last executing test programs: 16m47.821517414s ago: executing program 1 (id=3941): unshare(0x22020400) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 16m47.731909313s ago: executing program 1 (id=3943): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c100000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000070d090041c20949e0afc65b20000000"], 0x40}, 0x20002800) socket$key(0xf, 0x3, 0x2) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x8001, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x200c0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="9a", 0x1, 0x4, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @random='\b\x00'}, 0x14) 16m47.625243913s ago: executing program 1 (id=3944): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write(r1, &(0x7f0000000000)="e10c", 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 16m45.924053285s ago: executing program 1 (id=3950): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00!', 0x5ea}], 0x1}}], 0x1, 0x20008800) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) name_to_handle_at(r4, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000680)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x7, 0x7, 0x9, 0x8c, 0x1}}, &(0x7f00000006c0), 0x200) syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1a0000001900150000000000ffffffff0a"], 0x40}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)=@newchain={0x3cc, 0x64, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {0x2, 0xfff2}, {0x6, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff336}, @TCA_RATE={0x6, 0x5, {0x3, 0x6d}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xcc, 0x2, [@TCA_CGROUP_EMATCHES={0xc8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7}, {0x4dc4, 0x2, 0x9ca, 0x5}}}, @TCF_EM_META={0xa4, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x1}, {0x4, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="c8f0bceda26f65e3", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='r', @TCF_META_TYPE_VAR="79baf6a501", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x2}, {0x2a0, 0x1}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a6", @TCF_META_TYPE_VAR="8cd0ea9efac0df", @TCF_META_TYPE_VAR='-']}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="c425fa7f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xad78, 0x9, 0x1}, {0x7, 0x7f, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x3, 0x1}, {0x5, 0x4, 0x2}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="030604126481", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='K', @TCF_META_TYPE_VAR="f00bbd37", @TCF_META_TYPE_INT=0x1]}]}}]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x1b}]}}, @TCA_RATE={0x6, 0x5, {0xdf, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x270, 0x2, [@TCA_BASIC_EMATCHES={0xf8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xe5, 0x7, 0x5}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3b2e}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="75f6d29ba0d0f07947", @TCF_META_TYPE_VAR="7e6aa0b4fe02c4e5", @TCF_META_TYPE_VAR="da3f"]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="395c9255", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5ea6729879", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d4d80ac35e87b1ad6b"]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c0d05f7d", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ed0aae0057a7001a16", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="badcd2020f2c0ec124f1", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="7e83a40e48c8da7901"]}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x60}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x70}, {0x1, 0x40, 0x0, 0x2, 0x8, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x5}, {0xfff, 0x6, 0x2, "d56b23609678"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}]}, @TCA_BASIC_EMATCHES={0x164, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x4}, {0x9, 0x371, 0x231, 0x0, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0xd8, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb9}, @TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "b721b4120917a2179f287a698efbbc554fe180816373794eb8694e85c650e857ca4cd5cf178869f30071792153a13a27de5f5680036348488cb4e4e2b20cc3c53007b6e3358660646482dd33b009f25018bd87bb320c5e250c0502ff65d2de2a54c146aa731f1e1fec329ecd7e3d37c183c4e507a556b540696f2809d0af4d8abad5fff1752a9082d98f4146d43d3af266bedddc9600e86da753e2a5c518ef6f09400bd85f993c6c4a1817c326"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x3, 0x9a}, {0x1, 0x3, 0x7, 0x9}}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x400, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x88, 0x7, 0x9}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xf, 0x2, 0x5843}, {0x4, 0x7, 0x0, "dfc49b63b91379"}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x355a67c5d1d3a0ab}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16m45.768635857s ago: executing program 1 (id=3952): open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0xf5, 0x0, 0x197, 0x88}}, 0x50) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x2121, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x9}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 16m45.604543908s ago: executing program 1 (id=3953): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pselect6(0x40, &(0x7f0000001380)={0x6, 0x7, 0x9, 0x5d7, 0x6, 0x2a, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) 16m45.52290085s ago: executing program 32 (id=3953): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pselect6(0x40, &(0x7f0000001380)={0x6, 0x7, 0x9, 0x5d7, 0x6, 0x2a, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) 6m58.056439504s ago: executing program 5 (id=6673): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x20002880) 6m57.928026499s ago: executing program 5 (id=6675): r0 = socket$inet6(0xa, 0x3, 0x8070) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x40}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0xfad}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x70}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, &(0x7f0000000240)="f30f09f466b9800000c00f326635002000000f30f20f5e4300672e0ff113b808008ec8260fc729d266bd0f20e06635400000000f22e00fc735", 0x39}], 0x1, 0x1, &(0x7f0000000600)=[@dstype3, @dstype0={0x6, 0xa}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @private}, &(0x7f00000004c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={@local, @local, @mcast2, 0x1, 0x6, 0x0, 0x0, 0xe, 0x2220080, r5}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x20, 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r7, 0x80000000) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000700)=[{r8, 0x2240}, {r6, 0x508}, {r8, 0xac9beb5903491330}, {r8, 0x60}, {0xffffffffffffffff, 0x2020}], 0x5e, 0xb8) read$FUSE(r8, &(0x7f0000004440)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0x1e, 0x8800, 0x0, 0x0}], 0x1}) move_pages(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000000)=[0x1, 0x1], &(0x7f00000000c0), 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf2501000000000000000b000000000c001473797a31000000003284701899be6bbf24673b1d36f08fd6bc0710525e37e73b60cee9850bfaa3e033110b3bc68e12d7cbf33e0d2b989b4e986bf97b5261d2f609dce04205b1c32deb45"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x400c814) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40046201, &(0x7f0000000180)='/dev/dma_heap/system\x00') r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0xe, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x4}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6, 0x4, 0x8, 0x8, 0x8, 0x57caa3fd, 0x6, 0x100}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x20008850) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0) 6m56.387937923s ago: executing program 5 (id=6690): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0xc, 0x2}, {0x1ff, 0xf}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000000)={0x7, 0x4, 0xe4a}) 6m56.164791467s ago: executing program 5 (id=6692): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES8=r0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r1}, {@void, @actul_num={@val=0x21, 0x2, 0x47}}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m56.100662789s ago: executing program 5 (id=6693): syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@generic={0x29, "d42ce06ce4658b7c2a49a0d13284052968e5492c450fe874afa15ecd6e37a76f5253b9a10b23bed5b8b7215aa1d44a22566dd729405de6ed4f708198c116a6a84dca99fbed98b760a9a2b91f4b3578f1aa6129a6aa0de7cb6ad7729a557cf7f31918ef47258cf9d6076fd4a1ddc9eba89df534c9b29aae10380606043b12"}, 0x80) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20001f, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@rr={0x7, 0x3, 0xfe}]}}}}}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb8, 0x0, 0xfffffffffffffff8, [{{0x6, 0x2, 0x1, 0xffffffffffffffff, 0xc, 0x8, {0x5, 0x4, 0x3, 0x0, 0x28, 0x7ff, 0xc2, 0xce1, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x6, 0x81}}, {0xffffffffffffffff, 0x7, 0xb, 0x7, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2040002, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB="2c67726ff5705f69773daa9be9d3f4f23a39ec2b8c9e06", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000a00,max_read=0x0000000000000002,max_read=0x0000000000000001,default_permissions,default_permissions,smackfsfloor=\x00,seclabel,\x00']) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) syz_open_dev$vbi(0x0, 0x3, 0x2) r6 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1, 0x6, 0xc0, 0x20, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x416}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) 6m55.783682121s ago: executing program 5 (id=6694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000087c0), 0x0, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff02000000000000000000"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000200), 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) eventfd(0x7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x25c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5d8319ab1a92f001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c1) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r12, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 6m55.522430719s ago: executing program 33 (id=6694): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000087c0), 0x0, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r6, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000200), 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r8, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) eventfd(0x7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x25c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5d8319ab1a92f001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c1) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r12, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 2m44.468845905s ago: executing program 6 (id=8019): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x7}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24048043}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x24044004) 2m44.24970987s ago: executing program 6 (id=8021): io_setup(0x3, &(0x7f0000000040)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000909010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000400)="069c5c59e710b934ca16bf216d5fba3ec222630b17f848bcacbc872e669cd750703f38be81d790a12287c62b04921acc4302a123b66dff01000000000000af1abe3d2a2ede", 0x45) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x6, 0x7, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b42037a93c7240065f81be01177de1d1bea000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000002]}}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2a, 0xffffff7f, {0x0, 0x0, 0x0, r5, {0x10, 0xfff1}, {0xffff, 0x4}, {0x0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r9, 0xa94000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0xb, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 2m43.832252652s ago: executing program 6 (id=8025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001004543d21002bbd7000f9d3df2500000000", @ANYRESOCT=r0, @ANYBLOB="9a430100000000001400168010000180fbff0600ffffffff0200000014000300776c616e3000"], 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x4040) r1 = socket$kcm(0xa, 0x3, 0x73) lsetxattr$security_capability(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "1dab23f8", {0x1, 0x6, 0x8, 0x1, 0x1}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0xfffffffffffffffd) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x29, 0xb, "a872"}], 0x18}, 0x0) 2m43.26181696s ago: executing program 6 (id=8028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) 2m43.260556075s ago: executing program 6 (id=8029): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270010084600003f00002700008470783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='syzkaller1\x00', 0x2, &(0x7f0000000400)={@align=0x9, {0x0, 0x7, 0x1, 0x8}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x40}) r5 = io_uring_setup(0x6f36, &(0x7f0000000340)={0x0, 0x5a3f, 0x8000, 0x8, 0x3d2, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x178) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) 2m42.980833776s ago: executing program 6 (id=8032): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffffffffff1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x5, 0x3, 0x3, 0x6, 'syz1\x00', 0x101}, 0x0, [0xa9, 0x8001, 0x7, 0x10, 0x1, 0x8, 0x101, 0x5, 0x7, 0x3, 0x0, 0x1, 0x5, 0x1, 0x10, 0x9, 0xa60, 0x7, 0x9, 0x2, 0x9, 0x7fffffff, 0x0, 0x4, 0x2, 0x7, 0x3b2, 0xffffffffffffffff, 0x7f, 0x200, 0x3, 0x5, 0x5, 0x2, 0x4070000000000000, 0x6, 0xd, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0xffffffffffffc4c0, 0x9, 0x9, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x3, 0x1586, 0x6, 0x8000000000000001, 0x100000000, 0x4, 0x0, 0x1, 0xbce0, 0x3, 0x78, 0x6, 0x24000, 0x10, 0x7, 0x1004, 0x6, 0x100000001, 0x101, 0x80000000, 0x6, 0x0, 0x800, 0x8, 0x2, 0x3, 0x100, 0xa26, 0x3, 0x3, 0x1, 0x5d65740b, 0x2, 0xc, 0x5, 0x2, 0x8, 0x4, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x1, 0x9, 0x9, 0x200, 0x5, 0xff, 0x9, 0x90ca, 0x6, 0xfffffffffffffffd, 0xffffffff, 0x10001, 0x3, 0x2, 0x0, 0x5, 0x1, 0x1, 0x6eef, 0xffff, 0x0, 0x193, 0x3, 0x9, 0x3, 0x6, 0x80000000, 0x1, 0xffff, 0xc6, 0x5ab7, 0x5]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m42.70123836s ago: executing program 34 (id=8032): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffffffffff1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x5, 0x3, 0x3, 0x6, 'syz1\x00', 0x101}, 0x0, [0xa9, 0x8001, 0x7, 0x10, 0x1, 0x8, 0x101, 0x5, 0x7, 0x3, 0x0, 0x1, 0x5, 0x1, 0x10, 0x9, 0xa60, 0x7, 0x9, 0x2, 0x9, 0x7fffffff, 0x0, 0x4, 0x2, 0x7, 0x3b2, 0xffffffffffffffff, 0x7f, 0x200, 0x3, 0x5, 0x5, 0x2, 0x4070000000000000, 0x6, 0xd, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0xffffffffffffc4c0, 0x9, 0x9, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x3, 0x1586, 0x6, 0x8000000000000001, 0x100000000, 0x4, 0x0, 0x1, 0xbce0, 0x3, 0x78, 0x6, 0x24000, 0x10, 0x7, 0x1004, 0x6, 0x100000001, 0x101, 0x80000000, 0x6, 0x0, 0x800, 0x8, 0x2, 0x3, 0x100, 0xa26, 0x3, 0x3, 0x1, 0x5d65740b, 0x2, 0xc, 0x5, 0x2, 0x8, 0x4, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x1, 0x9, 0x9, 0x200, 0x5, 0xff, 0x9, 0x90ca, 0x6, 0xfffffffffffffffd, 0xffffffff, 0x10001, 0x3, 0x2, 0x0, 0x5, 0x1, 0x1, 0x6eef, 0xffff, 0x0, 0x193, 0x3, 0x9, 0x3, 0x6, 0x80000000, 0x1, 0xffff, 0xc6, 0x5ab7, 0x5]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 19.50795525s ago: executing program 7 (id=8677): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0xdd, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaae7d1aaaaaa86dd6009000000000000008000000000f100000000000000090000000000aa4e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b400b3369040803700000000"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r6, 0x80044dfc, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) inotify_init() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x3}}, 0x10) sendmsg$key(r0, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRESHEX=r2, @ANYRES64=r6, @ANYRESDEC=r0], 0x38}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r9, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r9, &(0x7f0000000180)="5e3d10", 0x3, 0x3b00, 0x0, 0x0) 18.756814496s ago: executing program 7 (id=8682): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000200)='[\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0x8000]}, &(0x7f00000004c0), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r0}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f000001fac0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000570008001340"], 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x7, 0xd2, 0x20000, {r5, r6/1000+60000}, {0x77359400}, {0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "ed32c7ec9a8e6df4"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x19) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17.837982952s ago: executing program 7 (id=8684): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x1, 0x8, 0x401, 0x100}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9182909094bf70e0dd038e7ff7fc6e5539b324c078b089b32353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef329520100ffe8d178708c523c921b1b5d50300d074c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0xb0002000}) 17.656126542s ago: executing program 7 (id=8686): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r1 = open(0x0, 0x60841, 0x12f) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket(0x2, 0x80805, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r5, 0x400, 0x112}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r5, 0x5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) sendto(r3, &(0x7f0000000100)="d6d9b2c00cdc115fbcfaa6289f8ec8a562a62e1c27f6a7cf87012730844f8020288d6e628527de753a464a24ace1", 0x2e, 0x40000, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0xfb, 0x7, "75d706064245ef308d8be42f4d757b2d4bad799dd5c276622ad869c322a62f6e8086abdd94e5c72a946be90435a8801f28ea592c440e492314775e5cbb6994", 0x15}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100ab51a0407b0500000000000000010902120001200000000904", @ANYRES32, @ANYRES16=r6], 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.316832764s ago: executing program 7 (id=8693): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r5}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r9) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 15.974873897s ago: executing program 7 (id=8695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$tipc(0x1e, 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYRESHEX], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) 15.801623149s ago: executing program 35 (id=8695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$tipc(0x1e, 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYRESHEX], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) 12.956402897s ago: executing program 4 (id=8706): socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x67, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xc000, 0x2000000a, 0x10001, 0x2, 0x0, [{0x2, 0x3, 0x87, '\x00', 0x9}, {0x0, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x5, 0xc, '\x00', 0x9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd9, 0xf1, '\x00', 0x7f}, {0x3, 0x8, 0xc2, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x83, '\x00', 0x2}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x44, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xf6, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x81, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x42, '\x00', 0x18}, {0x5, 0x7, 0x2, '\x00', 0xc}, {0x7, 0x1, 0xc}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x1, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x81, 0x4, '\x00', 0x8}]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e"], 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x80000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x109001) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000001, 0x400002) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) capset(0x0, &(0x7f0000000080)={0x9, 0x9, 0x3, 0x12400082, 0xffffff7f, 0x7196}) r9 = syz_io_uring_setup(0x18da, 0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000240)={0x7fffffff, 0x1}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(r8) 9.775309223s ago: executing program 4 (id=8715): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x26, 0x6, 0x8, 0x10, 0x3}, 0x21, &(0x7f0000000180)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x7f, 0xf0f, 0x8000, [0x30, 0x30, 0x0, 0xff0030]}]}, 0x2, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2409}}, {0xde, &(0x7f0000000900)=@string={0xde, 0x3, "ebb69c3c12e827a3ddd26540b6a803e89050357e17b2f531776e074c0b5bc508acd7964740fe0915deabe35a7d2067207ba9b7c4cc6e321985549ce7e1034c6dbe5dac1787e58e5506428d1b6661395cf7425a5db869aa13215bf3482fcfc5c831c52e2714a6298c504e0dbe8ec4186e70e486a7a98f44a739b268782ad208383e18e7a70660cf2e69e4a8f048714bc06e5be8ebd99bbcc59c9124fc3149bc0cc7b4e8003f280dda1ad130fecd80a9ead4e7c8403c125cf6d230519fa2ba10bf6dc47d7e8aaa6750f1388cd3fea329e9f3d03b5974a7edc70254abc5"}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c010000130005002cbd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="12030000000d000008000f0002000000c80016801c0001800c00090003000000060000000c00090002000000070000006800018014000a000800000000000000070000000000000010000600dc010000040000000900000d18000c8014000100ffffffffba0700000001000088a800000c000900040000000e0000000c000700c90800000300000010000200990600002802000001000000400001802c000c8014000100010400005d030000060000008100000014000100050000005b0300007f00000088a800001000020010000000ff0c00000100000008002e000300000008001f00ff000000"], 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = syz_io_uring_setup(0x39db, &(0x7f0000000580)={0x0, 0xbbda, 0x13108, 0x0, 0x0, 0x0, r2}, &(0x7f0000000540), &(0x7f00000000c0), &(0x7f0000000280)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414761, 0x0, 0x2, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xe0, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)='x', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @private1, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 6.707428813s ago: executing program 4 (id=8724): socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x810}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x42) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.036087691s ago: executing program 0 (id=8727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x3, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000040)={0x18, r5}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x44, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[@hopopts={0x3c}, @routing={0x32, 0x4, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.382935323s ago: executing program 3 (id=8736): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100), 0x8) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x16}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000240)=0x3ff) write$ppp(r6, &(0x7f0000000280)="1094", 0x2) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) r7 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @sliced={0x7, [0x7f, 0xee, 0x10, 0x0, 0x4, 0x9200, 0x4, 0x9, 0x1, 0x3, 0xff, 0x4, 0x2, 0x0, 0x1ff, 0x9, 0xe80, 0x800, 0x4, 0x5dfe, 0x8, 0x0, 0x73c1, 0x8bd, 0x8001, 0x8, 0x9, 0x30, 0xca9, 0x6, 0xe9f0, 0x6, 0x3, 0x401, 0x7f, 0xc6, 0xa7bd, 0xb35, 0x40, 0x7, 0x95ce, 0xc, 0x9, 0x3, 0x8000, 0x1, 0x2], 0x101}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000006740)=ANY=[@ANYBLOB="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"], 0x2784}, 0x1, 0x0, 0x0, 0x4000}, 0x40000811) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xfffffffe, 0x34324258, 0x0, 0x0, 0x5, 0x5, 0xfffffffe, 0x0, 0x6}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') 3.326727636s ago: executing program 4 (id=8738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (fail_nth: 6) 2.62409384s ago: executing program 0 (id=8739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000480)={0x4, 0x0, [{0x40000080, 0x0, 0x9}, {0xe2, 0x0, 0x10000}, {0x294, 0x0, 0x6}, {0x411, 0x0, 0x3}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1000000000000212, 0xc002a0, 0xcbea) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x4, @mcast2, 0x7}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fc}], 0x38) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x1}) sendto$inet6(r4, &(0x7f0000000a40)="003ef996", 0x4, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1, &(0x7f00000009c0)=""/24, 0x18}, 0x6}], 0x1, 0x140, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x72d8, &(0x7f0000000000)={0x30, 0x0, 0x80}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="8d4b", 0x2}, {0x0}], 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x1, 0x4, 0xffffffff, 0x6, 0x101, r11}) 2.552297741s ago: executing program 2 (id=8740): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4c20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x3, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x5}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0x4}}, 0xe4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x2000000) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.551697627s ago: executing program 4 (id=8741): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5a10c0, 0x0, 0x10}, 0x18) getdents(r0, &(0x7f0000000140)=""/2, 0x2) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="60000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="50100000000000002800128008000100677265001c00028008000700ac1414aa0600030081"], 0x60}}, 0x4040000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.340726192s ago: executing program 2 (id=8742): socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x810}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.329836194s ago: executing program 4 (id=8743): socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x2d, 0x34, 0x67, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x9, [@multicast2, @loopback]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xc000, 0x2000000a, 0x10001, 0x2, 0x0, [{0x2, 0x3, 0x87, '\x00', 0x9}, {0x0, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x5, 0xc, '\x00', 0x9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd9, 0xf1, '\x00', 0x7f}, {0x3, 0x8, 0xc2, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x83, '\x00', 0x2}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x44, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xf6, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x81, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x42, '\x00', 0x18}, {0x5, 0x7, 0x2, '\x00', 0xc}, {0x7, 0x1, 0xc}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x1, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x81, 0x4, '\x00', 0x8}]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e"], 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x80000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x109001) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000001, 0x400002) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) capset(0x0, &(0x7f0000000080)={0x9, 0x9, 0x3, 0x12400082, 0xffffff7f, 0x7196}) r9 = syz_io_uring_setup(0x18da, &(0x7f00000005c0)={0x0, 0x2, 0x4, 0x2000, 0x1e5}, 0x0, &(0x7f0000000340), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000240)={0x7fffffff, 0x1}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(r8) 2.112201259s ago: executing program 0 (id=8744): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0xf, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.095251997s ago: executing program 0 (id=8745): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r5}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r9) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.931920338s ago: executing program 0 (id=8746): syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.881036874s ago: executing program 0 (id=8747): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa01f, 0x100000000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="0700000000000a934f84b0489379"], 0x0, 0x0}) 1.060317796s ago: executing program 3 (id=8748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x13}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.059858918s ago: executing program 3 (id=8749): io_setup(0x5, &(0x7f0000000180)) r0 = inotify_init() io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x400000000000000}]) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900"], 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.050831334s ago: executing program 8 (id=8750): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) 898.725675ms ago: executing program 8 (id=8751): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) 845.302032ms ago: executing program 3 (id=8752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x8200) r2 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_notify(r2, &(0x7f0000000a00)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/144, 0x90}], 0x1}, 0x226d}], 0x1, 0x40010143, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7004fcdbdf251a00000005009200060000000500920020002000080001006c00000008009a0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4a8d48128df8d0bd}, 0x1) unshare(0x22020400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001680)={r1, &(0x7f0000000680)="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"}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000003900)={{0xffffffffffffffff, &(0x7f0000000000)='}!\\-)\x00', 0x505601, &(0x7f0000000280)={@_ha_fsid={[0x3, 0x9]}, {0x2b8, 0x200, 0x1, 0x400000000000082}}, 0x405, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x82}, 0x2, &(0x7f0000000640)=[{0x1, 0x41ec, &(0x7f00000002c0)='}!\\-)\x00', &(0x7f0000000440)="afc29d2dbc6e0590cd471c4b237fbdb8c0098f1d772df7e4ec452fed510b7e6284ff35", 0x23, 0x18}, {0x2, 0x6, &(0x7f0000000480)='/dev/vcs#\x00', &(0x7f00000005c0)="ff7145ed19b6d7d40cff3de2323fd1246b09bb887fb00cdd208e0ddd3096bf34354269fe560d81be5054de0c604905fa41dcb2e7a9840ef014eaf82c157b0d806246f1defca142cf28434e09d4e70dc74164088b38f34580186f", 0x5a, 0x12}]}) fcntl$addseals(r8, 0x409, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 729.071939ms ago: executing program 2 (id=8753): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x22}, 0x80000001}, 0x1c) fsopen(&(0x7f00000040c0)='bpf\x00', 0x0) open(0x0, 0xd0a80, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}, 0xfffffffc}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="2feebe8d8815cfd656d01482831f4b036a7bb40c6782cbb5dafe62c32eb20850b8b68e06", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x1, 0x61, &(0x7f0000000040)={0x40, 0xd, 0x17, 0xff81}, 0x8, 0x28, 0x4, 0x0, 0x4bf, 0x7fff, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000000)) getsockopt(r6, 0x67, 0x7, &(0x7f00000003c0)=""/209, &(0x7f00000004c0)=0xd1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6f0) 616.260699ms ago: executing program 8 (id=8754): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x105a00, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=[{'OGAIN', @val={' \'', 'CD Capture Switch'}}, {'SYNTH', @void}, {'VIDEO', @val={' \'', 'Mic Capture'}}, {'DIGITAL2', @void}, {'LINE3', @void}, {'LINE1', @void}, {'DIGITAL1', @val={' \'', 'Mic Capture Switch'}}], 0xa6) close(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x6) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r1, 0xc9ecc000) r3 = memfd_create(&(0x7f00000001c0)='}+#\x00', 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xafb) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000240)=0xd, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x3, &(0x7f0000000300)) r5 = signalfd4(r1, &(0x7f0000000340)={[0xc]}, 0x8, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={0x0, 0x6, 0x5, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000780)={r6, 0x3, 0x1, [0x7, 0x8, 0xbe, 0x4, 0x4], [0x3, 0x7fff, 0xc2cf, 0x7, 0x101, 0x4, 0x40, 0x9, 0x8001, 0x5, 0x8, 0x101, 0x0, 0xf, 0x3, 0x6, 0x4, 0x3f5, 0x7, 0xfffffffffffff800, 0x4, 0x5, 0x2, 0x7fc00000000, 0x3, 0x8001, 0x8001, 0x7, 0x1, 0x2, 0x4, 0x4, 0x3, 0x8, 0x3, 0xffffffff, 0xe, 0x1, 0xf, 0x1, 0x4, 0x3, 0x6, 0x2, 0x7, 0x4, 0x13, 0xfffffffffffffffa, 0x2, 0xffffffff, 0x9, 0x3, 0x4, 0x8, 0x9, 0x1, 0x7ff, 0x3, 0xa, 0x1ff, 0x1113, 0x401, 0x90d, 0x8, 0x6, 0x72f, 0x0, 0xa, 0xea0, 0x3, 0x1, 0x0, 0x6, 0x9, 0x5, 0x3ff, 0x2, 0x3, 0x0, 0x7, 0x49, 0x6, 0xffffffff, 0x9, 0x16d000000000, 0x80000000, 0x3, 0x3, 0x81, 0x3, 0x5b92, 0x0, 0x7, 0x80000000, 0xffffffff, 0x0, 0x8, 0x5, 0x1, 0x4, 0x100000000, 0x5, 0x1ff, 0x7, 0x8, 0x8, 0x3, 0x2, 0xffff, 0x6, 0x6, 0x9, 0xfffffffffffffff2, 0xa2, 0x0, 0x1, 0x5, 0x9, 0x1, 0x101, 0xdfa4]}) fcntl$setflags(r3, 0x2, 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000bc0)) memfd_create(&(0x7f0000000cc0)='&.+\x00', 0x6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x6af67ec153d0330b, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000000f40)) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x15, 0x20, 0x70bd26, 0x25dfdbff, {0x9, 0xdc}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "b1"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c4}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r10, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc0}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xe}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x31}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1caf1827ae78e95f}, 0x4000000) 568.212603ms ago: executing program 2 (id=8755): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0xf, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 499.010484ms ago: executing program 3 (id=8756): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r5}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r9) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 472.345368ms ago: executing program 2 (id=8757): syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 396.47717ms ago: executing program 8 (id=8758): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd110f31ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d9b0aa6453cbca85e30a02db8f48b9eb10526d00f4e90971d6c844fb8b2fb70ec826465726fb78cc47db98cf04ba351e13fcd9ab1c4c2a18f2fb931951347528d02aa982f43adc7275cf628880d83ec1ec3f1f408d21a04e388b2460a6f33071ba190c3538bcc29d16bb0119570263af15bd2ae5f09c5d3177c3bf98da9b7", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'blake2b-512-generic\x00'}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) write$dsp(r4, &(0x7f0000000100)="9c7d56", 0x3) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10004) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000180)=0x5) dup2(r2, r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/time\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x40, r10, 0x101, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 372.899228ms ago: executing program 2 (id=8759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000a40"], 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9, 0x9, 0x5, 0x7, 0x52a9}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00df250700"/20, @ANYRES32=0x0, @ANYBLOB="31020500001002000800230002000000080004000100000008000d00e62200000a0001000180c2000002"], 0x4c}, 0x1, 0x0, 0x0, 0x20044850}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1, 0x0, 0x0, 0xb00}, 0x4) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53fb393b4af022a9401078500000083f6"], 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r14 = socket$inet(0xa, 0x801, 0x84) connect$inet(r14, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 205.341233ms ago: executing program 3 (id=8760): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000280)={0xa4, 0x0, 0x1}) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x1c}}, 0x440d1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4028081) (async) socket$packet(0x11, 0x0, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000", @ANYRES32=r2, @ANYBLOB="080002800400338008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB='\b'], 0x90}}, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280), 0x48}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000c0) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000100000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01030000000000000000070000090900020073797a3100000000090001"], 0x12c}}, 0x0) (async) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000400)) (async) socket$igmp(0x2, 0x3, 0x2) 116.100467ms ago: executing program 8 (id=8761): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x1000000, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x7}, 0x76e0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa0f, 0x2d}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}}, 0x58) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) 0s ago: executing program 8 (id=8762): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x104c, 0x7, 0x2a}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x3, 0x0, @loopback, 0x8}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) socket$qrtr(0x2a, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4m?q\xc1\xea\x7f\x94Z7`_4t\xcdE\x96\x06o\x1aa\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00;\xe9\xcd\x81\x8d\xed\x9a5 \x00\x00', 0x2) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f00005a0000/0x2000)=nil, 0x2000, 0xd) mlock2(&(0x7f00008a5000/0x4000)=nil, 0x4000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ftruncate(r3, 0x35f5) socketpair$unix(0x1, 0x285d320665603860, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x22, &(0x7f0000000880)=""/50, &(0x7f00000008c0)=0x32) fcntl$addseals(r1, 0x409, 0x7) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) kernel console output (not intermixed with test programs): T28458] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1768.261607][T28458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.261642][T28458] usb 5-1: Product: syz [ 1768.261661][T28458] usb 5-1: Manufacturer: syz [ 1768.261679][T28458] usb 5-1: SerialNumber: syz [ 1768.263493][T28458] usb 5-1: config 0 descriptor?? [ 1768.264226][T31901] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1768.273315][T28458] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1768.305440][T28455] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1768.436003][T28455] usb 4-1: device descriptor read/64, error -71 [ 1768.549082][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1768.559081][T28441] usb 3-1: USB disconnect, device number 27 [ 1768.595639][T28442] gspca_ov534_9: Unknown sensor 0000 [ 1768.595709][T28442] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1768.637348][T28442] usb 1-1: USB disconnect, device number 38 [ 1768.677693][T28458] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1768.707751][T28458] usb 5-1: USB disconnect, device number 126 [ 1768.744148][T28458] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1768.779002][T28458] cypress_m8 5-1:0.35: device disconnected [ 1768.906332][T28455] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1769.035476][T28455] usb 4-1: device descriptor read/64, error -71 [ 1769.147597][T28455] usb usb4-port1: attempt power cycle [ 1769.162901][T31916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8434'. [ 1769.192648][T31916] macvtap2: entered promiscuous mode [ 1769.207795][T31916] macvtap2: entered allmulticast mode [ 1769.224691][T31916] bridge0: entered allmulticast mode [ 1769.493998][T31929] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1769.497525][T28455] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 1769.536165][T28455] usb 4-1: device descriptor read/8, error -71 [ 1769.719280][T28441] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1769.788728][T28455] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1769.836514][T28455] usb 4-1: device descriptor read/8, error -71 [ 1769.890713][T28441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.928655][T28441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.957080][T28441] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1769.966605][T28455] usb usb4-port1: unable to enumerate USB device [ 1769.997690][T28441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.025048][T28441] usb 1-1: config 0 descriptor?? [ 1770.136475][T28444] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1770.285569][T28442] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1770.327014][T28444] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1770.356999][T28444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1770.381216][T28444] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1770.403080][T28444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.431704][T28444] usb 5-1: Product: syz [ 1770.446726][T28444] usb 5-1: Manufacturer: syz [ 1770.463169][T28444] usb 5-1: SerialNumber: syz [ 1770.481428][T28444] usb 5-1: config 0 descriptor?? [ 1770.486599][T28442] usb 8-1: Using ep0 maxpacket: 8 [ 1770.498845][T28442] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.520394][T28444] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1770.532029][T28442] usb 8-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 1770.546162][T28442] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.565521][T28442] usb 8-1: Product: syz [ 1770.570717][T28442] usb 8-1: Manufacturer: syz [ 1770.582309][T28442] usb 8-1: SerialNumber: syz [ 1770.761906][T28441] hid_parser_main: 40 callbacks suppressed [ 1770.761939][T28441] steelseries 0003:1038:12B6.0088: unknown main item tag 0x7 [ 1770.806141][T31935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.827594][T28441] steelseries 0003:1038:12B6.0088: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 1770.845895][T31935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.865721][T28455] usb 5-1: USB disconnect, device number 127 [ 1771.189082][T31945] misc userio: No port type given on /dev/userio [ 1771.265454][T28458] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1771.430029][T28458] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1771.439534][T28458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.448497][T28458] usb 3-1: Product: syz [ 1771.452807][T28458] usb 3-1: Manufacturer: syz [ 1771.457969][T28458] usb 3-1: SerialNumber: syz [ 1771.470932][T28458] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1771.486953][T28455] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1771.728984][T28445] usb 3-1: USB disconnect, device number 28 [ 1772.301437][T31961] coredump: 934(syz.2.8448): Core dump to core aborted: cannot preserve file permissions [ 1772.385416][T28454] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1772.545680][T28454] usb 4-1: Using ep0 maxpacket: 32 [ 1772.559540][T28454] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1772.576428][T28454] usb 4-1: config 0 has no interface number 0 [ 1772.586999][T28455] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1772.602518][T28454] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1772.614684][T28455] ath9k_htc: Failed to initialize the device [ 1772.630962][T28454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.642896][T28445] usb 3-1: ath9k_htc: USB layer deinitialized [ 1772.651026][T28454] usb 4-1: Product: syz [ 1772.663288][T28454] usb 4-1: Manufacturer: syz [ 1772.682891][T28454] usb 4-1: SerialNumber: syz [ 1772.696864][T28454] usb 4-1: config 0 descriptor?? [ 1772.708093][T28454] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1772.789748][T28458] usb 1-1: USB disconnect, device number 39 [ 1772.913028][T28454] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1772.931907][T28454] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1772.986013][T28445] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1773.098111][T28442] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1773.165432][T28445] usb 3-1: Using ep0 maxpacket: 32 [ 1773.185100][T28445] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1773.225621][T28445] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1773.267971][T28442] usb 8-1: USB disconnect, device number 29 [ 1773.278898][T28445] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1773.313684][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1773.318093][T28445] usb 3-1: Product: syz [ 1773.324021][T28458] usb 4-1: USB disconnect, device number 80 [ 1773.332998][T28445] usb 3-1: Manufacturer: syz [ 1773.339276][T28445] usb 3-1: SerialNumber: syz [ 1773.361332][T28458] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1773.372441][T28445] usb 3-1: config 0 descriptor?? [ 1773.382664][T31962] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1773.401922][T28445] hub 3-1:0.0: bad descriptor, ignoring hub [ 1773.422876][T28458] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1773.445133][T28445] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1773.460450][T28458] quatech2 4-1:0.51: device disconnected [ 1773.634587][ T30] audit: type=1800 audit(1782155486.810:7491): pid=31976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8452" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1773.935571][T31985] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1774.045479][T31960] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 1774.244087][T31960] usb 3-1: device firmware changed [ 1774.263175][T28455] usb 3-1: USB disconnect, device number 29 [ 1774.415588][T28455] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1774.445460][T28445] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1774.612454][T28455] usb 3-1: Using ep0 maxpacket: 32 [ 1774.635452][T28445] usb 4-1: Using ep0 maxpacket: 32 [ 1774.648554][T28455] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1774.652990][T28445] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1774.688146][T28455] usb 3-1: string descriptor 0 read error: -22 [ 1774.694557][T28455] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1774.705326][T28445] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1774.712203][T28455] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1774.776115][T28455] usb 3-1: config 0 descriptor?? [ 1774.797596][T31962] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1774.807646][T28455] hub 3-1:0.0: bad descriptor, ignoring hub [ 1774.833490][T28455] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1774.856177][T28445] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1774.898867][T28445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.000189][T28445] usb 4-1: Product: syz [ 1775.025712][T28445] usb 4-1: Manufacturer: syz [ 1775.039598][T28445] usb 4-1: SerialNumber: syz [ 1776.235476][T28441] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1776.265591][T28455] usb 3-1: USB disconnect, device number 30 [ 1776.415389][T28441] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1776.458484][T28441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.492637][T28441] usb 8-1: Product: syz [ 1776.515073][T28441] usb 8-1: Manufacturer: syz [ 1776.531208][T28441] usb 8-1: SerialNumber: syz [ 1776.553014][T28441] usb 8-1: config 0 descriptor?? [ 1776.739358][T32012] netlink: 'syz.2.8462': attribute type 12 has an invalid length. [ 1776.769768][T28441] mos7840 8-1:0.0: required endpoints missing [ 1776.794857][T28441] usb 8-1: USB disconnect, device number 30 [ 1777.223389][T28445] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1777.511804][T32025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8463'. [ 1777.553295][T28445] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1777.598204][T28445] usb 4-1: USB disconnect, device number 81 [ 1777.715452][T28455] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1777.761800][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1777.909135][T28455] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1777.937548][T28455] usb 8-1: not running at top speed; connect to a high speed hub [ 1777.968783][T28455] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1777.999163][T28455] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1778.019495][T28455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.039268][T28455] usb 8-1: Product: syz [ 1778.050921][T28455] usb 8-1: Manufacturer: syz [ 1778.062401][T28455] usb 8-1: SerialNumber: syz [ 1778.243206][T32032] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1778.285333][T32024] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8466'. [ 1778.465839][T28455] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1778.492297][T28455] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 1778.517617][T28455] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1778.533312][T28455] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 1778.582338][T28455] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1778.692256][T28455] usb 8-1: USB disconnect, device number 31 [ 1779.285474][T28445] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1779.325469][T28441] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1779.459497][T28445] usb 5-1: Using ep0 maxpacket: 16 [ 1779.490123][T28441] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1779.503619][T28445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12303, setting to 64 [ 1779.532958][T28441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.543536][T28445] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1779.553535][T28441] usb 8-1: Product: syz [ 1779.558564][T28445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.568229][T28441] usb 8-1: Manufacturer: syz [ 1779.573852][T28441] usb 8-1: SerialNumber: syz [ 1779.579141][T28445] usb 5-1: Product: syz [ 1779.587527][T28445] usb 5-1: Manufacturer: syz [ 1779.596600][T28445] usb 5-1: SerialNumber: syz [ 1779.601733][T28441] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1779.627839][T28444] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1779.650769][T28445] usb 5-1: config 0 descriptor?? [ 1779.688085][T28445] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1779.716697][T28445] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1779.871825][T32053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.915782][T32053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.937153][T32053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.010779][T32065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.033956][T32065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.140695][T32071] syzkaller0: entered promiscuous mode [ 1780.146498][T32071] syzkaller0: entered allmulticast mode [ 1780.175553][T28455] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1780.280660][T32076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1780.308554][T28445] em28xx 5-1:0.0: chip ID is em2874 [ 1780.341546][T28455] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1780.357741][T32077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1780.358500][T28455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.381693][T28455] usb 4-1: Product: syz [ 1780.386288][T28455] usb 4-1: Manufacturer: syz [ 1780.390982][T28455] usb 4-1: SerialNumber: syz [ 1780.397312][T28457] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1780.409297][T28455] usb 4-1: config 0 descriptor?? [ 1780.577074][T28457] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 1780.586933][T28457] usb 3-1: config 2 has no interface number 0 [ 1780.593278][T28457] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1780.606758][T28457] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1780.619374][T28457] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid maxpacket 1127, setting to 1024 [ 1780.638432][T32080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.647322][T28455] mos7840 4-1:0.0: required endpoints missing [ 1780.656368][T28457] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1780.674892][T28455] usb 4-1: USB disconnect, device number 82 [ 1780.687987][T32080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.700060][T28457] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1780.718937][T28457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.744601][T28457] usb 3-1: Product: syz [ 1780.745686][T28444] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1780.758831][T28457] usb 3-1: Manufacturer: syz [ 1780.770106][T28444] ath9k_htc: Failed to initialize the device [ 1780.774151][T28457] usb 3-1: SerialNumber: syz [ 1780.787690][T32071] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1780.795764][T32071] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1780.820183][T28444] usb 8-1: ath9k_htc: USB layer deinitialized [ 1781.013441][T28457] usb 3-1: probing VID:PID(0424:012C) [ 1781.030411][T28457] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 1781.037213][T28457] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 1781.046803][T28457] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1781.059992][T28457] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 1781.072870][T28457] usb 3-1: USB disconnect, device number 31 [ 1781.435068][T32089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8484'. [ 1781.450024][T28445] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1781.465580][T28445] em28xx 5-1:0.0: board has no eeprom [ 1781.539959][T28457] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1781.568914][T28445] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1781.608857][T28445] em28xx 5-1:0.0: dvb set to bulk mode. [ 1781.667365][T28441] em28xx 5-1:0.0: Binding DVB extension [ 1781.733377][T28441] em28xx 5-1:0.0: Registering input extension [ 1781.747447][T28457] usb 4-1: config 0 has no interfaces? [ 1781.762379][T28457] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1781.821979][T28457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.864353][T28457] usb 4-1: config 0 descriptor?? [ 1781.897209][T28438] usb 5-1: USB disconnect, device number 2 [ 1781.932118][T28438] em28xx 5-1:0.0: Disconnecting em28xx [ 1781.945586][T28441] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1781.953940][T28441] Registered IR keymap rc-empty [ 1781.974757][T28441] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1782.012072][T28441] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input366 [ 1782.063153][T28441] em28xx 5-1:0.0: Input extension successfully initialized [ 1782.104156][T28438] em28xx 5-1:0.0: Closing input extension [ 1782.162741][T28438] em28xx 5-1:0.0: Freeing device [ 1782.174112][T28441] usb 8-1: USB disconnect, device number 32 [ 1782.180598][T28445] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1782.317676][T28457] usb 4-1: USB disconnect, device number 83 [ 1782.386520][T28445] usb 3-1: Using ep0 maxpacket: 32 [ 1782.408638][T28445] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1782.440399][T28445] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1782.503640][T28445] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.551992][T28445] usb 3-1: config 0 has no interface number 0 [ 1782.578696][T28445] usb 3-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 1782.622256][T28445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.648460][T28445] usb 3-1: Product: syz [ 1782.664858][T28445] usb 3-1: Manufacturer: syz [ 1782.678161][T28445] usb 3-1: SerialNumber: syz [ 1782.695540][T28438] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1782.712437][T28445] usb 3-1: config 0 descriptor?? [ 1782.868303][T28438] usb 8-1: Using ep0 maxpacket: 8 [ 1782.888188][T28438] usb 8-1: config 0 has an invalid interface number: 78 but max is 0 [ 1782.922673][T28438] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.947721][T28445] uvcvideo 3-1:0.68: probe with driver uvcvideo failed with error -22 [ 1782.965562][T28438] usb 8-1: config 0 has no interface number 0 [ 1782.977462][T28445] usb 3-1: USB disconnect, device number 32 [ 1782.985008][T28438] usb 8-1: too many endpoints for config 0 interface 78 altsetting 101: 215, using maximum allowed: 30 [ 1783.019714][T28438] usb 8-1: config 0 interface 78 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 215 [ 1783.069492][T28438] usb 8-1: config 0 interface 78 has no altsetting 0 [ 1783.107174][T28438] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1783.132238][T28438] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1783.158539][T28438] usb 8-1: SerialNumber: syz [ 1783.178282][T28438] usb 8-1: config 0 descriptor?? [ 1784.049447][T32114] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1784.263264][T32117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1784.288768][T32117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1785.627746][T28438] usb 8-1: USB disconnect, device number 33 [ 1785.915647][T28441] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1785.924925][T32139] fuse: Invalid rootmode [ 1785.939918][T32139] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1785.963999][T32139] tc_dump_action: action bad kind [ 1786.090418][T28441] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1786.123614][T28441] usb 4-1: not running at top speed; connect to a high speed hub [ 1786.137917][T28441] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1786.170885][T28441] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1786.189418][T28441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.207351][T28441] usb 4-1: Product: syz [ 1786.218927][T28441] usb 4-1: Manufacturer: syz [ 1786.232912][T28441] usb 4-1: SerialNumber: syz [ 1786.395457][T28457] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1786.468026][T32132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8497'. [ 1786.504852][T32148] fuse: Unknown parameter 'd' [ 1786.545913][T32150] loop3: detected capacity change from 0 to 2640 [ 1786.573168][T32150] buffer_io_error: 9 callbacks suppressed [ 1786.573189][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1786.593069][T28457] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1786.615200][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1786.631824][T28457] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1786.700857][T28441] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1786.719594][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1786.746547][T28441] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1786.764750][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1786.773876][T28441] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1786.797726][T28441] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1786.818094][T28457] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1786.836664][T28441] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1786.857782][T32152] loop3: detected capacity change from 2640 to 524287992 [ 1786.857925][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1786.947831][T28441] usb 4-1: USB disconnect, device number 84 [ 1786.963970][T28457] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1786.985007][T28457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.997082][T32122] syz.0.8493 (32122): drop_caches: 1 [ 1787.005781][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1787.007431][T28457] usb 3-1: config 0 descriptor?? [ 1787.023165][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1787.036160][T32147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1787.043724][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1787.134824][T32150] ldm_validate_partition_table(): Disk read failed. [ 1787.135162][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.197905][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1787.215660][T32150] Buffer I/O error on dev loop3, logical block 0, async page read [ 1787.235639][T32150] Dev loop3: unable to read RDB block 0 [ 1787.264825][T32150] loop3: unable to read partition table [ 1787.292541][T32150] loop_reread_partitions: partition scan of loop3 (irc VUX) failed (rc=-5) [ 1787.468749][T28457] a4tech 0003:09DA:022B.0089: unknown main item tag 0x0 [ 1787.481494][T28457] a4tech 0003:09DA:022B.0089: unknown main item tag 0x0 [ 1787.509171][T28457] a4tech 0003:09DA:022B.0089: unknown main item tag 0x0 [ 1787.550913][T28457] a4tech 0003:09DA:022B.0089: unknown main item tag 0x0 [ 1787.580555][T28457] a4tech 0003:09DA:022B.0089: unknown main item tag 0x0 [ 1787.604905][T28457] a4tech 0003:09DA:022B.0089: unbalanced collection at end of report description [ 1787.619162][T28457] a4tech 0003:09DA:022B.0089: parse failed [ 1787.632511][T28457] a4tech 0003:09DA:022B.0089: probe with driver a4tech failed with error -22 [ 1787.925424][T28441] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1788.106062][T28441] usb 4-1: Using ep0 maxpacket: 32 [ 1788.114983][T28441] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1788.130780][T28441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.163588][T28441] usb 4-1: config 0 descriptor?? [ 1788.190010][T28441] as10x_usb: device has been detected [ 1788.221790][T28441] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1788.254361][T28441] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1788.313027][T28441] as10x_usb: error during firmware upload part1 [ 1788.330258][T28441] Registered device nBox DVB-T Dongle [ 1788.384390][ T30] audit: type=1800 audit(1782155501.560:7492): pid=32167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8507" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1788.532991][T32155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.570569][T32155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.912289][T28457] usb 3-1: USB disconnect, device number 33 [ 1789.079085][T32177] xt_hashlimit: size too large, truncated to 1048576 [ 1789.183805][T28441] usb 4-1: USB disconnect, device number 85 [ 1789.267922][T28441] Unregistered device nBox DVB-T Dongle [ 1789.275156][T28441] as10x_usb: device has been disconnected [ 1789.472401][T32186] netlink: 'syz.3.8513': attribute type 89 has an invalid length. [ 1789.845580][T28458] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1789.885504][T28457] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1790.008591][T28458] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1790.018090][T28458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.028347][T28458] usb 1-1: Product: syz [ 1790.032582][T28458] usb 1-1: Manufacturer: syz [ 1790.039151][T28458] usb 1-1: SerialNumber: syz [ 1790.045599][T28457] usb 4-1: Using ep0 maxpacket: 32 [ 1790.064865][T28457] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1790.084495][T28457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.100433][T28457] usb 4-1: config 0 descriptor?? [ 1790.155550][T28455] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1790.258077][T26209] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 1790.258110][T26209] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1790.266321][T28458] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1790.290104][T28458] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1790.302070][T28458] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1790.313458][T28458] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1790.331797][T28455] usb 5-1: Using ep0 maxpacket: 16 [ 1790.352925][T28455] usb 5-1: config 0 has no interfaces? [ 1790.361949][T28455] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1790.382768][T28458] usb 1-1: USB disconnect, device number 41 [ 1790.398789][T28455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.429160][T28455] usb 5-1: Product: syz [ 1790.442992][T28455] usb 5-1: Manufacturer: syz [ 1790.448988][T28455] usb 5-1: SerialNumber: syz [ 1790.472413][T28455] usb 5-1: config 0 descriptor?? [ 1790.477819][T28457] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1790.492997][T28457] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1790.512364][T28457] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1790.535439][T28457] usb 4-1: media controller created [ 1790.560443][T28457] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1790.678721][T28457] az6027: usb out operation failed. (-71) [ 1790.685444][T28454] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1790.693713][T28457] az6027: usb out operation failed. (-71) [ 1790.709716][T28457] stb0899_attach: Driver disabled by Kconfig [ 1790.716512][T32196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1790.735447][T28457] az6027: no front-end attached [ 1790.735447][T28457] [ 1790.747523][ T30] audit: type=1326 audit(1782155503.920:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32195 comm="syz.4.8518" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9148b9ce59 code=0x0 [ 1790.786724][T28457] az6027: usb out operation failed. (-71) [ 1790.797101][T28457] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1790.816075][T28457] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input367 [ 1790.832546][T28445] usb 5-1: USB disconnect, device number 3 [ 1790.854903][T28457] dvb-usb: schedule remote query interval to 400 msecs. [ 1790.885855][T28457] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1790.896418][T28454] usb 8-1: Using ep0 maxpacket: 32 [ 1790.911507][T28454] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1790.930306][T28457] usb 4-1: USB disconnect, device number 86 [ 1790.944510][T28454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.981850][T28454] usb 8-1: Product: syz [ 1790.999893][T28454] usb 8-1: Manufacturer: syz [ 1791.018741][T28457] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1791.029050][T28454] usb 8-1: SerialNumber: syz [ 1791.042032][T28454] usb 8-1: config 0 descriptor?? [ 1791.056929][T28454] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1791.132680][T28458] IPVS: starting estimator thread 0... [ 1791.161060][T32222] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1791.256988][T32223] IPVS: using max 35 ests per chain, 84000 per kthread [ 1791.264551][T32208] fuse: Bad value for 'fd' [ 1791.343250][T32208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.355435][T32208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.371091][T32208] No fuse device found [ 1791.575765][T28454] gspca_ov534_9: reg_w failed -110 [ 1791.786491][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.794087][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.925444][T28445] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1791.985405][T28454] gspca_ov534_9: Unknown sensor 0000 [ 1791.985518][T28454] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1792.020406][T28454] usb 8-1: USB disconnect, device number 34 [ 1792.095433][T28445] usb 1-1: Using ep0 maxpacket: 16 [ 1792.102130][T28445] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1792.110408][T28445] usb 1-1: config 0 has no interface number 0 [ 1792.118171][T28445] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1792.129189][T28445] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 1792.142337][T28445] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1792.151602][T28445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.160435][T28445] usb 1-1: Product: syz [ 1792.164698][T28445] usb 1-1: Manufacturer: syz [ 1792.169423][T28445] usb 1-1: SerialNumber: syz [ 1792.178069][T28445] usb 1-1: config 0 descriptor?? [ 1792.193551][T32242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1792.211714][T28445] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1792.388047][T32248] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8534'. [ 1792.464431][T32242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.492295][T32242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.518977][T28445] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1792.544575][T28445] usb 1-1: USB disconnect, device number 42 [ 1792.569842][T28445] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1792.591995][T28445] cypress_m8 1-1:0.35: device disconnected [ 1792.945193][T32261] FAULT_INJECTION: forcing a failure. [ 1792.945193][T32261] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.958014][T32261] CPU: 0 UID: 0 PID: 32261 Comm: syz.4.8538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1792.958051][T32261] Tainted: [L]=SOFTLOCKUP [ 1792.958060][T32261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1792.958075][T32261] Call Trace: [ 1792.958084][T32261] [ 1792.958094][T32261] dump_stack_lvl+0xe8/0x150 [ 1792.958127][T32261] should_fail_ex+0x40c/0x560 [ 1792.958157][T32261] should_failslab+0xa8/0x100 [ 1792.958181][T32261] ? skb_clone+0x212/0x3a0 [ 1792.958207][T32261] kmem_cache_alloc_noprof+0x87/0x650 [ 1792.958243][T32261] skb_clone+0x212/0x3a0 [ 1792.958267][T32261] __netlink_deliver_tap+0x413/0x860 [ 1792.958331][T32261] ? netlink_deliver_tap+0x2e/0x1b0 [ 1792.958353][T32261] netlink_deliver_tap+0x19c/0x1b0 [ 1792.958375][T32261] netlink_unicast+0x77f/0x940 [ 1792.958412][T32261] netlink_sendmsg+0x813/0xb40 [ 1792.958439][T32261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.958460][T32261] ? rcu_is_watching+0x15/0xb0 [ 1792.958486][T32261] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1792.958515][T32261] ? lock_release+0x4b/0x3c0 [ 1792.958534][T32261] ? arch_stack_walk+0xfb/0x150 [ 1792.958562][T32261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.958584][T32261] sock_sendmsg_nosec+0x13a/0x180 [ 1792.958612][T32261] ____sys_sendmsg+0x54e/0x850 [ 1792.958635][T32261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.958658][T32261] ? lock_release+0x4b/0x3c0 [ 1792.958680][T32261] ? import_iovec+0x73/0xa0 [ 1792.958714][T32261] ___sys_sendmsg+0x2a5/0x360 [ 1792.958734][T32261] ? rcu_is_watching+0x15/0xb0 [ 1792.958757][T32261] ? get_pid_task+0x20/0x1f0 [ 1792.958780][T32261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.958804][T32261] ? rcu_is_watching+0x15/0xb0 [ 1792.958840][T32261] ? __fget_files+0x2a/0x420 [ 1792.958872][T32261] ? __fget_files+0x3a2/0x420 [ 1792.958908][T32261] __x64_sys_sendmsg+0x1b1/0x290 [ 1792.958931][T32261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1792.958959][T32261] ? rcu_is_watching+0x15/0xb0 [ 1792.958983][T32261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.959006][T32261] do_syscall_64+0x174/0x580 [ 1792.959039][T32261] ? trace_irq_disable+0x3b/0x140 [ 1792.959071][T32261] ? clear_bhb_loop+0x40/0x90 [ 1792.959106][T32261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.959128][T32261] RIP: 0033:0x7f9148b9ce59 [ 1792.959148][T32261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.959167][T32261] RSP: 002b:00007f91499a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.959190][T32261] RAX: ffffffffffffffda RBX: 00007f9148e15fa0 RCX: 00007f9148b9ce59 [ 1792.959207][T32261] RDX: 0000000020000840 RSI: 0000200000001080 RDI: 0000000000000004 [ 1792.959221][T32261] RBP: 00007f91499a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.959236][T32261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.959249][T32261] R13: 00007f9148e16038 R14: 00007f9148e15fa0 R15: 00007f9148f3fa48 [ 1792.959273][T32261] [ 1793.482936][T32272] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8544'. [ 1793.675459][T28445] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1793.725435][T28457] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1793.827443][T28445] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1793.836808][T28445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.847840][T28445] usb 4-1: config 0 descriptor?? [ 1793.886932][T28457] usb 8-1: Using ep0 maxpacket: 32 [ 1793.905325][T28457] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1793.924653][T28457] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1793.946585][T28457] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1793.958911][T28457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.977651][T28457] usb 8-1: Product: syz [ 1793.985414][T28457] usb 8-1: Manufacturer: syz [ 1793.994424][T28457] usb 8-1: SerialNumber: syz [ 1794.285495][T28454] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1794.365638][T28441] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1794.435462][T28454] usb 1-1: Using ep0 maxpacket: 8 [ 1794.444442][T28454] usb 1-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice= 0.40 [ 1794.454187][T28454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.464154][T28454] usb 1-1: Product: ᠌ [ 1794.469073][T28454] usb 1-1: Manufacturer: 䀁 [ 1794.473936][T28454] usb 1-1: SerialNumber: Н [ 1794.547529][T28441] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1794.578739][T28441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.610112][T28441] usb 3-1: Product: syz [ 1794.619380][T28457] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1794.626172][T28441] usb 3-1: Manufacturer: syz [ 1794.626193][T28441] usb 3-1: SerialNumber: syz [ 1794.645443][T28441] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1794.695709][T28457] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1794.709259][T28438] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1794.734408][T28454] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1794.745760][T28457] usb 8-1: USB disconnect, device number 35 [ 1794.753064][T28454] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1794.772237][T28454] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1794.788695][T28454] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1794.816641][T28454] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1794.840267][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1794.879970][T28445] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 1794.900146][T28445] hackrf 4-1:0.0: Could not detect board [ 1794.930811][T28445] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 1794.950058][T32291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.971753][T28454] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1794.998845][T32291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.006951][T28445] usb 4-1: USB disconnect, device number 87 [ 1795.054184][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1795.086953][T32291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1795.123282][T32300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8553'. [ 1795.786143][T28438] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1795.793285][T28445] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1795.801343][T28438] ath9k_htc: Failed to initialize the device [ 1795.834617][T28438] usb 3-1: ath9k_htc: USB layer deinitialized [ 1795.855471][T28441] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1795.979499][T28445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1795.990021][T28445] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1796.002746][T28445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1796.013280][T28445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1796.026897][T28441] usb 4-1: config 0 has no interfaces? [ 1796.037799][T28445] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1796.055572][T28441] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1796.064734][T28445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.085879][T28441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.094138][T28445] usb 5-1: Product: syz [ 1796.100219][T28445] usb 5-1: Manufacturer: syz [ 1796.107194][T28441] usb 4-1: config 0 descriptor?? [ 1796.126090][T28445] usb 5-1: SerialNumber: syz [ 1796.134308][T28445] usb 5-1: config 0 descriptor?? [ 1796.142987][T32314] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1796.156264][T28445] usb 5-1: ucan: probing device on interface #0 [ 1796.162704][T28445] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 1796.168874][T28445] usb 5-1: ucan: probe failed; try to update the device firmware [ 1796.383455][T28454] usb 5-1: USB disconnect, device number 4 [ 1796.413609][T28445] usb 4-1: USB disconnect, device number 88 [ 1797.175586][T28457] usb 3-1: USB disconnect, device number 34 [ 1797.226716][T28438] usb 1-1: USB disconnect, device number 43 [ 1797.335456][ T5694] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1797.337421][T32336] FAULT_INJECTION: forcing a failure. [ 1797.337421][T32336] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.406325][T32336] CPU: 1 UID: 0 PID: 32336 Comm: syz.0.8566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.406361][T32336] Tainted: [L]=SOFTLOCKUP [ 1797.406370][T32336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1797.406384][T32336] Call Trace: [ 1797.406392][T32336] [ 1797.406401][T32336] dump_stack_lvl+0xe8/0x150 [ 1797.406431][T32336] should_fail_ex+0x40c/0x560 [ 1797.406462][T32336] should_failslab+0xa8/0x100 [ 1797.406486][T32336] __kmalloc_noprof+0xe8/0x750 [ 1797.406518][T32336] ? ip_options_get+0x51/0x570 [ 1797.406550][T32336] ip_options_get+0x51/0x570 [ 1797.406581][T32336] ip_cmsg_send+0x591/0xa70 [ 1797.406619][T32336] raw_sendmsg+0x5cd/0x1a20 [ 1797.406650][T32336] ? tomoyo_check_inet_address+0x6b5/0x930 [ 1797.406679][T32336] ? tomoyo_check_inet_address+0x27f/0x930 [ 1797.406702][T32336] ? __pfx_raw_sendmsg+0x10/0x10 [ 1797.406746][T32336] ? __pfx_aa_sk_perm+0x10/0x10 [ 1797.406766][T32336] ? sock_rps_record_flow+0x19/0x350 [ 1797.406796][T32336] ? inet_sendmsg+0x298/0x320 [ 1797.406826][T32336] ? __pfx_inet_sendmsg+0x10/0x10 [ 1797.406855][T32336] sock_sendmsg_nosec+0x10e/0x180 [ 1797.406884][T32336] ____sys_sendmsg+0x54e/0x850 [ 1797.406907][T32336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.406944][T32336] ? import_iovec+0x73/0xa0 [ 1797.406977][T32336] ___sys_sendmsg+0x2a5/0x360 [ 1797.406998][T32336] ? rcu_is_watching+0x15/0xb0 [ 1797.407021][T32336] ? get_pid_task+0x20/0x1f0 [ 1797.407044][T32336] ? __pfx____sys_sendmsg+0x10/0x10 [ 1797.407067][T32336] ? rcu_is_watching+0x15/0xb0 [ 1797.407104][T32336] ? __fget_files+0x2a/0x420 [ 1797.407135][T32336] ? __fget_files+0x3a2/0x420 [ 1797.407171][T32336] __x64_sys_sendmsg+0x1b1/0x290 [ 1797.407194][T32336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1797.407222][T32336] ? rcu_is_watching+0x15/0xb0 [ 1797.407246][T32336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.407269][T32336] do_syscall_64+0x174/0x580 [ 1797.407299][T32336] ? trace_irq_disable+0x3b/0x140 [ 1797.407331][T32336] ? clear_bhb_loop+0x40/0x90 [ 1797.407356][T32336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.407378][T32336] RIP: 0033:0x7fc2f179ce59 [ 1797.407397][T32336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.407416][T32336] RSP: 002b:00007fc2f26d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.407440][T32336] RAX: ffffffffffffffda RBX: 00007fc2f1a15fa0 RCX: 00007fc2f179ce59 [ 1797.407458][T32336] RDX: 0000000020002880 RSI: 0000200000001640 RDI: 0000000000000003 [ 1797.407472][T32336] RBP: 00007fc2f26d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.407487][T32336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.407500][T32336] R13: 00007fc2f1a16038 R14: 00007fc2f1a15fa0 R15: 00007fc2f1b3fa48 [ 1797.407526][T32336] [ 1797.740267][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 1797.759267][ T5694] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1797.768850][ T5694] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1797.778917][ T5694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1797.894839][ T5694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1797.988717][ T5694] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.056401][ T5694] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1798.065917][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.174972][T32349] FAULT_INJECTION: forcing a failure. [ 1798.174972][T32349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1798.204891][T32349] CPU: 1 UID: 0 PID: 32349 Comm: syz.3.8571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1798.204928][T32349] Tainted: [L]=SOFTLOCKUP [ 1798.204937][T32349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1798.204950][T32349] Call Trace: [ 1798.204958][T32349] [ 1798.204966][T32349] dump_stack_lvl+0xe8/0x150 [ 1798.204995][T32349] should_fail_ex+0x40c/0x560 [ 1798.205022][T32349] prepare_alloc_pages+0x230/0x650 [ 1798.205059][T32349] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1798.205082][T32349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1798.205105][T32349] ? __pfx_policy_nodemask+0x10/0x10 [ 1798.205127][T32349] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1798.205156][T32349] ? rcu_is_watching+0x15/0xb0 [ 1798.205183][T32349] alloc_pages_mpol+0x212/0x380 [ 1798.205207][T32349] folio_alloc_mpol_noprof+0x39/0x160 [ 1798.205231][T32349] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1798.205262][T32349] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1798.205286][T32349] ? lock_release+0x4b/0x3c0 [ 1798.205308][T32349] do_wp_page+0x1163/0x4c70 [ 1798.205339][T32349] ? __pte_offset_map+0x29/0x240 [ 1798.205369][T32349] ? __pfx_do_wp_page+0x10/0x10 [ 1798.205392][T32349] ? do_raw_spin_lock+0x12b/0x2f0 [ 1798.205421][T32349] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1798.205447][T32349] ? __pte_offset_map+0x45/0x240 [ 1798.205478][T32349] handle_mm_fault+0x1490/0x3080 [ 1798.205511][T32349] ? handle_mm_fault+0xec/0x3080 [ 1798.205541][T32349] ? __pfx_handle_mm_fault+0x10/0x10 [ 1798.205574][T32349] ? __pfx___up_read+0x10/0x10 [ 1798.205598][T32349] ? lock_release+0x4b/0x3c0 [ 1798.205619][T32349] ? lock_mm_and_find_vma+0xa7/0x340 [ 1798.205651][T32349] do_user_addr_fault+0x744/0x1340 [ 1798.205682][T32349] exc_page_fault+0x6a/0xc0 [ 1798.205712][T32349] asm_exc_page_fault+0x26/0x30 [ 1798.205733][T32349] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1798.205758][T32349] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 61 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1798.205777][T32349] RSP: 0018:ffffc900001273d8 EFLAGS: 00050206 [ 1798.205797][T32349] RAX: ffffffff84b50401 RBX: ffff88802c780000 RCX: 0000000000001a79 [ 1798.205813][T32349] RDX: 0000000000000000 RSI: ffff88802c786587 RDI: 0000200000007000 [ 1798.205829][T32349] RBP: ffffc90000127550 R08: ffff88802c787fff R09: 1ffff110058f0fff [ 1798.205845][T32349] R10: dffffc0000000000 R11: ffffed10058f1000 R12: 1ffff92000024f0b [ 1798.205861][T32349] R13: 0000200000000a79 R14: ffffc90000127868 R15: 0000000000008000 [ 1798.205880][T32349] ? _copy_to_iter+0x161/0x1810 [ 1798.205910][T32349] _copy_to_iter+0x255/0x1810 [ 1798.205936][T32349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.205961][T32349] ? do_raw_spin_lock+0x12b/0x2f0 [ 1798.205989][T32349] ? rcu_is_watching+0x15/0xb0 [ 1798.206012][T32349] ? __pfx__copy_to_iter+0x10/0x10 [ 1798.206037][T32349] ? rcu_is_watching+0x15/0xb0 [ 1798.206060][T32349] ? trace_irq_enable+0x3b/0x140 [ 1798.206091][T32349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1798.206118][T32349] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1798.206143][T32349] __skb_datagram_iter+0x419/0x980 [ 1798.206167][T32349] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1798.206193][T32349] skb_copy_datagram_iter+0xb5/0x240 [ 1798.206217][T32349] packet_recvmsg+0x686/0x1600 [ 1798.206251][T32349] ? aa_file_perm+0x18b/0x15f0 [ 1798.206277][T32349] ? __pfx_packet_recvmsg+0x10/0x10 [ 1798.206299][T32349] ? __pfx_aa_sk_perm+0x10/0x10 [ 1798.206320][T32349] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1798.206341][T32349] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1798.206367][T32349] ? security_socket_recvmsg+0x7e/0x2c0 [ 1798.206394][T32349] ? __pfx_packet_recvmsg+0x10/0x10 [ 1798.206416][T32349] sock_recvmsg+0x196/0x1e0 [ 1798.206443][T32349] sock_read_iter+0x22a/0x2f0 [ 1798.206468][T32349] ? __pfx_sock_read_iter+0x10/0x10 [ 1798.206494][T32349] ? bpf_lsm_file_permission+0x9/0x20 [ 1798.206524][T32349] ? security_file_permission+0x75/0x260 [ 1798.206554][T32349] ? rw_verify_area+0x24a/0x4c0 [ 1798.206576][T32349] ? __pfx_sock_read_iter+0x10/0x10 [ 1798.206598][T32349] __io_read+0x716/0x14f0 [ 1798.206637][T32349] ? __pfx___io_read+0x10/0x10 [ 1798.206666][T32349] ? rcu_is_watching+0x15/0xb0 [ 1798.206692][T32349] io_read+0x4a/0x1c0 [ 1798.206718][T32349] ? __fget_files+0x2a/0x420 [ 1798.206752][T32349] __io_issue_sqe+0x188/0x4d0 [ 1798.206781][T32349] io_issue_sqe+0x16d/0x1020 [ 1798.206811][T32349] io_submit_sqes+0xd26/0x2310 [ 1798.206852][T32349] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1798.206884][T32349] ? __fget_files+0x3a2/0x420 [ 1798.206915][T32349] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1798.206944][T32349] ? fput+0xa0/0xd0 [ 1798.206972][T32349] ? ksys_write+0x242/0x270 [ 1798.207012][T32349] ? __pfx_ksys_write+0x10/0x10 [ 1798.207036][T32349] ? rcu_is_watching+0x15/0xb0 [ 1798.207059][T32349] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1798.207088][T32349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.207111][T32349] do_syscall_64+0x174/0x580 [ 1798.207140][T32349] ? trace_irq_disable+0x3b/0x140 [ 1798.207171][T32349] ? clear_bhb_loop+0x40/0x90 [ 1798.207195][T32349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.207217][T32349] RIP: 0033:0x7f8ff819ce59 [ 1798.207236][T32349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.207262][T32349] RSP: 002b:00007f8ff913b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1798.207284][T32349] RAX: ffffffffffffffda RBX: 00007f8ff8415fa0 RCX: 00007f8ff819ce59 [ 1798.207301][T32349] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1798.207315][T32349] RBP: 00007f8ff913b090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.207329][T32349] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 1798.207343][T32349] R13: 00007f8ff8416038 R14: 00007f8ff8415fa0 R15: 00007f8ff853fa48 [ 1798.207368][T32349] [ 1798.290287][ T5694] usb 5-1: GET_CAPABILITIES returned 0 [ 1798.525660][T28438] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1798.560215][ T5694] usbtmc 5-1:16.0: can't read capabilities [ 1798.767089][T28438] usb 1-1: too many configurations: 126, using maximum allowed: 8 [ 1798.774060][T28457] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1798.836545][ T5694] usb 5-1: USB disconnect, device number 5 [ 1798.879885][T28438] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1798.913928][T28438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.929929][T28438] usb 1-1: Product: syz [ 1798.934345][T28438] usb 1-1: Manufacturer: syz [ 1798.939679][T28438] usb 1-1: SerialNumber: syz [ 1798.976978][T28457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.993238][T28457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.003655][T28457] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1799.024199][T28457] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1799.060820][T28457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.091231][T28457] usb 3-1: config 0 descriptor?? [ 1799.370682][T28457] usbhid 3-1:0.0: can't add hid device: -71 [ 1799.385246][T28457] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1799.417330][T28444] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1799.452478][T28457] usb 3-1: USB disconnect, device number 35 [ 1799.599433][T28444] usb 4-1: config 0 has no interfaces? [ 1799.605648][T28444] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1799.620350][T28444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.640672][T28444] usb 4-1: config 0 descriptor?? [ 1799.748418][T32370] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1799.755026][T32370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1799.788240][T32370] vhci_hcd vhci_hcd.0: Device attached [ 1800.007582][T32371] vhci_hcd: connection closed [ 1800.007841][T14153] vhci_hcd vhci_hcd.7: stop threads [ 1800.031719][T28445] usb 4-1: USB disconnect, device number 89 [ 1800.039951][T14153] vhci_hcd vhci_hcd.7: release socket [ 1800.065508][T28444] usb 48-1: SetAddress Request (2) to port 0 [ 1800.074062][T14153] vhci_hcd vhci_hcd.7: disconnect device [ 1800.090599][T28444] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1800.138520][T28444] usb 48-1: enqueue for inactive port 0 [ 1800.265274][ T30] audit: type=1800 audit(1782155513.440:7494): pid=32375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8578" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1800.576210][T28444] usb usb48-port1: attempt power cycle [ 1801.033250][T28438] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1801.061589][T28438] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1801.094430][T28438] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1801.136214][T28444] usb usb48-port1: unable to enumerate USB device [ 1801.142842][T28438] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1801.203431][T28438] usb 1-1: USB disconnect, device number 44 [ 1801.279032][T32381] blk_print_req_error: 10 callbacks suppressed [ 1801.279054][T32381] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1801.352923][T32381] buffer_io_error: 8 callbacks suppressed [ 1801.352943][T32381] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1801.406634][T32383] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1801.441774][T32383] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1801.478272][ T1736] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1801.535639][T28444] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1801.711564][T28444] usb 3-1: Using ep0 maxpacket: 8 [ 1801.726334][T28444] usb 3-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice= 0.40 [ 1801.750018][T28444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.768603][T28444] usb 3-1: Product: ᠌ [ 1801.784338][T28444] usb 3-1: Manufacturer: 䀁 [ 1801.804447][T28444] usb 3-1: SerialNumber: Н [ 1801.933802][T32400] tipc: Enabling of bearer rejected, failed to enable media [ 1801.946617][T28438] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1801.962027][T32400] netlink: 'syz.4.8589': attribute type 8 has an invalid length. [ 1802.034910][T28444] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1802.071072][T28444] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1802.105618][T28438] usb 1-1: Using ep0 maxpacket: 32 [ 1802.116891][T28444] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1802.124655][T32405] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1802.134527][T28438] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1802.144304][T28444] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1802.153826][T28438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.172310][T28444] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1802.183554][T28438] usb 1-1: Product: syz [ 1802.195808][T28438] usb 1-1: Manufacturer: syz [ 1802.207462][T28438] usb 1-1: SerialNumber: syz [ 1802.234720][T28438] usb 1-1: config 0 descriptor?? [ 1802.239893][T28441] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1802.261308][T28438] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1802.280058][T28444] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1802.290703][T28438] dvb-usb: bulk message failed: -22 (4/0) [ 1802.305571][T28438] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1802.338209][T28438] dvb-usb: bulk message failed: -22 (5/0) [ 1802.356956][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1802.364047][T28438] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1802.403805][T28441] usb 4-1: device descriptor read/64, error -71 [ 1802.435385][T28438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1802.472777][T28438] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1802.498162][T28438] usb 1-1: media controller created [ 1802.529304][T28438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1802.568743][T28438] usb 1-1: selecting invalid altsetting 3 [ 1802.580054][T28438] ttusb2: set interface to alts=3 failed [ 1802.619839][T28438] DVB: Unable to find symbol tda10086_attach() [ 1802.635477][T28438] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1802.656498][T28441] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1802.666031][T28438] dvb-usb: bulk message failed: -22 (4/0) [ 1802.677810][T28438] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1802.699896][T28438] dvb-usb: bulk message failed: -22 (5/0) [ 1802.712439][T28438] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1802.744467][T28438] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1802.764154][T28438] usb 1-1: USB disconnect, device number 45 [ 1802.805666][T28441] usb 4-1: device descriptor read/64, error -71 [ 1802.832174][T28438] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1802.925683][T28441] usb usb4-port1: attempt power cycle [ 1803.288345][T28441] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1803.327033][T28441] usb 4-1: device descriptor read/8, error -71 [ 1803.585498][T28441] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1803.633465][T28441] usb 4-1: device descriptor read/8, error -71 [ 1803.763230][T28441] usb usb4-port1: unable to enumerate USB device [ 1804.105490][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 1804.262492][T28457] usb 3-1: USB disconnect, device number 36 [ 1804.606417][T32441] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8601'. [ 1805.405432][ T5694] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1805.570189][ T5694] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1805.589363][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.605209][ T5694] usb 4-1: Product: syz [ 1805.610239][ T5694] usb 4-1: Manufacturer: syz [ 1805.616099][ T5694] usb 4-1: SerialNumber: syz [ 1805.722984][ T30] audit: type=1326 audit(1782155518.900:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1805.770136][ T30] audit: type=1326 audit(1782155518.900:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1805.818912][ T30] audit: type=1326 audit(1782155518.900:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1805.853431][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1805.895712][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1805.912729][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1805.937705][ T30] audit: type=1326 audit(1782155518.900:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1805.974307][ T30] audit: type=1326 audit(1782155518.900:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1806.000602][ T30] audit: type=1326 audit(1782155518.930:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1806.025213][ T30] audit: type=1326 audit(1782155518.950:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x7ffc0000 [ 1806.034517][ T5694] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1806.065397][T28457] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1806.085028][ T30] audit: type=1326 audit(1782155518.950:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73f299cbc2 code=0x7ffc0000 [ 1806.137383][T28454] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1806.174967][ T30] audit: type=1326 audit(1782155518.950:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f73f299cc57 code=0x7ffc0000 [ 1806.238450][ T30] audit: type=1326 audit(1782155518.950:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32459 comm="syz.2.8609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f73f2959b51 code=0x7ffc0000 [ 1806.265465][T28457] usb 3-1: device descriptor read/64, error -71 [ 1806.319434][T32464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.343227][T32464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.509636][T28457] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1806.667671][T28457] usb 3-1: device descriptor read/64, error -71 [ 1806.683427][T28454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1806.694107][T28454] usb 1-1: no configurations [ 1806.699450][T28454] usb 1-1: can't read configurations, error -22 [ 1806.709112][ T5694] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1806.786407][T28457] usb usb3-port1: attempt power cycle [ 1806.871060][ T5694] usb 8-1: device descriptor read/64, error -71 [ 1807.116969][ T5694] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1807.153439][T28457] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1807.186084][T28457] usb 3-1: device descriptor read/8, error -71 [ 1807.265575][ T5694] usb 8-1: device descriptor read/64, error -71 [ 1807.377567][ T5694] usb usb8-port1: attempt power cycle [ 1807.435465][T28457] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1807.456627][T28457] usb 3-1: device descriptor read/8, error -71 [ 1807.566866][T28457] usb usb3-port1: unable to enumerate USB device [ 1807.745465][ T5694] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1807.766061][ T5694] usb 8-1: device descriptor read/8, error -71 [ 1807.785610][T28454] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1807.946292][T28454] usb 1-1: Using ep0 maxpacket: 32 [ 1807.953580][T28454] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1807.998248][T28454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.009091][T32491] bond1: option ad_user_port_key: invalid value (27566) [ 1808.024515][T32491] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1808.045542][ T5694] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1808.059268][T28454] usb 1-1: config 0 descriptor?? [ 1808.065221][T32493] netlink: 388 bytes leftover after parsing attributes in process `syz.4.8619'. [ 1808.087168][T28454] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1808.096874][ T5694] usb 8-1: device descriptor read/8, error -71 [ 1808.106665][T32491] bond1 (unregistering): Released all slaves [ 1808.150342][T28444] usb 4-1: USB disconnect, device number 94 [ 1808.221895][ T5694] usb usb8-port1: unable to enumerate USB device [ 1808.646529][T28444] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1808.813175][T28444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1808.831874][T32483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.853414][T28444] usb 4-1: not running at top speed; connect to a high speed hub [ 1808.878103][T32483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.889680][T28444] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1808.930598][T28444] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1808.948547][T28444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.970983][T28444] usb 4-1: Product: syz [ 1808.982744][T28444] usb 4-1: Manufacturer: syz [ 1808.995492][T28444] usb 4-1: SerialNumber: syz [ 1809.231242][T32496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8620'. [ 1809.420468][T28444] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1809.452489][T28444] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1809.484158][T28444] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1809.527054][T28444] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1809.566830][T28444] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1809.661776][T28444] usb 4-1: USB disconnect, device number 95 [ 1809.785491][T28454] gspca_sunplus: reg_w_riv err -71 [ 1809.798437][T28454] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1809.833761][T28454] usb 1-1: USB disconnect, device number 47 [ 1810.241942][T32511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8623'. [ 1810.305653][T28444] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1810.475448][T28444] usb 4-1: Using ep0 maxpacket: 32 [ 1810.509217][T28444] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1810.542141][T28444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.581601][T32521] FAULT_INJECTION: forcing a failure. [ 1810.581601][T32521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.604072][T28444] usb 4-1: Product: syz [ 1810.625408][T28444] usb 4-1: Manufacturer: syz [ 1810.630207][T28444] usb 4-1: SerialNumber: syz [ 1810.643348][T32521] CPU: 0 UID: 0 PID: 32521 Comm: syz.2.8629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1810.643378][T32521] Tainted: [L]=SOFTLOCKUP [ 1810.643384][T32521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1810.643394][T32521] Call Trace: [ 1810.643405][T32521] [ 1810.643412][T32521] dump_stack_lvl+0xe8/0x150 [ 1810.643433][T32521] should_fail_ex+0x40c/0x560 [ 1810.643453][T32521] _copy_from_user+0x2d/0xb0 [ 1810.643476][T32521] ucma_write+0x15d/0x2f0 [ 1810.643504][T32521] ? __pfx_ucma_write+0x10/0x10 [ 1810.643530][T32521] ? iov_iter_iovec_advance+0x1e0/0x290 [ 1810.643553][T32521] vfs_writev+0x4bb/0x990 [ 1810.643574][T32521] ? __pfx_ucma_write+0x10/0x10 [ 1810.643598][T32521] ? __pfx_vfs_writev+0x10/0x10 [ 1810.643621][T32521] ? lock_release+0x4b/0x3c0 [ 1810.643637][T32521] ? __fget_files+0x3a2/0x420 [ 1810.643659][T32521] ? __fget_files+0x2a/0x420 [ 1810.643684][T32521] do_writev+0x154/0x2e0 [ 1810.643704][T32521] ? __pfx_do_writev+0x10/0x10 [ 1810.643725][T32521] ? rcu_is_watching+0x15/0xb0 [ 1810.643742][T32521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.643758][T32521] do_syscall_64+0x174/0x580 [ 1810.643779][T32521] ? trace_irq_disable+0x3b/0x140 [ 1810.643802][T32521] ? clear_bhb_loop+0x40/0x90 [ 1810.643819][T32521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.643834][T32521] RIP: 0033:0x7f73f299ce59 [ 1810.643847][T32521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.643861][T32521] RSP: 002b:00007f73f38fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1810.643878][T32521] RAX: ffffffffffffffda RBX: 00007f73f2c15fa0 RCX: 00007f73f299ce59 [ 1810.643889][T32521] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000013 [ 1810.643899][T32521] RBP: 00007f73f38fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.643911][T32521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.643920][T32521] R13: 00007f73f2c16038 R14: 00007f73f2c15fa0 R15: 00007f73f2d3fa48 [ 1810.643938][T32521] [ 1810.849903][T28444] usb 4-1: config 0 descriptor?? [ 1811.083954][T28444] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1811.292232][T32508] fuse: Bad value for 'fd' [ 1811.439213][T32508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.490861][T32508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.582462][T32508] No fuse device found [ 1811.646254][T28444] gspca_ov534_9: reg_w failed -110 [ 1812.088651][T28444] gspca_ov534_9: Unknown sensor 0000 [ 1812.088754][T28444] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1812.137880][T28444] usb 4-1: USB disconnect, device number 96 [ 1812.235474][T28454] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1812.285446][T28441] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1812.385477][T28454] usb 1-1: device descriptor read/64, error -71 [ 1812.458548][T28441] usb 3-1: Using ep0 maxpacket: 16 [ 1812.464471][T28441] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1812.625492][T28454] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1812.765442][T28454] usb 1-1: device descriptor read/64, error -71 [ 1812.814977][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1812.814997][ T30] audit: type=1800 audit(1782155525.990:7552): pid=32554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8638" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1812.875422][ T5694] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1812.883297][T28454] usb usb1-port1: attempt power cycle [ 1813.048372][ T5694] usb 8-1: config 0 has no interfaces? [ 1813.055468][ T5694] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1813.066549][ T5694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.079777][ T5694] usb 8-1: config 0 descriptor?? [ 1813.235412][T28454] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1813.267967][T28454] usb 1-1: device descriptor read/8, error -71 [ 1813.310361][ T5694] usb 8-1: USB disconnect, device number 40 [ 1813.515429][T28454] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1813.546782][T28454] usb 1-1: device descriptor read/8, error -71 [ 1813.655904][T28454] usb usb1-port1: unable to enumerate USB device [ 1813.723494][ T30] audit: type=1800 audit(1782155526.900:7553): pid=32557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8639" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 1814.231600][T28441] usb 3-1: string descriptor 0 read error: -71 [ 1814.251026][T28441] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 1814.277207][T28441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.305865][T28441] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1814.314623][T28441] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 1814.337368][T28441] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 1814.363026][T28441] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 1814.484341][ T30] audit: type=1400 audit(1782155527.660:7554): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=32561 comm="syz.7.8641" [ 1814.980821][T32574] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 1814.980821][T32574] program syz.3.8644 not setting count and/or reply_len properly [ 1815.144246][T32580] netlink: 'syz.0.8645': attribute type 12 has an invalid length. [ 1815.154895][T32580] FAULT_INJECTION: forcing a failure. [ 1815.154895][T32580] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.168362][T32580] CPU: 0 UID: 0 PID: 32580 Comm: syz.0.8645 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.168396][T32580] Tainted: [L]=SOFTLOCKUP [ 1815.168404][T32580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1815.168418][T32580] Call Trace: [ 1815.168426][T32580] [ 1815.168435][T32580] dump_stack_lvl+0xe8/0x150 [ 1815.168463][T32580] should_fail_ex+0x40c/0x560 [ 1815.168490][T32580] should_failslab+0xa8/0x100 [ 1815.168513][T32580] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1815.168546][T32580] ? __kernfs_new_node+0xa9/0x980 [ 1815.168563][T32580] kstrdup+0x42/0x100 [ 1815.168579][T32580] __kernfs_new_node+0xa9/0x980 [ 1815.168613][T32580] ? __pfx___kernfs_new_node+0x10/0x10 [ 1815.168634][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.168659][T32580] ? kernfs_root+0x1c/0x230 [ 1815.168690][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.168711][T32580] ? kernfs_root+0x1c/0x230 [ 1815.168744][T32580] ? lock_release+0x4b/0x3c0 [ 1815.168758][T32580] ? kernfs_root+0x1c/0x230 [ 1815.168779][T32580] ? kernfs_root+0x1c/0x230 [ 1815.168801][T32580] kernfs_create_dir_ns+0xfe/0x230 [ 1815.168819][T32580] sysfs_create_dir_ns+0x12f/0x2a0 [ 1815.168844][T32580] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1815.168880][T32580] ? do_raw_spin_unlock+0xf5/0x210 [ 1815.168919][T32580] kobject_add_internal+0x622/0xcd0 [ 1815.169008][T32580] kobject_add+0x163/0x240 [ 1815.169022][T32580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1815.169044][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.169064][T32580] ? __pfx_kobject_add+0x10/0x10 [ 1815.169080][T32580] ? get_device_parent+0x366/0x3a0 [ 1815.169150][T32580] device_add+0x3fa/0xb80 [ 1815.169174][T32580] device_create+0x269/0x300 [ 1815.169191][T32580] ? timer_init_key+0x161/0x2c0 [ 1815.169214][T32580] ? __pfx_device_create+0x10/0x10 [ 1815.169230][T32580] ? ieee80211_roc_setup+0x119/0x1d0 [ 1815.169279][T32580] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1815.169339][T32580] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1815.169367][T32580] ? __pfx___nla_validate_parse+0x10/0x10 [ 1815.169394][T32580] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1815.169415][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.169432][T32580] ? trace_kmalloc+0x2a/0xf0 [ 1815.169456][T32580] hwsim_new_radio_nl+0xd8b/0xf90 [ 1815.169480][T32580] genl_family_rcv_msg_doit+0x233/0x340 [ 1815.169504][T32580] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1815.169530][T32580] ? bpf_lsm_capable+0x9/0x20 [ 1815.169543][T32580] ? security_capable+0x7e/0x2c0 [ 1815.169560][T32580] genl_rcv_msg+0x614/0x7a0 [ 1815.169581][T32580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1815.169600][T32580] ? ref_tracker_free+0x689/0x830 [ 1815.169619][T32580] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1815.169639][T32580] ? __pfx_ref_tracker_free+0x10/0x10 [ 1815.169661][T32580] netlink_rcv_skb+0x226/0x4a0 [ 1815.169676][T32580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1815.169696][T32580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1815.169745][T32580] ? down_read+0x2be/0x330 [ 1815.169780][T32580] genl_rcv+0x28/0x40 [ 1815.169804][T32580] netlink_unicast+0x7bb/0x940 [ 1815.169838][T32580] netlink_sendmsg+0x813/0xb40 [ 1815.169865][T32580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.169880][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.169897][T32580] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1815.169916][T32580] ? lock_release+0x4b/0x3c0 [ 1815.169929][T32580] ? arch_stack_walk+0xfb/0x150 [ 1815.169949][T32580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.169964][T32580] sock_sendmsg_nosec+0x13a/0x180 [ 1815.169985][T32580] ____sys_sendmsg+0x54e/0x850 [ 1815.170001][T32580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.170017][T32580] ? lock_release+0x4b/0x3c0 [ 1815.170031][T32580] ? import_iovec+0x73/0xa0 [ 1815.170055][T32580] ___sys_sendmsg+0x2a5/0x360 [ 1815.170069][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.170084][T32580] ? get_pid_task+0x20/0x1f0 [ 1815.170100][T32580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.170117][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.170142][T32580] ? __fget_files+0x2a/0x420 [ 1815.170165][T32580] ? __fget_files+0x3a2/0x420 [ 1815.170191][T32580] __x64_sys_sendmsg+0x1b1/0x290 [ 1815.170206][T32580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.170226][T32580] ? rcu_is_watching+0x15/0xb0 [ 1815.170243][T32580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.170258][T32580] do_syscall_64+0x174/0x580 [ 1815.170279][T32580] ? trace_irq_disable+0x3b/0x140 [ 1815.170301][T32580] ? clear_bhb_loop+0x40/0x90 [ 1815.170318][T32580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.170333][T32580] RIP: 0033:0x7fc2f179ce59 [ 1815.170352][T32580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.170366][T32580] RSP: 002b:00007fc2f26d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.170382][T32580] RAX: ffffffffffffffda RBX: 00007fc2f1a15fa0 RCX: 00007fc2f179ce59 [ 1815.170394][T32580] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1815.170405][T32580] RBP: 00007fc2f26d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.170414][T32580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1815.170424][T32580] R13: 00007fc2f1a16038 R14: 00007fc2f1a15fa0 R15: 00007fc2f1b3fa48 [ 1815.170441][T32580] [ 1815.170471][T32580] kobject: kobject_add_internal failed for hwsim59 (error: -12 parent: mac80211_hwsim) [ 1815.386087][T28444] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1815.401165][T28441] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1815.816034][T32582] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1815.917954][T28444] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.931911][T28444] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1815.943361][T28441] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1815.952998][T28441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.964498][T28444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.975419][T28441] usb 4-1: Product: syz [ 1815.984960][T28444] usb 8-1: config 0 descriptor?? [ 1815.990109][T28441] usb 4-1: Manufacturer: syz [ 1815.994952][T28441] usb 4-1: SerialNumber: syz [ 1816.021254][T28441] usb 4-1: config 0 descriptor?? [ 1816.213621][T28444] usbhid 8-1:0.0: can't add hid device: -71 [ 1816.220325][T28444] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1816.232528][T28444] usb 8-1: USB disconnect, device number 41 [ 1816.240193][T28441] mos7840 4-1:0.0: required endpoints missing [ 1816.315459][T28442] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1816.395428][T28454] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1816.443582][ T5694] usb 4-1: USB disconnect, device number 97 [ 1816.478157][T28442] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1816.487800][T28442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.496483][T28442] usb 3-1: Product: syz [ 1816.500809][T28442] usb 3-1: Manufacturer: syz [ 1816.505498][T28442] usb 3-1: SerialNumber: syz [ 1816.516132][T28442] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1816.532602][T28441] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1816.555425][T28454] usb 1-1: Using ep0 maxpacket: 8 [ 1816.568532][T28454] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1816.596902][T28454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.615845][T28454] usb 1-1: Product: syz [ 1816.620106][T28454] usb 1-1: Manufacturer: syz [ 1816.624744][T28454] usb 1-1: SerialNumber: syz [ 1816.632408][T28454] usb 1-1: config 0 descriptor?? [ 1816.640799][T28454] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1816.675686][T28442] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1816.769868][T32593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1816.850479][T28442] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.872417][T28442] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1816.892758][T28442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.899401][T28454] gspca_sq930x: reg_r 001f failed -71 [ 1816.919798][T28442] usb 8-1: config 0 descriptor?? [ 1816.931224][T28454] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1816.966875][T28454] usb 1-1: USB disconnect, device number 52 [ 1817.137553][T32576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.151553][T32576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.315465][T28444] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1817.465500][T28444] usb 4-1: Using ep0 maxpacket: 16 [ 1817.477967][T28444] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1817.487187][T28444] usb 4-1: config 251 has an invalid descriptor of length 49, skipping remainder of the config [ 1817.498124][T28444] usb 4-1: config 251 has no interface number 0 [ 1817.504532][T28444] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1817.515551][T28444] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1817.535517][T28444] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1817.556194][T28444] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1817.585414][T28444] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1817.594926][T28444] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1817.627634][T28441] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1817.647835][T28444] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1817.665945][T28441] ath9k_htc: Failed to initialize the device [ 1817.677757][T28444] usb 4-1: Product: syz [ 1817.685922][T28444] usb 4-1: SerialNumber: syz [ 1817.716068][T28441] usb 3-1: ath9k_htc: USB layer deinitialized [ 1817.776583][T28442] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 1817.784876][T32576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.789421][T28442] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input368 [ 1817.804583][T32576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.912399][T32600] Invalid logical block size (100663296) [ 1817.935542][T28454] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1817.941117][T28444] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1817.962474][T28444] usb 4-1: USB disconnect, device number 98 [ 1818.095441][T28454] usb 1-1: device descriptor read/64, error -71 [ 1818.345500][T28454] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1818.485453][T28454] usb 1-1: device descriptor read/64, error -71 [ 1818.605727][T28454] usb usb1-port1: attempt power cycle [ 1818.670590][T28455] usb 8-1: USB disconnect, device number 42 [ 1818.670792][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1818.885406][T28444] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1818.955441][T28454] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1818.988998][T28454] usb 1-1: device descriptor read/8, error -71 [ 1819.095402][T28444] usb 4-1: Using ep0 maxpacket: 8 [ 1819.117527][T28444] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1819.135393][T28444] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1819.156440][T28455] usb 3-1: USB disconnect, device number 42 [ 1819.163232][T28444] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1819.177115][T28444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.185261][T28444] usb 4-1: Product: syz [ 1819.189767][T28444] usb 4-1: Manufacturer: syz [ 1819.194417][T28444] usb 4-1: SerialNumber: syz [ 1819.235587][T28454] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1819.256034][T28454] usb 1-1: device descriptor read/8, error -71 [ 1819.366813][T28454] usb usb1-port1: unable to enumerate USB device [ 1819.408402][T28444] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1819.420780][T28444] cdc_ncm 4-1:1.0: bind() failure [ 1819.431644][T28444] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1819.438789][T28444] cdc_ncm 4-1:1.1: bind() failure [ 1819.449033][T28444] usb 4-1: USB disconnect, device number 99 [ 1820.435432][T28454] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1820.459019][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1820.595416][T28454] usb 4-1: Using ep0 maxpacket: 8 [ 1820.620864][T28454] usb 4-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice= 0.40 [ 1820.648356][T28454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.658095][T28454] usb 4-1: Product: ᠌ [ 1820.662466][T28454] usb 4-1: Manufacturer: 䀁 [ 1820.670433][T28454] usb 4-1: SerialNumber: Н [ 1820.895707][T28454] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1820.913600][T28454] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1820.942250][T28454] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1820.965768][T28454] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1821.000740][T28454] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1821.106061][T28454] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1821.161112][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1821.181570][T28441] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1821.316671][T32646] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1821.337797][T32646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1821.388503][T28441] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1821.402285][T28441] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1821.413553][T32646] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1821.442977][T28441] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1821.479094][T28441] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1821.554992][T28441] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1821.570762][T28441] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.579350][T28441] usb 8-1: Product: syz [ 1821.588111][T28441] usb 8-1: Manufacturer: syz [ 1821.598750][T28441] usb 8-1: SerialNumber: syz [ 1821.661953][T28441] usb 8-1: config 0 descriptor?? [ 1821.709645][T28441] redrat3 8-1:0.0: Couldn't find all endpoints [ 1821.911040][T32640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.944996][T32640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.988391][T28441] usb 8-1: USB disconnect, device number 43 [ 1822.506329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1822.768494][T32658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1823.375968][T28455] usb 4-1: USB disconnect, device number 100 [ 1823.551208][T32664] xt_hashlimit: size too large, truncated to 1048576 [ 1823.632272][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1823.928456][T32676] netlink: 'syz.2.8679': attribute type 1 has an invalid length. [ 1824.288866][T32680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.776360][ T30] audit: type=1326 audit(1782155537.960:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32679 comm="syz.2.8681" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f299ce59 code=0x0 [ 1824.786399][T28455] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1824.966430][T28455] usb 1-1: Using ep0 maxpacket: 8 [ 1824.982422][T28455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1825.003081][T28455] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1825.023462][T28455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.064418][T28455] usb 1-1: config 0 descriptor?? [ 1825.078294][T28455] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1825.545469][T28444] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1825.625942][T28455] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1825.707161][T28444] usb 8-1: config 32 has an invalid interface number: 255 but max is 0 [ 1825.724348][T28444] usb 8-1: config 32 has no interface number 0 [ 1825.738005][T28444] usb 8-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1825.761523][T28444] usb 8-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1825.785477][T28455] usb 4-1: Using ep0 maxpacket: 32 [ 1825.791884][T28444] usb 8-1: config 32 interface 255 has no altsetting 0 [ 1825.797629][T28455] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1825.799881][T28444] usb 8-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1825.810260][T28455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.818071][T28444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.833325][T28455] usb 4-1: Product: syz [ 1825.840217][T28444] usb-storage 8-1:32.255: USB Mass Storage device detected [ 1825.840221][T28455] usb 4-1: Manufacturer: syz [ 1825.840241][T28455] usb 4-1: SerialNumber: syz [ 1825.861124][T28444] usb-storage 8-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 1825.872123][T28455] usb 4-1: config 0 descriptor?? [ 1825.880989][T28455] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1826.083079][T32699] fuse: Bad value for 'fd' [ 1826.138945][T32699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.156475][T32699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.199255][T32699] No fuse device found [ 1826.397400][T28455] gspca_ov534_9: reg_w failed -110 [ 1826.533799][T32719] syzkaller1: entered promiscuous mode [ 1826.539784][T32719] syzkaller1: entered allmulticast mode [ 1826.592847][ T5694] usb 8-1: USB disconnect, device number 44 [ 1826.725125][T32721] input: syz0 as /devices/virtual/input/input369 [ 1826.815435][T28455] gspca_ov534_9: Unknown sensor 0000 [ 1826.815509][T28455] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1826.844315][T28455] usb 4-1: USB disconnect, device number 101 [ 1826.942459][T15460] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.979265][T15460] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.995645][ T5694] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1827.076559][T15460] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.141634][T15460] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.155707][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 1827.162549][ T5694] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 1827.171964][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.191030][ T5694] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1827.314965][T15460] bridge_slave_1: left allmulticast mode [ 1827.321400][T15460] bridge_slave_1: left promiscuous mode [ 1827.328240][T15460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.338460][T15460] bridge_slave_0: left allmulticast mode [ 1827.344183][T15460] bridge_slave_0: left promiscuous mode [ 1827.350606][T15460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.456907][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1827.464385][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1827.473663][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1827.482245][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1827.494972][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1827.517888][T15460] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1827.561136][T28457] usb 1-1: USB disconnect, device number 57 [ 1827.604090][T15460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.662346][T15460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.701238][T15460] bond0 (unregistering): Released all slaves [ 1827.724648][T15460] bond1 (unregistering): Released all slaves [ 1827.739629][T15460] bond2 (unregistering): Released all slaves [ 1827.762914][T32726] xt_hashlimit: size too large, truncated to 1048576 [ 1827.829289][T15460] IPVS: stopping backup sync thread 31454 ... [ 1827.994939][ T5694] gspca_nw80x: reg_r err -71 [ 1828.005441][T28457] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1828.019281][ T5694] nw80x 3-1:16.0: probe with driver nw80x failed with error -71 [ 1828.103570][ T5694] usb 3-1: USB disconnect, device number 43 [ 1828.136764][T15460] hsr_slave_0: left promiscuous mode [ 1828.153713][T15460] hsr_slave_1: left promiscuous mode [ 1828.174065][T15460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1828.203534][T15460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.209607][T28457] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1828.227088][T15460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1828.245658][T28457] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 1828.256023][T28457] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1828.258641][T15460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1828.270306][T28457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1828.288082][T28457] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1828.304257][T28457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.323583][T15460] veth1_macvtap: left promiscuous mode [ 1828.329194][T15460] veth0_macvtap: left promiscuous mode [ 1828.334839][T15460] veth1_vlan: left promiscuous mode [ 1828.340319][T15460] veth0_vlan: left promiscuous mode [ 1828.353284][T28457] usb 1-1: Product: syz [ 1828.382101][T28457] usb 1-1: Manufacturer: syz [ 1828.404474][T28457] usb 1-1: SerialNumber: syz [ 1828.434898][T28457] usb 1-1: config 0 descriptor?? [ 1828.463866][T32731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1828.504805][T28457] usb 1-1: ucan: probing device on interface #0 [ 1828.536934][T28457] usb 1-1: ucan: invalid endpoint configuration [ 1828.554493][T28457] usb 1-1: ucan: probe failed; try to update the device firmware [ 1828.778935][T32731] Cannot find map_set index 4 as target [ 1828.796912][T15460] team0 (unregistering): Port device team_slave_1 removed [ 1828.838929][T15460] team0 (unregistering): Port device team_slave_0 removed [ 1828.927561][T32731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.972665][T32731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.100888][T28441] usb 1-1: USB disconnect, device number 58 [ 1829.224571][ T30] audit: type=1800 audit(1782155542.400:7556): pid=32760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8702" name="SYSV00000000" dev="tmpfs" ino=12 res=0 errno=0 [ 1829.261343][T28442] IPVS: starting estimator thread 0... [ 1829.362187][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1829.375423][T32762] IPVS: using max 38 ests per chain, 91200 per kthread [ 1829.546112][T26209] Bluetooth: hci0: command tx timeout [ 1829.574029][ T303] xt_policy: output policy not valid in PREROUTING and INPUT [ 1829.871175][T32728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.906182][T32728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.950606][T32728] bridge_slave_0: entered allmulticast mode [ 1829.999127][T32728] bridge_slave_0: entered promiscuous mode [ 1830.039091][T32728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.063285][T32728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.088475][T32728] bridge_slave_1: entered allmulticast mode [ 1830.117606][T32728] bridge_slave_1: entered promiscuous mode [ 1830.256598][T32728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.296421][T32728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.396827][T32728] team0: Port device team_slave_0 added [ 1830.442480][T32728] team0: Port device team_slave_1 added [ 1830.543401][T32728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.574305][T32728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.646161][T32728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.662794][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1830.684512][T32728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.700814][T32728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.741464][T28441] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1830.751600][T32728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.900017][T28441] usb 1-1: too many configurations: 126, using maximum allowed: 8 [ 1830.919904][T32728] hsr_slave_0: entered promiscuous mode [ 1830.934352][T32728] hsr_slave_1: entered promiscuous mode [ 1830.947946][T28441] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1830.959663][T28441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.984395][T28441] usb 1-1: Product: syz [ 1830.995072][T28441] usb 1-1: Manufacturer: syz [ 1831.000760][T28441] usb 1-1: SerialNumber: syz [ 1831.502504][T32728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1831.544967][T32728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1831.557057][T32728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1831.570986][T32728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1831.579838][T32728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1831.590831][T32728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1831.600265][T32728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1831.611826][T32728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1831.625471][T26209] Bluetooth: hci0: command tx timeout [ 1831.796972][T32728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.819201][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1831.833417][T32728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.852883][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.860140][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.908898][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.916101][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.050532][T32728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.126659][T32728] veth0_vlan: entered promiscuous mode [ 1832.164873][T32728] veth1_vlan: entered promiscuous mode [ 1832.240695][T32728] veth0_macvtap: entered promiscuous mode [ 1832.262173][T32728] veth1_macvtap: entered promiscuous mode [ 1832.330911][T32728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.451759][T32728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.477544][T19725] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.503641][T19725] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.563608][T19725] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.592141][T19725] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.712492][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.734874][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.800558][T29700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.832679][T29700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.936108][T28455] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1832.996550][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1833.099864][T28455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.135441][T28455] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1833.154553][T28455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.170798][T28455] usb 3-1: config 0 descriptor?? [ 1833.415671][T28455] usbhid 3-1:0.0: can't add hid device: -71 [ 1833.436981][T28455] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1833.463592][T28441] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1833.481129][T28455] usb 3-1: USB disconnect, device number 44 [ 1833.495281][ T388] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8696'. [ 1833.506008][T28458] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1833.516150][T28441] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1833.530663][T28441] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1833.552693][T28441] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1833.574792][T28441] usb 1-1: USB disconnect, device number 59 [ 1833.664585][T28458] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1833.687898][T28458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.699095][T28458] usb 4-1: Product: syz [ 1833.703328][T28458] usb 4-1: Manufacturer: syz [ 1833.715626][ T5638] Bluetooth: hci0: command tx timeout [ 1833.720173][T28458] usb 4-1: SerialNumber: syz [ 1833.736608][T28458] usb 4-1: config 0 descriptor?? [ 1833.749049][T28458] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1833.896316][ T407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8719'. [ 1833.935805][T28455] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1834.018376][T28441] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1834.087848][T28455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.115732][T28455] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1834.125624][T28455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.135194][T28455] usb 3-1: config 0 descriptor?? [ 1834.185480][T28441] usb 1-1: Using ep0 maxpacket: 32 [ 1834.192406][T28441] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.211607][T28441] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.238893][T28441] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1834.253294][T28441] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1834.277565][T28441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.297569][T28441] usb 1-1: config 0 descriptor?? [ 1834.751409][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.761795][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.826126][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 1834.914249][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8720'. [ 1834.948122][T28455] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1834.968807][T28455] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input370 [ 1835.188606][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x3 [ 1835.200267][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.207947][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.214972][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.222322][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.230168][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.237442][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.244479][T28441] lenovo 0003:04B3:3108.008A: unknown main item tag 0x0 [ 1835.256668][T28441] lenovo 0003:04B3:3108.008A: hidraw0: USB HID v0.00 Device [HID 04b3:3108] on usb-dummy_hcd.0-1/input0 [ 1835.340860][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.363009][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.785742][T26209] Bluetooth: hci0: command tx timeout [ 1835.847507][T28455] usb 1-1: USB disconnect, device number 60 [ 1835.914850][ T431] FAULT_INJECTION: forcing a failure. [ 1835.914850][ T431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1835.935521][ T431] CPU: 1 UID: 0 PID: 431 Comm: syz.0.8721 Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.935557][ T431] Tainted: [L]=SOFTLOCKUP [ 1835.935566][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1835.935580][ T431] Call Trace: [ 1835.935588][ T431] [ 1835.935598][ T431] dump_stack_lvl+0xe8/0x150 [ 1835.935628][ T431] should_fail_ex+0x40c/0x560 [ 1835.935655][ T431] _copy_from_user+0x2d/0xb0 [ 1835.935700][ T431] do_sock_getsockopt+0x200/0x7e0 [ 1835.935738][ T431] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1835.935768][ T431] ? rcu_is_watching+0x15/0xb0 [ 1835.935792][ T431] ? lock_release+0x4b/0x3c0 [ 1835.935816][ T431] ? __fget_files+0x3a2/0x420 [ 1835.935846][ T431] ? __fget_files+0x2a/0x420 [ 1835.935880][ T431] __x64_sys_getsockopt+0x1a4/0x240 [ 1835.935903][ T431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.935925][ T431] do_syscall_64+0x174/0x580 [ 1835.935964][ T431] ? trace_irq_disable+0x3b/0x140 [ 1835.935995][ T431] ? clear_bhb_loop+0x40/0x90 [ 1835.936018][ T431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.936038][ T431] RIP: 0033:0x7fc2f179ce59 [ 1835.936058][ T431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.936076][ T431] RSP: 002b:00007fc2f26d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1835.936099][ T431] RAX: ffffffffffffffda RBX: 00007fc2f1a15fa0 RCX: 00007fc2f179ce59 [ 1835.936114][ T431] RDX: 000000000000002b RSI: 0000000000000001 RDI: 0000000000000003 [ 1835.936127][ T431] RBP: 00007fc2f26d1090 R08: 0000200000000080 R09: 0000000000000000 [ 1835.936142][ T431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.936155][ T431] R13: 00007fc2f1a16038 R14: 00007fc2f1a15fa0 R15: 00007fc2f1b3fa48 [ 1835.936178][ T431] [ 1836.375393][T15073] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1836.490181][ T440] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1836.525473][T15073] usb 9-1: Using ep0 maxpacket: 32 [ 1836.533910][T15073] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1836.544025][T15073] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.553644][T15073] usb 9-1: Product: syz [ 1836.558109][T15073] usb 9-1: Manufacturer: syz [ 1836.563127][T15073] usb 9-1: SerialNumber: syz [ 1836.569819][T15073] usb 9-1: config 0 descriptor?? [ 1836.583113][T15073] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1836.685630][T28458] gspca_stk1135: reg_w 0x350 err -110 [ 1836.692162][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.699089][T28458] gspca_stk1135: Sensor write failed [ 1836.704526][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.714976][T28458] gspca_stk1135: Sensor write failed [ 1836.721874][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.729006][T28458] gspca_stk1135: Sensor read failed [ 1836.734381][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.742590][T28458] gspca_stk1135: Sensor read failed [ 1836.748082][T28458] gspca_stk1135: Detected sensor type unknown (0x0) [ 1836.754856][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.762568][T28458] gspca_stk1135: Sensor read failed [ 1836.767930][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.774362][T28458] gspca_stk1135: Sensor read failed [ 1836.780077][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.786971][T28458] gspca_stk1135: Sensor write failed [ 1836.792370][T28458] gspca_stk1135: serial bus timeout: status=0x00 [ 1836.804677][T28458] gspca_stk1135: Sensor write failed [ 1836.814042][ T429] fuse: Bad value for 'fd' [ 1836.822491][T28458] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1836.892834][ T429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.917932][T28441] usb 3-1: USB disconnect, device number 45 [ 1836.918113][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1836.934028][ T429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.961535][ T429] No fuse device found [ 1837.115619][T15073] gspca_ov534_9: reg_w failed -110 [ 1837.198373][ T455] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1837.483981][T28457] usb 4-1: USB disconnect, device number 102 [ 1837.525752][T15073] gspca_ov534_9: Unknown sensor 0000 [ 1837.525827][T15073] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1837.585440][T15073] usb 9-1: USB disconnect, device number 2 [ 1837.702395][ T450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1837.926860][T28457] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1837.995439][T28437] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1838.109284][T28457] usb 4-1: Using ep0 maxpacket: 16 [ 1838.139984][T28457] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1838.172378][T28457] usb 4-1: config 0 has no interface number 0 [ 1838.187691][T28457] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1838.214085][T28457] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 1025, setting to 1024 [ 1838.243385][T28457] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1838.260559][T28457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.269259][T28437] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1838.292970][T28457] usb 4-1: Product: syz [ 1838.310347][T28457] usb 4-1: Manufacturer: syz [ 1838.322071][T28437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.329121][T28457] usb 4-1: SerialNumber: syz [ 1838.356043][T28437] usb 1-1: Product: syz [ 1838.374162][T28437] usb 1-1: Manufacturer: syz [ 1838.380600][T28457] usb 4-1: config 0 descriptor?? [ 1838.398241][T28437] usb 1-1: SerialNumber: syz [ 1838.400003][ T459] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1838.418543][T28457] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1838.433285][T28437] usb 1-1: config 0 descriptor?? [ 1838.453099][T28437] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 061 [ 1838.637870][ T467] netlink: 'syz.8.8733': attribute type 1 has an invalid length. [ 1838.669751][T28457] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1838.755556][T28457] usb 4-1: USB disconnect, device number 103 [ 1838.813012][T28457] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1838.853033][T28457] cypress_m8 4-1:0.35: device disconnected [ 1839.137057][T15073] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1839.305543][T15073] usb 9-1: device descriptor read/64, error -71 [ 1839.545619][T15073] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1839.656990][ T475] syz_tun: entered allmulticast mode [ 1839.707614][ T480] FAULT_INJECTION: forcing a failure. [ 1839.707614][ T480] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.725567][T15073] usb 9-1: device descriptor read/64, error -71 [ 1839.742778][ T480] CPU: 0 UID: 0 PID: 480 Comm: syz.4.8738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.742818][ T480] Tainted: [L]=SOFTLOCKUP [ 1839.742828][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1839.742843][ T480] Call Trace: [ 1839.742853][ T480] [ 1839.742865][ T480] dump_stack_lvl+0xe8/0x150 [ 1839.742898][ T480] should_fail_ex+0x40c/0x560 [ 1839.742931][ T480] should_failslab+0xa8/0x100 [ 1839.742957][ T480] ? skb_clone+0x212/0x3a0 [ 1839.742981][ T480] kmem_cache_alloc_noprof+0x87/0x650 [ 1839.743022][ T480] ? apparmor_capable+0x126/0x170 [ 1839.743058][ T480] skb_clone+0x212/0x3a0 [ 1839.743081][ T480] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1839.743120][ T480] nfnetlink_rcv+0x4de/0x28c0 [ 1839.743160][ T480] ? __dev_queue_xmit+0x29b/0x37f0 [ 1839.743184][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.743214][ T480] ? trace_irq_enable+0x3b/0x140 [ 1839.743250][ T480] ? __dev_queue_xmit+0x29b/0x37f0 [ 1839.743276][ T480] ? __dev_queue_xmit+0x29b/0x37f0 [ 1839.743302][ T480] ? __local_bh_enable_ip+0xd0/0x130 [ 1839.743346][ T480] ? __dev_queue_xmit+0x29b/0x37f0 [ 1839.743372][ T480] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 1839.743396][ T480] ? sock_sendmsg_nosec+0x13a/0x180 [ 1839.743424][ T480] ? ____sys_sendmsg+0x54e/0x850 [ 1839.743453][ T480] ? __dev_queue_xmit+0x29b/0x37f0 [ 1839.743480][ T480] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1839.743523][ T480] ? ref_tracker_free+0x689/0x830 [ 1839.743554][ T480] ? __pfx_ref_tracker_free+0x10/0x10 [ 1839.743588][ T480] ? __skb_clone+0x449/0x6c0 [ 1839.743615][ T480] ? skb_clone+0x246/0x3a0 [ 1839.743641][ T480] ? __netlink_deliver_tap+0x811/0x860 [ 1839.743664][ T480] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.743687][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.743712][ T480] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.743736][ T480] ? lock_release+0x4b/0x3c0 [ 1839.743759][ T480] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.743786][ T480] netlink_unicast+0x7bb/0x940 [ 1839.743827][ T480] netlink_sendmsg+0x813/0xb40 [ 1839.743855][ T480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.743877][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.743902][ T480] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1839.743931][ T480] ? lock_release+0x4b/0x3c0 [ 1839.743951][ T480] ? arch_stack_walk+0xfb/0x150 [ 1839.743982][ T480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.744004][ T480] sock_sendmsg_nosec+0x13a/0x180 [ 1839.744047][ T480] ____sys_sendmsg+0x54e/0x850 [ 1839.744073][ T480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.744115][ T480] ? lock_release+0x4b/0x3c0 [ 1839.744138][ T480] ? import_iovec+0x73/0xa0 [ 1839.744173][ T480] ___sys_sendmsg+0x2a5/0x360 [ 1839.744195][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.744219][ T480] ? get_pid_task+0x20/0x1f0 [ 1839.744243][ T480] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.744273][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.744312][ T480] ? __fget_files+0x2a/0x420 [ 1839.744347][ T480] ? __fget_files+0x3a2/0x420 [ 1839.744389][ T480] __x64_sys_sendmsg+0x1b1/0x290 [ 1839.744416][ T480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1839.744447][ T480] ? rcu_is_watching+0x15/0xb0 [ 1839.744475][ T480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.744501][ T480] do_syscall_64+0x174/0x580 [ 1839.744536][ T480] ? trace_irq_disable+0x3b/0x140 [ 1839.744571][ T480] ? clear_bhb_loop+0x40/0x90 [ 1839.744598][ T480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.744620][ T480] RIP: 0033:0x7f9148b9ce59 [ 1839.744643][ T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.744664][ T480] RSP: 002b:00007f91499a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.744692][ T480] RAX: ffffffffffffffda RBX: 00007f9148e15fa0 RCX: 00007f9148b9ce59 [ 1839.744710][ T480] RDX: 0000000004040080 RSI: 0000200000000500 RDI: 0000000000000003 [ 1839.744727][ T480] RBP: 00007f91499a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.744743][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.744758][ T480] R13: 00007f9148e16038 R14: 00007f9148e15fa0 R15: 00007f9148f3fa48 [ 1839.744786][ T480] [ 1840.195503][T28437] (null): error -EIO: failure setting delay to 10us [ 1840.210309][T15073] usb usb9-port1: attempt power cycle [ 1840.241000][T28437] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1840.305081][T28441] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1840.364814][T28437] usb 1-1: USB disconnect, device number 61 [ 1840.427644][ T493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1840.437377][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1840.516386][T28441] usb 4-1: Using ep0 maxpacket: 8 [ 1840.540169][T28441] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1840.563337][T28441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.610580][T28441] usb 4-1: config 0 has no interface number 0 [ 1840.640926][T28441] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1840.656770][T15073] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1840.686303][T28441] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1840.697068][T28441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.709566][T28441] usb 4-1: config 0 descriptor?? [ 1840.722646][T15073] usb 9-1: device descriptor read/8, error -71 [ 1840.797997][ T507] netlink: 'syz.0.8744': attribute type 1 has an invalid length. [ 1840.975628][T15073] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1840.995451][T28457] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1841.003536][T15073] usb 9-1: device descriptor read/8, error -71 [ 1841.116971][T15073] usb usb9-port1: unable to enumerate USB device [ 1841.140095][ T475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.151911][ T475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.168194][T28457] usb 3-1: config 0 has no interfaces? [ 1841.174007][T28457] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1841.183278][T28457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.188473][ T475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8736'. [ 1841.204032][T28457] usb 3-1: config 0 descriptor?? [ 1841.279709][ T474] syz_tun: left allmulticast mode [ 1841.285406][T15073] usb 4-1: USB disconnect, device number 104 [ 1841.296580][T28458] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1841.420550][T28457] usb 3-1: USB disconnect, device number 46 [ 1841.468950][T28458] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1841.485404][T28458] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1841.506899][T28458] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1841.525685][T28458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.544126][T28458] usb 1-1: Product: syz [ 1841.551208][T28458] usb 1-1: Manufacturer: syz [ 1841.559166][T28458] usb 1-1: SerialNumber: syz [ 1841.566334][T28458] usb 1-1: config 0 descriptor?? [ 1841.577072][T28458] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1842.091341][ T523] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1842.115488][ T523] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1842.167499][ T525] netlink: 428 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1842.219349][ T525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8752'. [ 1842.264815][ T528] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1842.284210][ T528] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1842.409190][ T532] netlink: 'syz.2.8755': attribute type 1 has an invalid length. [ 1842.591954][T28458] gspca_sunplus: reg_r err -71 [ 1842.606633][T28458] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1842.633231][T28458] usb 1-1: USB disconnect, device number 62 [ 1842.690566][ T538] could not allocate digest TFM handle blake2b-512-generic [ 1842.925390][T28445] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1842.991057][ T31] INFO: task kworker/1:12:28440 blocked for more than 143 seconds. [ 1843.006946][ T31] Tainted: G L syzkaller #0 [ 1843.024025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1843.043307][ T31] task:kworker/1:12 state:D stack:21512 pid:28440 tgid:28440 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1843.068956][ T31] Workqueue: usb_hub_wq hub_event [ 1843.079426][ T31] Call Trace: [ 1843.085392][T28445] usb 3-1: Using ep0 maxpacket: 16 [ 1843.088136][ T31] [ 1843.098344][T28445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.104714][ T31] __schedule+0x17d9/0x56c0 [ 1843.120693][T28445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.133743][ T31] ? __pfx___schedule+0x10/0x10 [ 1843.146518][ T31] ? rcu_is_watching+0x15/0xb0 [ 1843.146706][T28445] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1843.161388][ T31] ? rcu_is_watching+0x15/0xb0 [ 1843.183931][ T31] ? lock_release+0x4b/0x3c0 [ 1843.197783][ T31] ? rcu_is_watching+0x15/0xb0 [ 1843.200493][T28445] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1843.216354][ T31] ? schedule+0x90/0x360 [ 1843.230068][ T31] ? trace_irq_enable+0x3b/0x140 [ 1843.240520][T28445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.247976][ T31] schedule+0x164/0x360 [ 1843.256450][ T31] schedule_preempt_disabled+0x13/0x30 [ 1843.272150][ T31] __mutex_lock+0x7bf/0x1550 [ 1843.279714][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1843.284858][T28445] usb 3-1: config 0 descriptor?? [ 1843.297951][ T31] ? hub_event+0x20c9/0x4d30 [ 1843.311108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1843.322606][ T31] hub_event+0x20c9/0x4d30 [ 1843.331052][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1843.339514][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1843.348456][ T31] ? __pfx_hub_event+0x10/0x10 [ 1843.356914][ T31] ? rcu_is_watching+0x15/0xb0 [ 1843.365647][ T31] ? lock_acquire+0x5f/0x350 [ 1843.371813][ T31] ? rcu_is_watching+0x15/0xb0 [ 1843.380449][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1843.402489][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1843.418551][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1843.435972][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1843.453016][ T31] ? assign_work+0x3cf/0x5d0 [ 1843.467404][ T31] worker_thread+0xa47/0xfb0 [ 1843.477419][ T31] kthread+0x388/0x470 [ 1843.483611][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1843.493154][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.506512][ T31] ret_from_fork+0x514/0xb70 [ 1843.513878][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1843.525414][ T31] ? __switch_to+0xc89/0x1420 [ 1843.533173][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.545549][ T31] ret_from_fork_asm+0x1a/0x30 [ 1843.551486][ T31] [ 1843.554746][ T31] INFO: lockdep is turned off. [ 1843.559672][ T31] NMI backtrace for cpu 1 [ 1843.559695][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.559723][ T31] Tainted: [L]=SOFTLOCKUP [ 1843.559732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1843.559749][ T31] Call Trace: [ 1843.559759][ T31] [ 1843.559768][ T31] dump_stack_lvl+0xe8/0x150 [ 1843.559797][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1843.559884][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1843.559908][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1843.559936][ T31] sys_info+0x135/0x170 [ 1843.559957][ T31] watchdog+0xfd7/0x1030 [ 1843.559992][ T31] ? watchdog+0x1c7/0x1030 [ 1843.560024][ T31] kthread+0x388/0x470 [ 1843.560045][ T31] ? __pfx_watchdog+0x10/0x10 [ 1843.560074][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.560096][ T31] ret_from_fork+0x514/0xb70 [ 1843.560120][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1843.560142][ T31] ? __switch_to+0xc89/0x1420 [ 1843.560174][ T31] ? __pfx_kthread+0x10/0x10 [ 1843.560196][ T31] ret_from_fork_asm+0x1a/0x30 [ 1843.560230][ T31] [ 1843.560264][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1843.677393][ C0] NMI backtrace for cpu 0 [ 1843.677416][ C0] CPU: 0 UID: 0 PID: 5634 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.677442][ C0] Tainted: [L]=SOFTLOCKUP [ 1843.677449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1843.677461][ C0] RIP: 0010:unwind_next_frame+0x4f4/0x2550 [ 1843.677495][ C0] Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 [ 1843.677511][ C0] RSP: 0018:ffffc900046a78e8 EFLAGS: 00000a06 [ 1843.677528][ C0] RAX: 0000000000000000 RBX: ffffffff904aabf0 RCX: dffffc0000000000 [ 1843.677542][ C0] RDX: ffffffff904aabe0 RSI: ffffffff90c69c0a RDI: ffffffff8c2a8d20 [ 1843.677556][ C0] RBP: ffffffff8176dc9c R08: 0000000000000009 R09: 0000000000000000 [ 1843.677568][ C0] R10: ffffc900046a79e8 R11: fffff520008d4f49 R12: ffffffff904aac00 [ 1843.677581][ C0] R13: ffffffff904aabe0 R14: ffffc900046a79e8 R15: ffffffff904aabe0 [ 1843.677596][ C0] FS: 00007f1a18f50880(0000) GS:ffff888125251000(0000) knlGS:0000000000000000 [ 1843.677611][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1843.677626][ C0] CR2: 00007ffe1d191f80 CR3: 00000000729b0000 CR4: 00000000003526f0 [ 1843.677650][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 1843.677662][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1843.677673][ C0] Call Trace: [ 1843.677680][ C0] [ 1843.677688][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1843.677722][ C0] ? __unwind_start+0xed/0x660 [ 1843.677742][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 1843.677765][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1843.677790][ C0] __unwind_start+0x514/0x660 [ 1843.677814][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1843.677841][ C0] arch_stack_walk+0xe3/0x150 [ 1843.677866][ C0] ? __unwind_start+0xed/0x660 [ 1843.677890][ C0] stack_trace_save+0xa9/0x100 [ 1843.677919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1843.677946][ C0] ? __asan_memset+0x22/0x50 [ 1843.677970][ C0] ? terminate_walk+0x38a/0x4c0 [ 1843.677998][ C0] kasan_save_track+0x3e/0x80 [ 1843.678049][ C0] ? do_readlinkat+0x451/0x510 [ 1843.678076][ C0] kasan_save_free_info+0x40/0x50 [ 1843.678098][ C0] __kasan_slab_free+0x5c/0x80 [ 1843.678116][ C0] kmem_cache_free+0x182/0x650 [ 1843.678147][ C0] do_readlinkat+0x451/0x510 [ 1843.678178][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 1843.678210][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.678229][ C0] __x64_sys_readlink+0x7f/0x90 [ 1843.678256][ C0] do_syscall_64+0x174/0x580 [ 1843.678282][ C0] ? clear_bhb_loop+0x40/0x90 [ 1843.678302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.678323][ C0] RIP: 0033:0x7f1a189153a7 [ 1843.678351][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 1843.678366][ C0] RSP: 002b:00007ffdcfecf988 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 1843.678384][ C0] RAX: ffffffffffffffda RBX: 00007ffdcfed0360 RCX: 00007f1a189153a7 [ 1843.678397][ C0] RDX: 0000000000000400 RSI: 00007ffdcfecfe40 RDI: 00007ffdcfed0360 [ 1843.678410][ C0] RBP: 00007ffdcfed036f R08: 0000000000000075 R09: 0000000000000000 [ 1843.678421][ C0] R10: 0000000000000100 R11: 0000000000000246 R12: 00007ffdcfecfe40 [ 1843.678433][ C0] R13: 00007ffdcfecfa40 R14: 00005619824d06d7 R15: 00005619a9582630 [ 1843.678453][ C0] [ 1844.030773][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.038272][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.049028][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.057938][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.065209][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.074527][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.081903][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.089337][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.096639][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.103895][T28445] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1844.125623][T28445] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.008B/input/input371 [ 1844.159025][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1844.165956][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.176670][ T31] Tainted: [L]=SOFTLOCKUP [ 1844.181018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1844.191102][ T31] Call Trace: [ 1844.194415][ T31] [ 1844.197374][ T31] vpanic+0x56c/0xa60 [ 1844.201396][ T31] ? __pfx___schedule+0x10/0x10 [ 1844.206295][ T31] ? __pfx_vpanic+0x10/0x10 [ 1844.210839][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1844.217136][ T31] panic+0xc5/0xd0 [ 1844.220899][ T31] ? __pfx_panic+0x10/0x10 [ 1844.225348][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1844.230848][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1844.236265][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1844.242461][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1844.248661][ T31] watchdog+0x1030/0x1030 [ 1844.253043][ T31] ? watchdog+0x1c7/0x1030 [ 1844.257520][ T31] kthread+0x388/0x470 [ 1844.261627][ T31] ? __pfx_watchdog+0x10/0x10 [ 1844.266508][ T31] ? __pfx_kthread+0x10/0x10 [ 1844.271131][ T31] ret_from_fork+0x514/0xb70 [ 1844.275743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1844.280876][ T31] ? __switch_to+0xc89/0x1420 [ 1844.285591][ T31] ? __pfx_kthread+0x10/0x10 [ 1844.290210][ T31] ret_from_fork_asm+0x1a/0x30 [ 1844.295023][ T31] [ 1844.298680][ T31] Kernel Offset: disabled [ 1844.303019][ T31] Rebooting in 86400 seconds..