff, 0x2}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "e7b868273fb7c115", "768fe51a23ad1bf915984017f9f6b9ca", "a25949ef", "a107604a2dbfbdc7"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x9, 0x10000) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000340)=""/154) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x287, 0x5, 0x2, 0x8, 0x5}, &(0x7f0000000580)=0x98) sendmsg$inet_sctp(r2, &(0x7f0000000640)={&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000440)="aa2c90741326f6d1b46c6fe8f25bb2fe44f4ae03d5665bf5c4fac7e3284ec27aaf44", 0x22}], 0x1, &(0x7f00000005c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x2, 0x204, 0xffffffff, 0xae9e, 0x0, 0x8000, 0xe, r5}}], 0x48, 0x8880}, 0x40) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f00000006c0)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000740)={r5, 0xb6, "603f23e11fe284b2b1533aa3e3bc6133f765c6bb7d20cb6ac0f80451fac16b4e8e6f66a357798287f8a4a801987c533486dd43626815bc354c538afc5d121fc7b67d7c5372a20fc767d8937338e1b5e07ba689f8ddd5b6a950c584d2cea5af5fc84d10ec6c2eb2621f70f4bcd69807891a67bf24ac51c07c68adb88fef5a32370719284f57700c1c4fd34e4676b05f41770f39c385b06faf8f282edbd86a62557b311506b0991a5d61954911f9093fdf20183bd5d25f"}, &(0x7f0000000800)=0xbe) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000840)) futex$unlock_pi_list32(&(0x7f00000008c0)=0x1000, 0x607, 0x800, &(0x7f0000000900)={0x0, 0x3938700}, &(0x7f0000000940)=0x60000, 0x24000) rt_sigtimedwait(&(0x7f0000000980)={[0x6]}, &(0x7f00000009c0), &(0x7f0000000a40)={0x77359400}, 0x8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={{0x77359400}}, &(0x7f0000000ac0)) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000b80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3d}, {0xa, 0x4e24, 0x50, @mcast2, 0x2}, r9, 0x80}}, 0x48) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000c00), 0x16400, 0x0) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000000c40)) nanosleep(&(0x7f0000000c80)={0x0, 0x3938700}, 0x0) r11 = syz_ublk_setup_io_uring(0x6dab, &(0x7f0000000cc0)={0x0, 0xc05, 0x20, 0x3, 0x5a, 0x0, r1}, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)) io_uring_setup(0x2abf, &(0x7f0000000e00)={0x0, 0x235, 0xc21, 0x0, 0x27f, 0x0, r11}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000e80)={0x4, 0x0, 0x5, 0x7, 0xb, "c8410b3cdc4f9e96cf2c0fbd3a5bdbdc151b3b"}) openat$userio(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) writev(r3, &(0x7f00000020c0)=[{&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="b45bfa21918f2a62f49413723236e0fa52a62d1f28f94f94ad89514a320cc6e46dfca2c8cfa42a83d5674077bf5690ec1b406367ed4b9323490a572f2e52d63b57d0eeb2591c2d839b6fb7ef5656521a3d7194e3948078d564209899c828218575ba6dfeff1ebec2e9b7475ab48087ed5f217ab2a9bfada3ec77ff6530b7d7811fbd306f347a7abf3f4eff5e1c3530f34611ea56d625bb91b726b5ba246bd2aece0a", 0xa2}, {&(0x7f0000001fc0)="ab86d87e62b47e3b", 0x8}, {&(0x7f0000002000)="c42a010ba5410b89e71e9ba0559689c0424f162b302ba34dec3e18219e32ae18d5294e04d670a205559768e38d5286e89a2b45a172f705b0ed74608a214de4e38f391fac4d1ecb70a0c8a44687d9e43e647a80b875f3f0357b8c256637f88e327acfda46190f1d7ff2d02260cdd6b8b861376927bc1ed78b634f41786fc981da4461d6d090a49b086d6fa87cbfe34fe2e72d03", 0x93}], 0x4) 55.405114997s ago: executing program 7 (id=4763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000700000000aaff02000000000000000000000000000106"], 0xffe) 55.194803915s ago: executing program 2 (id=4764): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100deff000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) 54.497899561s ago: executing program 8 (id=4766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000005240)=[{&(0x7f0000003f40)=""/118}, {&(0x7f0000003fc0)=""/7}, {&(0x7f0000004000)=""/4096}, {&(0x7f0000005000)=""/147}, {&(0x7f00000050c0)=""/235}, {&(0x7f00000051c0)=""/102}], 0xffffffffffffffb7, 0x40, 0xd373) preadv2(r2, &(0x7f0000003e80)=[{&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000002b80)=""/248, 0xf8}, {&(0x7f0000002c80)=""/93, 0x5d}, {&(0x7f0000002d00)=""/204, 0xcc}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/11, 0xb}], 0xa, 0x7fffffff, 0x4, 0x19) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c03209040000010202010005"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002380), 0x24a9c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000780)={0x40000, 0x80, 0x1, 'queue0\x00', 0x9}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) r7 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005300)=@deltaction={0xe4, 0x31, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5000}}]}]}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000052c0)=@newtfilter={0x34, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0x9}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r8, 0x1, 0xfd46, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r10, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x2000}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0x5}, {0x5, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x6c, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xc}, {0xa, 0xb}, {0xfff2, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000002780)) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000700)=@vmx={0x3, 0x0, 0x20c8, {0x70000, 0xffff1000}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000000c0), 0x4) 54.179177743s ago: executing program 6 (id=4767): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x400) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0xa8}}, 0x4800) 53.536018516s ago: executing program 6 (id=4768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = creat(&(0x7f0000000340)='./file0\x00', 0xab854d589d8d4015) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000040)="84e6ac14927c5cbd32fbecf5f8a2d1a351978e7cc881c38e4ab61151c2c5b9b4f4bae11dbcf25d8c02cc67eabc8cf9d42e5b4d1b5967d91b958b823f57876fadb239d04365aa55a8d0f5ed84cbb7be80e043ec5024777acbf6a29fcd4e07caad7e32326004d6aeda81ea3c1322717f96053d60f07901889eff00581b1e361e178d793b63e6af3f0182be17c02fbd5363864dee07287ca262cc064942eccd8864a886813f1e4283e5595fad66a33340b431ce44ca308099e95ca28c8e9b700d", &(0x7f0000000180)=""/93, &(0x7f0000000240)="cf6440e5aa3cd484b07989cdb8a6b13b73be8312c68095dbece39e3baa7f30", &(0x7f0000000280)="5691fcaf47c61abafa98701714f9b6f3fedf6876b65c1d88a4dfddfd0173a89f28717ded56db56f2873a8c9f455e98c7b277749a4f28db4ca611346227f9a364f7e24ad394af56f8d838a6c9e3f8d7c79872ed7876e6adc8f2a5697e323daaa2f3386259240b5f8f58912e7f2f3b6c4c2c60bec45b1fd5a4f86f1acb03fc86a22c64b9a3b15f71aa3148ecb2d8a16369525a00779cb3270b2e7d7278feff924df23c", 0x1586, r2}, 0x38) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 53.344933752s ago: executing program 7 (id=4769): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e0014000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000700000000001c0009"], 0x4c}}, 0x4000040) 52.87405194s ago: executing program 7 (id=4770): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000300)={0xc9, "9ff97e8a24ab093f4a8d92292b86d230b9d0a79f51fa56aa24bff96164ade79f", 0x2}) r1 = syz_io_uring_setup(0x7962, &(0x7f00000000c0)={0x0, 0xc20079ea, 0x200, 0x800, 0x800000cf}, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001, 0xb7], 0xfec00000, 0x4fb40}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20010871}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000a000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a01040000000000000000010000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000808000b40000000000900010073797a30"], 0xc8}}, 0x0) 52.73911256s ago: executing program 6 (id=4771): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read$eventfd(r0, &(0x7f0000000080), 0x66) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@newsa={0x288, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in=@remote, {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd}, {}, {0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x14f, 0x1, {{'md5\x00'}, 0x838, "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"}}]}, 0x288}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x2, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 52.614797607s ago: executing program 5 (id=4772): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x9f, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24fbffffffbb44f9cecd0df51bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000005180)={0x2020}, 0x2020) 52.497393036s ago: executing program 2 (id=4773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000070d90001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200200924030201010001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x7f7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r5, 0x2000) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0xb0090199) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0xe71, &(0x7f0000000f40)=ANY=[@ANYBLOB="0180c200000000000000000088a83e0081"], 0x0) 52.376594572s ago: executing program 8 (id=4774): syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "f5000000000006000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 52.208230367s ago: executing program 8 (id=4775): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705c, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x2, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="151b0067c081013fd6dd265623618f600e7ec6d2b097b2f965fad29f2ff8fb8a84e971de6df7c45afd51ca64116e11dc58dece5dd767580c9f301e8922fe6bbc38c5ca7a920d33be642bc189ef22daa7bc99d6006813d1ffd40b998a4f60d5e079b057bfb4054a687f3f79ca0989e3efd63083c6d5c5613024711259bc9f2db1c44f01"], 0x8) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x80000001) accept4(r7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) 52.090773171s ago: executing program 7 (id=4776): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x74, r2, 0x1, 0x70bd26, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0xfffffffffffffcbd}, {0x4}, {0x2}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x74}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000000, 0x9, 0x6, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x8000000000000001, 0x618002) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000002680)={0x6, "54e44c3137060c1f25a47c18dda24bd98638f5e4f1f1ea501281bad2732b6e45b4af6d6e6359a65b7f3b1695a09818e26fd75cc7aa66463553d74f314fb07bc4", {0x3, 0x10000}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) sendmmsg$sock(r0, &(0x7f0000001540)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="42e20fb671d1c89b05b6ab15d7ad9cb9e5738358b9519f130aa5e42b1769f92d0f360951a18ec3656d26aa95520cda146ebd0575e2ce6ca3209db1", 0x3b}, {&(0x7f0000000200)="4c1cbdc30f19b27db07370aec929f83a49f923603ca360cb167b01d0a35d14054e181dd01ccd2f03a79fdbbe3b7bc961bf0ffc1b6701f9211e47496f1f0c35f20c7e7d9ab1e2908e59b701b0ec4b858e69fe4935230222e140778d3600927b5df7bead4389c1cc3cfe416a73c5ec8d5956867df36169bb972c7552ba6c85992c51614eb58cebd9b646a0025b892912ecb92575fdd340ee3be4ca7b48b512c0e3644b3acfcfdb67549c6e10bfc9eb90b994c43e28ff79580513133d9dfd304973df", 0xc1}, {&(0x7f0000000440)="a7bbd99c01649dc3b03a7a7d4e2f3e7125bb5383609f6489a2d607227cbd929daa5e36fdf62c132ed2f5434c04b18b7e322d15c8755758ba77d5a5f5e6d9000adf78382d8436705cc3c1812b308521e0343662cffafcea66e729df2f3dcb9dc3ae1498710d1c38d12cbb59162a86f3bc477981609c3c251e186146cad5d61defad8fc012a138bfc6c1c7bbcfa1adf8aabdd7b55569ed", 0x96}, {&(0x7f0000000500)="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", 0x1000}], 0x4}}], 0x1, 0x20004008) socket(0x2c, 0x5, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa", @ANYRES8=r3, @ANYBLOB="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", @ANYBLOB="a3f036541ca0ad366883e24afdfe03232e955360bee375b400ac166f543126f864ea09da157efe0734e0a8c4920446dd25465e9d4485b72da6d5e10a5b518ab57a8f5ee6a884009cd79ca38001640bc1c458647a943a9f9b16a0e8cf87eca138f5e057df888afdcac5ac26940ef5dfd2d472ea843c0ebd0f874953f1a9763ace79dfcb21e9ce319e68464200fb67288d8c6f5cca2c9f100a88204aa38a8b077edf4982fd35"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 0s ago: executing program 36 (id=4776): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x74, r2, 0x1, 0x70bd26, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0xfffffffffffffcbd}, {0x4}, {0x2}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x74}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000000, 0x9, 0x6, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x8000000000000001, 0x618002) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000002680)={0x6, "54e44c3137060c1f25a47c18dda24bd98638f5e4f1f1ea501281bad2732b6e45b4af6d6e6359a65b7f3b1695a09818e26fd75cc7aa66463553d74f314fb07bc4", {0x3, 0x10000}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) sendmmsg$sock(r0, &(0x7f0000001540)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="42e20fb671d1c89b05b6ab15d7ad9cb9e5738358b9519f130aa5e42b1769f92d0f360951a18ec3656d26aa95520cda146ebd0575e2ce6ca3209db1", 0x3b}, {&(0x7f0000000200)="4c1cbdc30f19b27db07370aec929f83a49f923603ca360cb167b01d0a35d14054e181dd01ccd2f03a79fdbbe3b7bc961bf0ffc1b6701f9211e47496f1f0c35f20c7e7d9ab1e2908e59b701b0ec4b858e69fe4935230222e140778d3600927b5df7bead4389c1cc3cfe416a73c5ec8d5956867df36169bb972c7552ba6c85992c51614eb58cebd9b646a0025b892912ecb92575fdd340ee3be4ca7b48b512c0e3644b3acfcfdb67549c6e10bfc9eb90b994c43e28ff79580513133d9dfd304973df", 0xc1}, {&(0x7f0000000440)="a7bbd99c01649dc3b03a7a7d4e2f3e7125bb5383609f6489a2d607227cbd929daa5e36fdf62c132ed2f5434c04b18b7e322d15c8755758ba77d5a5f5e6d9000adf78382d8436705cc3c1812b308521e0343662cffafcea66e729df2f3dcb9dc3ae1498710d1c38d12cbb59162a86f3bc477981609c3c251e186146cad5d61defad8fc012a138bfc6c1c7bbcfa1adf8aabdd7b55569ed", 0x96}, {&(0x7f0000000500)="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", 0x1000}], 0x4}}], 0x1, 0x20004008) socket(0x2c, 0x5, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa", @ANYRES8=r3, @ANYBLOB="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", @ANYBLOB="a3f036541ca0ad366883e24afdfe03232e955360bee375b400ac166f543126f864ea09da157efe0734e0a8c4920446dd25465e9d4485b72da6d5e10a5b518ab57a8f5ee6a884009cd79ca38001640bc1c458647a943a9f9b16a0e8cf87eca138f5e057df888afdcac5ac26940ef5dfd2d472ea843c0ebd0f874953f1a9763ace79dfcb21e9ce319e68464200fb67288d8c6f5cca2c9f100a88204aa38a8b077edf4982fd35"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) kernel console output (not intermixed with test programs): is interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.752759][T21187] batman_adv: batadv0: Interface activated: veth0 [ 780.783556][T21193] tipc: Started in network mode [ 780.783607][T21193] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 780.783864][T21193] tipc: Enabled bearer , priority 10 [ 781.676775][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4095'. [ 781.967677][ T5711] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 783.093049][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.543974][T15398] tipc: Node number set to 10070698 [ 794.892797][ T5711] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 795.009637][ T5711] usb 3-1: USB disconnect, device number 12 [ 795.020538][ T5711] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 795.806757][T20789] hsr_slave_0: entered promiscuous mode [ 795.822723][T20789] hsr_slave_1: entered promiscuous mode [ 795.835108][T20789] debugfs: 'hsr0' already exists in 'hsr' [ 795.841206][T20789] Cannot create hsr debugfs directory [ 796.936605][ T5711] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 797.211404][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 797.212891][ T5711] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 797.297918][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.307081][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 797.309259][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.309295][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.361016][ T5711] ims_pcu 3-1:1.0: Missing CDC union descriptor [ 797.361067][ T5711] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 797.747162][ T25] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 797.868661][T15398] usb 3-1: USB disconnect, device number 13 [ 797.917108][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 797.946732][ T25] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 797.966661][ T25] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 797.966707][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.966742][ T25] usb 6-1: config 0 has no interface number 0 [ 797.966786][ T25] usb 6-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 797.966813][ T25] usb 6-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.966860][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.034536][ T25] usb 6-1: config 0 descriptor?? [ 798.843200][T21364] tipc: Enabling of bearer rejected, already enabled [ 799.290423][T15398] usb 6-1: USB disconnect, device number 103 [ 799.987107][T15398] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 800.413626][T15398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 800.413700][T15398] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 800.441709][T15398] usb 3-1: config 12 has an invalid interface number: 99 but max is 0 [ 800.441756][T15398] usb 3-1: config 12 has an invalid descriptor of length 199, skipping remainder of the config [ 800.441792][T15398] usb 3-1: config 12 has no interface number 0 [ 800.441825][T15398] usb 3-1: too many endpoints for config 12 interface 99 altsetting 14: 188, using maximum allowed: 30 [ 800.441867][T15398] usb 3-1: config 12 interface 99 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 188 [ 800.441898][T15398] usb 3-1: config 12 interface 99 has no altsetting 0 [ 800.585895][T15398] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 800.585941][T15398] usb 3-1: Product: syz [ 800.585960][T15398] usb 3-1: Manufacturer: syz [ 800.585979][T15398] usb 3-1: SerialNumber: syz [ 801.076625][T21406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4107'. [ 801.536396][T21438] nft_compat: unsupported protocol 5 [ 802.140558][T21406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4107'. [ 802.140619][T21406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.520590][T21254] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 802.691336][T21450] syzkaller0: entered promiscuous mode [ 802.691387][T21450] syzkaller0: entered allmulticast mode [ 802.693483][T21254] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 802.712852][T21254] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 802.712908][T21254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.716793][T21254] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 802.716821][T21254] usb 6-1: Manufacturer: syz [ 802.742281][T21254] usb 6-1: config 0 descriptor?? [ 803.868345][T21254] rc_core: IR keymap rc-hauppauge not found [ 803.868390][T21254] Registered IR keymap rc-empty [ 803.890075][T21254] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 803.899659][T21254] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 803.959954][T21254] usb 6-1: USB disconnect, device number 104 [ 804.342843][T15398] usb 3-1: no audio or video endpoints found [ 804.393496][T15398] usb 3-1: USB disconnect, device number 14 [ 805.163940][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.202941][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.566005][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.586376][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 805.707185][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.919999][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 807.727283][ T5615] Bluetooth: hci5: command tx timeout [ 808.549904][ T9308] hsr_slave_0: left promiscuous mode [ 808.566437][ T9308] hsr_slave_1: left promiscuous mode [ 808.573561][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.584625][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.649891][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.657760][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.744144][ T9308] veth1_macvtap: left promiscuous mode [ 808.750521][ T9308] veth0_macvtap: left promiscuous mode [ 808.750664][ T9308] veth1_vlan: left promiscuous mode [ 808.750741][ T9308] veth0_vlan: left promiscuous mode [ 808.797537][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.812084][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.660643][ T9308] team0 (unregistering): Port device team_slave_1 removed [ 809.680944][ T9308] team0 (unregistering): Port device team_slave_0 removed [ 809.832794][ T5615] Bluetooth: hci5: command tx timeout [ 811.889243][ T5615] Bluetooth: hci5: command tx timeout [ 812.600238][T21126] syz_tun (unregistering): left allmulticast mode [ 813.968469][ T5615] Bluetooth: hci5: command tx timeout [ 815.175504][T21584] 8021q: VLANs not supported on ipvlan1 [ 815.177199][T20789] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 815.196185][T20789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.236373][T20789] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 815.824437][T20789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.009468][T20789] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 816.080672][T20789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 816.081580][T20789] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 816.122368][T20789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 816.992548][T21707] vlan2: entered promiscuous mode [ 817.001355][T21707] bond_slave_1: entered promiscuous mode [ 817.190760][T20789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.288028][ T5695] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 817.299224][T20789] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.336581][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.336705][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.392759][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.392885][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.449410][ T5695] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 817.460342][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 817.460387][ T5695] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 817.460426][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 817.460452][ T5695] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 817.460496][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.521218][ T5695] usb 6-1: config 0 descriptor?? [ 817.982485][T21711] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4138'. [ 818.047898][T15398] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 818.087260][T21254] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 818.114149][ T9308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.148643][ T5695] hdpvr 6-1:0.0: firmware version 0x0 dated [ 818.148698][ T5695] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 818.215351][T20789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.222659][T15398] usb 3-1: Using ep0 maxpacket: 32 [ 818.243069][T15398] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 818.247405][T21254] usb 7-1: Using ep0 maxpacket: 8 [ 818.275341][T15398] usb 3-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 818.275388][T15398] usb 3-1: config 120 has 0 interfaces, different from the descriptor's value: 1 [ 818.299780][T15398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.299825][T15398] usb 3-1: Product: syz [ 818.299860][T15398] usb 3-1: Manufacturer: syz [ 818.299877][T15398] usb 3-1: SerialNumber: syz [ 818.330588][T15398] r8152-cfgselector 3-1: Unknown version 0x0000 [ 818.344111][T21254] usb 7-1: unable to get BOS descriptor or descriptor too short [ 818.344182][T21254] usb 7-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=fe.05 [ 818.414290][T21254] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 818.414334][T21254] usb 7-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 818.477966][T21254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.478825][T21254] usb 7-1: Product: syz [ 818.478843][T21254] usb 7-1: Manufacturer: syz [ 818.478858][T21254] usb 7-1: SerialNumber: syz [ 818.652637][ T9308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.782886][T15398] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 819.136574][ T9308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.515255][ T9308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.545479][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 819.744438][T21548] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.744625][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.744795][T21548] bridge_slave_0: entered allmulticast mode [ 819.752548][T21548] bridge_slave_0: entered promiscuous mode [ 819.763407][T21548] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.763510][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.763894][T21548] bridge_slave_1: entered allmulticast mode [ 819.766011][T21548] bridge_slave_1: entered promiscuous mode [ 819.898540][T21548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.915139][T20789] veth0_vlan: entered promiscuous mode [ 819.940457][T21548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.125361][T21548] team0: Port device team_slave_0 added [ 820.155617][T21548] team0: Port device team_slave_1 added [ 820.311832][T20789] veth1_vlan: entered promiscuous mode [ 820.320249][T21548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.320288][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.320329][T21548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.352089][T21548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.352110][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.352138][T21548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.121441][T21548] hsr_slave_0: entered promiscuous mode [ 821.122635][T21548] hsr_slave_1: entered promiscuous mode [ 821.123359][T21548] debugfs: 'hsr0' already exists in 'hsr' [ 821.123378][T21548] Cannot create hsr debugfs directory [ 821.287881][ T9308] pimreg: left allmulticast mode [ 821.362477][ T5711] usb 7-1: USB disconnect, device number 62 [ 821.444173][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4144'. [ 821.788809][ T9308] bond0 (unregistering): Released all slaves [ 821.796283][ T9308] bond1 (unregistering): Released all slaves [ 821.867811][ T5711] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 821.932897][ T9308] tipc: Disabling bearer [ 821.940999][ T9308] tipc: Left network mode [ 821.946031][T20789] veth0_macvtap: entered promiscuous mode [ 821.997805][ T5711] usb 7-1: device descriptor read/64, error -71 [ 822.257445][ T5711] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 822.387121][ T5711] usb 7-1: device descriptor read/64, error -71 [ 822.500482][ T5711] usb usb7-port1: attempt power cycle [ 822.545835][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.564718][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.575832][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.632324][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.650707][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.861740][ T5711] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 822.883750][ T5711] usb 7-1: device descriptor read/8, error -71 [ 823.117041][ T5711] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 823.138882][ T5711] usb 7-1: device descriptor read/8, error -71 [ 823.251751][ T5711] usb usb7-port1: unable to enumerate USB device [ 823.265787][ T9308] hsr_slave_0: left promiscuous mode [ 823.272391][ T9308] hsr_slave_1: left promiscuous mode [ 823.303691][ T9308] veth1_macvtap: left promiscuous mode [ 823.303792][ T9308] veth0_macvtap: left promiscuous mode [ 823.304721][ T9308] veth1_vlan: left promiscuous mode [ 823.304828][ T9308] veth0_vlan: left promiscuous mode [ 823.357278][T15398] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 823.508494][T15398] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 823.511122][T15398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.587028][T22103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.602205][T22103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.634102][T22103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.634767][T22103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.727364][T15398] dln2 3-1:1.0: USB write failed: -71 [ 823.730076][T15398] dln2 3-1:1.0: failed to initialize hardware [ 823.769452][T15398] dln2 3-1:1.0: probe with driver dln2 failed with error -71 [ 823.826820][T15398] usb 3-1: USB disconnect, device number 16 [ 824.580250][T21548] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 824.609855][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.610694][T21548] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 824.629547][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.744335][T21548] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 824.783507][ T5615] Bluetooth: hci4: command tx timeout [ 824.799299][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 824.805596][T21548] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 824.839145][T21548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.254853][T22223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.272441][T22223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.277854][T15398] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 826.356405][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 826.448805][T15398] usb 3-1: Using ep0 maxpacket: 32 [ 826.456491][T15398] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 826.467597][T15398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.488409][T15398] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 826.532981][T22058] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.533097][T22058] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.533275][T22058] bridge_slave_0: entered allmulticast mode [ 826.546559][T22058] bridge_slave_0: entered promiscuous mode [ 826.579185][T22058] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.579296][T22058] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.579454][T22058] bridge_slave_1: entered allmulticast mode [ 826.581300][T22058] bridge_slave_1: entered promiscuous mode [ 826.792251][T22058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.806189][T22058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.857906][ T5615] Bluetooth: hci4: command tx timeout [ 827.145584][T22058] team0: Port device team_slave_0 added [ 827.168331][T22058] team0: Port device team_slave_1 added [ 827.335975][T15398] gspca_nw80x: reg_w err -71 [ 827.336125][T15398] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 827.363438][T15398] usb 3-1: USB disconnect, device number 17 [ 827.364888][T22058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.364904][T22058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.364930][T22058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.376695][T22058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.376711][T22058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.376736][T22058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.548241][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.722667][T22058] hsr_slave_0: entered promiscuous mode [ 827.725861][T22058] hsr_slave_1: entered promiscuous mode [ 827.726776][T22058] debugfs: 'hsr0' already exists in 'hsr' [ 827.726796][T22058] Cannot create hsr debugfs directory [ 828.147982][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.529588][ T5695] hdpvr 6-1:0.0: device init failed [ 828.543641][ T5695] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 828.564257][T10936] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.564465][T10936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.581793][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 828.685376][ T9308] bridge_slave_1: left allmulticast mode [ 828.685436][ T9308] bridge_slave_1: left promiscuous mode [ 828.685662][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.713435][ T9308] bridge_slave_0: left allmulticast mode [ 828.721031][ T9308] bridge_slave_0: left promiscuous mode [ 828.726989][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.927625][ T5615] Bluetooth: hci4: command tx timeout [ 829.060839][ T9308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.086190][ T9308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.103776][ T9308] bond0 (unregistering): Released all slaves [ 829.134877][T21017] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.134977][T21017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.431680][ T9308] hsr_slave_0: left promiscuous mode [ 829.437869][ T9308] hsr_slave_1: left promiscuous mode [ 829.438850][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.445804][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.475758][ T9308] veth0_macvtap: left promiscuous mode [ 829.475892][ T9308] veth1_vlan: left promiscuous mode [ 829.475958][ T9308] veth0_vlan: left promiscuous mode [ 829.502464][T22535] FAULT_INJECTION: forcing a failure. [ 829.502464][T22535] name failslab, interval 1, probability 0, space 0, times 0 [ 829.502502][T22535] CPU: 1 UID: 0 PID: 22535 Comm: syz.6.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.502528][T22535] Tainted: [L]=SOFTLOCKUP [ 829.502535][T22535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.502546][T22535] Call Trace: [ 829.502554][T22535] [ 829.502560][T22535] dump_stack_lvl+0xe8/0x150 [ 829.502589][T22535] should_fail_ex+0x410/0x560 [ 829.502625][T22535] should_failslab+0xa8/0x100 [ 829.502649][T22535] ? skb_clone+0x212/0x3a0 [ 829.502672][T22535] kmem_cache_alloc_noprof+0xa1/0x600 [ 829.502710][T22535] ? skb_clone+0x212/0x3a0 [ 829.502740][T22535] skb_clone+0x212/0x3a0 [ 829.502766][T22535] __netlink_deliver_tap+0x413/0x860 [ 829.502802][T22535] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.502829][T22535] netlink_deliver_tap+0x19c/0x1b0 [ 829.502855][T22535] netlink_unicast+0x781/0x940 [ 829.502888][T22535] netlink_sendmsg+0x813/0xb40 [ 829.502922][T22535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.502956][T22535] ? apparmor_socket_sendmsg+0x98/0x360 [ 829.502978][T22535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.503002][T22535] sock_sendmsg_nosec+0x13a/0x180 [ 829.503033][T22535] ____sys_sendmsg+0x54e/0x850 [ 829.503061][T22535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.503092][T22535] ? import_iovec+0x73/0xa0 [ 829.503117][T22535] ___sys_sendmsg+0x2a5/0x360 [ 829.503139][T22535] ? __lock_acquire+0x747/0x2de0 [ 829.503163][T22535] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.503218][T22535] ? __fget_files+0x2a/0x420 [ 829.503243][T22535] ? __fget_files+0x3a2/0x420 [ 829.503278][T22535] __x64_sys_sendmsg+0x1b1/0x290 [ 829.503303][T22535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.503349][T22535] do_syscall_64+0x166/0x520 [ 829.503367][T22535] ? trace_irq_disable+0x3b/0x140 [ 829.503386][T22535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.503405][T22535] ? clear_bhb_loop+0x70/0xc0 [ 829.503429][T22535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.503449][T22535] RIP: 0033:0x7f484939e159 [ 829.503468][T22535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.503485][T22535] RSP: 002b:00007f484a297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.503505][T22535] RAX: ffffffffffffffda RBX: 00007f4849626090 RCX: 00007f484939e159 [ 829.503520][T22535] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 829.503533][T22535] RBP: 00007f484a297090 R08: 0000000000000000 R09: 0000000000000000 [ 829.503546][T22535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.503558][T22535] R13: 00007f4849626128 R14: 00007f4849626090 R15: 00007f484974fa48 [ 829.503588][T22535] [ 829.816825][ T9308] team0 (unregistering): Port device team_slave_1 removed [ 829.830555][ T9308] team0 (unregistering): Port device team_slave_0 removed [ 830.375847][T22567] macsec1: entered allmulticast mode [ 830.375877][T22567] syz_tun: entered allmulticast mode [ 830.393136][T22567] syz_tun: left allmulticast mode [ 830.766494][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.008444][ T5615] Bluetooth: hci4: command tx timeout [ 831.201945][T21548] veth0_vlan: entered promiscuous mode [ 831.205315][T22611] JFS: charset not found [ 831.326186][T21548] veth1_vlan: entered promiscuous mode [ 831.427077][T22644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4173'. [ 831.861654][T21548] veth0_macvtap: entered promiscuous mode [ 831.905546][T21548] veth1_macvtap: entered promiscuous mode [ 831.950355][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.977848][T22058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 831.993525][T22058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.999055][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.000714][T22058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 832.009116][T22058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.016442][T22058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 832.036210][T22058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.046593][T22058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 832.064324][T22058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.238491][T10936] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.393062][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.393114][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.438087][ T1169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.441289][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.441340][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.460440][T22058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.482218][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.482254][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.495752][T22058] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.503149][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.503272][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.515089][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.515191][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.674023][T22058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.901818][T22726] vlan2: entered promiscuous mode [ 832.907647][T22726] bond_slave_1: entered promiscuous mode [ 832.913435][T22058] veth0_vlan: entered promiscuous mode [ 832.951265][T22058] veth1_vlan: entered promiscuous mode [ 833.088880][T22058] veth0_macvtap: entered promiscuous mode [ 833.104126][T22058] veth1_macvtap: entered promiscuous mode [ 833.123418][T22058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.133928][T22058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.223107][T15398] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 833.237641][ T9306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.246694][ T1169] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.247147][ T1169] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.247546][ T1169] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.349176][T21017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.357744][T21017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.398969][T15398] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 833.400062][T15398] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.400085][T15398] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 833.400126][T15398] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.400167][T15398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.421922][T15398] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 833.421980][T15398] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 833.462936][T21017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.462966][T21017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.517385][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 833.720609][T22775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.721259][T22775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.789132][ T5711] usb 9-1: USB disconnect, device number 2 [ 833.914141][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4068'. [ 834.527305][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 834.693965][ T25] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 834.699870][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.702100][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.702126][ T25] usb 3-1: Product: syz [ 834.702140][ T25] usb 3-1: Manufacturer: syz [ 834.702155][ T25] usb 3-1: SerialNumber: syz [ 834.766251][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 834.768665][ T25] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 834.999102][T22844] IPv6: addrconf: prefix option has invalid lifetime [ 835.512099][ T5711] usb 3-1: USB disconnect, device number 18 [ 836.283792][T22887] fuse: Unknown parameter 'fd?0x0000000000000003' [ 836.543565][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'. [ 836.868276][ T5695] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 837.017159][ T5695] usb 9-1: Using ep0 maxpacket: 8 [ 837.017900][ T5695] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 837.022193][ T5695] usb 9-1: config 0 interface 0 has no altsetting 0 [ 837.022234][ T5695] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.030199][ T5695] usb 9-1: config 0 descriptor?? [ 837.190891][T15398] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 837.488365][T15398] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.728470][ T5695] usbhid 9-1:0.0: can't add hid device: -71 [ 837.728605][ T5695] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 837.743061][ T5695] usb 9-1: USB disconnect, device number 3 [ 837.868994][T22928] fido_id[22928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 838.073234][T22954] veth0: Caught tx_queue_len zero misconfig [ 838.507385][T18951] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 838.671428][T18951] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 838.684168][T18951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.712949][T18951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.713004][T18951] usb 7-1: Product: syz [ 838.713045][T18951] usb 7-1: Manufacturer: syz [ 838.713062][T18951] usb 7-1: SerialNumber: syz [ 838.723604][T21254] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 838.831413][T18951] etas_es58x 7-1:1.0: Starting syz syz (Serial Number syz) [ 838.907246][T21254] usb 9-1: Using ep0 maxpacket: 8 [ 838.914659][T21254] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 838.932165][T21254] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.941146][T21254] usb 9-1: Product: syz [ 838.945457][T21254] usb 9-1: Manufacturer: syz [ 838.950249][T21254] usb 9-1: SerialNumber: syz [ 838.962206][T21254] usb 9-1: config 0 descriptor?? [ 838.977493][T21254] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 839.077226][T22998] syzkaller1: entered promiscuous mode [ 839.083009][T22998] syzkaller1: entered allmulticast mode [ 839.302717][ T25] usb 7-1: USB disconnect, device number 67 [ 839.480159][T23027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.498315][T23027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.531192][T23023] syzkaller1: entered promiscuous mode [ 839.531235][T23023] syzkaller1: entered allmulticast mode [ 839.535705][T23028] syzkaller0: entered promiscuous mode [ 839.535730][T23028] syzkaller0: entered allmulticast mode [ 839.625425][T23004] tipc: Started in network mode [ 839.625469][T23004] tipc: Node identity 967e86b49127, cluster identity 4711 [ 839.635050][T23004] tipc: Enabled bearer , priority 0 [ 839.652633][T23003] tipc: Resetting bearer [ 839.771670][T23003] tipc: Disabling bearer [ 839.805498][T21254] gspca_sonixj: reg_r err -71 [ 839.805605][T21254] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 839.824621][T21254] usb 9-1: USB disconnect, device number 4 [ 840.141142][T23057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4226'. [ 840.427424][ T5695] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 840.537758][T23081] FAULT_INJECTION: forcing a failure. [ 840.537758][T23081] name failslab, interval 1, probability 0, space 0, times 0 [ 840.551459][T23081] CPU: 0 UID: 0 PID: 23081 Comm: syz.6.4231 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.551492][T23081] Tainted: [L]=SOFTLOCKUP [ 840.551499][T23081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.551510][T23081] Call Trace: [ 840.551518][T23081] [ 840.551526][T23081] dump_stack_lvl+0xe8/0x150 [ 840.551558][T23081] should_fail_ex+0x410/0x560 [ 840.551594][T23081] should_failslab+0xa8/0x100 [ 840.551618][T23081] __kmalloc_cache_noprof+0xa3/0x600 [ 840.551637][T23081] ? stack_trace_save+0xa9/0x100 [ 840.551670][T23081] ? rtnl_newlink+0x143/0x1c30 [ 840.551688][T23081] ? rtnl_newlink+0x143/0x1c30 [ 840.551712][T23081] rtnl_newlink+0x143/0x1c30 [ 840.551734][T23081] ? kasan_save_track+0x4f/0x80 [ 840.551752][T23081] ? kasan_save_track+0x3e/0x80 [ 840.551772][T23081] ? __kasan_slab_free+0x5c/0x80 [ 840.551793][T23081] ? kmem_cache_free+0x182/0x650 [ 840.551812][T23081] ? nlmon_xmit+0xb0/0x100 [ 840.551831][T23081] ? dev_hard_start_xmit+0x2cd/0x830 [ 840.551854][T23081] ? __dev_queue_xmit+0x14c0/0x3820 [ 840.551879][T23081] ? __netlink_deliver_tap+0x5b4/0x860 [ 840.551903][T23081] ? netlink_deliver_tap+0x19c/0x1b0 [ 840.551927][T23081] ? netlink_unicast+0x781/0x940 [ 840.551951][T23081] ? netlink_sendmsg+0x813/0xb40 [ 840.551978][T23081] ? __pfx_rtnl_newlink+0x10/0x10 [ 840.551998][T23081] ? do_syscall_64+0x166/0x520 [ 840.552016][T23081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.552069][T23081] ? kasan_quarantine_put+0xbb/0x1f0 [ 840.552089][T23081] ? lockdep_hardirqs_on+0x7b/0x110 [ 840.552110][T23081] ? nlmon_xmit+0xb0/0x100 [ 840.552127][T23081] ? kmem_cache_free+0x182/0x650 [ 840.552155][T23081] ? __lock_acquire+0x747/0x2de0 [ 840.552182][T23081] ? __local_bh_enable_ip+0xd6/0x140 [ 840.552206][T23081] ? lockdep_hardirqs_on+0x7b/0x110 [ 840.552223][T23081] ? __dev_queue_xmit+0x29b/0x3820 [ 840.552246][T23081] ? __local_bh_enable_ip+0xd6/0x140 [ 840.552269][T23081] ? __dev_queue_xmit+0x29b/0x3820 [ 840.552300][T23081] ? lock_acquire+0x115/0x350 [ 840.552319][T23081] ? __pfx_rtnl_newlink+0x10/0x10 [ 840.552351][T23081] ? __pfx_rtnl_newlink+0x10/0x10 [ 840.552371][T23081] rtnetlink_rcv_msg+0x802/0xc00 [ 840.552396][T23081] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 840.552417][T23081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.552445][T23081] ? ref_tracker_free+0x689/0x830 [ 840.552468][T23081] ? __pfx_ref_tracker_free+0x10/0x10 [ 840.552485][T23081] ? __asan_memcpy+0x40/0x70 [ 840.552508][T23081] ? __skb_clone+0x5c/0x6c0 [ 840.552532][T23081] netlink_rcv_skb+0x226/0x4a0 [ 840.552557][T23081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.552578][T23081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.552614][T23081] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.552638][T23081] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.552668][T23081] netlink_unicast+0x7bd/0x940 [ 840.552700][T23081] netlink_sendmsg+0x813/0xb40 [ 840.552733][T23081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.552766][T23081] ? apparmor_socket_sendmsg+0x98/0x360 [ 840.552788][T23081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.552812][T23081] sock_sendmsg_nosec+0x13a/0x180 [ 840.552844][T23081] ____sys_sendmsg+0x54e/0x850 [ 840.552873][T23081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.552905][T23081] ? import_iovec+0x73/0xa0 [ 840.552930][T23081] ___sys_sendmsg+0x2a5/0x360 [ 840.552952][T23081] ? __lock_acquire+0x747/0x2de0 [ 840.552975][T23081] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.553031][T23081] ? __fget_files+0x2a/0x420 [ 840.553057][T23081] ? __fget_files+0x3a2/0x420 [ 840.553093][T23081] __x64_sys_sendmsg+0x1b1/0x290 [ 840.553120][T23081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.553159][T23081] do_syscall_64+0x166/0x520 [ 840.553178][T23081] ? trace_irq_disable+0x3b/0x140 [ 840.553196][T23081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.553215][T23081] ? clear_bhb_loop+0x70/0xc0 [ 840.553237][T23081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.553256][T23081] RIP: 0033:0x7f484939e159 [ 840.553274][T23081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.553292][T23081] RSP: 002b:00007f484a2b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.553314][T23081] RAX: ffffffffffffffda RBX: 00007f4849625fa0 RCX: 00007f484939e159 [ 840.553329][T23081] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 840.553342][T23081] RBP: 00007f484a2b8090 R08: 0000000000000000 R09: 0000000000000000 [ 840.553354][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.553366][T23081] R13: 00007f4849626038 R14: 00007f4849625fa0 R15: 00007f484974fa48 [ 840.553394][T23081] [ 840.568347][ T5695] usb 3-1: device descriptor read/64, error -71 [ 840.820350][ T5695] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 840.977213][ T5695] usb 3-1: device descriptor read/64, error -71 [ 841.087613][ T5695] usb usb3-port1: attempt power cycle [ 841.162352][T23102] syzkaller0: entered promiscuous mode [ 841.162401][T23102] syzkaller0: entered allmulticast mode [ 841.280097][T23117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.311407][T23117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.411538][T23121] vlan2: entered promiscuous mode [ 841.416803][T23121] bond_slave_1: entered promiscuous mode [ 841.427885][ T5695] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 841.434336][T23102] tipc: Started in network mode [ 841.434368][T23102] tipc: Node identity 0223b05e69af, cluster identity 4711 [ 841.434640][T23102] tipc: Enabled bearer , priority 0 [ 841.459929][ T5695] usb 3-1: device descriptor read/8, error -71 [ 841.476843][T23100] tipc: Resetting bearer [ 841.619081][T23100] tipc: Disabling bearer [ 841.717117][ T5695] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 841.740465][ T5695] usb 3-1: device descriptor read/8, error -71 [ 841.849643][ T5695] usb usb3-port1: unable to enumerate USB device [ 842.147317][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 842.321238][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 842.331392][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 842.331513][ T25] usb 9-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=a4.be [ 842.349184][ T25] usb 9-1: config 86 has an invalid interface number: 175 but max is 0 [ 842.349239][ T25] usb 9-1: config 86 has no interface number 0 [ 842.349286][ T25] usb 9-1: config 86 interface 175 has no altsetting 0 [ 842.359696][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.359725][ T25] usb 9-1: Product: syz [ 842.359741][ T25] usb 9-1: Manufacturer: syz [ 842.359755][ T25] usb 9-1: SerialNumber: syz [ 842.621466][ T25] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:86.175/input/input32 [ 842.663669][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4242'. [ 842.683349][ T4969] bcm5974 9-1:86.175: could not read from device [ 842.742360][ T4969] bcm5974 9-1:86.175: could not read from device [ 842.752533][ T25] usb 9-1: USB disconnect, device number 5 [ 843.068498][T23188] gtp0: entered promiscuous mode [ 843.068544][T23188] gtp0: entered allmulticast mode [ 843.197612][T21254] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 843.357039][T21254] usb 7-1: Using ep0 maxpacket: 32 [ 843.364255][T21254] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 843.366463][T23208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.369401][T23208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.396517][T21254] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 843.396559][T21254] usb 7-1: config 0 has no interface number 0 [ 843.396620][T21254] usb 7-1: config 0 interface 184 has no altsetting 0 [ 843.421745][T21254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.430660][T21254] usb 7-1: Product: syz [ 843.430683][T21254] usb 7-1: Manufacturer: syz [ 843.430697][T21254] usb 7-1: SerialNumber: syz [ 843.448857][T21254] usb 7-1: config 0 descriptor?? [ 843.864586][T23182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.876487][T23182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.890514][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 844.050811][ T25] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 844.057449][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.065655][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.065684][ T25] usb 9-1: Product: syz [ 844.065699][ T25] usb 9-1: Manufacturer: syz [ 844.065713][ T25] usb 9-1: SerialNumber: syz [ 844.085346][ T25] etas_es58x 9-1:1.0: Starting syz syz (Serial Number syz) [ 844.182306][T23238] input: syz1 as /devices/virtual/input/input33 [ 844.280089][T23246] syzkaller0: entered promiscuous mode [ 844.285954][T23246] syzkaller0: entered allmulticast mode [ 844.300892][T23246] tipc: Enabled bearer , priority 0 [ 844.312969][T23245] tipc: Resetting bearer [ 844.415985][T23245] tipc: Disabling bearer [ 844.441183][ T5711] usb 9-1: USB disconnect, device number 6 [ 844.715502][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 844.715557][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 844.736874][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 844.736907][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 844.737031][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 844.737048][T21254] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 844.737275][T21254] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 844.795205][T21254] usb 7-1: USB disconnect, device number 68 [ 845.287313][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4266'. [ 845.418500][T23307] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4269'. [ 845.583732][T23315] netlink: 67 bytes leftover after parsing attributes in process `syz.8.4263'. [ 845.587536][T15398] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 845.607466][T23322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.610473][T23322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.740137][T15398] usb 7-1: Using ep0 maxpacket: 8 [ 845.742444][T15398] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 845.748575][T15398] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 845.751161][T15398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.751215][T15398] usb 7-1: Product: syz [ 845.751229][T15398] usb 7-1: Manufacturer: syz [ 845.751245][T15398] usb 7-1: SerialNumber: syz [ 845.764693][T15398] usb 7-1: config 0 descriptor?? [ 845.783391][T15398] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 845.783451][T15398] usb 7-1: setting power ON [ 845.829627][T15398] dvb-usb: bulk message failed: -22 (2/0) [ 845.856602][T15398] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.862931][T15398] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 845.862987][T15398] usb 7-1: media controller created [ 845.937359][T15398] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.031327][T15398] usb 7-1: selecting invalid altsetting 6 [ 846.031374][T15398] usb 7-1: digital interface selection failed (-22) [ 846.031389][T15398] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 846.037850][T15398] usb 7-1: setting power OFF [ 846.037926][T15398] dvb-usb: bulk message failed: -22 (2/0) [ 846.037940][T15398] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 846.037954][T15398] (NULL device *): no alternate interface [ 846.071345][T23299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.083756][T23299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.271853][T15398] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 846.360764][T15398] usb 7-1: USB disconnect, device number 69 [ 846.453288][T23386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.453731][T23386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.608097][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 846.877875][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 846.892392][T23386] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.919989][T23386] bridge_slave_1 (unregistering): left allmulticast mode [ 846.929884][T23386] bridge_slave_1 (unregistering): left promiscuous mode [ 846.938011][T23386] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.657051][T15398] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 847.818869][T15398] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 847.821926][T15398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.821954][T15398] usb 7-1: Product: syz [ 847.821969][T15398] usb 7-1: Manufacturer: syz [ 847.821983][T15398] usb 7-1: SerialNumber: syz [ 847.845803][T15398] ums_eneub6250 7-1:1.0: USB Mass Storage device detected [ 847.873943][T15398] scsi host1: usb-storage 7-1:1.0 [ 848.158639][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 848.312704][ T25] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 848.314240][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.314300][ T25] usb 9-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 848.316623][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.316646][ T25] usb 9-1: Product: syz [ 848.316662][ T25] usb 9-1: Manufacturer: syz [ 848.316676][ T25] usb 9-1: SerialNumber: syz [ 848.355363][ T25] usb-storage 9-1:1.0: USB Mass Storage device detected [ 848.374269][T23478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.374800][T23478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.375106][ T25] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 848.379681][ T25] scsi host2: usb-storage 9-1:1.0 [ 848.544595][ T25] usb 9-1: USB disconnect, device number 7 [ 849.011953][ T1221] ums_eneub6250 7-1:1.0: Max LUN 231 is not valid, using 0 instead [ 849.356167][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4292'. [ 849.370373][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4292'. [ 849.475806][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4293'. [ 849.492168][T23518] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.826484][T23540] FAULT_INJECTION: forcing a failure. [ 849.826484][T23540] name failslab, interval 1, probability 0, space 0, times 0 [ 849.826544][T23540] CPU: 1 UID: 0 PID: 23540 Comm: syz.5.4296 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.826570][T23540] Tainted: [L]=SOFTLOCKUP [ 849.826577][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 849.826587][T23540] Call Trace: [ 849.826594][T23540] [ 849.826601][T23540] dump_stack_lvl+0xe8/0x150 [ 849.826629][T23540] should_fail_ex+0x410/0x560 [ 849.826663][T23540] should_failslab+0xa8/0x100 [ 849.826689][T23540] __kvmalloc_node_noprof+0x176/0x820 [ 849.826714][T23540] ? alloc_netdev_mqs+0xa9/0x12a0 [ 849.826738][T23540] ? alloc_netdev_mqs+0xa9/0x12a0 [ 849.826768][T23540] alloc_netdev_mqs+0xa9/0x12a0 [ 849.826793][T23540] ? __pfx_snprintf+0x10/0x10 [ 849.826817][T23540] ? __pfx_gtp_link_setup+0x10/0x10 [ 849.826869][T23540] rtnl_create_link+0x321/0xd70 [ 849.826902][T23540] rtnl_newlink_create+0x258/0x7b0 [ 849.826934][T23540] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 849.826961][T23540] ? __pfx___mutex_lock+0x10/0x10 [ 849.826990][T23540] ? ns_capable+0x89/0xe0 [ 849.827018][T23540] rtnl_newlink+0x166d/0x1c30 [ 849.827054][T23540] ? __pfx_rtnl_newlink+0x10/0x10 [ 849.827072][T23540] ? do_syscall_64+0x166/0x520 [ 849.827089][T23540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.827144][T23540] ? kasan_quarantine_put+0xbb/0x1f0 [ 849.827164][T23540] ? lockdep_hardirqs_on+0x7b/0x110 [ 849.827185][T23540] ? nlmon_xmit+0xb0/0x100 [ 849.827246][T23540] ? kmem_cache_free+0x182/0x650 [ 849.827277][T23540] ? __lock_acquire+0x747/0x2de0 [ 849.827306][T23540] ? __local_bh_enable_ip+0xd6/0x140 [ 849.827332][T23540] ? lockdep_hardirqs_on+0x7b/0x110 [ 849.827349][T23540] ? __dev_queue_xmit+0x29b/0x3820 [ 849.827372][T23540] ? __local_bh_enable_ip+0xd6/0x140 [ 849.827394][T23540] ? __dev_queue_xmit+0x29b/0x3820 [ 849.827426][T23540] ? lock_acquire+0x115/0x350 [ 849.827459][T23540] ? __pfx_rtnl_newlink+0x10/0x10 [ 849.827478][T23540] rtnetlink_rcv_msg+0x802/0xc00 [ 849.827502][T23540] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 849.827521][T23540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 849.827539][T23540] ? ref_tracker_free+0x689/0x830 [ 849.827559][T23540] ? __pfx_ref_tracker_free+0x10/0x10 [ 849.827580][T23540] ? __asan_memcpy+0x40/0x70 [ 849.827607][T23540] ? __skb_clone+0x5c/0x6c0 [ 849.827635][T23540] netlink_rcv_skb+0x226/0x4a0 [ 849.827661][T23540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 849.827684][T23540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.827719][T23540] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.827743][T23540] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.827774][T23540] netlink_unicast+0x7bd/0x940 [ 849.827807][T23540] netlink_sendmsg+0x813/0xb40 [ 849.827841][T23540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.827874][T23540] ? apparmor_socket_sendmsg+0x98/0x360 [ 849.827897][T23540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.827921][T23540] sock_sendmsg_nosec+0x13a/0x180 [ 849.827951][T23540] ____sys_sendmsg+0x54e/0x850 [ 849.827979][T23540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.828011][T23540] ? import_iovec+0x73/0xa0 [ 849.828036][T23540] ___sys_sendmsg+0x2a5/0x360 [ 849.828057][T23540] ? __lock_acquire+0x747/0x2de0 [ 849.828081][T23540] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.828137][T23540] ? __fget_files+0x2a/0x420 [ 849.828163][T23540] ? __fget_files+0x3a2/0x420 [ 849.828204][T23540] __x64_sys_sendmsg+0x1b1/0x290 [ 849.828229][T23540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.828272][T23540] do_syscall_64+0x166/0x520 [ 849.828290][T23540] ? trace_irq_disable+0x3b/0x140 [ 849.828308][T23540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.828327][T23540] ? clear_bhb_loop+0x70/0xc0 [ 849.828352][T23540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.828371][T23540] RIP: 0033:0x7f414cf9e159 [ 849.828390][T23540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.828408][T23540] RSP: 002b:00007f414dda9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.828428][T23540] RAX: ffffffffffffffda RBX: 00007f414d225fa0 RCX: 00007f414cf9e159 [ 849.828443][T23540] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 849.828456][T23540] RBP: 00007f414dda9090 R08: 0000000000000000 R09: 0000000000000000 [ 849.828468][T23540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.828480][T23540] R13: 00007f414d226038 R14: 00007f414d225fa0 R15: 00007f414d34fa48 [ 849.828512][T23540] [ 851.883840][T18951] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 852.073028][T18951] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 852.103530][T18951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.152838][T18951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.152883][T18951] usb 3-1: Product: syz [ 852.152914][T18951] usb 3-1: Manufacturer: syz [ 852.152932][T18951] usb 3-1: SerialNumber: syz [ 852.195083][T18951] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 852.605840][ T5695] usb 3-1: USB disconnect, device number 23 [ 852.773285][ T31] audit: type=1800 audit(1788907808.835:12640): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4303" name="nullb0" dev="devtmpfs" ino=3572 res=0 errno=0 [ 855.152500][T15398] ums_eneub6250 7-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 855.156236][T15398] usb 7-1: USB disconnect, device number 70 [ 855.893586][T23550] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 856.357740][ T1221] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 856.487146][ T1221] usb 7-1: device descriptor read/64, error -71 [ 856.727068][ T1221] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 856.758557][T15398] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 856.797686][ T5711] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 856.861289][ T1221] usb 7-1: device descriptor read/64, error -71 [ 856.904118][T23682] syz_tun: entered promiscuous mode [ 856.909885][T23682] macsec1: entered allmulticast mode [ 856.915558][T23682] syz_tun: entered allmulticast mode [ 856.920269][T15398] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 856.922170][T15398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.935573][T15398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.935611][T15398] usb 3-1: Product: syz [ 856.935626][T15398] usb 3-1: Manufacturer: syz [ 856.935641][T15398] usb 3-1: SerialNumber: syz [ 856.968201][ T1221] usb usb7-port1: attempt power cycle [ 856.974097][ T5711] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 856.975355][T23682] syz_tun: left allmulticast mode [ 856.975380][T23682] syz_tun: left promiscuous mode [ 856.989426][T15398] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 857.002063][ T5711] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.033346][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.033392][ T5711] usb 9-1: Product: syz [ 857.033423][ T5711] usb 9-1: Manufacturer: syz [ 857.033442][ T5711] usb 9-1: SerialNumber: syz [ 857.070265][ T5711] etas_es58x 9-1:1.0: Starting syz syz (Serial Number syz) [ 857.328669][ T1221] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 857.349086][ T1221] usb 7-1: device descriptor read/8, error -71 [ 857.387321][T23705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.398046][T23705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.514618][ T5680] usb 3-1: USB disconnect, device number 24 [ 857.607189][ T1221] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 857.633638][ T1221] usb 7-1: device descriptor read/8, error -71 [ 857.686532][ T5695] usb 9-1: USB disconnect, device number 8 [ 857.739919][ T1221] usb usb7-port1: unable to enumerate USB device [ 858.022489][T23735] syzkaller0: entered promiscuous mode [ 858.029045][T23735] syzkaller0: entered allmulticast mode [ 858.328090][T23745] syzkaller0: entered promiscuous mode [ 858.335534][T23745] syzkaller0: entered allmulticast mode [ 858.457742][T23745] tipc: Enabled bearer , priority 0 [ 858.473010][T23744] tipc: Resetting bearer [ 858.632015][T23744] tipc: Disabling bearer [ 858.914970][T23778] IPv6: addrconf: prefix option has invalid lifetime [ 858.977124][T15398] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 859.014867][T23782] netlink: 'syz.8.4320': attribute type 3 has an invalid length. [ 859.078186][T23784] ip6t_rpfilter: unknown options [ 859.129118][T15398] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 859.140075][T15398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.140120][T15398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 859.140189][T15398] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.140236][T15398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.192598][T15398] ims_pcu 3-1:1.0: Missing CDC union descriptor [ 859.199182][T15398] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 859.419001][ T5695] usb 3-1: USB disconnect, device number 25 [ 859.567202][T15398] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 859.718719][T15398] usb 9-1: Using ep0 maxpacket: 8 [ 859.724760][T15398] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 859.738804][T15398] usb 9-1: config 0 interface 0 has no altsetting 0 [ 859.745711][T15398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.761475][T15398] usb 9-1: config 0 descriptor?? [ 860.429544][T15398] usbhid 9-1:0.0: can't add hid device: -71 [ 860.435697][T15398] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 860.452300][T15398] usb 9-1: USB disconnect, device number 9 [ 860.762487][ T5695] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 860.917707][ T5695] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 860.927654][T15398] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 860.939526][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.952388][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.962715][ T5695] usb 3-1: Product: syz [ 860.967125][ T5695] usb 3-1: Manufacturer: syz [ 860.971943][ T5695] usb 3-1: SerialNumber: syz [ 860.988646][ T5695] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 861.013021][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.025417][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.037609][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.048712][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.087082][T15398] usb 7-1: Using ep0 maxpacket: 8 [ 861.093700][T15398] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 861.105779][T15398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.147282][T15398] pvrusb2: Hardware description: Terratec Grabster AV400 [ 861.154681][T15398] pvrusb2: ********** [ 861.154727][T15398] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 861.154745][T15398] pvrusb2: Important functionality might not be entirely working. [ 861.154757][T15398] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 861.154771][T15398] pvrusb2: ********** [ 861.369492][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.373252][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.510350][ T31] audit: type=1326 audit(1788907817.575:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23845 comm="syz.6.4332" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f484939e159 code=0x0 [ 861.579313][ T5695] usb 3-1: USB disconnect, device number 26 [ 861.612833][T23886] syzkaller0: entered promiscuous mode [ 861.618757][T23886] syzkaller0: entered allmulticast mode [ 861.676057][T23886] tipc: Enabled bearer , priority 0 [ 861.688874][T23885] tipc: Resetting bearer [ 861.745887][T23898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.751549][T23898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.766414][ T5711] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 861.776707][T23885] tipc: Disabling bearer [ 861.917761][ T5711] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 861.921965][ T5711] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.921991][ T5711] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 861.922033][ T5711] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.922073][ T5711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.935127][ T5711] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 861.935177][ T5711] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 862.150087][ T5711] usb 9-1: USB disconnect, device number 10 [ 862.445008][T23933] fuse: Bad value for 'fd' [ 862.453215][T23933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.455228][T23933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.468317][T23933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.470002][T23933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.635558][T23944] FAULT_INJECTION: forcing a failure. [ 862.635558][T23944] name failslab, interval 1, probability 0, space 0, times 0 [ 862.635602][T23944] CPU: 0 UID: 0 PID: 23944 Comm: syz.2.4347 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.635629][T23944] Tainted: [L]=SOFTLOCKUP [ 862.635636][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.635654][T23944] Call Trace: [ 862.635660][T23944] [ 862.635667][T23944] dump_stack_lvl+0xe8/0x150 [ 862.635697][T23944] should_fail_ex+0x410/0x560 [ 862.635730][T23944] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 862.635760][T23944] should_failslab+0xa8/0x100 [ 862.635785][T23944] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 862.635809][T23944] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 862.635840][T23944] ? alloc_inode+0x6a/0x1b0 [ 862.635862][T23944] ? alloc_inode+0x6a/0x1b0 [ 862.635889][T23944] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 862.635915][T23944] alloc_inode+0x6a/0x1b0 [ 862.635940][T23944] new_inode+0x1f/0x170 [ 862.635970][T23944] __debugfs_create_file+0xb8/0x400 [ 862.635999][T23944] debugfs_create_file_full+0x3f/0x60 [ 862.636030][T23944] ref_tracker_dir_debugfs+0x197/0x360 [ 862.636053][T23944] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 862.636098][T23944] ? __kvmalloc_node_noprof+0x52f/0x820 [ 862.636121][T23944] ? __kvmalloc_node_noprof+0x345/0x820 [ 862.636145][T23944] ? __raw_spin_lock_init+0x45/0x100 [ 862.636175][T23944] alloc_netdev_mqs+0x275/0x12a0 [ 862.636200][T23944] ? __pfx_snprintf+0x10/0x10 [ 862.636224][T23944] ? __pfx_gtp_link_setup+0x10/0x10 [ 862.636257][T23944] rtnl_create_link+0x321/0xd70 [ 862.636290][T23944] rtnl_newlink_create+0x258/0x7b0 [ 862.636320][T23944] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 862.636346][T23944] ? __pfx___mutex_lock+0x10/0x10 [ 862.636376][T23944] ? ns_capable+0x89/0xe0 [ 862.636405][T23944] rtnl_newlink+0x166d/0x1c30 [ 862.636443][T23944] ? __pfx_rtnl_newlink+0x10/0x10 [ 862.636466][T23944] ? __lock_acquire+0x747/0x2de0 [ 862.636492][T23944] ? __lock_acquire+0x747/0x2de0 [ 862.636527][T23944] ? lock_acquire+0x115/0x350 [ 862.636553][T23944] ? lock_acquire+0x115/0x350 [ 862.636582][T23944] ? is_bpf_text_address+0x26/0x2b0 [ 862.636610][T23944] ? __lock_acquire+0x747/0x2de0 [ 862.636636][T23944] ? __kernel_text_address+0xd/0x30 [ 862.636665][T23944] ? unwind_get_return_address+0x4d/0x90 [ 862.636687][T23944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 862.636716][T23944] ? arch_stack_walk+0xfb/0x150 [ 862.636750][T23944] ? lock_acquire+0x115/0x350 [ 862.636784][T23944] ? __pfx_rtnl_newlink+0x10/0x10 [ 862.636803][T23944] rtnetlink_rcv_msg+0x802/0xc00 [ 862.636822][T23944] ? netlink_sendmsg+0x5d4/0xb40 [ 862.636852][T23944] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 862.636872][T23944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 862.636894][T23944] ? __lock_acquire+0x747/0x2de0 [ 862.636925][T23944] netlink_rcv_skb+0x226/0x4a0 [ 862.636951][T23944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 862.636974][T23944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 862.637015][T23944] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.637041][T23944] ? netlink_deliver_tap+0x2e/0x1b0 [ 862.637071][T23944] netlink_unicast+0x7bd/0x940 [ 862.637109][T23944] netlink_sendmsg+0x813/0xb40 [ 862.637142][T23944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.637180][T23944] ? apparmor_socket_sendmsg+0x98/0x360 [ 862.637206][T23944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.637233][T23944] sock_sendmsg_nosec+0x13a/0x180 [ 862.637264][T23944] ____sys_sendmsg+0x54e/0x850 [ 862.637297][T23944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.637329][T23944] ? import_iovec+0x73/0xa0 [ 862.637356][T23944] ___sys_sendmsg+0x2a5/0x360 [ 862.637379][T23944] ? __lock_acquire+0x747/0x2de0 [ 862.637404][T23944] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.637463][T23944] ? __fget_files+0x2a/0x420 [ 862.637488][T23944] ? __fget_files+0x3a2/0x420 [ 862.637525][T23944] __x64_sys_sendmsg+0x1b1/0x290 [ 862.637552][T23944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.637596][T23944] do_syscall_64+0x166/0x520 [ 862.637615][T23944] ? trace_irq_disable+0x3b/0x140 [ 862.637635][T23944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.637662][T23944] ? clear_bhb_loop+0x70/0xc0 [ 862.637687][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.637708][T23944] RIP: 0033:0x7fb83fd9e159 [ 862.637728][T23944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.637745][T23944] RSP: 002b:00007fb840ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.637767][T23944] RAX: ffffffffffffffda RBX: 00007fb840025fa0 RCX: 00007fb83fd9e159 [ 862.637781][T23944] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 862.637794][T23944] RBP: 00007fb840ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 862.637807][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.637819][T23944] R13: 00007fb840026038 R14: 00007fb840025fa0 R15: 00007fb84014fa48 [ 862.637850][T23944] [ 862.638361][T23944] debugfs: out of free dentries, can not create file 'netdev@ffff88807fa7e700' [ 863.002515][ T5711] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 863.149518][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 863.152067][ T5711] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 863.153694][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.163704][ T5711] usb 3-1: config 0 descriptor?? [ 863.217310][T23963] syzkaller0: entered promiscuous mode [ 863.223055][T23963] syzkaller0: entered allmulticast mode [ 863.271885][T23963] tipc: Enabled bearer , priority 0 [ 863.273314][T23967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.275478][T23967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.299038][T23962] tipc: Resetting bearer [ 863.331349][T23962] tipc: Disabling bearer [ 863.370491][ T5711] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 863.383991][ T5711] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 863.395458][ T5711] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 863.687713][ T2352] pvrusb2: Invalid write control endpoint [ 863.709917][T15398] usb 7-1: USB disconnect, device number 75 [ 863.748326][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4364'. [ 863.943984][ T2352] pvrusb2: Invalid write control endpoint [ 863.944021][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 863.944047][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 863.944059][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 863.944077][ T2352] pvrusb2: Device being rendered inoperable [ 863.997145][ T2352] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 864.017177][ T2352] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 864.036381][ T2352] pvrusb2: Attached sub-driver cx25840 [ 864.061437][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 864.062396][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 864.317687][T24011] vlan2: entered promiscuous mode [ 864.317730][T24011] bond_slave_1: entered promiscuous mode [ 864.526659][T24020] syzkaller0: entered promiscuous mode [ 864.534467][T24020] syzkaller0: entered allmulticast mode [ 864.595518][T24034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.597798][T24034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.778468][T15398] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 864.947130][T15398] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 864.972227][T15398] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.005678][T15398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.005735][T15398] usb 7-1: Product: syz [ 865.005770][T15398] usb 7-1: Manufacturer: syz [ 865.005784][T15398] usb 7-1: SerialNumber: syz [ 865.052648][T15398] etas_es58x 7-1:1.0: Starting syz syz (Serial Number syz) [ 865.520530][T24061] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4362'. [ 865.643954][T18951] usb 7-1: USB disconnect, device number 76 [ 865.748378][ T25] hid-generic 000E:046D:B012.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 869.752875][T24096] tipc: Enabling of bearer rejected, failed to enable media [ 870.131245][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.137989][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.405722][ T5615] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 870.411792][T24185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.412250][T24185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.437070][ T25] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 870.466218][T24160] tipc: Enabling of bearer rejected, already enabled [ 870.478492][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 870.492196][T24185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.499830][T24185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.521726][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 870.531100][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4379'. [ 870.592764][ T25] usb 9-1: Invalid ep0 maxpacket: 32 [ 870.717403][ T25] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 870.868540][ T25] usb 9-1: Invalid ep0 maxpacket: 32 [ 870.868852][ T25] usb usb9-port1: attempt power cycle [ 871.075626][T24244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4385'. [ 871.207097][ T25] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 871.228851][ T25] usb 9-1: Invalid ep0 maxpacket: 32 [ 871.358319][ T25] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 871.378423][ T25] usb 9-1: Invalid ep0 maxpacket: 32 [ 871.378907][ T25] usb usb9-port1: unable to enumerate USB device [ 871.759499][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4394'. [ 871.759571][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4394'. [ 872.587200][T15398] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 872.737793][T15398] usb 7-1: Using ep0 maxpacket: 32 [ 872.739423][T15398] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 872.740375][T15398] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 872.740398][T15398] usb 7-1: config 0 has no interface number 0 [ 872.742327][T15398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.742350][T15398] usb 7-1: Product: syz [ 872.742365][T15398] usb 7-1: Manufacturer: syz [ 872.742379][T15398] usb 7-1: SerialNumber: syz [ 872.754972][T15398] usb 7-1: config 0 descriptor?? [ 872.762847][T15398] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 872.965405][T15398] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 872.976896][T15398] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 873.458060][T24288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.458686][T24288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.475605][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 873.484337][ T5695] usb 7-1: USB disconnect, device number 77 [ 873.501000][ T5695] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 873.519643][ T5695] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 873.539425][ T5695] quatech2 7-1:0.51: device disconnected [ 873.632337][T24356] bridge_slave_0: left allmulticast mode [ 873.632373][T24356] bridge_slave_0: left promiscuous mode [ 873.632922][T24356] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.653278][T24356] bond0: (slave bond_slave_0): Releasing backup interface [ 873.662034][T24356] bond0: (slave bond_slave_1): Releasing backup interface [ 873.695116][T24356] team0: Port device team_slave_0 removed [ 873.729864][T24356] team0: Port device team_slave_1 removed [ 873.734740][T24356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.734764][T24356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.763438][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4409'. [ 873.767735][T24356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.767761][T24356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.772620][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4409'. [ 873.782128][T24356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.120413][T24389] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 874.830728][T24430] macsec1: entered allmulticast mode [ 874.831170][T24430] syz_tun: entered allmulticast mode [ 874.843177][ T5695] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 874.843504][T24430] syz_tun: left allmulticast mode [ 874.997810][ T5695] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 875.012040][ T5695] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.022423][ T5695] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 875.022474][ T5695] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.022518][ T5695] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.033673][T24470] IPv6: addrconf: prefix option has invalid lifetime [ 875.079907][ T5695] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 875.091333][ T5695] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 875.324684][T24497] fuse: Bad value for 'group_id' [ 875.324724][T24497] fuse: Bad value for 'group_id' [ 875.351080][T24497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4420'. [ 875.365193][T24499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.384126][T24499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.444871][ T5680] usb 9-1: USB disconnect, device number 15 [ 875.753837][T24535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 876.067080][ T25] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 876.220237][ T25] usb 7-1: not running at top speed; connect to a high speed hub [ 876.220292][ T25] usb 7-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 876.242200][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.242245][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 876.242311][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.287909][ T25] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:d970) [ 876.786706][ T25] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 876.786793][ T25] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 876.826149][ T25] usb 7-1: USB disconnect, device number 78 [ 877.102506][T24634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.115464][T24634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.206566][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4445'. [ 878.917399][ T31] audit: type=1800 audit(1788907834.985:12642): pid=24713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4450" name="nullb0" dev="devtmpfs" ino=3572 res=0 errno=0 [ 878.994466][T18951] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 879.179572][T18951] usb 7-1: not running at top speed; connect to a high speed hub [ 879.179612][T18951] usb 7-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 879.198477][T18951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.198516][T18951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.198591][T18951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.213637][T18951] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:d970) [ 879.364522][T24741] FAULT_INJECTION: forcing a failure. [ 879.364522][T24741] name failslab, interval 1, probability 0, space 0, times 0 [ 879.379252][T24741] CPU: 1 UID: 0 PID: 24741 Comm: syz.5.4455 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.379285][T24741] Tainted: [L]=SOFTLOCKUP [ 879.379293][T24741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.379305][T24741] Call Trace: [ 879.379313][T24741] [ 879.379322][T24741] dump_stack_lvl+0xe8/0x150 [ 879.379353][T24741] should_fail_ex+0x410/0x560 [ 879.379387][T24741] should_failslab+0xa8/0x100 [ 879.379408][T24741] ? security_inode_alloc+0x39/0x310 [ 879.379429][T24741] kmem_cache_alloc_noprof+0xa1/0x600 [ 879.379455][T24741] ? security_inode_alloc+0x39/0x310 [ 879.379480][T24741] security_inode_alloc+0x39/0x310 [ 879.379501][T24741] inode_init_always_gfp+0x97e/0xd30 [ 879.379541][T24741] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 879.379564][T24741] alloc_inode+0x82/0x1b0 [ 879.379586][T24741] new_inode+0x1f/0x170 [ 879.379611][T24741] __debugfs_create_file+0xb8/0x400 [ 879.379637][T24741] debugfs_create_file_full+0x3f/0x60 [ 879.379666][T24741] ref_tracker_dir_debugfs+0x197/0x360 [ 879.379686][T24741] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 879.379725][T24741] ? __kvmalloc_node_noprof+0x52f/0x820 [ 879.379744][T24741] ? __kvmalloc_node_noprof+0x345/0x820 [ 879.379766][T24741] ? __raw_spin_lock_init+0x45/0x100 [ 879.379796][T24741] alloc_netdev_mqs+0x275/0x12a0 [ 879.379820][T24741] ? __pfx_snprintf+0x10/0x10 [ 879.379840][T24741] ? __pfx_gtp_link_setup+0x10/0x10 [ 879.379869][T24741] rtnl_create_link+0x321/0xd70 [ 879.379897][T24741] rtnl_newlink_create+0x258/0x7b0 [ 879.379922][T24741] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 879.379948][T24741] ? __pfx___mutex_lock+0x10/0x10 [ 879.379973][T24741] ? ns_capable+0x89/0xe0 [ 879.379998][T24741] rtnl_newlink+0x166d/0x1c30 [ 879.380029][T24741] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.380045][T24741] ? do_syscall_64+0x166/0x520 [ 879.380060][T24741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.380111][T24741] ? kasan_quarantine_put+0xbb/0x1f0 [ 879.380128][T24741] ? lockdep_hardirqs_on+0x7b/0x110 [ 879.380148][T24741] ? nlmon_xmit+0xb0/0x100 [ 879.380162][T24741] ? kmem_cache_free+0x182/0x650 [ 879.380189][T24741] ? __lock_acquire+0x747/0x2de0 [ 879.380220][T24741] ? __local_bh_enable_ip+0xd6/0x140 [ 879.380242][T24741] ? lockdep_hardirqs_on+0x7b/0x110 [ 879.380257][T24741] ? __dev_queue_xmit+0x29b/0x3820 [ 879.380276][T24741] ? __local_bh_enable_ip+0xd6/0x140 [ 879.380296][T24741] ? __dev_queue_xmit+0x29b/0x3820 [ 879.380322][T24741] ? lock_acquire+0x115/0x350 [ 879.380355][T24741] ? __pfx_rtnl_newlink+0x10/0x10 [ 879.380372][T24741] rtnetlink_rcv_msg+0x802/0xc00 [ 879.380393][T24741] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 879.380409][T24741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.380425][T24741] ? ref_tracker_free+0x689/0x830 [ 879.380445][T24741] ? __pfx_ref_tracker_free+0x10/0x10 [ 879.380472][T24741] netlink_rcv_skb+0x226/0x4a0 [ 879.380500][T24741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 879.380519][T24741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 879.380557][T24741] ? netlink_deliver_tap+0x2e/0x1b0 [ 879.380579][T24741] ? netlink_deliver_tap+0x2e/0x1b0 [ 879.380605][T24741] netlink_unicast+0x7bd/0x940 [ 879.380638][T24741] netlink_sendmsg+0x813/0xb40 [ 879.380668][T24741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.380697][T24741] ? apparmor_socket_sendmsg+0x98/0x360 [ 879.380716][T24741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.380736][T24741] sock_sendmsg_nosec+0x13a/0x180 [ 879.380765][T24741] ____sys_sendmsg+0x54e/0x850 [ 879.380793][T24741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.380821][T24741] ? import_iovec+0x73/0xa0 [ 879.380843][T24741] ___sys_sendmsg+0x2a5/0x360 [ 879.380864][T24741] ? __lock_acquire+0x747/0x2de0 [ 879.380887][T24741] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.380947][T24741] ? __fget_files+0x2a/0x420 [ 879.380973][T24741] ? __fget_files+0x3a2/0x420 [ 879.381011][T24741] __x64_sys_sendmsg+0x1b1/0x290 [ 879.381038][T24741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.381084][T24741] do_syscall_64+0x166/0x520 [ 879.381104][T24741] ? trace_irq_disable+0x3b/0x140 [ 879.381124][T24741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.381144][T24741] ? clear_bhb_loop+0x70/0xc0 [ 879.381169][T24741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.381190][T24741] RIP: 0033:0x7f414cf9e159 [ 879.381210][T24741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.381228][T24741] RSP: 002b:00007f414dda9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.381249][T24741] RAX: ffffffffffffffda RBX: 00007f414d225fa0 RCX: 00007f414cf9e159 [ 879.381264][T24741] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000006 [ 879.381277][T24741] RBP: 00007f414dda9090 R08: 0000000000000000 R09: 0000000000000000 [ 879.381290][T24741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.381301][T24741] R13: 00007f414d226038 R14: 00007f414d225fa0 R15: 00007f414d34fa48 [ 879.381334][T24741] [ 879.393120][T24741] debugfs: out of free dentries, can not create file 'netdev@ffff888035ac6700' [ 879.467155][ T5680] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 879.518137][T24741] gtp0: entered promiscuous mode [ 879.520365][T24741] gtp0: entered allmulticast mode [ 879.621295][ T5680] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 879.622768][ T5680] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.622792][ T5680] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.622832][ T5680] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.622896][ T5680] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.683935][ T5680] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 879.683987][ T5680] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 879.745090][T18951] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 879.745152][T18951] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 879.894237][T18951] usb 7-1: USB disconnect, device number 79 [ 880.033665][ T5695] usb 9-1: USB disconnect, device number 16 [ 880.205490][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'. [ 880.651470][T24805] vlan2: entered promiscuous mode [ 880.690406][T24812] ip_tables: iptables: counters copy to user failed while replacing table [ 880.758342][T24817] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4468'. [ 880.971155][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4470'. [ 881.019033][T24830] syzkaller1: entered promiscuous mode [ 881.019085][T24830] syzkaller1: entered allmulticast mode [ 881.220458][T24836] syzkaller0: entered promiscuous mode [ 881.220498][T24836] syzkaller0: entered allmulticast mode [ 881.252663][T24849] tipc: Enabled bearer , priority 0 [ 881.263858][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.264899][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.287481][T24832] tipc: Resetting bearer [ 881.325094][T24832] tipc: Disabling bearer [ 881.348006][T24843] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 881.701374][T24885] syzkaller0: entered promiscuous mode [ 881.701417][T24885] syzkaller0: entered allmulticast mode [ 882.000244][T24908] gtp0: entered promiscuous mode [ 882.000288][T24908] gtp0: entered allmulticast mode [ 882.400621][T24948] gretap1: entered promiscuous mode [ 882.424641][T24947] tipc: Enabling of bearer rejected, already enabled [ 883.017157][ T5680] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 883.097077][T15398] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 883.168035][ T5680] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 883.179844][ T5680] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.199937][ T5680] usb 9-1: config 0 descriptor?? [ 883.224954][ T5680] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 883.258330][T15398] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 883.263035][T15398] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.263085][T15398] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 883.263107][T15398] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 883.263129][T15398] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.263172][T15398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.392171][T25031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4500'. [ 883.441706][T25031] sch_tbf: peakrate 512 is lower than or equals to rate 17308589288060048666 ! [ 883.611465][ T5680] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 883.881084][T15398] gud 7-1:1.0: Failed to add properties (error=-5) [ 883.888352][T15398] gud 7-1:1.0: probe with driver gud failed with error -5 [ 884.084589][T15398] usb 7-1: USB disconnect, device number 80 [ 884.285991][T25064] IPv6: addrconf: prefix option has invalid lifetime [ 884.324793][ T5680] gspca_cpia1: usb_control_msg 05, error -71 [ 884.324859][ T5680] cpia1 9-1:0.0: unexpected systemstate: 00 [ 884.332631][ T5680] usb 9-1: USB disconnect, device number 17 [ 884.386807][T25075] netlink: 'syz.5.4505': attribute type 6 has an invalid length. [ 884.531992][T25088] macsec1: entered allmulticast mode [ 884.532021][T25088] syz_tun: entered allmulticast mode [ 884.538381][T25088] syz_tun: left allmulticast mode [ 884.605677][T25096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.610066][T25096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.623098][T25096] syzkaller0: entered promiscuous mode [ 884.623118][T25096] syzkaller0: entered allmulticast mode [ 884.830591][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 884.839340][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 885.444480][T25152] loop5: detected capacity change from 0 to 8599 [ 885.449708][T25152] loop5: detected capacity change from 8599 to 8607 [ 885.470753][T23385] buffer_io_error: 11 callbacks suppressed [ 885.470816][T23385] Buffer I/O error on dev loop5, logical block 1075, async page read [ 885.485747][T23385] Buffer I/O error on dev loop5, logical block 1075, async page read [ 885.507408][ T5695] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 885.668756][ T5695] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 885.680392][ T5695] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 885.680442][ T5695] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 885.680493][ T5695] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.680535][ T5695] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 885.733753][ T5695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.743301][ T5695] usb 7-1: Product: syz [ 885.743342][ T5695] usb 7-1: Manufacturer: syz [ 885.743359][ T5695] usb 7-1: SerialNumber: syz [ 885.749037][T25139] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 885.955952][T25139] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 886.150992][T25182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.160848][T25182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.198004][ T1221] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 886.359183][ T1221] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 886.367371][ T1221] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.367398][ T1221] usb 9-1: Product: syz [ 886.367435][ T1221] usb 9-1: Manufacturer: syz [ 886.367449][ T1221] usb 9-1: SerialNumber: syz [ 886.387973][ T1221] ums-karma 9-1:1.0: USB Mass Storage device detected [ 886.396333][ T1221] ums-karma 9-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 886.396333][ T1221] Please send a copy of this message to and [ 886.820898][ T1221] ums-karma 9-1:1.0: probe with driver ums-karma failed with error -5 [ 886.885140][T25139] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 886.898696][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4532'. [ 886.914745][T25221] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.955605][T25226] gtp0: entered promiscuous mode [ 886.955650][T25226] gtp0: entered allmulticast mode [ 887.006861][ T5680] usb 9-1: USB disconnect, device number 18 [ 887.086620][ T5695] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 887.086672][ T5695] cdc_ncm 7-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 887.086712][ T5695] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 887.145478][T25245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.154800][T25245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.167683][T25245] syzkaller0: entered promiscuous mode [ 887.167710][T25245] syzkaller0: entered allmulticast mode [ 887.292762][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.293363][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.303389][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.307908][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.375452][ T5695] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 887.392494][ T5695] usb 7-1: USB disconnect, device number 81 [ 887.395952][ T5695] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 887.759033][T25291] netlink: 'syz.8.4538': attribute type 1 has an invalid length. [ 887.965130][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4541'. [ 888.334146][T25325] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4547'. [ 888.843126][T25350] syzkaller1: entered promiscuous mode [ 888.843157][T25350] syzkaller1: entered allmulticast mode [ 889.042009][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4555'. [ 889.084684][T25360] tipc: Enabling of bearer rejected, already enabled [ 889.387056][ T5616] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 889.410513][ T1221] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 889.538116][ T5616] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 889.548773][ T5616] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.548809][ T5616] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.548854][ T5616] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.548892][ T5616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.573247][ T5616] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 889.573297][ T5616] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 889.607120][ T1221] usb 7-1: not running at top speed; connect to a high speed hub [ 889.615022][ T1221] usb 7-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 889.625180][ T1221] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.625209][ T1221] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.625431][ T1221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.632740][ T1221] uvcvideo 7-1:1.0: Found UVC 1.00 device (0000:d970) [ 889.776822][T18951] usb 9-1: USB disconnect, device number 19 [ 890.076428][ T1221] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 890.086505][ T1221] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 890.104021][ T1221] usb 7-1: USB disconnect, device number 82 [ 890.679183][T25427] gtp0: entered promiscuous mode [ 890.679234][T25427] gtp0: entered allmulticast mode [ 891.325765][T25464] syzkaller0: entered promiscuous mode [ 891.325806][T25464] syzkaller0: entered allmulticast mode [ 891.600763][T25464] tipc: Enabled bearer , priority 0 [ 891.650802][T25461] tipc: Resetting bearer [ 891.660329][ T1221] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 891.823042][T25461] tipc: Disabling bearer [ 891.838050][ T1221] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 891.852961][ T1221] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.853002][ T1221] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 891.853058][ T1221] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.853104][ T1221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.911592][ T1221] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 891.920634][ T1221] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 892.485611][ T25] usb 9-1: USB disconnect, device number 20 [ 893.266872][T25606] IPv6: addrconf: prefix option has invalid lifetime [ 893.333523][T25611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.334003][T25611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.344807][T25611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.345296][T25611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.668875][T25649] syz_tun: entered promiscuous mode [ 893.669044][T25649] macsec1: entered allmulticast mode [ 893.669060][T25649] syz_tun: entered allmulticast mode [ 893.674449][T25649] syz_tun: left allmulticast mode [ 893.674474][T25649] syz_tun: left promiscuous mode [ 894.041358][T25673] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4594'. [ 894.337056][ T1221] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 894.488942][ T1221] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 894.490355][ T1221] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.490380][ T1221] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 894.490429][ T1221] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.490470][ T1221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.512688][ T1221] ims_pcu 7-1:1.0: Missing CDC union descriptor [ 894.512741][ T1221] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -22 [ 894.729715][ T5616] usb 7-1: USB disconnect, device number 83 [ 895.521953][T25730] lo: Caught tx_queue_len zero misconfig [ 895.522006][T25730] netlink: 'syz.6.4606': attribute type 6 has an invalid length. [ 895.537878][T25729] tipc: Enabled bearer , priority 10 [ 895.564298][T25730] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 895.727973][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 895.968540][T15398] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 896.087077][ T25] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 896.134359][T15398] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 896.134429][T15398] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 896.139171][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.139223][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.139250][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.141939][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.142001][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.142028][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.144739][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.144838][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.144865][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.148590][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.148637][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.148664][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.151670][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.151717][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.151743][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.154177][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.154223][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.154249][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.155403][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.155446][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.155473][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.156383][T15398] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.156425][T15398] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.156451][T15398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.158790][T15398] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 896.158813][T15398] usb 7-1: Product: syz [ 896.158828][T15398] usb 7-1: Manufacturer: syz [ 896.158867][T15398] usb 7-1: SerialNumber: syz [ 896.250559][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 896.253474][ T25] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 896.254819][ T25] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 896.254850][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 896.263593][T15398] usb 7-1: config 0 descriptor?? [ 896.281388][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.281440][ T25] usb 9-1: Product: syz [ 896.281455][ T25] usb 9-1: Manufacturer: ␀ [ 896.281470][ T25] usb 9-1: SerialNumber: syz [ 896.311232][T15398] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 896.545830][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.564819][ T5695] usb 7-1: USB disconnect, device number 84 [ 896.572879][ T5695] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 896.773620][ T1221] tipc: Node number set to 1804382302 [ 896.886212][ T25] usb 9-1: USB disconnect, device number 21 [ 896.921223][T25852] udevd[25852]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.227663][T25878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.766358][T25909] netlink: 'syz.5.4629': attribute type 16 has an invalid length. [ 897.766390][T25909] netlink: 'syz.5.4629': attribute type 17 has an invalid length. [ 897.869940][T25909] tipc: Resetting bearer [ 897.870700][T25909] tipc: Resetting bearer [ 897.891501][ T13] tipc: Resetting bearer [ 898.087901][T25918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.099189][T25918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.202958][T25924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4635'. [ 898.320947][T25926] syz_tun: entered promiscuous mode [ 898.321130][T25926] macsec1: entered allmulticast mode [ 898.321161][T25926] syz_tun: entered allmulticast mode [ 898.326577][T25926] syz_tun: left allmulticast mode [ 898.326602][T25926] syz_tun: left promiscuous mode [ 898.545025][T25946] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4640'. [ 898.545089][T25946] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4640'. [ 898.697173][T18951] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 898.748373][T25957] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4643'. [ 898.837058][ T1221] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 898.849126][T18951] usb 9-1: unable to get BOS descriptor or descriptor too short [ 898.849189][T18951] usb 9-1: New USB device found, idVendor=0c52, idProduct=a02b, bcdDevice=93.24 [ 898.850511][T18951] usb 9-1: config 114 has an invalid interface number: 204 but max is 0 [ 898.850535][T18951] usb 9-1: config 114 has an invalid descriptor of length 182, skipping remainder of the config [ 898.850583][T18951] usb 9-1: config 114 has no interface number 0 [ 898.850621][T18951] usb 9-1: config 114 interface 204 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 898.850648][T18951] usb 9-1: config 114 interface 204 has no altsetting 0 [ 898.852923][T18951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.852948][T18951] usb 9-1: Product: syz [ 898.852963][T18951] usb 9-1: Manufacturer: syz [ 898.852978][T18951] usb 9-1: SerialNumber: syz [ 899.012983][ T1221] usb 7-1: Using ep0 maxpacket: 8 [ 899.018828][ T1221] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 899.030006][ T1221] usb 7-1: config 0 interface 0 has no altsetting 0 [ 899.036749][ T1221] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.048694][ T1221] usb 7-1: config 0 descriptor?? [ 899.095696][T25969] netlink: 'syz.2.4644': attribute type 16 has an invalid length. [ 899.111105][T25969] netlink: 'syz.2.4644': attribute type 17 has an invalid length. [ 899.242396][T18951] ftdi_sio 9-1:114.204: FTDI USB Serial Device converter detected [ 899.249291][T18951] ftdi_sio ttyUSB0: unknown device type: 0x9324 [ 899.272638][T18951] usb 9-1: USB disconnect, device number 22 [ 899.277296][T18951] ftdi_sio 9-1:114.204: device disconnected [ 899.369247][T25993] syzkaller1: entered promiscuous mode [ 899.369296][T25993] syzkaller1: entered allmulticast mode [ 899.489251][ T1221] cypress 0003:04B4:DE61.001D: unknown main item tag 0x7 [ 899.489320][ T1221] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0 [ 899.489867][ T1221] cypress 0003:04B4:DE61.001D: unknown main item tag 0x1 [ 899.489903][ T1221] cypress 0003:04B4:DE61.001D: unknown main item tag 0x7 [ 899.537207][ T1221] cypress 0003:04B4:DE61.001D: hidraw0: USB HID v0.77 Device [HID 04b4:de61] on usb-dummy_hcd.6-1/input0 [ 899.690464][T18951] usb 7-1: USB disconnect, device number 85 [ 899.730506][T26020] syzkaller0: entered promiscuous mode [ 899.768750][T26020] syzkaller0: entered allmulticast mode [ 900.218243][T18951] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 900.258358][T26066] gtp0: entered promiscuous mode [ 900.258396][T26066] gtp0: entered allmulticast mode [ 900.369496][T18951] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 900.370854][T18951] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.370878][T18951] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 900.370928][T18951] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.370969][T18951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.402157][T18951] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 900.402209][T18951] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 900.683750][ T1221] usb 9-1: USB disconnect, device number 23 [ 901.227087][ T1221] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 901.367102][ T1221] usb 7-1: device descriptor read/64, error -71 [ 901.607149][ T1221] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 901.641219][T26143] syzkaller0: entered promiscuous mode [ 901.647780][T15398] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 901.657530][T26143] syzkaller0: entered allmulticast mode [ 901.705396][T26143] tipc: Enabled bearer , priority 0 [ 901.713885][T26142] tipc: Resetting bearer [ 901.757599][ T1221] usb 7-1: device descriptor read/64, error -71 [ 901.765824][T26142] tipc: Disabling bearer [ 901.816993][T15398] usb 9-1: Using ep0 maxpacket: 8 [ 901.822550][T15398] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 901.834270][T15398] usb 9-1: config 0 interface 0 has no altsetting 0 [ 901.834327][T15398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.854264][T15398] usb 9-1: config 0 descriptor?? [ 901.867828][ T1221] usb usb7-port1: attempt power cycle [ 902.219226][ T1221] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 902.247926][ T1221] usb 7-1: device descriptor read/8, error -71 [ 902.470976][T15398] usbhid 9-1:0.0: can't add hid device: -71 [ 902.477297][T15398] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 902.494059][T15398] usb 9-1: USB disconnect, device number 24 [ 902.500435][ T1221] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 902.528710][ T1221] usb 7-1: device descriptor read/8, error -71 [ 902.637422][ T1221] usb usb7-port1: unable to enumerate USB device [ 902.732232][T26192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.733452][T26192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.865468][T26201] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4679'. [ 902.874049][T26201] vlan3: entered allmulticast mode [ 902.874071][T26201] erspan0: entered allmulticast mode [ 903.419403][T26237] syz_tun: entered promiscuous mode [ 903.419532][T26237] macsec1: entered allmulticast mode [ 903.419547][T26237] syz_tun: entered allmulticast mode [ 903.425128][T26237] syz_tun: left allmulticast mode [ 903.425156][T26237] syz_tun: left promiscuous mode [ 904.151661][T26275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.163738][T26275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.282297][T26275] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 904.447194][ T25] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 904.608356][ T25] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 904.609596][ T25] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.609627][ T25] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.609653][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 904.609685][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.618986][ T25] usb 7-1: config 0 descriptor?? [ 904.675112][T26333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4701'. [ 904.808492][T15398] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 904.970100][T15398] usb 9-1: unable to get BOS descriptor or descriptor too short [ 904.978707][T15398] usb 9-1: not running at top speed; connect to a high speed hub [ 904.978755][T15398] usb 9-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=11.08 [ 904.997229][T15398] usb 9-1: config 16 has an invalid interface number: 203 but max is 0 [ 904.997258][T15398] usb 9-1: config 16 has no interface number 0 [ 904.997305][T15398] usb 9-1: config 16 interface 203 has no altsetting 0 [ 905.001104][T15398] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.001132][T15398] usb 9-1: Product: ⠉ [ 905.001147][T15398] usb 9-1: Manufacturer: ᐇ [ 905.001184][T15398] usb 9-1: SerialNumber: syz [ 905.069522][ T25] hid-multitouch 0003:0EEF:72C4.001E: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 905.223782][T15398] gspca_main: etoms-2.14.0 probing 102c:6151 [ 905.232800][T26292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.242289][T26292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.302420][T15398] usb 9-1: USB disconnect, device number 25 [ 906.247215][ T25] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 906.398743][ T25] usb 9-1: not running at top speed; connect to a high speed hub [ 906.398792][ T25] usb 9-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 906.399808][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.399832][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 906.399884][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.415044][ T25] uvcvideo 9-1:1.0: Found UVC 1.00 device (0000:d970) [ 906.613125][T26373] syzkaller0: entered promiscuous mode [ 906.618952][T26373] syzkaller0: entered allmulticast mode [ 906.739209][ T25] uvcvideo 9-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 906.739268][ T25] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 906.761983][ T25] usb 9-1: USB disconnect, device number 26 [ 907.166379][ T1221] usb 7-1: USB disconnect, device number 90 [ 909.244613][T26442] vcan1: entered promiscuous mode [ 909.273215][T26442] vcan1: entered allmulticast mode [ 909.950139][T26478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.962472][T26478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.012066][ T1221] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 910.438952][ T1221] usb 9-1: not running at top speed; connect to a high speed hub [ 910.448177][ T1221] usb 9-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 910.512860][ T1221] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.522050][ T1221] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 910.522109][ T1221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.744237][ T1221] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -22 [ 911.009404][T26468] syzkaller0: entered promiscuous mode [ 911.009448][T26468] syzkaller0: entered allmulticast mode [ 911.505695][T26503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4724'. [ 912.351960][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4726'. [ 913.454997][T26528] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4730'. [ 913.483593][T26528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.670456][ T5680] usb 9-1: USB disconnect, device number 27 [ 914.098875][T26554] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4732'. [ 914.844886][T26559] netlink: 'syz.5.4733': attribute type 1 has an invalid length. [ 915.273398][ T31] audit: type=1326 audit(1788907871.335:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26526 comm="syz.2.4730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83fd9e159 code=0x0 [ 915.509546][T26559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.532172][T26568] bond1: (slave geneve2): making interface the new active one [ 915.545904][T26568] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 916.327170][ T5616] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 916.567929][ T5616] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 916.579079][ T5616] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.591017][ T5616] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 916.591071][ T5616] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.591116][ T5616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.774148][ T5616] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 916.782394][ T5616] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 917.004801][T26648] netlink: 'syz.5.4738': attribute type 11 has an invalid length. [ 919.830356][ T5616] usb 9-1: USB disconnect, device number 28 [ 921.479731][T26755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.501662][T26755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.547357][ T5680] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 921.708074][ T5680] usb 9-1: Using ep0 maxpacket: 16 [ 921.720922][ T5680] usb 9-1: unable to get BOS descriptor or descriptor too short [ 921.729305][ T5680] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 921.742860][ T5680] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.742949][ T5680] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 921.742995][ T5680] usb 9-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 921.743036][ T5680] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 921.743077][ T5680] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 97, changing to 7 [ 921.743107][ T5680] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 24929, setting to 1024 [ 921.839525][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.839570][ T5680] usb 9-1: Product: syz [ 921.839602][ T5680] usb 9-1: Manufacturer: syz [ 921.839621][ T5680] usb 9-1: SerialNumber: syz [ 922.480038][T26767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 922.548267][ T5680] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 922.825743][T26767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4765'. [ 922.842661][T26779] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4755'. [ 923.249933][ T5680] usb 9-1: USB disconnect, device number 29 [ 924.524731][T21723] udevd[21723]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.447211][ T5616] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 925.471045][T26822] syzkaller0: entered promiscuous mode [ 925.478380][T26822] syzkaller0: entered allmulticast mode [ 925.610812][ T5616] usb 7-1: Using ep0 maxpacket: 16 [ 925.769369][ T5616] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 925.950664][ T5616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.950709][ T5616] usb 7-1: Product: syz [ 925.950741][ T5616] usb 7-1: Manufacturer: syz [ 925.950760][ T5616] usb 7-1: SerialNumber: syz [ 925.989406][ T5616] usb 7-1: config 0 descriptor?? [ 926.005978][ T5616] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 926.030108][ T5616] usb 7-1: Detected FT-X [ 927.008803][T26822] tipc: Enabled bearer , priority 0 [ 927.048488][T26819] tipc: Resetting bearer [ 927.089342][ T5711] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 927.106760][ T5711] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 927.141964][ T5711] usb 3-1: USB disconnect, device number 27 [ 927.426661][ T5616] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 927.434675][ T5616] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 927.442497][ T5616] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 927.456360][ T5616] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 927.469896][T26819] tipc: Disabling bearer [ 927.504016][ T5616] usb 7-1: USB disconnect, device number 91 [ 927.538213][ T5616] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 927.553627][ T5616] ftdi_sio 7-1:0.0: device disconnected [ 927.827038][ T5711] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 927.988649][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 927.994555][ T5711] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 928.007371][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 928.007430][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.045877][ T5711] usb 3-1: config 0 descriptor?? [ 928.534861][T26840] Bluetooth: hci5: command 0x0406 tx timeout [ 928.558061][ T5616] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 928.708028][ T5616] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 928.719274][ T5616] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.719330][ T5616] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 928.719404][ T5616] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.719451][ T5616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.798757][ T5616] ims_pcu 9-1:1.0: Missing CDC union descriptor [ 928.798897][ T5616] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 928.968761][ T5711] usbhid 3-1:0.0: can't add hid device: -71 [ 928.968893][ T5711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 928.991471][ T5711] usb 3-1: USB disconnect, device number 28 [ 929.276506][ T5616] usb 9-1: USB disconnect, device number 30 [ 929.923906][T26920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 930.125231][T26935] IPv6: addrconf: prefix option has invalid lifetime [ 930.285474][ T5711] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 930.479268][ T5711] usb 3-1: not running at top speed; connect to a high speed hub [ 930.479325][ T5711] usb 3-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 930.501497][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.501543][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 930.501599][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.564119][ T5711] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:d970) [ 931.006608][T26954] syzkaller0: entered promiscuous mode [ 931.006656][T26954] syzkaller0: entered allmulticast mode [ 931.674077][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.682178][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.535516][ T5711] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: -110 (exp. 1). [ 936.559518][ T5711] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 937.975456][ C0] sched: DL replenish lagged too much [ 949.662983][T26840] Bluetooth: hci4: command 0x0406 tx timeout [ 994.110646][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.391524][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.659539][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.675734][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.643899][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.651818][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.014097][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1178.058905][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.071346][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.936770][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1236.943768][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26958 [ 1236.951188][ C1] rcu: (detected by 1, t=10503 jiffies, g=175301, q=732792 ncpus=2) [ 1236.959716][ C1] task:syz.7.4776 state:R running task stack:26312 pid:26958 tgid:26957 ppid:22058 task_flags:0x40054c flags:0x00080003 [ 1236.973274][ C1] Call Trace: [ 1236.976690][ C1] [ 1236.979558][ C1] sched_show_task+0x4aa/0x5f0 [ 1236.984351][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1236.989656][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1236.994878][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 1236.999928][ C1] print_other_cpu_stall+0xfc1/0x1350 [ 1237.005396][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1237.011228][ C1] ? tmigr_requires_handle_remote+0x123/0x480 [ 1237.017379][ C1] rcu_sched_clock_irq+0x9fe/0x10e0 [ 1237.022698][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1237.028357][ C1] ? hrtimer_run_queues+0x95/0x590 [ 1237.033494][ C1] ? acct_account_cputime+0x241/0x270 [ 1237.038890][ C1] update_process_times+0x23b/0x2f0 [ 1237.044112][ C1] tick_nohz_handler+0x38f/0x6b0 [ 1237.049076][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1237.054553][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1237.060038][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1237.065607][ C1] __hrtimer_run_queues+0x371/0xa10 [ 1237.070849][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 1237.075842][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1237.081847][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1237.087515][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1237.093526][ C1] RIP: 0010:stack_trace_consume_entry+0x129/0x280 [ 1237.099971][ C1] Code: 89 c5 e8 ba 44 85 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b 1e 0f 92 c0 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 27 35 0a cc 44 89 [ 1237.119609][ C1] RSP: 0018:ffffc90000a17f38 EFLAGS: 00000287 [ 1237.125693][ C1] RAX: 0000000000000001 RBX: 0000000000000018 RCX: 8000000000000100 [ 1237.133677][ C1] RDX: dffffc0000000000 RSI: ffffffff89f3bd8b RDI: ffffc90000a18040 [ 1237.141707][ C1] RBP: 1ffff9200014300a R08: ffffc90000a18050 R09: 0000000000000017 [ 1237.149697][ C1] R10: ffffc90000a17fd8 R11: ffffffff81b28090 R12: 0000000000000000 [ 1237.157687][ C1] R13: 1ffff92000143009 R14: ffffc90000a18048 R15: ffffc90000a18178 [ 1237.165689][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1237.171884][ C1] ? netlink_release+0x11fb/0x1a80 [ 1237.177039][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1237.182181][ C1] ? netlink_release+0x11fb/0x1a80 [ 1237.187325][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1237.193518][ C1] arch_stack_walk+0x10f/0x150 [ 1237.198308][ C1] ? netlink_release+0x11fb/0x1a80 [ 1237.203455][ C1] stack_trace_save+0xa9/0x100 [ 1237.208249][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1237.213664][ C1] ? __lock_acquire+0x747/0x2de0 [ 1237.218669][ C1] kasan_save_track+0x3e/0x80 [ 1237.223373][ C1] ? kasan_save_track+0x3e/0x80 [ 1237.228245][ C1] ? kasan_save_free_info+0x40/0x50 [ 1237.233471][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1237.238426][ C1] ? kfree+0x1c5/0x650 [ 1237.242522][ C1] ? skb_release_data+0x85e/0xab0 [ 1237.247564][ C1] ? __kfree_skb+0x5d/0x210 [ 1237.252091][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 1237.257574][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 1237.262972][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1237.267844][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1237.272982][ C1] ? nf_hook_slow+0xc5/0x220 [ 1237.277615][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1237.281885][ C1] ? NF_HOOK+0x336/0x3c0 [ 1237.286148][ C1] ? process_backlog+0xa6b/0x18b0 [ 1237.291189][ C1] ? __napi_poll+0xaa/0x330 [ 1237.295720][ C1] ? net_rx_action+0x61d/0xf50 [ 1237.300503][ C1] ? handle_softirqs+0x226/0x860 [ 1237.305469][ C1] ? do_softirq+0x77/0xd0 [ 1237.309821][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 1237.315227][ C1] ? cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 1237.321590][ C1] ? nl80211_netlink_notify+0x35d/0x860 [ 1237.327174][ C1] ? notifier_call_chain+0x1a5/0x3d0 [ 1237.332517][ C1] ? blocking_notifier_call_chain+0x6a/0x90 [ 1237.338442][ C1] ? netlink_release+0x11fb/0x1a80 [ 1237.343748][ C1] kasan_save_free_info+0x40/0x50 [ 1237.348802][ C1] __kasan_slab_free+0x5c/0x80 [ 1237.353591][ C1] kfree+0x1c5/0x650 [ 1237.357521][ C1] ? skb_release_data+0x85e/0xab0 [ 1237.362576][ C1] skb_release_data+0x85e/0xab0 [ 1237.367471][ C1] __kfree_skb+0x5d/0x210 [ 1237.371829][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1237.377146][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1237.382891][ C1] ? lock_acquire+0x115/0x350 [ 1237.387592][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1237.392473][ C1] nft_synproxy_do_eval+0x335/0x550 [ 1237.397696][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1237.403446][ C1] ? __lock_acquire+0x747/0x2de0 [ 1237.408416][ C1] nft_do_chain+0x48d/0x1b10 [ 1237.413090][ C1] ? __lock_acquire+0x747/0x2de0 [ 1237.418051][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1237.423103][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1237.427915][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1237.432877][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1237.438356][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1237.443153][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1237.448551][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1237.454035][ C1] nf_hook_slow+0xc5/0x220 [ 1237.458576][ C1] NF_HOOK+0x21f/0x3c0 [ 1237.462671][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1237.468674][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1237.473285][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1237.477896][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1237.483904][ C1] ? ip_local_deliver+0x113/0x190 [ 1237.489223][ C1] NF_HOOK+0x336/0x3c0 [ 1237.493319][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1237.498449][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1237.502625][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1237.507234][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1237.512367][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1237.517069][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1237.521589][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1237.526121][ C1] process_backlog+0xa6b/0x18b0 [ 1237.530994][ C1] ? process_backlog+0x3de/0x18b0 [ 1237.536050][ C1] __napi_poll+0xaa/0x330 [ 1237.540412][ C1] net_rx_action+0x61d/0xf50 [ 1237.545060][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1237.550252][ C1] handle_softirqs+0x226/0x860 [ 1237.555131][ C1] ? do_softirq+0x77/0xd0 [ 1237.559491][ C1] ? cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 1237.565845][ C1] do_softirq+0x77/0xd0 [ 1237.570022][ C1] [ 1237.572959][ C1] [ 1237.575900][ C1] __local_bh_enable_ip+0x100/0x140 [ 1237.581123][ C1] cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 1237.587308][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 1237.592624][ C1] nl80211_netlink_notify+0x35d/0x860 [ 1237.598018][ C1] ? nl80211_netlink_notify+0x75/0x860 [ 1237.603516][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1237.608669][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1237.614426][ C1] netlink_release+0x11fb/0x1a80 [ 1237.619416][ C1] ? netlink_release+0x106/0x1a80 [ 1237.624568][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1237.629885][ C1] ? down_write+0x16b/0x200 [ 1237.634460][ C1] ? __pfx_down_write+0x10/0x10 [ 1237.639355][ C1] __sock_release+0xa0/0x1f0 [ 1237.643975][ C1] ? __pfx_sock_close+0x10/0x10 [ 1237.648881][ C1] sock_close+0x1c/0x30 [ 1237.653062][ C1] __fput+0x418/0xa50 [ 1237.657075][ C1] task_work_run+0x1d9/0x270 [ 1237.661688][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1237.666823][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1237.671970][ C1] do_exit+0x73a/0x2360 [ 1237.676166][ C1] ? __pfx_do_exit+0x10/0x10 [ 1237.680786][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1237.685853][ C1] do_group_exit+0x22d/0x2f0 [ 1237.690611][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1237.695801][ C1] get_signal+0x121b/0x12c0 [ 1237.700301][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1237.705898][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1237.712052][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 1237.717408][ C1] ? rcu_is_watching+0x16/0xb0 [ 1237.722159][ C1] do_syscall_64+0x328/0x520 [ 1237.726734][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.732791][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1237.737448][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.743332][ C1] RIP: 0033:0x7f55b559e159 [ 1237.747733][ C1] Code: Unable to access opcode bytes at 0x7f55b559e12f. [ 1237.754729][ C1] RSP: 002b:00007f55b6470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1237.763134][ C1] RAX: fffffffffffffe00 RBX: 00007f55b5825fa0 RCX: 00007f55b559e159 [ 1237.771085][ C1] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1237.779033][ C1] RBP: 00007f55b563503b R08: 0000000000000000 R09: 0000000000000000 [ 1237.786980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.794927][ C1] R13: 00007f55b5826038 R14: 00007f55b5825fa0 R15: 00007f55b594fa48 [ 1237.802887][ C1]