last executing test programs: 28m21.582450891s ago: executing program 3 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000340)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x12, &(0x7f00000026c0)=ANY=[@ANYBLOB="18000000fbffffff000000000500000018116efe75e16e500fc0779babc6c8766fac180000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000014184000f0ffffff4e0600000c1200008510000007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x31, &(0x7f0000000640)=""/49, 0x61780, 0x8, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x3, 0x81, 0xb164}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000700)=[0x1], &(0x7f0000000740)=[{0x3, 0x1, 0x5, 0xc}, {0x3, 0x4, 0x3, 0xa}, {0x5, 0x1, 0xa, 0x4}, {0x3, 0x4, 0x2, 0xc}, {0x5, 0x1, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xc}, {0x2, 0x5, 0x0, 0x8}], 0x10, 0xdf7}, 0x94) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x9e, 0x8}}, './file0\x00'}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000980)={&(0x7f0000000940), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a80)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000002780)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018210000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000085000000670000001801000020756c2500000000af505800190a38fbd37be9a7486461002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000010bf91000000000000b7020000020000008500000085000000b70100"/143], &(0x7f0000002980)='GPL\x00', 0xb, 0x0, &(0x7f00000029c0), 0x41000, 0x11, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f0000002a00)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x196bc, 0xffffffffffffffff, 0x0, &(0x7f0000002a40)=[r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r3, r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0x80000000}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r7 = add_key$keyring(&(0x7f0000002680), &(0x7f0000002600)={'syz', 0x1}, 0x0, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000002640)='rxrpc\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r8}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000024c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x51b3, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x118) r9 = add_key$user(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="2c2a89", 0x3, 0xfffffffffffffffd) keyctl$chown(0x4, r9, 0x0, 0xffffffffffffffff) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f0000000000)=""/50, 0x32, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000002440)={r8, r9, r10}, &(0x7f0000002480)=""/34, 0x22, 0x0) bpf$PROG_LOAD(0x25, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001e00010027bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200050011000400000005001000010000009eb0fdf17cd4448f6d26277b3e022f570885a7f01f9e1e8c7ae0a5b884f349c9efcb8328b533d8f6b802d40f70811393211ebd4082d03742fd3f6ac31ec198b0bfee4850ff"], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) sendmsg$nl_route(r12, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000190010002db0ced13c1701e763802003ff04c80b00150000080001006401210006001c004e20000008001e000600000008006b552f1d0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018"], 0x48}}, 0x0) 28m21.237309756s ago: executing program 3 (id=466): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003300)=@newtaction={0x2204, 0x30, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{0x21f0, 0x1, [@m_connmark={0x1050, 0x18, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x1, 0x2, 0x0, 0x6}}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x119c, 0x1c, 0x0, 0x0, {{0xb}, {0x1100, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x5c, 0x9a, 0x22c3, 0x8, 0xf8, 0x0, 0xdbe, 0x3, 0x3, 0x6, 0x40, 0xa69e, 0x100, 0x8, 0x800, 0x8001, 0x4, 0x0, 0x1, 0x7, 0x9, 0x2, 0x6, 0x100, 0xa, 0x7, 0x7, 0x2, 0xffffffff, 0xffffff00, 0x1, 0x18, 0x81, 0x7, 0x5, 0x6, 0x64, 0x765, 0xcf, 0x7, 0x3, 0x6, 0x6f8e7954, 0x5, 0x7f, 0x7, 0x3, 0x8, 0x2, 0x1, 0x5, 0x101, 0x6, 0x9, 0x401, 0x5, 0x10, 0xc0000000, 0x7, 0x0, 0x6, 0x1, 0x9, 0x1, 0x400, 0x40, 0xe0000, 0x8, 0x1, 0x9, 0xfffffffb, 0x3800000, 0x2, 0xb, 0x5, 0xfffffffc, 0x80000001, 0x427, 0xb9ef, 0x4a, 0x101, 0x5, 0x7, 0x8, 0x3ff, 0x3, 0x7ff, 0x7eb1, 0x0, 0x6, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8, 0x3, 0x0, 0x4, 0xc, 0x1ff, 0x1, 0x0, 0xa0, 0x0, 0x7, 0x7fff, 0xf, 0x5, 0x40, 0x0, 0x8, 0xb, 0xffff, 0x1, 0x1, 0x7, 0x0, 0x10001, 0xffffff68, 0xc99, 0x7, 0x77011cff, 0x4, 0x22, 0xffff8789, 0x3ff, 0x3, 0x10001, 0x9f28, 0x5, 0x10001, 0x7, 0x8, 0xfffffff8, 0x7, 0x77, 0x6f3, 0x401, 0x58, 0x4, 0xb, 0x7ff, 0x1, 0xfffff801, 0x4, 0x7ff, 0x7, 0x0, 0xfffffffa, 0x5f, 0xec, 0x3, 0x2, 0x8001, 0xc, 0x100, 0x6, 0x6, 0x81, 0x0, 0x6, 0xffffffe6, 0x2, 0x10000, 0x0, 0x7, 0x7, 0x1a, 0x40, 0xef2, 0x8000, 0x7, 0xb, 0x8, 0x4, 0x356, 0x0, 0x1, 0x5, 0x2, 0xf528, 0x6, 0x6, 0x101, 0xffffffff, 0x9f36, 0x2, 0x4, 0x7, 0x8, 0x8, 0xcb8, 0x8, 0x4, 0x8, 0x7, 0x9, 0x5, 0xd00, 0x7ff, 0x10000, 0x5, 0x4, 0x81, 0x5, 0x4, 0x3, 0xfffffffd, 0x45c7, 0x5, 0xfff, 0x5, 0x83a2, 0xb9c, 0x7, 0x44a8, 0x8, 0x4, 0x4, 0x1, 0x3, 0x6, 0x1, 0x7, 0xfffffffa, 0x9, 0x3, 0xffffffff, 0x4, 0x4, 0x78, 0x3, 0x32, 0x238, 0x4, 0x5, 0x1f20, 0x89, 0x9, 0x3ff, 0xf66, 0x2, 0x60, 0x3, 0xfffffff9, 0x8d, 0x3, 0xfffffffc, 0x8, 0xfff, 0x7, 0xe, 0xfcd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xc8, 0x4, 0x43, 0x7fff, 0x7, 0x2a2, 0x3, 0x7f, 0x8001, 0x9, 0x9, 0x1, 0x5, 0x2, 0x485, 0x57, 0x9, 0x0, 0x8, 0x0, 0x889, 0x4, 0x0, 0x8, 0x7, 0x0, 0xee, 0x8, 0x1, 0x2, 0x4, 0xffffffff, 0x7, 0x5a03cde5, 0x88f7, 0x5, 0x8000, 0x4, 0x101, 0x1, 0x3, 0x9, 0xb0f, 0xfffffff9, 0x4, 0x2, 0x1, 0x8, 0x0, 0x0, 0xf47, 0x5, 0x7fffffff, 0x8, 0x6000000, 0xe, 0x7f, 0x5, 0x9, 0x0, 0x5, 0x88fcfe88, 0x36f9295e, 0x6, 0x5, 0x3ff, 0x5, 0x5dd2, 0xd, 0x4, 0x57de, 0x344, 0x7a, 0x3, 0xa5e, 0xfffffffd, 0x1c02, 0x101, 0x0, 0x9, 0x2, 0x80000001, 0x4abd, 0x6, 0x7, 0x8, 0x0, 0x80000001, 0xb, 0x6, 0x400, 0x9, 0x3, 0x3, 0x5, 0x3, 0x4, 0x8f, 0x8, 0x5, 0x0, 0x4bc0, 0x6ff5, 0x1, 0x7, 0x10000, 0x4, 0x3, 0x2, 0x7, 0x7fffffff, 0x6db, 0x2, 0x6, 0x7fff, 0xde, 0x3, 0x2, 0x7, 0xe77, 0x9, 0x3, 0x3, 0xa80, 0xff000000, 0xf, 0x2, 0x5, 0xf, 0x0, 0xffffffff, 0x4, 0x0, 0x4, 0x0, 0x4, 0x5, 0x9, 0x10001, 0xd3, 0xf40, 0xff, 0x1, 0x6, 0x2, 0xfffffffe, 0xff, 0x9, 0xce, 0xf, 0x65e9, 0xdd, 0x5, 0x10000, 0x8000, 0x2, 0x41, 0x5, 0xa, 0x2, 0x9, 0x7, 0x8, 0x10000, 0x7ff, 0x2, 0x6, 0x7, 0x4, 0x8, 0x400, 0xffff, 0x200, 0x5a5, 0xe02f, 0x8, 0x2000000, 0x6, 0x7fff, 0x8, 0x611, 0x5, 0x8, 0xfffffffd, 0x4, 0x9, 0xfffffffe, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x8d40, 0x4, 0x2, 0x7f, 0x8, 0x4, 0x1, 0x3, 0x10001, 0x401, 0x2, 0x3ff, 0x0, 0x8, 0x40, 0x6, 0x80, 0xb39, 0x0, 0xffff271d, 0x7, 0x4, 0x7, 0x1ff, 0xa930, 0x6, 0xf82f, 0x10001, 0x100, 0xb01, 0x3, 0x0, 0x4, 0x270cd10c, 0x1, 0x5, 0x4, 0x3, 0x200, 0xffff0000, 0xfff, 0x8, 0x80000001, 0x31, 0x6, 0x7, 0x800, 0x40000000, 0x6, 0x5ae, 0x1ff, 0xb, 0x6, 0x9, 0x8000, 0x8, 0x7fffffff, 0x1, 0xffff, 0x1, 0x8, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x1000, 0x1, 0x0, 0x1, 0xfffffff4, 0x95, 0x100, 0xfa, 0x8, 0x0, 0x7, 0x7, 0x7, 0x8001, 0x8, 0x0, 0x28000000, 0x2, 0xe, 0x8, 0x8, 0x8, 0x5489, 0xffff8000, 0x2, 0x1000, 0x9, 0x9, 0x6c, 0x5, 0x10001, 0x7, 0x3, 0x6, 0x2, 0x0, 0x9, 0x3, 0x4, 0xdb503b7, 0x99, 0x80000001, 0x2, 0x8, 0x0, 0x0, 0xffffffff, 0xffffffc6, 0x8000, 0x7ab, 0x3f, 0x9000, 0x0, 0x6cd1, 0x98d, 0x4, 0x10, 0x9, 0x200, 0x1e, 0x100, 0x97c, 0x8000, 0x4, 0x2, 0x1, 0x6, 0x10000, 0x4, 0x6, 0x7, 0xffffffc3, 0x81, 0x400, 0x3, 0x67b6, 0x3, 0xef, 0x5, 0x3, 0x8, 0x8, 0xc17a, 0x9, 0x5, 0x5, 0xf, 0x42, 0x5, 0x7, 0x5, 0x2, 0x7fff, 0x0, 0x3, 0x6, 0x0, 0x4, 0x2, 0x5, 0x5, 0x3, 0xcc, 0x7f, 0x5, 0x1, 0x3, 0x986d, 0x2, 0x401, 0xeb, 0x9, 0x400, 0x8, 0xf5ef, 0x5, 0x3, 0x61b, 0x90000, 0x7, 0x95, 0x3, 0x32a, 0x10, 0xfffffff8, 0xffffffff, 0x1, 0x1, 0x8, 0x4, 0x7, 0x2, 0x1, 0x9, 0x80000000, 0x5, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x2, 0x5, 0x4, 0x9, 0x3, 0x0, 0x200, 0x6, 0x3c5, 0x6, 0x1, 0x2, 0x101, 0xe838, 0x6, 0x1, 0x7, 0x1, 0xfff, 0x8, 0xffff, 0x9, 0xe3, 0xbc65, 0x4, 0x7, 0x5, 0x2, 0x3, 0x3, 0x64, 0xffffffff, 0x200, 0x1ff, 0x1, 0xf, 0x7, 0x2c0, 0x9, 0x1, 0x6, 0x7, 0x7781c8a9, 0x80000001, 0x5, 0x9, 0x3, 0x4, 0x5, 0x4, 0x6, 0x1, 0x9, 0x9, 0x3, 0xda, 0x1, 0x7, 0x0, 0x8, 0x9, 0x8001, 0x0, 0x40, 0x8, 0x8, 0x6, 0x173a, 0x3, 0x1b52, 0x800, 0xd, 0x0, 0x40, 0x597, 0x200, 0xff, 0x5, 0x3, 0x3, 0x0, 0x2, 0xff, 0x8, 0x0, 0x9, 0x7, 0x6, 0xb9, 0x3, 0x1, 0x75f, 0xffffffb8, 0x4, 0x7, 0x1, 0xc6, 0x0, 0xfffffffc, 0x3, 0xf8, 0xd2, 0x40, 0x5, 0x5, 0x0, 0x0, 0x4, 0xff, 0x7, 0x9, 0xdc, 0x7cf]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd56}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0xed09, 0x0, 0x4, {0x3, 0x2, 0x3, 0x9, 0x7ff, 0x2b}, {0x0, 0x0, 0x81, 0x7f, 0x3, 0x4}, 0x7, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x9, 0x80000001, 0x2, 0x9, 0x10, 0x8, 0x7, 0x10000, 0x6, 0xb, 0x2, 0x5, 0x1, 0x8001, 0xf2, 0x9, 0x400, 0x2, 0x7f, 0xc60, 0xeb, 0x0, 0x4, 0x40, 0xa166582a, 0x62000000, 0x0, 0x9, 0x1d, 0x6, 0x4, 0xffffff0d, 0x9, 0x1, 0x6, 0xff, 0x562b054a, 0x3, 0xffffc996, 0x3ff, 0x8, 0x659, 0xca7, 0x1000000, 0x401, 0x2, 0x197421f9, 0x2, 0x0, 0x1, 0xfffffff8, 0x9, 0x353, 0x101, 0x9, 0x4, 0x1, 0x4, 0x6, 0xc, 0x1, 0xfffffffb, 0x8, 0x20000000, 0x7ff, 0x7, 0x1, 0x8, 0x428d, 0x1ff, 0x2, 0x0, 0xc11, 0x3, 0xfffffff9, 0x0, 0xe38, 0x93, 0xccb6, 0x5, 0x21, 0x2, 0xa, 0x2, 0xffffffff, 0xffff5921, 0xd, 0x10001, 0x1, 0x2bf7, 0x1, 0xc, 0x9, 0x7b, 0x0, 0x9, 0xda3, 0x8, 0x8, 0x8001, 0x3, 0x9, 0x9, 0x4, 0x7, 0x10, 0x1, 0x81, 0xa77, 0x400, 0x6, 0x11d, 0xd, 0x3ff, 0xd70, 0xa, 0x6, 0xfffffffe, 0x7, 0x80000000, 0x6, 0xde, 0x400, 0x2, 0x6e, 0x1, 0x6, 0x6a8, 0xff, 0x80, 0x95d, 0x5, 0x80000001, 0x7, 0x344, 0xabc7, 0x1000, 0x2, 0x401, 0xffffff81, 0x1, 0x9, 0xffff, 0x8, 0xc, 0x3ff, 0x2, 0x1, 0x3, 0x3, 0xfff, 0x6, 0x8, 0xe688, 0x9, 0x9, 0x9, 0x78fb, 0x53, 0xb, 0x3, 0x2, 0x1, 0x5a92, 0x5, 0x7, 0x2, 0x1, 0x8000, 0xffff0001, 0x3, 0x1000, 0x801, 0x3, 0xfffffffe, 0x566e6d9a, 0x3, 0xfffffffe, 0x1, 0x9, 0x1000, 0x8, 0x93, 0x8, 0xffff, 0x81, 0x3, 0x8, 0xe, 0xa00, 0x80, 0x7, 0x6, 0x10, 0xed, 0x3, 0x8, 0xc, 0xfffffffc, 0x80000000, 0x100, 0x1825, 0x5, 0x9fcf, 0x0, 0x7, 0x2, 0x3ff, 0x65e5, 0x10001, 0x8, 0x4, 0x10000, 0x2, 0x8, 0x43f42dfb, 0x0, 0x6, 0x0, 0x46, 0xff, 0x2, 0x400, 0x6, 0xc11, 0x2, 0x10001, 0x80, 0x6, 0x7, 0x65, 0x7fff, 0x8000, 0x2, 0x10001, 0x2, 0x5, 0x7, 0x300000, 0x2, 0x3, 0x2, 0x1ff, 0x400, 0x9, 0x3, 0x3, 0xc89, 0x800, 0x67b, 0xf184, 0x800, 0x9, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x5, 0x5, 0x72, 0x9, {0x2, 0x2, 0x81, 0x6, 0x8000, 0xfffffff5}, {0x9, 0x2, 0x9cd, 0xd, 0x1000, 0x1}, 0x2, 0x8001, 0xe5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x670}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fb2}]]}, {0x71, 0x6, "30fc66942e22e52e4f43bf5979887a4e837c5e6eda2d3688a00492b2e5d24af8fece156eba4c1ad57c36c772b38cdac51b110ada68d0a9370e4aefb6f6d0793785cfb2910172c0da75894813386ab4b940ddcb06826c38149c860b9ffa1e13712f1d96503ba820ae6f3c08d779"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2204}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x3e2, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x1005, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x7, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x8000, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0x5, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd5, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xb8, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0xe6, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) r12 = socket(0x2, 0x80805, 0x0) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r13, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010902240001010500030904000d02030102010921fffe0c01229204090581030004090600"], 0x0) sendmmsg$inet_sctp(r12, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/86, &(0x7f0000000100)=0x56) 28m18.117420421s ago: executing program 3 (id=479): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000058, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa13, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x5e, 0x3ff}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000010400000000030000000000000071f7f6e2285fe15abbc889a3292e9613909e26b47ade8c22f4abc7b294a99a06d7d13450f95bd049f3331a735e2c3ade1a17a40ddefe780b149d5faa0f3f8b5218a268849841bf0604f17eee50505614e3b730b31a4c281ca89fb893159fbab61917aaa42dbbcd75214006427f91b972dc972439381653dbab569191d2fc705ec0faa11c00320d3bf04f7e7fe01ba4c5f6b79664d3e655c31bcdf983ec32df350fffe565f60e3d3801a1331aa523305737ff2af89ee59cca0d60ab264dd9ba", @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x200000000, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d6, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000010000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000040)) 28m18.023806898s ago: executing program 3 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005b7ff000051915f95eb01dfff02a606a40e07ff0000000000404000e14be264d37c", 0x28) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = dup(r0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="2e0f2264660f7e6800c4e17e12c566baf80cb8f0093b8def66bafc0ced0fc76b039a00300000250166640f060fc75f00b7670f32a8", 0x39}], 0xaaaacb3, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28m16.473708659s ago: executing program 3 (id=487): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000000fe", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 28m16.28852467s ago: executing program 3 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$keyring(0x0, &(0x7f000000f8c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ddffffffffffffff000000000000", @ANYBLOB="010000000400000007000000a300000010000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRES16=r0, @ANYRESOCT], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x2}, 0x38) keyctl$get_security(0x11, r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x80, 0x9, 0x9, 0x1000, 0x1, 0x49, 0xfffffffc, 0x7, 0x10001, 0xa, 0x401, 0x101, 0x5, 0xb5d6, 0x5, 0x5, 0x0, 0xa04, 0x0, 0x40}}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x6577, 0x92d3}) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, 0x0}, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000002740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000500)=""/65, 0xfffffed7}, {&(0x7f0000000440)=""/131, 0x83}], 0x5}}], 0x1, 0x22, 0x0) 28m0.662149502s ago: executing program 32 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$keyring(0x0, &(0x7f000000f8c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ddffffffffffffff000000000000", @ANYBLOB="010000000400000007000000a300000010000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRES16=r0, @ANYRESOCT], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x2}, 0x38) keyctl$get_security(0x11, r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x80, 0x9, 0x9, 0x1000, 0x1, 0x49, 0xfffffffc, 0x7, 0x10001, 0xa, 0x401, 0x101, 0x5, 0xb5d6, 0x5, 0x5, 0x0, 0xa04, 0x0, 0x40}}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x6577, 0x92d3}) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x2, 0x0, 0x0}, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000002740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000500)=""/65, 0xfffffed7}, {&(0x7f0000000440)=""/131, 0x83}], 0x5}}], 0x1, 0x22, 0x0) 17m30.930089221s ago: executing program 1 (id=2826): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f000089b000/0x1000)=nil, 0x1000, 0x0, 0x28011, r1, 0x0) ftruncate(r1, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000040)={{0x9, 0x0, 0x1, 0x40, 'syz0\x00', 0x3}, 0x0, [0x81, 0xa36, 0x1, 0xab1, 0x6, 0x7, 0x7, 0x9, 0x661, 0x0, 0x4df, 0x3, 0x5, 0x7, 0x1, 0x2, 0x5b, 0xc, 0xfffffffffffffffd, 0xb97, 0x4, 0x3, 0x8, 0x3, 0xcdd7, 0x1, 0x7, 0x4, 0x3, 0x8000, 0xe44c, 0x10000, 0xd, 0x4, 0x3, 0x2, 0x1def0000, 0x12a0, 0x3ff, 0x10001, 0xc, 0x9, 0xa00000, 0xe, 0x8c51, 0x80, 0x51, 0x80, 0x7, 0x1, 0x8, 0x0, 0x2, 0x2, 0x7, 0xffffffff, 0xfffffffffffffff9, 0x80, 0x8, 0xa2c, 0x81, 0x2, 0x4, 0x7fffffffffffffff, 0x4, 0x80000000, 0x1, 0x9, 0xf, 0x100, 0x5, 0x2, 0xff, 0xb, 0x0, 0x80000001, 0x1be, 0x7, 0x4, 0x80, 0x0, 0x77f, 0x29000, 0xfff, 0xa9, 0x81, 0x4, 0x6, 0x5, 0x80, 0x7452, 0x40, 0x2, 0x8, 0x2, 0x3a, 0x6, 0xa5, 0xff, 0x1, 0x4, 0x80000000, 0x0, 0xff, 0x9, 0x7, 0x8, 0x4, 0x73cf, 0x66b6, 0x612, 0x7, 0xa7c3, 0x5c1328a6, 0x4, 0x3, 0x7, 0xd4, 0xffffffffffff7c43, 0xd7, 0xfffffffffffff6b2, 0x8, 0x96c0, 0xa83, 0x10, 0x13, 0x7, 0x7]}) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) 17m30.261145078s ago: executing program 1 (id=2830): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 17m18.082786279s ago: executing program 1 (id=2831): r0 = userfaultfd(0x80801) r1 = syz_usb_connect$hid(0x5, 0x2, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x6c, &(0x7f0000000140)=@string={0x6c, 0x3, "1d7c43a8fb7b0f20e716f82c2eaaf9b1dd6998a9ad85c6162a6240b96b726dd71be969731daaed29b45c262a4fdeaf602985fc263fc7adb8acf3f6abc7edfaa89329c3494a623385cef05c0a8ef4ba4613a178264594eb7dc0e96db37fea8a0c65a4aea59f216a2c4abe"}}]}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @result}, {0x12, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0xe9, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = eventfd(0x3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd68db834400081100fe0180ffffffffffffff0000000000bbff0200000000000000000000000000014e204e2200"], 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000140), 0x0) fcntl$lock(r4, 0x6, &(0x7f00000004c0)={0x1, 0x2, 0x1, 0x3, r5}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x4090) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x20, {0x20, 0x31, "1f8aaa24131236fffc8cda2840219fa61500"/30}}, &(0x7f00000001c0)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "f468554f5128466a495c78aa8992875d08661891a9b5280ad23f080f47af666d4d0bb696dc27f73a9664b15d021c82d2b0bd69951d646d17b4775ef0d28d12850671ba420e112a4660c77799d44418b79eed9abfcdd0df89176d6c0a97f04d08aacb92a785ce1e2200f652cfc998c5d6bcdc643ee2268e89f7efdbf78f9aeb8f12c88e90685fcd5858bc09a57297137abb9212ee76e75fb58d7af55b5c6b76f3ddff9a96e24855ec645b021bc9fff8c601bce4dd98"}}}, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0x1e, "0cabaddb985b10c647117778dfa9d8ae36603e259d4a663014c75127e37c"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000380)={0xc0, 0xa1, 0x4}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "5cd388fe070dbacb182a3837b3be689f34684e10859bbf03cd4bc3fd68531565d2b71b3eb2b56277afff1cb6bbd8c9"}}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8913, &(0x7f0000000480)={'veth0_vlan\x00', @ifru_hwaddr=@local}) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x2, {0x2, 0x1f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17m17.193065009s ago: executing program 1 (id=2867): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x101, 0x101000) r6 = syz_open_dev$media(&(0x7f0000004b80), 0xffffffffffffffff, 0x141000) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000005400)={0x80000000, &(0x7f0000001e40)=[{}, {0x80000000}], 0x0}) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000180)={{r7, 0x0, 0x1, [0x8, 0x491e]}, {r9, 0x0, 0x6, [0x9, 0x3]}, 0x2, [0x8000, 0x4]}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="02030003130000002cbd7038fcdbdf2502000900080000001c0000210000000008001900000000000a004e200000fc8200000000000000000000000000000000860000000a004e2d00000006200100000000000000000000000000020300ff0002000100fffffffd0000070c00000080030005000000000002004e22ac14142f0000000000000000020013000100000029bd700006350000e9012020381d1a0c6c4faa014a4fed2539e0560b5cb4008c24a2744dba636f94fa3f66da80918e853de344f593711b3219e1fb"], 0x98}, 0x1, 0x7}, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x4e4, 0x4e20, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1}}], 0x2, 0x0) unshare(0x8040480) r11 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff3}]}) ioprio_set$uid(0x0, 0x0, 0x4000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, 0x0) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0x0, 0x9, 0x8676, 0x4}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfff7}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x481, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x2, 0x8, 0x4, 0x3c5e, 0x1, 0x803, 0x5, 0xfd, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x3, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8003, 0x10, 0xfffffff3, 0x129432e6, 0xcf, 0xf9, 0xd, 0x2bf, 0x0, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xa5a, 0x311, 0x7b, 0xea4, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x405, 0x5, 0x6, 0x7, 0xff, 0x7, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x6, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x4, 0xfe000000, 0xff7f, 0x4, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x4, 0x3, 0xd, 0x17, 0x1042, 0x2], [0x7, 0x4, 0x3, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x5, 0x8, 0x86, 0x7, 0x0, 0x3e3, 0x9, 0x5, 0x2, 0x102, 0x1, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x107ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xe, 0x1, 0x938, 0xb, 0x6, 0x0, 0x2, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x922, 0x10000, 0x6, 0x7, 0x0, 0x2, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xedd, 0xfffff000, 0xffff, 0x3, 0x7f, 0x7, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17m16.787504438s ago: executing program 1 (id=2868): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r2 = syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8c}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffc}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r5, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r7 = fanotify_init(0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r7, 0x101, 0x8000011, r8, 0x0) ftruncate(r6, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 17m16.213497251s ago: executing program 1 (id=2871): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0xb, 0x78, 0x1, {0x22, 0x853}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40221d00000004319b027904000000000000001cce806dbcaa2135b004fb"], 0x0, 0x0, 0x0, 0x0}, 0x0) getrusage(0x1, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x46) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x0, 0x10001, 0x7fff}) 17m14.0582014s ago: executing program 33 (id=2871): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0xb, 0x78, 0x1, {0x22, 0x853}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40221d00000004319b027904000000000000001cce806dbcaa2135b004fb"], 0x0, 0x0, 0x0, 0x0}, 0x0) getrusage(0x1, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x46) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x0, 0x10001, 0x7fff}) 13m14.041304409s ago: executing program 6 (id=3733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 13m13.99453543s ago: executing program 6 (id=3734): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 13m13.807841585s ago: executing program 6 (id=3737): r0 = fsopen(&(0x7f0000000000)='qnx4\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000300)='5\xba\x9e^O\x03\x15\x19\xd1\'f\xeb\xadrrO\xdaFe}\xc6\x1by\xdbz\x95\xa0\x87V\xb3]6\xd7\r\xc8\x99\x03\x02\x1e$q\x11*\xf5\x94\x1e\xb4\xe4\xe7\x9eR\xca1\x92\xed\xbeF\xfdN\xe5\x19\x80\x00\x10\x81\x16\x98\xddk\xc4\xb9\x93k\xa8\xe9\xd9\xae\xbf1Y\x96B}\xa6\xc2i\xe8\x99>\xa6\xb5\xa4{\x1f\x81kt\xd6\xba\xdd\xae\x9d\x11\x12e\x8aY\x1e\xce\xba\xc3\xad\xbbm%}K=\xc3=\xb1]\x1f)\x94\x9c\xa1\xb7\xddv\x1b\xc2\xb6n\xddI\xe7\xa2\xe3\x10\x98j\xa2\xfeJ\xc1LE0-^k\xb0\n\xab\xa5\x8dMm\x14\x8a\xb9v\xac\xf2\xd0\x14diN\xc2\t6dHq\xb4\xf8\x05\x95!\xaeue\x87^\xfd<\x18\xce\xde]\x83\f\v\xe0\x06\x19\xeeYt\xad\x94\xfaz\x96HS', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x15) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRESHEX=r5, @ANYRESOCT, @ANYRESHEX, @ANYRES64=r4, @ANYRESDEC, @ANYRES8, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800c000) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r6 = dup(r5) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0xfffffffffffffe82) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40000030, r6, 0x0) r9 = syz_io_uring_setup(0x4b5a, &(0x7f0000000480)={0x0, 0x9568, 0x2, 0x1, 0x3bf, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x46, 0x0, @fd_index=0x2, 0x9, 0x0, 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r9, 0x29ab, 0xd480, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r10], 0x7c}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 13m10.522830391s ago: executing program 6 (id=3753): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$can_raw(0x1d, 0x3, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x4a, &(0x7f0000000040)=0x6190, 0x4) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0xc840) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) read(r0, &(0x7f0000002340)=""/232, 0xe8) 13m9.192022203s ago: executing program 6 (id=3756): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bdf000000000000200000008002600b409000008006100ac"], 0x24}}, 0x44091) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001780)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 13m8.422118607s ago: executing program 6 (id=3759): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@l2={0x1f, 0x73c, @any, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="eed02d98a3ae", 0x6}, {&(0x7f00000000c0)="be1fd9e8cfffa3e351baf6eacf648805f3647aec8a2fd7caa91f7400de45b4055085a351e2efbc3c1a7d2b4b2cc0a7e4026e88156cec8fed55aef256057ab01eb12103fe05a3aa1ebf7d44ac6a2fcce9b1c2c3cfae14277e777409dcad8a8d4547d585d30a73336f0e63ec8c9762797615bab02f029fd393c420f63393e58ca1fa5e6f1204ed496258e4741abf14231ee217496e2049b07e86461ef3bea527338115d2ebc56bf12eb59ea74e915a4fca658f513b99ccd52f6b6b695636aea15c73ed0edf94c694bf20ea0d", 0xcb}, {&(0x7f00000001c0)="dec59c75075c4df6f12bf3e4dcb75c78c09586e32f8b17622cd21ce19c5d37e99d61668748d8e76c25d766ac14f0427f8d5c0e6d", 0x34}, {&(0x7f0000000200)="aa29de8ea2721f87426fa6cf06e46938c696ed4c47fbdfa9dbb36bab4eb682f6cd500717d543b537d9a3d9e0964a01b658e15c5e5f2c1a0bb47f1bb90cfad417c9eaeb3ada314e3a6af676f13fd0aa3af254740154189ece1a5dcc6753437df27303bba0369a25c4d2d585b69dee30631fd5dc1047065c00b7024444b0a3165dbf7c65c9483c46f1229434d12e35baaca682aabd6a27193914948eb99e06df945a1d82628376d129c789", 0xaa}], 0x4, &(0x7f0000000300)=[{0x60, 0x109, 0xffff0001, "ec2b1617e9088cc5b6c45225ace15e0f777a5c5f67659bfb801db6814a1261d8e86dce8718acfea10c288a1ce3d3311d68a3c34ffa75a3fb59a98d90afcdaab1fc31d5d0637c855d8fafa8347f"}, {0xc0, 0x10e, 0x6, "5a9135c1039d2e36edafe12e5384c941e05fa71e18da41e4fd02f1c9450742318d7e03b7ad37759b051360302a836b2bd801eae867b7225f02c2531954e6af1db8ba18d37ddf309c36b495cb289faaddd5a52ff73fe70257205130e140ceacc93dacda1536796b79d8250b5aeed020205cf05a3b93331ca79b04b3ccc50f03edadd113bc9e42c0a1404656d52d3a5d56c442280116924905fd45517d6db4f3bcd895f66c60235cb70dd05d1c00"}, {0xa0, 0x115, 0x81, "62a6db451988db2089d6bb85b8916dff0ad5e96e6455affd546591d1415f3580baffb73da7625c7d2853477dda88fa659e7e75af146566d2b0f851dc220a1d74168c8211693052b4c9fa19ff6b2e2dea46ac18804b37d66c7a7c42dc43d10cfb8924e98ba07bba6cd34383d67553027984e521555d696f03a960a014e52013fd6b9ba90912f091023e"}, {0x28, 0x10a, 0xfffffffa, "fe90d9fc465d8af304229f4206bb7934606540ca22ed"}, {0xb0, 0x107, 0xa, "fdd055821dca6e520f52b8bc555ba528017cba5086569fe89cc35410aea1ddd9edd8e7ac440bd9acb71731862680672cb2cbc59740a0e5ada7d1659994fa6027f67779cb919225f6313cc46d4b4d649a46e1b7fed693247c634ece134af2a3d80441ead1120277db26a2d1380ba41b0ad75ababe8cab0a55f4c439580696d10280dee0acc919a7a11182fbcbef72814b0dd21c4826506c35570a9f2c"}, {0xd8, 0x84, 0x0, "e0c93ea564a20c7fe6e632578a31fd8deea5a9f56858ac01379f1cc7955d6066a9a6706a1c47351cca0065c8ad37f04fe28fd10f2f416b0d86984e21b2e7e27e6537096ec5b2e6fb58abea6a31086027223a0f4f24340ffefda245a07140060518ccc1b8b496e4eea668297cd30c2f55400a5722b3e9e6d9c7d0010367a3b73e78ffea5f176e649450fb91a8f1bb29243b75e26bacfdaec52a450257fbbdd628a23dcdf80247d962a72965a3528e020afe9ece57481e5c1c6d84f6363bf39209b0cc186801"}], 0x370}, 0x240400c4) unshare(0x6a040000) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000006c0)=0xd38) 13m7.827809913s ago: executing program 34 (id=3759): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@l2={0x1f, 0x73c, @any, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="eed02d98a3ae", 0x6}, {&(0x7f00000000c0)="be1fd9e8cfffa3e351baf6eacf648805f3647aec8a2fd7caa91f7400de45b4055085a351e2efbc3c1a7d2b4b2cc0a7e4026e88156cec8fed55aef256057ab01eb12103fe05a3aa1ebf7d44ac6a2fcce9b1c2c3cfae14277e777409dcad8a8d4547d585d30a73336f0e63ec8c9762797615bab02f029fd393c420f63393e58ca1fa5e6f1204ed496258e4741abf14231ee217496e2049b07e86461ef3bea527338115d2ebc56bf12eb59ea74e915a4fca658f513b99ccd52f6b6b695636aea15c73ed0edf94c694bf20ea0d", 0xcb}, {&(0x7f00000001c0)="dec59c75075c4df6f12bf3e4dcb75c78c09586e32f8b17622cd21ce19c5d37e99d61668748d8e76c25d766ac14f0427f8d5c0e6d", 0x34}, {&(0x7f0000000200)="aa29de8ea2721f87426fa6cf06e46938c696ed4c47fbdfa9dbb36bab4eb682f6cd500717d543b537d9a3d9e0964a01b658e15c5e5f2c1a0bb47f1bb90cfad417c9eaeb3ada314e3a6af676f13fd0aa3af254740154189ece1a5dcc6753437df27303bba0369a25c4d2d585b69dee30631fd5dc1047065c00b7024444b0a3165dbf7c65c9483c46f1229434d12e35baaca682aabd6a27193914948eb99e06df945a1d82628376d129c789", 0xaa}], 0x4, &(0x7f0000000300)=[{0x60, 0x109, 0xffff0001, "ec2b1617e9088cc5b6c45225ace15e0f777a5c5f67659bfb801db6814a1261d8e86dce8718acfea10c288a1ce3d3311d68a3c34ffa75a3fb59a98d90afcdaab1fc31d5d0637c855d8fafa8347f"}, {0xc0, 0x10e, 0x6, "5a9135c1039d2e36edafe12e5384c941e05fa71e18da41e4fd02f1c9450742318d7e03b7ad37759b051360302a836b2bd801eae867b7225f02c2531954e6af1db8ba18d37ddf309c36b495cb289faaddd5a52ff73fe70257205130e140ceacc93dacda1536796b79d8250b5aeed020205cf05a3b93331ca79b04b3ccc50f03edadd113bc9e42c0a1404656d52d3a5d56c442280116924905fd45517d6db4f3bcd895f66c60235cb70dd05d1c00"}, {0xa0, 0x115, 0x81, "62a6db451988db2089d6bb85b8916dff0ad5e96e6455affd546591d1415f3580baffb73da7625c7d2853477dda88fa659e7e75af146566d2b0f851dc220a1d74168c8211693052b4c9fa19ff6b2e2dea46ac18804b37d66c7a7c42dc43d10cfb8924e98ba07bba6cd34383d67553027984e521555d696f03a960a014e52013fd6b9ba90912f091023e"}, {0x28, 0x10a, 0xfffffffa, "fe90d9fc465d8af304229f4206bb7934606540ca22ed"}, {0xb0, 0x107, 0xa, "fdd055821dca6e520f52b8bc555ba528017cba5086569fe89cc35410aea1ddd9edd8e7ac440bd9acb71731862680672cb2cbc59740a0e5ada7d1659994fa6027f67779cb919225f6313cc46d4b4d649a46e1b7fed693247c634ece134af2a3d80441ead1120277db26a2d1380ba41b0ad75ababe8cab0a55f4c439580696d10280dee0acc919a7a11182fbcbef72814b0dd21c4826506c35570a9f2c"}, {0xd8, 0x84, 0x0, "e0c93ea564a20c7fe6e632578a31fd8deea5a9f56858ac01379f1cc7955d6066a9a6706a1c47351cca0065c8ad37f04fe28fd10f2f416b0d86984e21b2e7e27e6537096ec5b2e6fb58abea6a31086027223a0f4f24340ffefda245a07140060518ccc1b8b496e4eea668297cd30c2f55400a5722b3e9e6d9c7d0010367a3b73e78ffea5f176e649450fb91a8f1bb29243b75e26bacfdaec52a450257fbbdd628a23dcdf80247d962a72965a3528e020afe9ece57481e5c1c6d84f6363bf39209b0cc186801"}], 0x370}, 0x240400c4) unshare(0x6a040000) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000006c0)=0xd38) 6m42.920920731s ago: executing program 0 (id=5089): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x3]}, 0x8) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d0001000400000001000400000600000000000000de71bf6e6488805e2f01f00ead425a796b", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x80007721, 0x62, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, &(0x7f0000001600)=""/4081, 0xff1, 0x2f) socket$alg(0x26, 0x5, 0x0) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) r6 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r6, 0xff, 0x22, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280100001000070000000000fddbdf25ff020000000000000000000000000001ff010d00000000014e20000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000020000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b40000000000000005"], 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x8, 0xfffffffd}]}, 0x10) 6m39.65326839s ago: executing program 0 (id=5107): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5d17fe46) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x2}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a5, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0x80000001, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x6, 0x2, 0x17, 0x1c, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0xd, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x1, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x409, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0x4, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x0, 0x9, 0xb, 0x400, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0x101, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000000000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r5}) r6 = socket$pptp(0x18, 0x1, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@loopback, 0x0, 0x20, 0x2002, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa1, 0x400000000, 0x3, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0xfffffffffffffff9, 0x2d}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x7, 0x4, '\x00', 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, '\x00', 0x20}) connect$pptp(r6, &(0x7f0000000700)={0x18, 0x2, {0x2, @local}}, 0x1e) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r10, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="000304000000040318047f46b42d97eebd3f069887b7817b3a5e873efef4064eecb1b0a66995f4ac99ef0a32a5ff3aeeb9774c4a38d0ac76da576ae1f89f8d23785a0d8d519f0fdc941095ca8c3a9e020561546541fe3cb5faa99eec2c1f06ba1e7d33f605cc53add3a38bb70fd79887fc2e2c5ec38a28974e44959be6f0600f2105ad25a9a0927ad0725a1ea6223ad9e4f90d2a0383cc5ba951eb2957772ff4710104390971a81f14058ac0e5945bc55f2ff1271f258d6bf233547859f92c1ca28a98c502b4856e3eb879b8"]}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') 6m36.30089237s ago: executing program 0 (id=5122): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd49, 0xfffffffffffffffb, 0x81, 0x8, 0x400000000000fff8, 0x8000000000000001, 0x2000000000000003, 0x9, 0x4bfb, 0x4, 0x200000000002, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x9, 0x100093b], 0x54000, 0x108757}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$kcm(0x11, 0xa, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x4081, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000100)=[{&(0x7f0000000080)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0xfe58}, 0x40080) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[], 0x0) 6m35.860531915s ago: executing program 0 (id=5123): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x80100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b3f0300000000000000000200000a080002400000000008000340000000000d000100727066696c74657200000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) unshare(0x6a040000) process_vm_writev(0x0, &(0x7f0000000040)=[{0x0}, {0xfffffffffffffffd}], 0x2, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) timer_create(0x1, &(0x7f0000000940)={0x0, 0x35, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000980)=0x0) timer_settime(r6, 0x1, &(0x7f00000009c0)={{}, {0x77359400}}, &(0x7f0000000a00)) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0x1}, 0x2}, 0x18) syz_open_dev$vcsa(&(0x7f0000000000), 0x8000, 0x400) 6m35.107636208s ago: executing program 0 (id=5125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xd, 0x6, @vifc_lcl_addr=@remote, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa801, 0x0) 6m30.369017234s ago: executing program 0 (id=5145): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r2 = syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8c}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffc}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r8, 0x101, 0x8000011, r9, 0x0) ftruncate(r7, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 6m29.930800059s ago: executing program 35 (id=5145): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r2 = syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000180)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8c}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffc}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r6, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r8, 0x101, 0x8000011, r9, 0x0) ftruncate(r7, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m49.469832244s ago: executing program 7 (id=5935): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) syz_clone(0x4100000, &(0x7f0000000380)="9d6c5c3b2e848047da6455f82405ca41fcb4df8cbaf3431f6fc66881b434439bd6c1190daad02b00f670664770ccf778f52a3de8549c1f044aeeeec269cb43d65593d9bf2682cfd50830475769d18c690d8e1177ed1b3a741bfb7472ef96efeaf3dea7c0ee70846e76354b31e578d116d0ddb204d1f1cea76a6971abb014f6d77561d444f3615e2c48143833dcf7c39d3063041864c5a6efad6434cb839aaf1cfc7ffeaa81f58eaf1689e128552f8ad79c8bb5d08e264602ee7d409e69618b2a495c5534", 0xc4, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000001300)="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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 2m48.855550162s ago: executing program 7 (id=5938): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000", @ANYRES32=r0, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2m48.05968532s ago: executing program 7 (id=5944): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x8080, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x60000, 0x0, 0x40, 0x2, 0xfffffff9, 0x0, 0x0, 0x80, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffe2c, 0xfffffffffffffff5, 0x4000000a74e, {0x1, 0x0, 0xfffffffffffffffe, 0xffdf, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xfb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x830, 0x0) 2m46.169900342s ago: executing program 7 (id=5948): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$RTC_PIE_ON(r4, 0x7005) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x2, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @broadcast}}}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) 2m43.550350901s ago: executing program 7 (id=5957): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8200400", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2m42.687297158s ago: executing program 7 (id=5962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x9f4, 0x28, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x8}, {0xfff3, 0x2}, {0x2}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xd}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x3ff, 0x1, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0xe3c00, 0x87e, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x18fa, 0x0, 0x6bf}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x9, 0x7f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1ff, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x0, 0x40}}, @TCA_HFSC_RSC={0x10, 0x1, {0x31, 0x6, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8001, 0x80000000, 0x4}}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x900, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x1, 0xb796, 0x1, 0x1}, {0x4, 0x2, 0x7f, 0xf, 0x3375, 0x1000}, 0xdf, 0x0, 0x7, 0x39, 0x20af469a}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x1, 0x3, 0x1, 0x3ff}, {0x5, 0x2, 0x101, 0xfff0, 0xe, 0x5}, 0xe6, 0x8, 0x1ff, 0x34e, 0x6}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xd8, 0x93cfb694a88b339a, 0x90f, 0x0, 0xe, 0x8}, {0xfe, 0x1, 0x6, 0x8, 0x7f, 0xfffffffd}, 0x0, 0x9, 0x4, 0x5, 0x7}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xe0, 0x0, 0x3, 0x5, 0x9, 0xd}, {0x4, 0x0, 0x1, 0xc, 0x1, 0x3d2}, 0x200, 0x4, 0x0, 0x2, 0xfffffffa}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x39, 0x1, 0x7fff, 0x4ec0, 0x6, 0x5}, {0x5, 0x0, 0x4, 0x7fff, 0x200, 0x4}, 0x76, 0x8, 0x6, 0x0, 0xfffffff7}}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x7, 0xf908, 0x2, 0xfffffffe, 0x7, 0xdc9f, 0x1, 0xa, 0x6, 0x2, 0x4, 0xc2e, 0x401, 0x5, 0x46c, 0xff09, 0x2, 0x8, 0xed618442, 0xad26, 0x8, 0x2, 0x800, 0x8, 0x0, 0x9, 0x10, 0x1ff, 0x8, 0x39, 0x10001, 0x8ea0, 0x2, 0x8, 0xfffffff8, 0x6, 0xc22f, 0x9f, 0x3, 0x4, 0x15a, 0x3, 0x2, 0x7fff, 0x2, 0x2, 0x1, 0x3, 0x4c, 0x6, 0x2842, 0x2, 0x1000, 0x7, 0x96, 0xfffffff8, 0x9e, 0x7fff, 0x1, 0xe7, 0x8000, 0xa, 0xa, 0x1000, 0x4, 0x73, 0x5, 0x8, 0x3ff, 0xc4a, 0x2, 0x4, 0x8, 0xfffffffe, 0x0, 0xffff, 0x2, 0x4, 0x4, 0x2, 0x68b, 0x4, 0x5, 0x3, 0x93b, 0x3, 0x20000000, 0x8, 0xffff0000, 0x8, 0xa, 0x7, 0x0, 0x7, 0x1fc, 0x2, 0x80000009, 0x6, 0x9, 0x9, 0xd525, 0x9, 0x7fa, 0x405, 0x1, 0x10000, 0xc, 0x25, 0x1ff, 0xff, 0x20000000, 0x4, 0x13cf, 0x8000, 0x8, 0x4, 0x10001, 0x5, 0x1, 0x5, 0x1, 0x800, 0x8, 0x7f, 0x3ff, 0x4, 0x6, 0x2, 0x2c3, 0x10000, 0x1000, 0x1, 0x6, 0x13, 0x7, 0xb484, 0xc8, 0xf, 0x2, 0x9, 0x4, 0x1e, 0x8, 0x51c4, 0xb, 0x80, 0x8, 0x4, 0x7ff, 0x81d, 0xffff7fff, 0xfffffffb, 0x9, 0xf, 0x1, 0x1ff, 0x1, 0x54, 0x0, 0x4, 0x8, 0x10000, 0x1, 0x7, 0x8, 0x5, 0x4, 0x8, 0xfffffffa, 0x1, 0xab, 0x7, 0x0, 0x0, 0xf, 0x7, 0x2, 0xc, 0x2, 0x5, 0xc, 0x200, 0x0, 0x1, 0xf9, 0x6, 0x9, 0x4, 0x61, 0x1000, 0x9, 0x401, 0x7f, 0x1, 0x40, 0x7, 0xfffffff8, 0xff, 0x0, 0x1, 0x5, 0x0, 0x9, 0x7ff, 0xb, 0x9fe5, 0xb, 0x5, 0x7fffffff, 0x8, 0xd7, 0x7, 0x9, 0x8000, 0x4, 0xb1c, 0xbe61, 0xffffffff, 0xfffffff9, 0x8, 0xd9, 0x9c, 0x401, 0xfffffffa, 0x1246, 0x40c1, 0xfff, 0x1, 0x9, 0x380, 0x1, 0x5, 0x4, 0x0, 0x100, 0xb, 0x1, 0x2, 0x23a, 0x6, 0x0, 0xfa, 0x9, 0x30918e94, 0x7ff, 0x0, 0xfffffffc, 0x3, 0x9, 0x1, 0x1, 0x7, 0x10000, 0x7, 0x1]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7e, 0x7, 0x3, 0x1, 0x6, 0x0, 0x490, 0x3, 0x0, 0x2, 0x94c, 0x3, 0x1, 0x2, 0x80000001, 0x8001, 0x80000001, 0x1ff, 0x7, 0x3, 0x7, 0x2, 0x0, 0x4, 0x7, 0x10000, 0x9, 0xfffffffc, 0x4, 0xe, 0x1, 0x1, 0x7, 0x1, 0x7, 0x0, 0x5, 0x8, 0xfffffff8, 0x9, 0x8b, 0xe1e3, 0x7, 0x80000000, 0x8, 0x7ff, 0x3, 0x0, 0x7, 0x95, 0xf, 0x3, 0x0, 0x9, 0x0, 0x800, 0x7fff, 0xfffffff6, 0x6, 0xfffffdc1, 0x6, 0x8, 0x7, 0xfe, 0x7, 0x8, 0xffffffff, 0x0, 0x0, 0x2, 0x5, 0x80, 0x7, 0x92a0, 0xfffffff9, 0x6, 0x5, 0x987c, 0x6, 0x9, 0x7, 0x7f, 0x3, 0x7, 0xb, 0x2, 0x6, 0x3, 0xff, 0x1000, 0x1, 0x9, 0x0, 0x0, 0xfffff800, 0xa, 0x4, 0xff, 0x5, 0x3, 0xa6a, 0x3, 0x1, 0xae1, 0x7, 0xffffffff, 0x100, 0xf2f9, 0x8cb4, 0x5bb, 0x1, 0xe9a, 0x0, 0x94b, 0xffffffff, 0x900, 0x3, 0xf1b, 0xe, 0x7fff, 0x4, 0x0, 0x0, 0x6, 0x1, 0x10001, 0x2, 0x2, 0x8000, 0x73d1, 0x2, 0x7c3d, 0x3, 0x200, 0x8, 0xffff, 0x7fff, 0x7, 0x5c59, 0x8, 0x1, 0x4, 0x5, 0x7, 0x8, 0xffffffff, 0x10001, 0x4, 0x3, 0x3ff, 0x7, 0xbac, 0x7, 0x0, 0x2, 0x9, 0x8, 0x2, 0x5346, 0xffffffff, 0x400, 0x3, 0x0, 0x3ce7, 0x2, 0x9, 0x2, 0x7f, 0x2, 0x2, 0x2, 0x10, 0x6, 0x8, 0x886, 0x2, 0x6, 0xfffffffe, 0x2200, 0xa46, 0x7fffffff, 0x67e, 0x2, 0xa000, 0x400, 0x5, 0x0, 0x101, 0xb, 0x1f, 0x9e6e, 0x7, 0xda5, 0x401, 0x8, 0x401, 0x1, 0x8, 0x9, 0x2d74, 0x0, 0x5, 0x8001, 0x2, 0xfffffffb, 0xc56, 0x6, 0x80000001, 0x8, 0x5, 0x20000000, 0x1, 0x4, 0x10000, 0x1, 0x7fff, 0x9, 0x0, 0xc6000000, 0x6c, 0xc5, 0x800, 0x3, 0xff, 0x1, 0x22, 0x3, 0x8001, 0x3847, 0x183bb120, 0x7, 0x4, 0x4, 0x5, 0x2, 0x2, 0x4, 0x7, 0x9, 0x6, 0x8, 0x9, 0x80000000, 0x5, 0xfffffd15, 0x4, 0x4, 0x81, 0x60433211, 0x2, 0x6, 0x72000, 0xab71, 0x2da, 0x1, 0xfffff800]}]}}]}, 0x9f4}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4010) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x41045508, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r9, @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m27.317129432s ago: executing program 36 (id=5962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x9f4, 0x28, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x8}, {0xfff3, 0x2}, {0x2}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xd}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x3ff, 0x1, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0xe3c00, 0x87e, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x18fa, 0x0, 0x6bf}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x9, 0x7f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1ff, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x0, 0x40}}, @TCA_HFSC_RSC={0x10, 0x1, {0x31, 0x6, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8001, 0x80000000, 0x4}}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x900, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x1, 0xb796, 0x1, 0x1}, {0x4, 0x2, 0x7f, 0xf, 0x3375, 0x1000}, 0xdf, 0x0, 0x7, 0x39, 0x20af469a}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x1, 0x3, 0x1, 0x3ff}, {0x5, 0x2, 0x101, 0xfff0, 0xe, 0x5}, 0xe6, 0x8, 0x1ff, 0x34e, 0x6}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xd8, 0x93cfb694a88b339a, 0x90f, 0x0, 0xe, 0x8}, {0xfe, 0x1, 0x6, 0x8, 0x7f, 0xfffffffd}, 0x0, 0x9, 0x4, 0x5, 0x7}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xe0, 0x0, 0x3, 0x5, 0x9, 0xd}, {0x4, 0x0, 0x1, 0xc, 0x1, 0x3d2}, 0x200, 0x4, 0x0, 0x2, 0xfffffffa}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x39, 0x1, 0x7fff, 0x4ec0, 0x6, 0x5}, {0x5, 0x0, 0x4, 0x7fff, 0x200, 0x4}, 0x76, 0x8, 0x6, 0x0, 0xfffffff7}}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x7, 0xf908, 0x2, 0xfffffffe, 0x7, 0xdc9f, 0x1, 0xa, 0x6, 0x2, 0x4, 0xc2e, 0x401, 0x5, 0x46c, 0xff09, 0x2, 0x8, 0xed618442, 0xad26, 0x8, 0x2, 0x800, 0x8, 0x0, 0x9, 0x10, 0x1ff, 0x8, 0x39, 0x10001, 0x8ea0, 0x2, 0x8, 0xfffffff8, 0x6, 0xc22f, 0x9f, 0x3, 0x4, 0x15a, 0x3, 0x2, 0x7fff, 0x2, 0x2, 0x1, 0x3, 0x4c, 0x6, 0x2842, 0x2, 0x1000, 0x7, 0x96, 0xfffffff8, 0x9e, 0x7fff, 0x1, 0xe7, 0x8000, 0xa, 0xa, 0x1000, 0x4, 0x73, 0x5, 0x8, 0x3ff, 0xc4a, 0x2, 0x4, 0x8, 0xfffffffe, 0x0, 0xffff, 0x2, 0x4, 0x4, 0x2, 0x68b, 0x4, 0x5, 0x3, 0x93b, 0x3, 0x20000000, 0x8, 0xffff0000, 0x8, 0xa, 0x7, 0x0, 0x7, 0x1fc, 0x2, 0x80000009, 0x6, 0x9, 0x9, 0xd525, 0x9, 0x7fa, 0x405, 0x1, 0x10000, 0xc, 0x25, 0x1ff, 0xff, 0x20000000, 0x4, 0x13cf, 0x8000, 0x8, 0x4, 0x10001, 0x5, 0x1, 0x5, 0x1, 0x800, 0x8, 0x7f, 0x3ff, 0x4, 0x6, 0x2, 0x2c3, 0x10000, 0x1000, 0x1, 0x6, 0x13, 0x7, 0xb484, 0xc8, 0xf, 0x2, 0x9, 0x4, 0x1e, 0x8, 0x51c4, 0xb, 0x80, 0x8, 0x4, 0x7ff, 0x81d, 0xffff7fff, 0xfffffffb, 0x9, 0xf, 0x1, 0x1ff, 0x1, 0x54, 0x0, 0x4, 0x8, 0x10000, 0x1, 0x7, 0x8, 0x5, 0x4, 0x8, 0xfffffffa, 0x1, 0xab, 0x7, 0x0, 0x0, 0xf, 0x7, 0x2, 0xc, 0x2, 0x5, 0xc, 0x200, 0x0, 0x1, 0xf9, 0x6, 0x9, 0x4, 0x61, 0x1000, 0x9, 0x401, 0x7f, 0x1, 0x40, 0x7, 0xfffffff8, 0xff, 0x0, 0x1, 0x5, 0x0, 0x9, 0x7ff, 0xb, 0x9fe5, 0xb, 0x5, 0x7fffffff, 0x8, 0xd7, 0x7, 0x9, 0x8000, 0x4, 0xb1c, 0xbe61, 0xffffffff, 0xfffffff9, 0x8, 0xd9, 0x9c, 0x401, 0xfffffffa, 0x1246, 0x40c1, 0xfff, 0x1, 0x9, 0x380, 0x1, 0x5, 0x4, 0x0, 0x100, 0xb, 0x1, 0x2, 0x23a, 0x6, 0x0, 0xfa, 0x9, 0x30918e94, 0x7ff, 0x0, 0xfffffffc, 0x3, 0x9, 0x1, 0x1, 0x7, 0x10000, 0x7, 0x1]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7e, 0x7, 0x3, 0x1, 0x6, 0x0, 0x490, 0x3, 0x0, 0x2, 0x94c, 0x3, 0x1, 0x2, 0x80000001, 0x8001, 0x80000001, 0x1ff, 0x7, 0x3, 0x7, 0x2, 0x0, 0x4, 0x7, 0x10000, 0x9, 0xfffffffc, 0x4, 0xe, 0x1, 0x1, 0x7, 0x1, 0x7, 0x0, 0x5, 0x8, 0xfffffff8, 0x9, 0x8b, 0xe1e3, 0x7, 0x80000000, 0x8, 0x7ff, 0x3, 0x0, 0x7, 0x95, 0xf, 0x3, 0x0, 0x9, 0x0, 0x800, 0x7fff, 0xfffffff6, 0x6, 0xfffffdc1, 0x6, 0x8, 0x7, 0xfe, 0x7, 0x8, 0xffffffff, 0x0, 0x0, 0x2, 0x5, 0x80, 0x7, 0x92a0, 0xfffffff9, 0x6, 0x5, 0x987c, 0x6, 0x9, 0x7, 0x7f, 0x3, 0x7, 0xb, 0x2, 0x6, 0x3, 0xff, 0x1000, 0x1, 0x9, 0x0, 0x0, 0xfffff800, 0xa, 0x4, 0xff, 0x5, 0x3, 0xa6a, 0x3, 0x1, 0xae1, 0x7, 0xffffffff, 0x100, 0xf2f9, 0x8cb4, 0x5bb, 0x1, 0xe9a, 0x0, 0x94b, 0xffffffff, 0x900, 0x3, 0xf1b, 0xe, 0x7fff, 0x4, 0x0, 0x0, 0x6, 0x1, 0x10001, 0x2, 0x2, 0x8000, 0x73d1, 0x2, 0x7c3d, 0x3, 0x200, 0x8, 0xffff, 0x7fff, 0x7, 0x5c59, 0x8, 0x1, 0x4, 0x5, 0x7, 0x8, 0xffffffff, 0x10001, 0x4, 0x3, 0x3ff, 0x7, 0xbac, 0x7, 0x0, 0x2, 0x9, 0x8, 0x2, 0x5346, 0xffffffff, 0x400, 0x3, 0x0, 0x3ce7, 0x2, 0x9, 0x2, 0x7f, 0x2, 0x2, 0x2, 0x10, 0x6, 0x8, 0x886, 0x2, 0x6, 0xfffffffe, 0x2200, 0xa46, 0x7fffffff, 0x67e, 0x2, 0xa000, 0x400, 0x5, 0x0, 0x101, 0xb, 0x1f, 0x9e6e, 0x7, 0xda5, 0x401, 0x8, 0x401, 0x1, 0x8, 0x9, 0x2d74, 0x0, 0x5, 0x8001, 0x2, 0xfffffffb, 0xc56, 0x6, 0x80000001, 0x8, 0x5, 0x20000000, 0x1, 0x4, 0x10000, 0x1, 0x7fff, 0x9, 0x0, 0xc6000000, 0x6c, 0xc5, 0x800, 0x3, 0xff, 0x1, 0x22, 0x3, 0x8001, 0x3847, 0x183bb120, 0x7, 0x4, 0x4, 0x5, 0x2, 0x2, 0x4, 0x7, 0x9, 0x6, 0x8, 0x9, 0x80000000, 0x5, 0xfffffd15, 0x4, 0x4, 0x81, 0x60433211, 0x2, 0x6, 0x72000, 0xab71, 0x2da, 0x1, 0xfffff800]}]}}]}, 0x9f4}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4010) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x41045508, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r9, @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.828637201s ago: executing program 2 (id=6392): syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) preadv2(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0xfff, 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2d) read$char_usb(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000a00)=@abs, 0x2) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f0000007000)=[{{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4}, 0x1}, {{&(0x7f0000000480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/139, 0x8b}, 0x1f00}, {{&(0x7f0000000840)=@can, 0x80, &(0x7f0000003b80)=[{&(0x7f00000008c0)=""/5, 0x5}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/4, 0x4}, {&(0x7f0000003a80)=""/249, 0xf9}], 0x6, &(0x7f0000003c00)=""/39, 0x27}, 0x526}, {{&(0x7f0000003c40)=@phonet, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/216, 0xd8}, {&(0x7f0000003dc0)=""/97, 0x61}, {&(0x7f0000003e40)=""/145, 0x91}], 0x3, &(0x7f0000003f40)=""/202, 0xca}, 0x80000001}, {{&(0x7f0000004040)=@x25, 0x80, &(0x7f00000041c0)=[{&(0x7f00000040c0)=""/200, 0xc8}], 0x1, &(0x7f0000004200)=""/91, 0x5b}, 0x5}, {{&(0x7f0000004280)=@qipcrtr, 0x80, &(0x7f0000005440)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/60, 0x3c}, {&(0x7f0000005340)=""/240, 0xf0}], 0x3, &(0x7f0000005480)=""/4096, 0x1000}, 0x3606}, {{&(0x7f0000006480)=@xdp, 0x80, &(0x7f0000006840)=[{&(0x7f0000006500)=""/100, 0x64}, {&(0x7f0000006580)=""/158, 0x9e}, {&(0x7f0000006640)=""/166, 0xa6}, {&(0x7f0000006700)=""/105, 0x69}, {&(0x7f0000006780)=""/64, 0x40}], 0x5}, 0xc7f3}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f00000068c0)=""/130, 0x82}, {&(0x7f0000006980)=""/216, 0xd8}, {&(0x7f00000067c0)=""/28, 0x1c}, {&(0x7f0000006a80)=""/115, 0x73}, {&(0x7f0000006b00)=""/197, 0xc5}, {&(0x7f0000006c00)=""/203, 0xcb}, {&(0x7f0000006d00)=""/27, 0x1b}, {&(0x7f0000006d40)=""/16, 0x10}], 0x8, &(0x7f0000006e00)=""/47, 0x2f}, 0x4}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006e40)=""/155, 0x9b}, {&(0x7f0000006f00)=""/137, 0x89}], 0x2}, 0xffffffff}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) close(r6) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) write$char_usb(r9, &(0x7f0000006800)="10", 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2311, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0026}, {0x8712, 0x5, 0x3, 0x4850}]}) 10.397903623s ago: executing program 2 (id=6396): r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ce7000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000010ac053002400001020301090224000101030000090400040103010206092105000701221e03090581a64fda353a324edbc4bd0121f4b0764308653a1381e40d1c5186536956c8b775f390ba56159bd3b4ec4cc279b665ea855b15f1572746db826697122a85844f73867ea188e8ffffffff226274947b3a61fc4d9c18f98624c0b2392041293309f6387a046d7959e8a978db3da77156d4722cdf8c05083202604944f63a4fa92268de54d92364df9f6534d400"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0xa0, 0x3, 0x8, 0x8}, 0x30, &(0x7f0000000100)={0x5, 0xf, 0x30, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xb, 0x74, 0x9}, @generic={0x21, 0x10, 0x3, "620c1512096fce5dc8019879ca60e2414509faa3a7374bccc3937c2f08bc"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0x5e, &(0x7f00000001c0)=@string={0x5e, 0x3, "e3bd96ba37122464f96b3918fd1fda41699f9308e88cb1ee50d1fea1da0360e5fa53e194d5ed8c0b03dfafe27eac7ae697cfeb7e510bf40391bbb9e8c85bd5ab8cab2383a4ecdf80e6831956800b446e00bc68103ed8b9095d5eb549"}}]}) 9.629933422s ago: executing program 8 (id=6400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907d", @ANYRESOCT=r0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5", @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd15, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r9, 0x4, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}], 0x10) 9.533400667s ago: executing program 4 (id=6401): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0xffff, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) socket(0x29, 0x800, 0x0) fchdir(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121440, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 9.0920497s ago: executing program 4 (id=6402): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x7d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x9, 0x80, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ad2b843ab2d2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3c060000, 0x7, 0x4, 0x10}, {0x6, 0x24, 0x1a, 0xe722, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x2, 0x8, 0x2, 0x10, 0x6}, 0x120, &(0x7f0000000280)={0x5, 0xf, 0x120, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x1, 0xa643, 0x7}, @generic={0xe8, 0x10, 0xa, "7b0a015966281bf53aca2d2d87de407e026c049631554b2c53599a655090ec3a2e6ae6bee632bb1cbbee1582d35baacf9cb1d8509f49d22b9b25ddd076950a84700b7d07fed3eeddfabfd0225832566fb0d3610588d2a6c7b002e2b5d0e26754e40f52ae8cb11447283eaf2e5d9e03e02084403fb12469ee316fd6922c680b24123d3e9bfe05344bd0f49b47bbee4d6ae2b54f1532a8afa3453915496c1f614efba3f57cf9305f523e93c2c1c130791e7faf5224512cdd46734e056dfdb8aa87974e795169da53e9dc548faef10b5f0c786a96a4dab7e58f71009ecd97714b0a00b9c9a033"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7, 0x94, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x7, 0x310e}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xcb, 0x3, 0x4}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3413}}]}) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81841, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0xc005) syz_usb_connect$uac2(0x2, 0xdc, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0xfb, 0x30, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x1e, 0xd}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x4, [0x9, 0xa]}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x303, 0x7f, 0x2, 0x8, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x5, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x1, 0xe, "7ec4", "91"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x81, 0x0, "b95031", "8c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x40, 0x4d, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x19, 0x10, "847067", "f3"}, @as_header={0x10, 0x24, 0x1, 0x4, 0x6, 0x1, 0x0, 0xb, 0x80, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x2c, 'v@'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1d}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x3, 0x7, 0xe, {0x8, 0x25, 0x1, 0x0, 0x0, 0x7, 0x401}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x470, 0x5, 0x5, 0xc, 0x8, 0x7}, 0x9e, &(0x7f0000000540)={0x5, 0xf, 0x9e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x3, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf0, 0x2, 0x3, 0x3, 0xa3}, @generic={0x81, 0x10, 0x3, "d5f9b3e81eb43212eda92ee98dd3f2d7ebeacaeec34d26040262230fc9cf26ab11e31a037a8e00e511771dc39d9c33c034e7029928ed70b262642513a31a19ae8154b6fad9ea50284bfbf75babd64b26d2caef5eae53fa291e065202e248ed03d9e92c91d5508ae72b580927ca67e009afd7d639eeb82c875abbf8753391"}]}, 0xa, [{0xec, &(0x7f00000007c0)=@string={0xec, 0x3, "3c0093ea3fd6816627fb67c6b609db4687180531085192b94f6690a565ce2d36586cef6796e48e98baaf706a585400149fec70696ff3d379be9c5f53a180ef30672f447a255baf0d9f9e06182180fc012fe88f56a59cc7824844a462357e32306d160b3a3cc924acdaace676f1a7b44541723bee65468cf1214e5cf37e03197471402f78efc03d59b9664c22648f4ae5034125bef3d98ccff77cc738c580d0222a39e28133b3109980955d30f07f0498bea9655e32e4e306c1448ac0af9403826bc545df9c2750b9ab6deb945be4b2b4ed50bb0f0efddef563a5f622e229caa3dc0d63b371a277ba21c5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x408}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "32c5e90ab2bc05e5cc4060ceca96"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1803}}, {0x2a, &(0x7f00000009c0)=@string={0x2a, 0x3, "348d946deca59fa03a245462b190456e8a2ec52d6177558be1969e7b07fd26f5d069029ed8015bbb"}}, {0x98, &(0x7f0000000a00)=@string={0x98, 0x3, "9770eaa543b64a37ee66f803892374c0deb5321eafded224cee307b63a5a8e99754b10b4aa19cf6ac88c9640dab1cf18fb84e7bb7d7216c1148c6fdc37bb8d47764ebce686efc7913c4767cddf500136bd12b56af3777ff7b99845e960f3198be74774f67d3608be542ee5b91313ac39b7fca101737e385f2e808d2dca18fa61b64f4880ea202e3bf6ddb0717266c18e0eccd0691f62"}}, {0x2d, &(0x7f0000000ac0)=@string={0x2d, 0x3, "c9557de20dad178df00211661595b240894871d7c3d629b8231b151ae0960acbbfe2cc181ac883329f2cb7"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40a}}]}) openat(r3, &(0x7f0000000080)='./file0\x00', 0x20001, 0x88) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="2030f1d6000019aaf7c4acfc74eb6f9fbf4564c5f42e00d918858846b5ebd75c67966bc85f07f54076520fd0def907d5d7fe5db4144d5ebe60c8215020b85d797377cc5ef3307dde31b8264e98128731d6de47aa0a1465eae604629ace12bd73bc2fee66d166feae4c43de3f0a45a31c9a3986ebb92dc3e23b44f9eb8352416262778df722381db8e6c50c9e390197d02f79b7f085528b7b59a44a9aea32172a196659"], 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x7d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x9, 0x80, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ad2b843ab2d2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3c060000, 0x7, 0x4, 0x10}, {0x6, 0x24, 0x1a, 0xe722, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x2, 0x8, 0x2, 0x10, 0x6}, 0x120, &(0x7f0000000280)={0x5, 0xf, 0x120, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x1, 0xa643, 0x7}, @generic={0xe8, 0x10, 0xa, "7b0a015966281bf53aca2d2d87de407e026c049631554b2c53599a655090ec3a2e6ae6bee632bb1cbbee1582d35baacf9cb1d8509f49d22b9b25ddd076950a84700b7d07fed3eeddfabfd0225832566fb0d3610588d2a6c7b002e2b5d0e26754e40f52ae8cb11447283eaf2e5d9e03e02084403fb12469ee316fd6922c680b24123d3e9bfe05344bd0f49b47bbee4d6ae2b54f1532a8afa3453915496c1f614efba3f57cf9305f523e93c2c1c130791e7faf5224512cdd46734e056dfdb8aa87974e795169da53e9dc548faef10b5f0c786a96a4dab7e58f71009ecd97714b0a00b9c9a033"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7, 0x94, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x7, 0x310e}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xcb, 0x3, 0x4}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3413}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81841, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0xc005) (async) syz_usb_connect$uac2(0x2, 0xdc, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0xfb, 0x30, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x1e, 0xd}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x4, [0x9, 0xa]}, @output_terminal={0xc, 0x24, 0x3, 0x6, 0x303, 0x7f, 0x2, 0x8, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x5, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x1, 0xe, "7ec4", "91"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x81, 0x0, "b95031", "8c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x40, 0x4d, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x19, 0x10, "847067", "f3"}, @as_header={0x10, 0x24, 0x1, 0x4, 0x6, 0x1, 0x0, 0xb, 0x80, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x2c, 'v@'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1d}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x3, 0x7, 0xe, {0x8, 0x25, 0x1, 0x0, 0x0, 0x7, 0x401}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x470, 0x5, 0x5, 0xc, 0x8, 0x7}, 0x9e, &(0x7f0000000540)={0x5, 0xf, 0x9e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x3, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf0, 0x2, 0x3, 0x3, 0xa3}, @generic={0x81, 0x10, 0x3, "d5f9b3e81eb43212eda92ee98dd3f2d7ebeacaeec34d26040262230fc9cf26ab11e31a037a8e00e511771dc39d9c33c034e7029928ed70b262642513a31a19ae8154b6fad9ea50284bfbf75babd64b26d2caef5eae53fa291e065202e248ed03d9e92c91d5508ae72b580927ca67e009afd7d639eeb82c875abbf8753391"}]}, 0xa, [{0xec, &(0x7f00000007c0)=@string={0xec, 0x3, "3c0093ea3fd6816627fb67c6b609db4687180531085192b94f6690a565ce2d36586cef6796e48e98baaf706a585400149fec70696ff3d379be9c5f53a180ef30672f447a255baf0d9f9e06182180fc012fe88f56a59cc7824844a462357e32306d160b3a3cc924acdaace676f1a7b44541723bee65468cf1214e5cf37e03197471402f78efc03d59b9664c22648f4ae5034125bef3d98ccff77cc738c580d0222a39e28133b3109980955d30f07f0498bea9655e32e4e306c1448ac0af9403826bc545df9c2750b9ab6deb945be4b2b4ed50bb0f0efddef563a5f622e229caa3dc0d63b371a277ba21c5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x408}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "32c5e90ab2bc05e5cc4060ceca96"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x1803}}, {0x2a, &(0x7f00000009c0)=@string={0x2a, 0x3, "348d946deca59fa03a245462b190456e8a2ec52d6177558be1969e7b07fd26f5d069029ed8015bbb"}}, {0x98, &(0x7f0000000a00)=@string={0x98, 0x3, "9770eaa543b64a37ee66f803892374c0deb5321eafded224cee307b63a5a8e99754b10b4aa19cf6ac88c9640dab1cf18fb84e7bb7d7216c1148c6fdc37bb8d47764ebce686efc7913c4767cddf500136bd12b56af3777ff7b99845e960f3198be74774f67d3608be542ee5b91313ac39b7fca101737e385f2e808d2dca18fa61b64f4880ea202e3bf6ddb0717266c18e0eccd0691f62"}}, {0x2d, &(0x7f0000000ac0)=@string={0x2d, 0x3, "c9557de20dad178df00211661595b240894871d7c3d629b8231b151ae0960acbbfe2cc181ac883329f2cb7"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40a}}]}) (async) openat(r3, &(0x7f0000000080)='./file0\x00', 0x20001, 0x88) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="2030f1d6000019aaf7c4acfc74eb6f9fbf4564c5f42e00d918858846b5ebd75c67966bc85f07f54076520fd0def907d5d7fe5db4144d5ebe60c8215020b85d797377cc5ef3307dde31b8264e98128731d6de47aa0a1465eae604629ace12bd73bc2fee66d166feae4c43de3f0a45a31c9a3986ebb92dc3e23b44f9eb8352416262778df722381db8e6c50c9e390197d02f79b7f085528b7b59a44a9aea32172a196659"], 0x0, 0x0}) (async) 8.244709974s ago: executing program 5 (id=6404): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x100, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000004c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000500)=@userptr={0x806, 0x2, 0x4, 0x800, 0xf42, {0x0, 0x2710}, {0x0, 0x2, 0x8, 0xff, 0xba, 0x7, "db173aed"}, 0x4, 0x2, {&(0x7f0000000480)}, 0xba, 0x0, r5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2b, 0x2, 0xf, 0xffff0001, 0x8, @dev={0xfe, 0x80, '\x00', 0x12}, @local, 0x8000, 0x8, 0xc77, 0x8}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70, r7}) syz_usb_connect$cdc_ncm(0x1, 0x7f, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x6, 0x50, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b0"}, {0x5, 0x24, 0x0, 0xa80}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x17b, 0x7f}, {0x6, 0x24, 0x1a, 0x69, 0x2}, [@acm={0x4, 0x24, 0x2, 0x19}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0x7fff}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6d, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x7f}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0xe2, 0x70, 0x2, 0x8, 0xd}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x6, [{0x55, &(0x7f0000000780)=@string={0x55, 0x3, "d1bf831e5f8b584d13af064a4d672cf4aab79118c11a83f24b2a87f0c3fc6e51df355e22f506e37695ae76880417e9e554dcfa5de3cf2898ec0334831a9efc9435b839d04e12c5d484daf02010110148d59417"}}, {0xf3, &(0x7f0000000800)=@string={0xf3, 0x3, "cdb6d0f51cbce53c537fe5bc49ddbc282270b938d8325f6c1703285e83cf7da4698837f4b043bd7b00f63bd04e8227b748ab7e61101d61642cb67140799a1d515d54a22eeb4ac68fdd327a22a6116a51fa02df4e1045677c9a2c42ced48a7264fc13a18eeccc7e819ec0ea4560de07c69d326923e5b24a834ddfe183f80377494cfaf063e44977977a583c574ae02563d8db19a20bd70df5c1ff33f282f6d01fc27b9117a9a5bd0d9fc38483261760f45154616036cba326cd461e61a3bf5ac5f23b41f1f5052e6700ce1061498e8daccae1974c4606ac7b7b094f69cbb9d5d64f80fa26931c5a1bab83823055305ff77f"}}, {0x13, &(0x7f0000000900)=@string={0x13, 0x3, "261e9854e17907a5f3ea3143cccf1a0752"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c01}}, {0xf3, &(0x7f0000000980)=@string={0xf3, 0x3, "a6380005e598408b8869682b1ce400720aba33ddae27969536cdc0ef1ab70f5914fdc2b0a6c929bda7db3b9bffc38d1c41928c1eafbd74eb0352d73728e52f7143f6a418e99e1b2c3a9ea07fbe2752ef9f526d0e78b6fd9a0df030a5b0e4ac917ac1ddf9a9e97b89312571213d17cf6470c75d764088219bb13895384c5e53d1385e1239395134af8382ddf1dccf1f6e485d309c0101dafccb9223160caa7e318d4faf35ff787bfe4302b650f6f8ae60da4806f676c64baa17eacad864fe886340dbd2e6d0f4546158d311f3ec974883fba86748270fa1926586b10bc20bf56d9185e7a3bcf33c311785c47c59e75f7953"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x407}}]}) kexec_load(0x3, 0x6, &(0x7f0000000fc0)=[{&(0x7f0000000b40)="47fbfdabc1f67f5f4156d690f6136a356f56c4cd9fae7d6f4ba2b29276fa0fd11cc2030390f21a9de98707ba43dd2e9bbe44db82638ef5", 0x37, 0x1, 0x19}, {&(0x7f0000000b80)="8c447ceeae68f59c00675fb38a543c1d00e8837b5da8e1970b287885cd7a8fba26f990bfae4a196ce4862a049a74aae0b7597fa899d885c34ec680e5bedb6c3e92db2ad2b389a9b3f6ff24a8d9c91684aed2", 0x52, 0x4, 0x1}, {&(0x7f0000000c00)="199c2d1dcba01c957b09bd20c07a1c2eb79e386643a4e0bd17942a1883c0fa5179c3a52d2d0fee4121b1f978c62524497d4a4d90b8a3b43656c47262250780753de90ed584e87d822a848786853b2ba4b15cb7c1b43e9c2471aa3cc0da89ea5798e73efd7d17005f25e542da29831f65affbcbbb23400dedee20b828435971e1ebd2ce1d0879374522f1338c9d8d2b2b386e8786c1484bfc", 0x98, 0x100}, {&(0x7f0000000cc0)="959be1eba1c76a4d5758f681976210d102e07915d71842396765992295c8a66951af9842a953a2c55b5534f51024f1f4b97fda65597281e248daab639e688792951ba75c66a104e1529f947c505742e4b361fb98b91bf6eda43c9277e443be4c72aa536f94c671512b671b4f17363a0dfc46cc79289b37e29d73c6173227698bb5c61dd5e7f89bdfe0363ad99a5e5765c2473ba0758231d6d95f5e9bb1fad013969491057632bbbf56a4817718e6d967a8ff8a2ca9b614d634712a1d2d5afac36a8f921d1f0b1609e080601ee49155e847ef655ead4883b5fb69ef5a03", 0xdd, 0x1, 0x8}, {&(0x7f0000000dc0)="aba198f08d6434a4ba85f951175ec5128531e81f74a09f0b85c5a5e34080c6680ba24fb9bcf9a4a4e2f58de885d95585849f54f32c58598f31443750a6ce2bad6ed6bc5ef0347723d99d514bd4204eb197781837f8a1170c91a306e2209c50b07e071f87e502f77c80968b2bfbe5df5685df0618cedc9cbed361caf134b98256a02e91ce95e42b41c8d0523407a0efead7f8e1aa0a3e30cbcdaa90e5e60d2162e737e871f7e981e9344e9fa29835bf1cc49f12a7172d3a813876d1e4536b82567fb228751f60cdfaa8ded768d775ef1463", 0xd1, 0x8, 0xd}, {&(0x7f0000000ec0)="778ef26328c856939e9fa428a72748378fd60331f924c411bf64d789111658250fa9da45e73aa79416c8436a8abef799c9bb5120df81ff62e91d213caf7ed89de3003d2ae244d73554dda8aa36501f015a5053633a37f8ba77bca5411a732a5f03d8a4ea4e4fbfe87c999d1e325708ce11851e50c18e2c0e3df15a1ebf427e61bddcdcc3b086bf7f625f578d830e556af380e640e5fdb849df8d1862822df3663237af7c609d7bdeae9f9f4c77a20a77f2e9bc3a5126973b4e7cf06112fc88a9664a3f0bedf2cffb32ea", 0xca, 0x8, 0x5}], 0x1) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, &(0x7f0000001080)=0xffffff81) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r8, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa869, 0x3f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x50}}, 0x40000) close_range(r4, r6, 0x0) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14, 0x80800) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000001300)={0x2, 0x4}, 0x4) sendmmsg$sock(r0, &(0x7f0000006ec0)=[{{&(0x7f0000001340)=@sco, 0x80, &(0x7f0000001880)=[{&(0x7f00000013c0)="1e339d135d29481385aa0f58", 0xc}, {&(0x7f0000001400)="b05083934ceb29724571a953a2046495c4df00db0f20e522c1be9daff87df67df21be07b9a31ad00f90272508a333d4875e1c7bc0d1df13c2d19534ccf973e5124ac7b667b9a319da33d719de814620f8dea0d0e6cc9d8452f88b27a48bd21f8edca57f0442aceece5c3acbb1b57569b02c478f1dd063940b1dd7ed33426d248748444b26ef009ba5a7b3b33915b4d90c5e96b26625c6df25c6e1993", 0x9c}, {&(0x7f00000014c0)="756709218fa124533076736e0bfe162fa6ec82bb43b18206c5", 0x19}, {&(0x7f0000001500)="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", 0xff}, {&(0x7f0000001600)="a17f2a628c3ee2faf2d1fa260290760eb5af256ebd1dc0fba4980660f1de6a5cc2d5edfa6c784c35a9fa5230b72ae1b9a937c443f7d431a78adf57c237cc1e8fcfe4c265df982bd5cce8a58758677a52820a108e58712bcbece8e4de4c09fc464197c0371d0e2c1d4168fcd4edbf353e36f3f4cd2677e17fa615c28095b8fb2f084a4c77694496966e822f4afe1a520f7c2eac8ac4da0fa1649505cbc67f1f65d122eb", 0xa3}, {&(0x7f00000016c0)="0d6948693b93071633dbc37b6661f3806a3b329a1f1afd5602dc83f036d662654d91d626bd05d7defa3cced4ce291518f1f5b6b22bba6cc63e31beeea4b3b04e19504c53a4e5fef123bdd1683f93d4dd9105b228aabef3797682bf9b529f7b6c4d8ef2d2", 0x64}, {&(0x7f0000001740)}, {&(0x7f0000001780)="f93d81efdb7e1be8333282d7a4d6c49ce0fd24aab2708bb0045ef3829c2470c5a9539ad76593daa9a29c56c14a4a2d7ed21e9ecd64877655fbba55ca3143ca34be75d144212249addc91383e8712ad53d7ad53ea418f329eaaef4eda24ac5b0da520313a611dbd847714316532011f64fc31001228c99132e094dfafbb4eeac280380583e3c6783de1e77c6faa0ff07503352c", 0x93}, {&(0x7f0000001840)="8411f25cd94b3abc36879f5f288b78b68bf5dc4c5afd1bb54581e56dad4151b0b595be1617f2c67e3909e479b88118d5f311d03c056348", 0x37}], 0x9, &(0x7f0000001940)=[@timestamping={{0x14, 0x1, 0x25, 0x242}}, @txtime={{0x18, 0x1, 0x3d, 0x2000000000}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18}}], 0x78}}, {{&(0x7f00000019c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x4, 0x2, 0x4, 0x4, {0xa, 0x4e23, 0x0, @mcast2, 0x5}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000001a40)="fba16dbe24d8dd55ee0fe8d1e4a7421bd6c9ab5ccbfccf43ee6ce66cb4e9d85e83031d3b7fd6b73bcffd216302fd1b1107018ad636b0503fb88f091de2931a9eb3ae52667eca45e98f13bbc89bc074f7e65a701b123856167cdadebaa7439ee41b0e9b4425876ed5d6", 0x69}, {&(0x7f0000001ac0)="7f13c484911e0371f9d63a26553702781e6097459aa4d3cd5ed82048bc50f47c74da3ad4b932305cab8097acabc2ae425331f122c5af6b6294ff86047e9affa70189c42ae535fbb8d3edc9951ba1e634e857e856da8398b6798001b97dabb11484c6b44f65582a5ba3822a87a7cc2f89d9fd5180a1a06d6c9811fb0fc82e0808a0ba6aa1f6c5a7fa43128fb8c38670134fc09ce35b61b8d8955592eb38e1036432b6e5ee478ca620e6cf97d0cf6492a76c3747bd8823589d2f27c091ed2e00e0a936d9b3dc9eec506e01ae5b129499016027a7ce8193b28f352933ed642854b3707c6b80318e57f503d58b8f33bd928ee7398ed97f5cb06cd56703875a470f9c2f7888bf0765bc78d55ec6f5e883773a1fd3fd0514c4bcad6047b05fd3b044a898509af86357294be2903e5349dbb4f1ad74ec639d4a6511f18a3052fa96842f7a59b4d4e83dec4d49116e31136e0f02dd2ea9b7626946ed14ad3904515229869410e3600d65787402d47d1d6fc32c9681320806001bede972ba75f005e1d51403917e695594b23da99d7443fff302e44306c590fa4a038ff711ae1139264bdc3faf351112c972fe4647bc09c189eb63b78e9ad3dd71940a2f70216023d54d59228a739a981d95ab926711f45c28faec223514ac66202fd324b9fef69968f5b6ea9333f0370dd5643c2171f133f7f1cb058ae666219e4c7ccde02b799f1b8e77362a5564a22ab97c68a5abf2f440b4c38607d70bc324a13b4f8c9a95f309e67a373be405079f9bf35eb18768eedccd273cb2ee4da6b5bea8162779ce6704a450b1216cd3be0e65784947a0ac2dd8502b72193ed0e3848212d4b8e7455576e18f16a1b33bd565da40c34fd48e3b54ca48e62b557d05e133d74d231c3a6d633fa071bc06c1393077986a096620b2b3232945f5b34418c1f7473d30a1f3ddfe9a046d0730aac5f503d77dc1a7c9b3205b333428060f94aa7feb7f48003ab4729d702a6cddff2b08cd388c59f7c92c525e2656730a153b068a2ebc8e76da2364319ba68cd60b720e1a72e6b472c27c0a7c447686778f52f0e56bb9ce0ca9d3365c2382eb782df2c7be334c65b0fade31c3fbae7de7dd88fac7e8a328379920f5215ef95fbab4aaaf750f3dfde7ac298c0b47a1df0a6699ba2ed11d919eeb91438f3ea3a73220dbfeaac17da1b6ad8bfa928c8a40faec2f6e7a3bdf4ccffaf43c757fa4fad94536a0fc57719aadcfc8cdb0006213a7c7ff92123b8874aea73e80fc62988124b9d52f2d15678b7766162155ec155d20a40b9f4269239a5c61b637e39e82faca9c82050e4058ab61b561ed01773217bf92140be31784b6c5f81bdda6ef43188914750d1f81c0fd6570fee0091ea23273de1a19f23ff2024afdaa026662b8d5dc60aaed4433cc31d175cd264974a16c1cd156769d128494c5abe9c8e6bbf4ab978958c4ee2bb276d8cd32be9913b11cbe569e87d2eea36dc5d3cf2c8be586221880fb1da55a4fb51d93c11be143930d0c20d4d98299c93cf481141e42f5dbd5cf41736e1e6af28e83d1e3820f95c98a0d53bf287b78a1a81b55c81a71c8b6dfa59c16e8eae2e18b3ec43ba800fc867c059c6ad8dc4be40c30a0d9af48e83c4619af669a8571ec0fdd9c840ca7381487cecb6e93d7433de15ade6bbb72060e8130deb371178bb0c447893a076355b7c1caad200418e3f93ff0b72c427d1719e55294f8ef4ca6665944004ce5258d1b99968ef5a8e46ca5dd37d2d43e817adba9f3ad0f92b25c495823fdb1cd2cab576c19f521a13481636e24af74682ab77cd216e2c7594d1ad32b5e79cc45fb1be3fbbb2c34d7b06e74b3b18d40d02fc4808f1cea5f6bbf5e489a37f2262e53e15991375386854c62e8c69041f8f3b788d069197e2fef4c694d3bff708c9062b97c5264213158d9d839ff3856083fa6918042b7001b7d5bc7dd51a3fa878c1620469ebc2d97ded18e0b18245fb95d06f95b4130af4bdfe71a49cbb8592de4f6e9c746adb269956ca2038bfb6edf144b4be047a7aaca195454e4f38ee6d9fe47fc47086e604c2eadf7d880be3bc6af8608509006014d1c5b897da70fb984dd43df2bc0ac51270b2bd41a150083804947bd0e40526bbe22be4cf81c444ef4292b96d8fb4eff4c51fbd5f6a5bad935946cafa521089bfb2fe28d2dc524869d75df5dce3b652beeaa70d2d19824795673353e346c0f30395359706bda23b06d4aeed2f6f46d370451abb1619398e1f48c900cb736f1e141cab81993ba3c5d67426858f4ed3b6ff4cc01d1fe13e7e938724c576414dbbde520848c4e11cd6b15a25358ae3f985687ed6cfe35a325722612729d425f1eb74b3d39214429abe67b9aa1990767620589ce79b1563d4dcd7870dad1bf9788202187ff5f31865cdff1efa914d5ee9b66d24592f5fdff4957004ac7fedceca5854937118e821644fae3c6ac0d84562c71d929673f95ad48e868ccc57f26446f13ecac7c17e4f7b1859028825c45dd0bc1ff9566fb2d52fbaf096730391809da017164dcac993d2ff4e098e9237070cf289f1312dbcc1e7c50c91a8cf94221d05d1b3a50d72b1699715f7c0050d8cafb05d91ec0fe4da3acf7eeefc5ca7beaa17dcab6adf40a849149af2138e878d02b1282754c1c87b769b0c592fae52b0bcf02c841e7d5fd5c8db32e348e2f5220401094958ef940009e0e3b4466d4e8ca2af8c1474cb5996c954ba17af4cb2e79b2a53d979f22e7d46ba4d93223710321e591f4d637c7ed56aed95edb29562423b8ba78fb60395e69dc641e98802a568deeb7e42e0c6f47a0f9d1e3176a0d9c99193d631bc51ca6a776fd58e9bf074eb5067851c143b10b4e0775cd5fb68dc6d3f7d9a8584f80a2df669199db7362a4ed88d5db53ea4befbb38d4ae51637742866a26301e5bb42d5878f5a467a13ab477711d45fb9c9082dcd7012e0dfab7b9ef73f768460e6bec2b991abaa73a0e912a36b928976bb81a91f2a12019859dc6caeaeecec68ca39ac45ec6dd1bd0dd0a816c2641640279e1ac3e0726a5efc8219036bdac3913b86d22d6e4276373c29c61507a63ed06fad364b00c582a165cc856012e496df9ad48314e8ad83286ab01205bf370f5b132dc2331d2e6428a175f3e90da5ef5a836dbd440e64caa328e6affe09edafd88af4a2cd4f10772f02e69efe376a5512c41126d1320e355b4ad6cbb51647a9d3c0946528df198f983c76fb1ba8f46cb729aee591c7fe6a73175244ef31961a8b78006ffbf578042ef49503f535a1b6d49e84a3913391f75504063e80bb35d41acdecb71535bbb50742590e1e94b47ac3a323ecac540cef48c20fc29035fa4e55ef3639eb02a423d037feb9cec354e8e93980b1641fb0851539ea7a0cc5b52ab7326e1cab93f5fc73f404edaa90b39543fcf975dfc0721b29e32eaf1ed52f8fc113fcf0793356027b44b8d97662a9923ec549d7f5b9ffb1df492476ad3cce5f6620331d97afdab101afe7b2d32de69bc1238ea46d4f665e127b6222e40581b46caa59268886f1bdbda84aeaa10753469f6c8afe93b10366d46d8f993e7a5bdf106c6aea8b8b59bd721e3271f618efc19bf23ddb1f66723bc6b86e85542ae667e925ff19c337a5a10fd5599dd086c14c1e116eae364deef016d46d63ff7388927dd9088440af6518983edd97d266fce235e5385416fab457b58c3db96593a0c8b5d4680454092a0848153f4f302abb8f46501d2c9304a05b69fa86c7372c78939d9825444eaef4d6cc8962511c7fc7aae5fa07e59c05da60001f4b8c0f7ee06d6e4c2ab6f5e2b141c6a57225de956980768fd6a69224edc9a354576c4508ec104dc07e68f217cb981bbba5c3158a192719afcc88fa058197bee257fe75374426b35f3e5284dfa9c55aa484659ecec922fff38c8684cafd38e9e76e6ff2573633a63c92c60f5933a4cca0f2efac23012b79f4ff8fc3291e7218322038213d184ad4c9b470f84ddaaaed3cac5792fa1a40fb46d3432837f258d9e67557a7ce36a9c702c43bfd56b50df30d635b9b59c89b569f0fe9c65ee4c0637f0a82ae2a00c0a2ca4a5133208a5c843c7749526a0057e264c9f9dc52639d1faa6a1e80c635470746b009220b18df5fff0e8c0ce8d34d22124bb677e09649dad2c7e31c5253d278d2b11d2b57bae1b2692d6a10b3e9b4108228c71b02d1fa13c678125bc8e3bf7facb9c1b93648be01921e262f99f1d559de81d278b2acd0c1f625a288dab4c05977bc781ce001f59bc3cff29f38dc9823bcd51e1306fad3a88943a34abe4e9a36ece405b9eacd688d92b0d4d29be974f8f014988fff0b12fde117902c7a72774bad12972fadda1021fff5035607c8e96e636e11b06eabed164f6f906d14ae76fb546d5bca19e5b00114d1265f0b14c60651f157ecf0bd897b8296a1c5f738e907c1798b75200c66de95e0f09b8dfbacb2e0a569b7b56c4104f2c1cb7448d1e98dd17e8d3181f3637279484aa55212435865f4f65700fb2fa3cd52fdff957b51263aa69c65ed093e88b86aaa4a193489b7a126c817efbf706de02282fdb17caf9888968cc0350b2a0f4315a83d17582a0f8cd94cc65991b2b888695552983d8f6d7f12d0717d99796a3457421240859aca616d587df7501214d74fdf618fa64ad44e73cb00d458b1792aaf1248a44eb51a1d93762a97a460ccd4fef5edcebc3745675916b05b9726dea3a43d1a35918c1718361c9cb13598f289fe7a3aaa3e7c38acb5f2f15a23f681aaa4fe5f2647ae6a87daf226c752cf976f84c38d953ecb02a91800a120a57a2a6e7232c4d712a2edf7414cb483a214990ece022db3d8c07677519da79250498db14a54b58e89cd305114a6c523dadd59f7c0e008dbfbe9561ca1e24d0c0efe2d1718fe57b830d1e026246ceb4aad6cad833b18c45ad9e75401f269f8a23c43acd53974fd0e195f04628272df23d22ac47961a67e725e5f70cf95fb57ef38f1a1b714764e35e56f91b9359ab117c7644c221763947622fe6d7b8e88b038e9028b324160835b43c6dd0d158ecdd2ce6c87e13d0aeb2c53ce51d3df5cac7355b602eb0b1e9fdf940605c739c1d95d2c592d04463d17cf05fb03d390530caeb6c16cc27c9da3173262391dbad8f9ec2dcc8fc54dffbcadc07e9b4e8d84dce43fd0625844576f670a27bb2731980fbc43936b41fe9ebd474e6e5ff08e70ea9e93c4148e022419e69d3733d49911fc438f6688ed41b77964057511adbceec0bae3ebf22b2e2feb2d92023b57748ee30a958a80b3b8eef580a1389369b1999cf7a18bf28e83d6a6b0079cd7f96bba1f54e341367ea0bdbdcef7a73082ffb3f4d29744941cb406f890c5a6c565b5ecfc531edcbf04b5040bb9870baa38459b77ba46401ca6dc618cd8ffeaaf944396686fa956f2adc53f220ffaec4f7399d5b3d8fcddbf9d997a123356634b2b10a5b63e260e4e7c305db6dd5f018528a7bb3f62c6969d7446688d9d69c05c713c0e5a5cb0cba8bc91ee1d595216a0ace8cbad429da6f72ee786940b52ea8c2eb4b82c8154fcb5614e22262b9e4f9f043de1e396e312370f7f18d44ed36586861d2b221027964e12f84cde4862d5e3f9d78a7c204a01013ddba0ddb1026ffcec9fd3a6137a7b4b76feabb529e8a4ab535825bf8884cfe902f68dc618338f2fe4b6661d3f1c3a9ac090a19a7f807e143997135c6fae610280c3563c478c27f85529b4e7dfafe14c64fcccd2f48a1bc36757f2f90b513be3d8030ccc3c9b7721cea530e62526f3c357b", 0x1000}, {&(0x7f0000002ac0)="6c043ec91fe3c38a4a3563c2c12b24d3b6eff4ed1e6790995f3c147113417ec6092d722e1167884ef3fc7b552e28e839c3cf0babab358c2f6d702c8a4e7dadea09bd74bdaf9ec37336f3c0dea1d254951103f23c62bb69e6bbf15982429c2b2f7c9b4be5b7b612b723767e7c08fee01ba21a416d8c6074f1ff000268d4c86e7da49d74916d919c9d8e19458caa0ab6400aaabe39ec2d176a9ecc9d65f3d984eae2f9dae8a717cc7d5f3ecc39fde5e12bf4193cbecfb57d1f31be001e7a1b3d50476838fbe5", 0xc5}, {&(0x7f0000002bc0)="0f330b8acf4ba9827b6c452ad4b9366dbc6375e44383cca41bcadc5b543ea6fcbbb921c6a84e7ea74f6b56347e63b0d8e85d1ffacc6f89d6d653ee0d358322887b12982473e5650c3f3984", 0x4b}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="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", 0xfd}, {&(0x7f0000003d40)="cc6c985b85125812c0bf57c450019418bcb014f864e5", 0x16}, {&(0x7f0000003d80)="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", 0x1000}], 0x8}}, {{&(0x7f0000004e00)=@nl=@unspec, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004e80)="1258eeb8a3c2b1eed3355c0c7c996bdc754e4e23fb95656a5bc10e8d8aba0cf1c930", 0x22}, {&(0x7f0000004ec0)="b4166d9396fc3f7b2a6776c0bf4f2dc7", 0x10}], 0x2, &(0x7f0000004f40)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}}, {{&(0x7f0000004f80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000005400)=[{&(0x7f0000005000)="a5df675c2fd2c52394761ca86c7f8b320b988a9cdbb717734d473e97de787933e9f01c9b204d16956bc4ea7958c061388d1680d11e4c5e342e263c2585248f784be8d8df316a1460f89942eea49451f929c33be0096c8079f9ef022558464886923bb26d18e3b989308f2e1fa9b238d485f2427ae742ee6b129eae2cc2d66987832b6123666ffd131248a1ed9d26c3f3e7d315511d8b09c26c1f1c9ba5666d521c48a5ff27f6255b8e7e41de5f019cba7d120fa8a378a47c424badfa6435334b633820538c901a603fec0c2db9b843bec27969bfe8f128213cc099e639b35fff9cd8", 0xe2}, {&(0x7f0000005100)="95b2bd51f5b816ee93", 0x9}, {&(0x7f0000005140)="d35ddeaddd4c4d62", 0x8}, {&(0x7f0000005180)="ba1b08dcc822b21fb6c6f6e1e997bd310ad055ad283a609f64fbabbb193a57c0e5bf14ebde0dbeefdc75bb4bcfcd8f836165358286d4b9985a899d67a0df33a9abadf2c51be5057534eb42eaf57f4a8e09b850869db89a427129f078297dd32b61fd8e", 0x63}, {&(0x7f0000005200)="01b5be377388054611fa8e23e33a6496fc97344d2402a8d74d9cae26d6f465206648b195dc38c4496e8df4b6f9f27b17b113e9fcdf7b90199f14e53314a062", 0x3f}, {&(0x7f0000005240)="d6357621eab7a6179cfb9e84acf0f0965066ed605097d2abb96afc6a09e9e6590aaedfe1813215c7ca177373f9651e56b03e7db3d1db45c78b10437d245798b879edd91f53efd0cd884711239d1acb74e38ae32aa65fe7f8b5f9f21d15a53c9a91b2dcf2388856c486cd74f7956be5640e8afc53ed6631290d7f1ea4d024cfc50abfbcba49a4f563b1afef23caefc2d55d700bb78b4af7f7fa212485af4eb64880fc92e6b5c7f0dc8f308a4c08ca6ce75eee4ac297ee5ab787bb9af6660514c915364d84ee45263fabec309938eadcdd6cd5aac1d043deef720856cc2a81311ce44be290c79250a65d105f640b", 0xed}, {&(0x7f0000005340)="940fca0b5e016ff4b2842f44db53f7e37dfd5dd815d20744a9372d3d649ef3d15957ae7010eddcfe5ee58230bf5f5d09790aef1def7eb67b5df23f815c4c64ce9cf819f1802f5fd79d339ff79f5b8985c5ad528ffb73c9e2ee4e042b5039a9b64382af453e6f8b7534f69a2e6b421af26a08e672a8e73e46f952b47030254de012352f1f3e", 0x85}], 0x7, &(0x7f0000005480)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xc17}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x90}}, {{&(0x7f0000005540)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f00000068c0)=[{&(0x7f00000055c0)="2c6326cd49f559ce2aaaf8970d", 0xd}, {&(0x7f0000005600)="ea23ae55d0345a551f6488dc69c330c6a579c4c0f267bf45050cfec0d80ea7f6d9b85327217a8e60c63f54a88adda0e4198ca682b3836ffb3cfc544fd57b4a105b2571d6f9c08ba99079ac030bccfd7596690d6d768756e8fe694237d78c7d6653b108cddfb3b721e76a214120e6c7bbf792569e0c98f43d1b65a134e7a4a1c39415637930de3befbd538e97261a0f516e7282a529e3a89b88ae1602ef673d182680ebbaa39afce4872871d27a471e5cd86a595869360a7a92f7", 0xba}, {&(0x7f00000056c0)="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", 0x1000}, {&(0x7f00000066c0)="aee651489f79b42e6a1497a7019b1f80989972a80a060808dc5838a02cf026baab19b86e039a3a2e975596e2503494ca6eafc8b16e3299a21954c210b7e983a63ecc88e6c46c8946d674b2a457fb0f342e88b9032045142a3893cf8097d3f02a1ef0384c48da9b0ceb2618efc0ef95defeb51b278a5b4d18aaaa5d4a6e37eb666dd8090e57dd1992b72948c52390c20a639f16932de67cfb5a2c1b58f731734fe76b463c8fd3f24d37027fd7316d033d8ff66043a4dab1004a92b194a7e93f4fdca3d9448f4b9bbc793652442bb8ba5080cbf80e70fde9797e7a64fbee8bb25e7100b56eb6d7b08bf98f3675ae6339f83695f8670082bb", 0xf7}, {&(0x7f00000067c0)="d4b79ccf0657b4dfc1c247c3997b46d9cbe207eca0c35c5a0968f787b4d07ab8e0ff58ca628bef84e5f5d1ec81c0dc3867e913a6357cbf4d7b00cb79cc965101901ea805e3e0b17eb1822c0c58c3e1a6d47e7d49b2686802bb19ff0531a4023c7b4a7c2947ca26d69ab02ed7a6b6e319c781575edc2875bd1aad84beaea93b35ade02fade7a4f3e36aa48d9464b00602ca9e238e7aea49cf54f0339be5adda1548f00439e32092da8f33c213351637db3337b5ab5d501732d5ff7e02cfee1561a2fa6e18ecc29201d6ca66f935b7189995948ed16fb9d0119fa0f1ea21f927c9c5d5008dac20de82cccd8f940ad1072c73cd6bf039f4", 0xf6}], 0x5, &(0x7f0000006940)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffeff}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x30}}, {{&(0x7f0000006980)=@generic={0x26, "00f01990d85857c9831117b957e8e5ee19137bdf7a0ea722cc5b7847186ba7647efd166a41d307b6b80f4eab319d695fcf504475eb8693455e3ad87416533dcfe6b6db8bf00dd36516e0cc6f4b65cf8252c841614fba4a5a93b3339bb89ae37de69ba9e063987fa4b637e0830e1bb9f4717e1988412e2b1e47beec46ffd2"}, 0x80, &(0x7f0000006d80)=[{&(0x7f0000006a00)="5553bc94d8d726367e04c9138188a734b9b6d2b5195cbde2bc228cbaa0eb146e12a84cddb078d63e6da9075cca0ba5d67b414f7e1dd91a0fbb152e5062e903f7eb77ad286126b412e06276e404cb7a37dc91d91ff67e0b7dd8236f8ee966c29810c0f415fab30c8f64fd23856bffde3f205f25646de451", 0x77}, {&(0x7f0000006a80)="cfbdecf818409e", 0x7}, {&(0x7f0000006ac0)="69d552f4142ca7737fd94040f534b19de6151ecd91f0aa2c10a7d464fbab731c181fb6d5f6c27d6796ef315b886af642be8d699b483b671318c308487b0be4ee93c819eb266beb0bd99fec0d906bb2d01a28af5b13", 0x55}, {&(0x7f0000006b40)="d66ef28c9ebc592241e24884ad54999a3c4748279964498e509038f7bcbb7605cd9aa7fad8d5bd2ff79813553e4790f1c003f7a329d4053ec1e52fe91725d94791cb3b109dbb71eb", 0x48}, {&(0x7f0000006bc0)="62e5f89ed736c933de95e843fc0c871e8c21867188b329e7cd4b395cfc03dc88c44bf0c20e7f10d1a8eacee252b5f58a6419e32c150892466480abe6c9539264b857ed6b60932349e22bea5027d70de823c73f305a3a165d2f56533424e26fb340bf5fa9c92b04e4dad29f7507bc630a0a0daec13b025048f91007d3528ed13618f55ab6802c9e53f4427d7740ab", 0x8e}, {&(0x7f0000006c80)="dc23354bd28628253ab14807a219546eeb2ef6f2281bd2b1258ccfdf8f8891b2e10542db0cc9b87de5e8c37c532b4069b3fb2e0561eae9d207ac637bef9d5b909c19fbfd19395eb3696d6cff4760dfe4295a24d6d41ede1de65f68028d3170876b91845fd776df839436a76b54a1b29f357df45b995a0d9c5f5706cc7f68512a1b80dc1bbdd173", 0x87}, {&(0x7f0000006d40)="68e7b24468a29b3d4066f93142700f7a647a43c1c8cfc31d08c122438827fca763bb29db2b0968e2f6ae9eafc6", 0x2d}], 0x7, &(0x7f0000006e00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2970}}, @txtime={{0x18, 0x1, 0x3d, 0xca}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0xc0}}], 0x6, 0x40843) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000007040), 0x210000, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000070c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000007080)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r11, 0x3b8c, &(0x7f0000007140)={0x30, r12, 0x0, 0x0, 0x4, 0x80000001, 0x1, &(0x7f0000007100)=""/6}) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000007180)={0x18, 0x0, {0x2, @multicast, 'team0\x00'}}, 0x1e) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000071c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x80, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x140, 0xed, 0x1, {0x22, 0x8d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0xa}}}}}]}}]}}, &(0x7f0000007340)={0xa, &(0x7f0000007200)={0xa, 0x6, 0x0, 0xa2, 0x9, 0x7, 0xff, 0x2}, 0x5, &(0x7f0000007240)={0x5, 0xf, 0x5}, 0x2, [{0x6e, &(0x7f0000007280)=@string={0x6e, 0x3, "b21f8517e7d01c2f11c66a9e9cbeec8a54a1c37b12fe451ab584e9147bc789ee2c0fde54dd012b9063f5bb7427c42d4f7587655318166fd09967675144e21ee856158396596c8f8be6f8a9dd855c59fe9c3633a928b8416958b2c259ecd46db1c0175227b5b35eed58bc3469"}}, {0x4, &(0x7f0000007300)=@lang_id={0x4, 0x3, 0x403}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000007400)={0xa, 0x4e22, 0x31b, @private2, 0x7}, 0x1c) 8.035917384s ago: executing program 2 (id=6405): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x810, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0xd, "f949dea380ad7b4bbf1510a1fe027736e9fdccc56468aba8279b1797fc98d7e7a1b1a9c29164aba31512269ceb89f43ebe4f8b9cc2d875873804d21e017d8b01c846656a91d537e23e327a494f60202b7c326753e88fdbf74e3e808d706ff4712774a61e510c75be68"}, 0x71, 0x811, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20882, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a2439b509671a2f4f7d6574d740f884310014060000000000000000000000000000886e63e401df42c33e16000000fe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780004"], 0x0) close(0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, 0x4, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="02237d3c053c0be4047da815e0a21855483ffc825e4356b9104ff63230f8c0be6963d1d7c11496ebbb", 0x29}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) r6 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddd, 0x10100, 0x4, 0x2d3}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80002101}) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x16, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x351, 0x0, 0x3}, {"11df"}}}}}}}, 0x0) 7.44175764s ago: executing program 8 (id=6407): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x3, 0x400, 0x4, 0x1, 0xfffffffb, 0x3}) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x20000000000002a9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800c9a700000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc8200000000f6ffa6020000f8ffffffb703000008000000cd0300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40091) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x248380) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x17a6}) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x4e, 0x8, 0x0, 0xfff, 0x101, 0x2, 0xf192}, &(0x7f00000001c0)=0x20) 7.333306015s ago: executing program 4 (id=6408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mprotect(&(0x7f0000493000/0x2000)=nil, 0x2000, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40044) ptrace$poke(0x5, r2, &(0x7f0000000080), 0xffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802e0ffffff00000095f182d0c52dd09520000000000000181100009ef2c553b35da0092369ccab50b8c2af9bdb23581d2ee66bd6679755b486936f1b838c6a01300cf7e364230bb9fba53876c6eda650ccfd60efd38ebb464c9332f2d8c9daf077f569dfe13b58b6a6", @ANYRES32, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x94) syz_usb_connect(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) 7.159670328s ago: executing program 8 (id=6409): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa10, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200002400, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r5 = syz_open_dev$audion(0x0, 0x1, 0x28440) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) write(r5, &(0x7f00000005c0)="baafe4429b63513a4207f1d03f8c", 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000004c0)={"f3f75df18b6fa03e101ecca603feae05", r7, r8, {0x6, 0xfffffff7}, {0x2, 0x8}, 0xfffffffffffffff5, [0x8, 0x9, 0x115, 0xc3, 0x43a03774, 0x7c75, 0xf, 0x5, 0xffffffffffffff74, 0x3, 0x10001, 0x1, 0x100, 0x6, 0x5, 0x3]}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) 6.929883478s ago: executing program 2 (id=6410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) syz_open_dev$vim2m(0x0, 0x0, 0x2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 6.144984147s ago: executing program 9 (id=6412): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x1) fchdir(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121440, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) 5.913197449s ago: executing program 9 (id=6413): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x47b5, 0x4600, 0x34, 0x0, 0x0) 5.676477854s ago: executing program 9 (id=6414): r0 = epoll_create1(0x80000) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000011}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/152, 0x98}], 0x2, 0x80, 0x6, 0x16) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000140)={0x140001, 0x0, {[0x8, 0x3, 0x100000000, 0x5, 0x101, 0x3c, 0x1, 0x4]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffffff3]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004890}, 0x200088a0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x40005) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.125878188s ago: executing program 5 (id=6415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000050000000006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000004000000000001d000000000000007f00000000000000edb00000000000000000000000000000dd020000000000000000000000000000000100020000000044010500fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001"], 0x1fc}}, 0x0) 4.860993809s ago: executing program 9 (id=6416): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {r2, r3+60000000}}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x42395000) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9e000000) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000280)=0xfffffffd) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) 4.753405148s ago: executing program 5 (id=6417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907d", @ANYRESOCT=r0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5", @ANYRES64=r1, @ANYRESOCT=r2, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f00000001c0)={0x0, 0x0}) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd15, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r9, 0x4, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}], 0x10) 4.744022126s ago: executing program 2 (id=6418): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'dvmrp0\x00', 0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000040)) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0xa, 0x0, 0x38}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @fda={0x66642a85, 0x3, 0x1, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r5, @ANYBLOB="c825b42010b7733797d60d78eef3ec126b831f1136b48dbb45e42084302a7407a9bded332bc203da721618444e093305dacd97e8e16642861500b0bdc976704951b1f8b07caf329e81779c06d05d467ca5858e21a0033330ee47653ee78998264eedc7b2b2c66862b3074a21ed162bdb42dda4c880f920f81a3d2f7c6f24396dc39daaad518fade228c68dfada08d2", @ANYBLOB="1edaec1cfde047d731b00caf471bb6d647c21ab365b39629f4c9e6240e7a5fb569557f0af7332dfe216aa4635f02ff1952907755166ba08af90f32887c4a85803cc51e5cce0c64b959acce9b"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x80, 0xb, 0x44, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x66, 0x0, 0xfb, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0x86, 0x5, "5c37db"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xf9, 0x1, 0xc, [{@loopback, 0x8}, {@broadcast, 0x80000001}, {@loopback, 0x2}]}, @noop]}}}}}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@deltaction={0xfffffffffffffeb0, 0x31, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x40020) 4.259342372s ago: executing program 4 (id=6419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 8) 3.711485611s ago: executing program 9 (id=6420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20102) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x5, 0x9, 0x8}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000040)={0xffffffffffffff00, 0x1, 0x6, 0x57, 0x3}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.605870754s ago: executing program 4 (id=6421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd0, 0x0, 0x2, 0xd04, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_MASTER={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x14, 0x4, @mcast1}}}]}]}, 0xd0}}, 0x40) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b0c79c3", 0x4}], 0x1}}], 0x2, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000002c0)={r3, 0x1}) shutdown(r0, 0x1) 3.549384428s ago: executing program 8 (id=6422): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f00000000c0)='./file0\x00') (async) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r0, &(0x7f00000000c0)='./file0\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000140)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x1010, r1, 0x1cd79000) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000001c0)=0x3) (async) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000001c0)=0x3) r3 = syz_io_uring_complete(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r4, r5, 0x31c0cf, 0xf, 0x4, 0x601b8}) preadv2(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/110, 0x6e}], 0x4, 0x10, 0x3, 0xa) (async) preadv2(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/110, 0x6e}], 0x4, 0x10, 0x3, 0xa) syz_open_dev$vcsu(&(0x7f0000000480), 0x2, 0x200) (async) r6 = syz_open_dev$vcsu(&(0x7f0000000480), 0x2, 0x200) getpeername$l2tp(r6, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, &(0x7f0000000500)=0x10) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='trusted.overlay.redirect\x00') setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000005c0)={0x1, 0x9}, 0x8) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xc0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000640)={{0x0, 0x0, 0x8, 0x2, 0x8}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000640)={{0x0, 0x0, 0x8, 0x2, 0x8}}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000700)={0x8000, r8}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x230000, 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000780)) (async) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000780)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000840)) (async) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) ppoll(&(0x7f0000000800)=[{0xffffffffffffffff, 0x21}, {r10, 0x40c0}, {r8, 0x5092}, {r1, 0x9682}], 0x4, &(0x7f0000000880)={r11, r12+10000000}, &(0x7f00000008c0)={[0x5]}, 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f00000009c0)={r13, 0xa, 0x9, 0x9, 0x4, 0x2}) ioctl$VIDIOC_SUBDEV_S_CROP(r9, 0xc038563c, &(0x7f0000000a00)={0x1, 0x0, {0x3e, 0x0, 0x9, 0x5}}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x88201, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r14, 0xc038943b, &(0x7f0000000ac0)={0xfffffffffffe0000, 0x40, '\x00', 0x1, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r14, 0xc038943b, &(0x7f0000000ac0)={0xfffffffffffe0000, 0x40, '\x00', 0x1, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.983544106s ago: executing program 2 (id=6423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x7ffffffd, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xa, 0xfff2}, {0x0, 0x9}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x80000000, &(0x7f0000001c00)) r8 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) 2.606575442s ago: executing program 4 (id=6424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r6}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) 2.372691852s ago: executing program 8 (id=6425): sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0x50353d496d644a51}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x6845a088, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x842411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) 2.356748276s ago: executing program 5 (id=6426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x252800, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x9}) syz_emit_ethernet(0x147, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$can_j1939(0x1d, 0x2, 0x7) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ae4020000160a03000000000000000000030000030900020073797a30000000000800074000000000ec000380900003801400010076657468315f746f5f7465616d0000001400010076657468315f746f5f626f6e6400000014000100766c616e3000000000000000000000001400010064766d7270300000000000000000000014000100627269646765300000000000000000001400010076657468315f766972745f776966690014000100626174616476300000000000000000000800014000000000180003801400010076657468305f746f5f7465616d0000001800038014000100626f6e645f736c6176655f300000000018000380140001007767320000000000000000000000000008000140000000000c0005400000000000000005bc01038008000240000000007c00038014000100776732000000000000000000000000001400010065727370616e300000000000000000001400010073797a6b616c6c6572310000000000001400010076657468315f766c616e000000000000140001006272696467655f736c6176655f300000140001006d6163766c616e300000000000000000080001400000000008000140000000000800024000007fff08000240000010000800014000000000cc0003801400010076657468305f766c616e0000000000001400010070696d367265673100000000000000001400010076657468305f746f5f7465616d000000140001006e65747063693000000000000000000014000100766c616e300000000000000000000000140001006261746164765f736c6176655f310000140001006d6163766c616e3100000000000000001400010076657468315f746f5f626174616476001400010064766d7270300000000000000000000014000100626f6e645f736c6176655f31000000004000038014000100626f6e645f736c6176655f31000000001400010064766d72703000000000000000000000140001006261746164765f736c6176655f3100000800074000000001400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31100000000900020073797a3100000000140000001100010000000000000000000100000a"], 0x378}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x20000000}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) r7 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x6, &(0x7f0000000240)={0x0}) syz_open_procfs(r8, &(0x7f0000000040)='fd/4\x00') r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000300)={0x42, 0x6, r10, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x2000, 0x800000000001}) r11 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000280)={0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.44843992s ago: executing program 5 (id=6427): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000000100017800400020004000500040006000a00e8000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x808) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="20002bbd7000ffdbdf252700000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r9, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x1, 0xfffc}, 0xf, [0x4, 0x101, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x4, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x1, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x5f1], [0xfffffff8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8eb1baa, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x200, 0x0, 0x2, 0x26, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x9, 0xffff], [0x4, 0xfc, 0x8f58, 0x465b, 0x0, 0xb67f75c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0xa5f, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x41, 0x0, 0x0, 0xbd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x4000, 0xdffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) write$uinput_user_dev(r9, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x1, 0xfffc}, 0xf, [0x4, 0x101, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x4, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x1, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x5f1], [0xfffffff8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8eb1baa, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x200, 0x0, 0x2, 0x26, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x9, 0xffff], [0x4, 0xfc, 0x8f58, 0x465b, 0x0, 0xb67f75c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0xa5f, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x41, 0x0, 0x0, 0xbd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x4000, 0xdffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8041, 0x0) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000010025"], 0x10}, 0x1, 0x0, 0x0, 0x20004840}, 0x200040d4) (async) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000010025"], 0x10}, 0x1, 0x0, 0x0, 0x20004840}, 0x200040d4) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000000)=0x8001) (async) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000000)=0x8001) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x144, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x110, 0x2, [@TCA_MATCHALL_ACT={0x10c, 0x2, [@m_sample={0x108, 0x20, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x59715e77}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1e, 0xffff, 0x20000000, 0x8, 0xd8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1d, 0x35, 0x8, 0x10001, 0xfffff7bd}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x81}]}, {0x74, 0x6, "44bc12f5ab6ff1caa2bd992f25d1aa44fca70f2244b8cb7f82fb552ba94d2d6d2870e9356fe79dfb3046a107cb4ac4db1da7082f01008f0922b311a1a7d0b5b375f268ddf234d8fc9f64e1997ed0ef06a1f708321a93e51ade12ba9a14bfc99c470d77dd3b4e48fbef04a2e35d602299"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) 1.345413277s ago: executing program 8 (id=6428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) syz_open_dev$vim2m(0x0, 0x0, 0x2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 539.710794ms ago: executing program 9 (id=6429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f41000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000001c0)) syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x10, 0xfd}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x7, [{0x51, &(0x7f0000000880)=ANY=[]}, {0x0, 0x0}, {0x0, 0x0}, {0x2, 0x0}, {0x11, &(0x7f0000000140)=ANY=[]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0xc8, &(0x7f0000003280)=ANY=[]}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4e81c0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x304, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000540)={0x23, "c07b9c41d04c10cc6865121406413b900c40fb53df80823e7cc01a2d548919e8d07d175e61e14781a8d9e4d2c14af5b9e03e55cb5175da18e60fa5d035867bc621be1394056a93ae99c3ac8f7bec61bba68b3af322b922b1433dfc285a87f7c050e40805adc93df87a32ddf0d020544972967e555471174b5d88560533b7c82eeda0a5ed444e4c0e886e35ac6583a47251d008b03552e62053e306b957bbd4cd96f30b187ef9b9507756d6fa8d002b0dbdd5e1b656fe62ac7dcce3e59a03480dee8616ca80b091c045d46f3993104752b3a21a84ecb0332f01dcdc6f59424d115461b582d07306dc148adaf069d669fbbbcd848fde63380428ebdb4432000154c1bd7f392bcf2204c8db0152d2b62cbfc1e21c5bba2e17b7a88ecbaf6edd2728e23396e86128f784389ef72ffabe088fa7b8ca0e736282ad0fb145f5c5c5c137615e1840070b60ec3e762e47050aac35c2ca8b35b21ca3661bdc3213c837e1bab3b5ec16c62391619c746a1d34582843f65aedf1d983348e5c985cdca0147f69d2d8a10b35bb1d80ace939768b1981699aea681c0f390193d8486d1630c75482ac286c1e153dad0391d478949fa9f899b0760ae5ee04c2f3b245b376a6714b14bd205de990fce059d6372432343d83bd9bf090ad055bc8580278d667eb9611a2dee4b54b2be887a02f2db1f6f1e69e9908fe128ba9959afd5a76ea5a3d3e1c26"}) landlock_restrict_self(r5, 0x6) syz_emit_ethernet(0xae, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6012000800782af7fe8000000000000000000000000000bbff020000000000000000000000000000020aa77ae54006598080a8030037004023493b87aafaffffffffffffff2373245e423fce0d11c208a0ad091b72eefa45449df99356e8bb2461ad96574a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf73a4579ebfa21dedec14bd1efff9efc017000000000101fe"], 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa20000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 0s ago: executing program 5 (id=6430): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000340)="acff", 0x2}], 0x2}, 0x20044095) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfffb, 0x1}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99c0020000440000280012800b00010065727370616e00001800228004001200060011004e240000060010004e260000140003006e696376663000"/68], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): [ 1761.467052][T25337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.503603][T16359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1761.532536][T16359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1761.556943][T25337] usb 3-1: config 0 descriptor?? [ 1761.564874][T16359] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.622493][T16359] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1761.636740][T16359] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1761.655686][T16359] usb 5-1: Product: syz [ 1761.665862][T16359] usb 5-1: Manufacturer: syz [ 1761.676093][T16359] usb 5-1: SerialNumber: syz [ 1761.717106][T16359] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input98 [ 1761.768646][ T1253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1761.787801][ T1253] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1762.002721][T25337] hid (null): bogus close delimiter [ 1762.024858][T25337] hid-generic 0003:04B4:0000.0046: bogus close delimiter [ 1762.053396][T25337] hid-generic 0003:04B4:0000.0046: item 0 1 2 10 parsing failed [ 1762.082476][T25337] hid-generic 0003:04B4:0000.0046: probe with driver hid-generic failed with error -22 [ 1762.223079][T25337] usb 3-1: USB disconnect, device number 32 [ 1762.990466][ T1305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1763.014545][ T1305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1763.506710][T16359] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1763.537263][T25338] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1763.666751][T16359] usb 6-1: Using ep0 maxpacket: 32 [ 1763.667109][T25338] usb 3-1: device descriptor read/64, error -71 [ 1763.675556][T16359] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1763.696313][T16359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.696446][ T1326] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5972'. [ 1763.771457][T16359] usb 6-1: config 0 descriptor?? [ 1763.791139][ T1326] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5972'. [ 1763.817306][T16359] as10x_usb: device has been detected [ 1763.838461][T16359] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1763.908675][T16359] usb 6-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1763.947745][T25338] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1763.982847][T16359] as10x_usb: error during firmware upload part1 [ 1764.020041][T16359] Registered device nBox DVB-T Dongle [ 1764.087411][T25338] usb 3-1: device descriptor read/64, error -71 [ 1764.218694][T25337] usb 5-1: USB disconnect, device number 35 [ 1764.235020][T25338] usb usb3-port1: attempt power cycle [ 1764.300042][T25337] appletouch 5-1:1.0: input: appletouch disconnected [ 1764.607325][T25338] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1764.756865][T25338] usb 3-1: device descriptor read/8, error -71 [ 1765.017436][T25338] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1765.048337][T25338] usb 3-1: device descriptor read/8, error -71 [ 1765.187254][T25338] usb usb3-port1: unable to enumerate USB device [ 1766.620589][ T1393] xt_limit: Overflow, try lower: 0/0 [ 1766.755599][ T1399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5980'. [ 1766.768661][ T1399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5980'. [ 1766.897621][T25338] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1766.898713][ T1402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5981'. [ 1767.351135][T16355] usb 6-1: USB disconnect, device number 28 [ 1767.387081][T25338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.415506][T16355] Unregistered device nBox DVB-T Dongle [ 1767.417340][T25338] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1767.424683][T16355] as10x_usb: device has been disconnected [ 1767.468618][ T1415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1767.477134][T25338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.522429][T25338] usb 3-1: config 0 descriptor?? [ 1767.596087][T25338] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1767.719787][ T1434] loop5: detected capacity change from 0 to 7 [ 1767.738073][T22075] loop5: [ 1767.751439][T22075] loop5: partition table partially beyond EOD, truncated [ 1767.783663][ T1434] loop5: [ 1767.807444][ T1434] loop5: partition table partially beyond EOD, truncated [ 1768.306846][T25338] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1768.529429][T25338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.582161][T25338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.646778][T25338] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1768.683479][T25338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.718675][T25338] usb 5-1: config 0 descriptor?? [ 1769.141504][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.183029][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.209551][T25338] usbhid 5-1:0.0: can't add hid device: -71 [ 1769.233097][T25338] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1769.440948][T25338] usb 5-1: USB disconnect, device number 36 [ 1769.650907][T25355] usb 3-1: USB disconnect, device number 37 [ 1769.879282][ T1490] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5990'. [ 1770.472991][ T1508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5991'. [ 1770.640299][ T1510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5991'. [ 1770.652793][ T1523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1770.789149][ T1525] input: syz0 as /devices/virtual/input/input99 [ 1771.390039][ T1550] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5995'. [ 1772.186849][T16359] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1772.366885][T16359] usb 5-1: Using ep0 maxpacket: 16 [ 1772.383918][T16359] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1772.403352][T16359] usb 5-1: can't read configurations, error -61 [ 1772.561209][T16359] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1772.756689][T16359] usb 5-1: Using ep0 maxpacket: 16 [ 1772.770904][T16359] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1772.784617][T16359] usb 5-1: can't read configurations, error -61 [ 1772.799892][T16359] usb usb5-port1: attempt power cycle [ 1772.957305][T16355] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1773.166713][T16359] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1773.174554][T16355] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1773.205856][T16355] usb 3-1: not running at top speed; connect to a high speed hub [ 1773.226996][T16355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.237831][T16359] usb 5-1: Using ep0 maxpacket: 16 [ 1773.263100][T16359] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1773.276397][T16355] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.290901][T16359] usb 5-1: can't read configurations, error -61 [ 1773.298729][T16355] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1773.309897][T16355] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1773.319373][T16355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.329508][T16355] usb 3-1: Product: syz [ 1773.333724][T16355] usb 3-1: Manufacturer: syz [ 1773.347886][T16355] usb 3-1: SerialNumber: syz [ 1773.384976][T16355] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input100 [ 1773.438165][T16359] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1773.478843][T16359] usb 5-1: Using ep0 maxpacket: 16 [ 1773.501867][T16359] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1773.527352][T16359] usb 5-1: can't read configurations, error -61 [ 1773.551489][T16359] usb usb5-port1: unable to enumerate USB device [ 1773.567958][ T5180] bcm5974 3-1:1.0: could not read from device [ 1773.615706][ T5180] bcm5974 3-1:1.0: could not read from device [ 1773.623811][T16355] usb 3-1: USB disconnect, device number 38 [ 1773.641474][ T5180] bcm5974 3-1:1.0: could not read from device [ 1773.674307][ T5180] bcm5974 3-1:1.0: could not read from device [ 1774.822061][ T1615] loop5: detected capacity change from 0 to 7 [ 1774.944176][T29883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1774.962314][T29883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1774.965656][ T1615] loop5: [ 1774.971727][T29883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1774.982053][T29883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1774.993457][T29883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1775.004229][ T1615] loop5: partition table partially beyond EOD, truncated [ 1776.406754][T25355] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1776.574940][T25355] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 1776.614684][T25355] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.693732][T25355] usb 6-1: config 0 has no interface number 0 [ 1776.750862][T25355] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1776.785830][T25355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.835643][T25355] usb 6-1: Product: syz [ 1776.879449][T25355] usb 6-1: Manufacturer: syz [ 1776.884116][T25355] usb 6-1: SerialNumber: syz [ 1776.902520][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1776.944268][T25355] usb 6-1: config 0 descriptor?? [ 1777.116787][T29883] Bluetooth: hci5: command tx timeout [ 1777.217205][T25355] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -22 [ 1777.251543][ T1634] chnl_net:caif_netlink_parms(): no params data found [ 1777.515173][T25355] usb 6-1: USB disconnect, device number 29 [ 1777.822585][ T1634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.857652][ T1634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.897537][ T1634] bridge_slave_0: entered allmulticast mode [ 1777.919909][ T1634] bridge_slave_0: entered promiscuous mode [ 1777.927172][ T29] audit: type=1800 audit(1773494196.689:2989): pid=1790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6013" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1777.955761][ T1634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.967269][ T1634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.981434][ T1634] bridge_slave_1: entered allmulticast mode [ 1778.000833][ T1634] bridge_slave_1: entered promiscuous mode [ 1778.188040][ T1634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.254289][ T1634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1778.412437][ T1634] team0: Port device team_slave_0 added [ 1778.458853][ T1634] team0: Port device team_slave_1 added [ 1778.698696][ T1634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.735518][ T1634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.829738][ T1634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.880260][ T1634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.891502][ T1862] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1778.930975][ T1634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1779.091655][ T1634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.158638][ T1865] loop5: detected capacity change from 0 to 7 [ 1779.165894][ T1865] loop5: [ 1779.169545][ T1865] loop5: partition table partially beyond EOD, truncated [ 1779.199746][T29883] Bluetooth: hci5: command tx timeout [ 1779.629864][ T1899] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1780.063699][ T1634] hsr_slave_0: entered promiscuous mode [ 1780.086008][ T1634] hsr_slave_1: entered promiscuous mode [ 1780.118039][ T1634] debugfs: 'hsr0' already exists in 'hsr' [ 1780.144517][ T1634] Cannot create hsr debugfs directory [ 1780.502070][ T1940] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1780.678181][ T1945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1780.966922][T25355] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1781.190570][T25355] usb 3-1: Using ep0 maxpacket: 8 [ 1781.307197][T29883] Bluetooth: hci5: command tx timeout [ 1781.331949][T25355] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.406825][T25355] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1781.551993][T25355] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1781.604646][T25355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.666850][T25355] usb 3-1: Product: syz [ 1781.688138][T25355] usb 3-1: Manufacturer: syz [ 1781.704213][ T1911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6022'. [ 1781.713321][T25355] usb 3-1: SerialNumber: syz [ 1781.739813][T25355] usb 3-1: config 0 descriptor?? [ 1781.913958][ T1634] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1782.115011][ T1634] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1782.196215][ T1634] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1782.229292][ T2018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6027'. [ 1782.286978][ T2020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1782.301239][ T1634] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1782.337066][ T2018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6027'. [ 1782.484762][ T2025] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6028'. [ 1782.641044][ T2033] loop5: detected capacity change from 0 to 7 [ 1782.672642][T22075] loop5: [ 1782.683349][T22075] loop5: partition table partially beyond EOD, truncated [ 1782.732778][ T2033] loop5: [ 1782.736178][ T2033] loop5: partition table partially beyond EOD, truncated [ 1782.958259][ T1634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.084093][ T1634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.357231][T29883] Bluetooth: hci5: command tx timeout [ 1783.415178][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.422552][T16646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.702857][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.710233][T16646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.793698][ T5883] usb 3-1: USB disconnect, device number 39 [ 1784.504787][ T2075] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1786.784845][ T2080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1787.220441][ T2086] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6038'. [ 1787.235599][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.304156][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.366199][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.430196][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.477475][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.533584][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.582452][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.611612][ T2096] FAULT_INJECTION: forcing a failure. [ 1787.611612][ T2096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.649404][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.696745][ T2096] CPU: 1 UID: 0 PID: 2096 Comm: syz.8.6039 Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.696779][ T2096] Tainted: [L]=SOFTLOCKUP [ 1787.696786][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1787.696797][ T2096] Call Trace: [ 1787.696805][ T2096] [ 1787.696814][ T2096] dump_stack_lvl+0xe8/0x150 [ 1787.696847][ T2096] should_fail_ex+0x412/0x560 [ 1787.696880][ T2096] _copy_from_user+0x2d/0xb0 [ 1787.696900][ T2096] ___sys_sendmsg+0x1c6/0x360 [ 1787.696928][ T2096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1787.696955][ T2096] ? kstrtouint+0x6e/0xe0 [ 1787.697004][ T2096] ? __fget_files+0x2a/0x420 [ 1787.697031][ T2096] ? __fget_files+0x3a0/0x420 [ 1787.697067][ T2096] __sys_sendmmsg+0x27c/0x4e0 [ 1787.697094][ T2096] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1787.697112][ T2096] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1787.697162][ T2096] ? ksys_write+0x242/0x270 [ 1787.697185][ T2096] ? __pfx_ksys_write+0x10/0x10 [ 1787.697211][ T2096] __x64_sys_sendmmsg+0xa0/0xc0 [ 1787.697234][ T2096] do_syscall_64+0x14d/0xf80 [ 1787.697254][ T2096] ? trace_irq_disable+0x3b/0x150 [ 1787.697279][ T2096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.697298][ T2096] ? clear_bhb_loop+0x40/0x90 [ 1787.697321][ T2096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.697339][ T2096] RIP: 0033:0x7fd76719c799 [ 1787.697357][ T2096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.697373][ T2096] RSP: 002b:00007fd7680ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1787.697394][ T2096] RAX: ffffffffffffffda RBX: 00007fd767416090 RCX: 00007fd76719c799 [ 1787.697407][ T2096] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004 [ 1787.697420][ T2096] RBP: 00007fd7680ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.697431][ T2096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.697443][ T2096] R13: 00007fd767416128 R14: 00007fd767416090 R15: 00007fd76753fa48 [ 1787.697471][ T2096] [ 1787.950092][ T1634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.011451][ T2102] erspan1: entered promiscuous mode [ 1788.067399][ T2102] erspan1: entered allmulticast mode [ 1788.087544][T25337] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1788.161855][ T1634] veth0_vlan: entered promiscuous mode [ 1788.203469][ T1634] veth1_vlan: entered promiscuous mode [ 1788.271267][T25337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1788.281653][T25337] usb 3-1: config 13 has an invalid interface number: 177 but max is 0 [ 1788.291031][T25337] usb 3-1: config 13 has no interface number 0 [ 1788.307642][T25337] usb 3-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1788.347106][T25337] usb 3-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1788.392245][T25337] usb 3-1: config 13 interface 177 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1788.423837][T25337] usb 3-1: config 13 interface 177 has no altsetting 0 [ 1788.431725][ T1634] veth0_macvtap: entered promiscuous mode [ 1788.450523][T25337] usb 3-1: New USB device found, idVendor=15c2, idProduct=f142, bcdDevice=ef.b7 [ 1788.460812][T25337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.466212][ T1634] veth1_macvtap: entered promiscuous mode [ 1788.507951][T25337] usb 3-1: Product: syz [ 1788.519471][ T1634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.527739][T25337] usb 3-1: Manufacturer: syz [ 1788.532483][T25337] usb 3-1: SerialNumber: syz [ 1788.571444][ T1634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.641787][ T6274] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.815171][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.855246][T25337] usb 3-1: USB disconnect, device number 40 [ 1788.881583][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.941614][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.209711][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.329470][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.535077][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.716742][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.099336][ T2166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6048'. [ 1791.474593][T29884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1791.490222][T29884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1791.510310][T29884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1791.520006][T29884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1791.529651][T29884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1791.817137][T25348] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1791.846216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.859243][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.013927][ T2241] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1792.143308][T25348] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1792.226045][T25348] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 46079, setting to 64 [ 1792.238619][T25348] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1792.248340][T25348] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.261324][T25348] usb 10-1: config 0 descriptor?? [ 1792.286170][ T2205] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1792.539398][T25348] ath6kl: Failed to submit usb control message: -71 [ 1792.549804][T25348] ath6kl: unable to send the bmi data to the device: -71 [ 1792.580807][T25348] ath6kl: Unable to send get target info: -71 [ 1792.607533][T25348] ath6kl: Failed to init ath6kl core: -71 [ 1792.624510][T25348] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1792.838090][T25348] usb 10-1: USB disconnect, device number 2 [ 1793.378203][ T2273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1793.728009][T29883] Bluetooth: hci0: command tx timeout [ 1793.804389][ T29] audit: type=1800 audit(1773494212.559:2990): pid=2290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6061" name="bus" dev="tmpfs" ino=3158 res=0 errno=0 [ 1794.481746][T16646] bond0: (slave netdevsim0): Releasing backup interface [ 1794.629003][ T2214] chnl_net:caif_netlink_parms(): no params data found [ 1795.566733][ T2323] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1795.782893][T29883] Bluetooth: hci0: command tx timeout [ 1797.034524][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.062764][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.086855][ T2214] bridge_slave_0: entered allmulticast mode [ 1797.176769][ T2214] bridge_slave_0: entered promiscuous mode [ 1797.335622][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.422425][ T2214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.463227][ T2214] bridge_slave_1: entered allmulticast mode [ 1797.487227][ T2214] bridge_slave_1: entered promiscuous mode [ 1797.837081][T29883] Bluetooth: hci0: command tx timeout [ 1798.591800][ T2451] netlink: 'syz.2.6067': attribute type 25 has an invalid length. [ 1798.734196][T16646] dvmrp1 (unregistering): left allmulticast mode [ 1798.863997][ T2461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4290396940 (8580793880 ns) > initial count (7730345080 ns). Using initial count to start timer. [ 1799.451545][T16646] bond0 (unregistering): Released all slaves [ 1799.503362][T16646] bond1 (unregistering): Released all slaves [ 1799.605839][T16646] bond2 (unregistering): Released all slaves [ 1799.832060][ T2214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.916037][ T2470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6070'. [ 1799.925766][T29883] Bluetooth: hci0: command tx timeout [ 1799.948963][T16646] m1Ie5n: left promiscuous mode [ 1800.073296][ T2214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.103523][ T2498] loop5: detected capacity change from 0 to 7 [ 1800.149439][ T2498] loop5: [ 1800.152555][ T2498] loop5: partition table partially beyond EOD, truncated [ 1800.247172][T16646] tipc: Disabling bearer [ 1800.263472][T16646] tipc: Disabling bearer [ 1800.365068][T16646] tipc: Left network mode [ 1800.490923][ T2214] team0: Port device team_slave_0 added [ 1800.690272][ T2530] netlink: 'syz.5.6074': attribute type 1 has an invalid length. [ 1800.723091][ T2214] team0: Port device team_slave_1 added [ 1801.294882][ T2585] binder: 2584:2585 ioctl 4020ae46 200000000400 returned -22 [ 1801.343445][ T2596] netlink: 'syz.2.6079': attribute type 25 has an invalid length. [ 1801.682222][ T2214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.704627][ T2214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.735270][ T2632] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6080'. [ 1801.980170][ T2214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.104641][ T2648] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1802.126918][ T2214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.148060][ T2214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.566420][ T2214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.560467][ T2645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1803.804772][T16646] hsr_slave_0: left promiscuous mode [ 1803.874435][T16646] hsr_slave_1: left promiscuous mode [ 1805.480487][ T2696] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1805.639627][ T2696] bond1 (unregistering): Released all slaves [ 1806.176750][ T2791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6087'. [ 1806.185854][ T2791] bridge_slave_0: default FDB implementation only supports local addresses [ 1806.553037][ T2826] netlink: 'syz.9.6090': attribute type 25 has an invalid length. [ 1806.929424][ T2214] hsr_slave_0: entered promiscuous mode [ 1806.957388][ T2214] hsr_slave_1: entered promiscuous mode [ 1806.984170][ T2214] debugfs: 'hsr0' already exists in 'hsr' [ 1807.008890][ T2214] Cannot create hsr debugfs directory [ 1807.692232][ T5868] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1807.755908][ T2866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6092'. [ 1807.886381][ T5868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.933509][ T5868] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1808.018350][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.108048][ T5868] usb 10-1: config 0 descriptor?? [ 1808.167643][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1808.601825][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1808.656689][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1808.691322][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1808.756669][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1808.816093][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1808.850582][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1808.895202][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1808.932552][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1808.993988][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1809.019741][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1809.047718][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1809.089025][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 1809.362436][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 1809.402480][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 1809.434608][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1809.506773][ T5868] pwc: Registered as video103. [ 1809.544760][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input102 [ 1809.609372][ T5868] usb 10-1: USB disconnect, device number 3 [ 1810.451925][ T2214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1810.477901][ T3039] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1810.531945][ T3039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1810.552714][T16359] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1810.553432][ T2214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1810.651158][ T2214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1810.687954][ T2214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1810.747075][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1810.772125][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.792783][ T3053] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1810.811733][ T3053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6097'. [ 1810.872126][T16359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1810.905521][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1810.920068][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.942034][T16359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1810.990830][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1811.025713][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.059040][T16359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1811.115454][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1811.159928][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.189275][T16359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1811.281346][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1811.393079][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.479878][T16359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1811.522385][ T2214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1811.707925][T16359] usb 10-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 1811.753092][ T2214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.784534][T16359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.815516][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.822804][T16646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.901607][T16359] usb 10-1: config 0 descriptor?? [ 1812.090481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.097718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.318840][ T3073] netlink: 188 bytes leftover after parsing attributes in process `syz.9.6095'. [ 1812.343736][ T3073] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6095'. [ 1812.581020][ T29] audit: type=1326 audit(1773494231.339:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1812.652493][ T29] audit: type=1326 audit(1773494231.369:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1812.780692][ T29] audit: type=1326 audit(1773494231.369:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1812.871383][ T29] audit: type=1326 audit(1773494231.369:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1812.892054][ T2214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.963753][ T29] audit: type=1326 audit(1773494231.369:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.087090][ T29] audit: type=1326 audit(1773494231.369:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.130635][ T3091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1813.162266][ T2214] veth0_vlan: entered promiscuous mode [ 1813.196165][ T29] audit: type=1326 audit(1773494231.379:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.228343][ T2214] veth1_vlan: entered promiscuous mode [ 1813.310691][ T29] audit: type=1326 audit(1773494231.379:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.364430][ T29] audit: type=1326 audit(1773494231.379:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.408945][ T2214] veth0_macvtap: entered promiscuous mode [ 1813.430317][ T2214] veth1_macvtap: entered promiscuous mode [ 1813.446460][ T29] audit: type=1326 audit(1773494231.379:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3080 comm="syz.8.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76719c799 code=0x7ffc0000 [ 1813.559324][T16359] usbhid 10-1:0.0: can't add hid device: -71 [ 1813.575732][ T2214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.594821][T16359] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1813.624671][ T2214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.657731][T16359] usb 10-1: USB disconnect, device number 4 [ 1813.750245][T12610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.799988][T12610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.864132][T12610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.941033][T12610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.038545][T16359] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1814.217434][T16359] usb 10-1: device descriptor read/64, error -71 [ 1814.264572][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.313376][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.458343][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.486848][T16359] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1814.503342][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.658155][T16359] usb 10-1: device descriptor read/64, error -71 [ 1814.800697][T16359] usb usb10-port1: attempt power cycle [ 1814.837538][ T3138] loop5: detected capacity change from 0 to 7 [ 1814.885482][ T3138] loop5: [ 1814.910393][ T3138] loop5: partition table partially beyond EOD, truncated [ 1815.106718][T16355] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1815.175485][T16359] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1815.260139][T16359] usb 10-1: device descriptor read/8, error -71 [ 1815.308186][T16355] usb 6-1: Using ep0 maxpacket: 8 [ 1815.317040][T16355] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1815.354891][T16355] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1815.393313][T16355] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1815.453070][ T3095] usb usb8: usbfs: process 3095 (syz.2.6103) did not claim interface 0 before use [ 1815.513491][T16355] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1815.536939][ T3154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1815.548509][T16355] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1815.562853][T16359] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1815.638958][T16359] usb 10-1: device descriptor read/8, error -71 [ 1815.646928][T16355] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1815.736706][T16355] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1815.763679][T16355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.777075][T16359] usb usb10-port1: unable to enumerate USB device [ 1815.798688][ T3095] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1815.818673][ T3095] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1815.835363][ T3095] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1816.527018][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.573268][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.667961][ T3192] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1816.671147][T16355] usb 6-1: usb_control_msg returned -32 [ 1816.723215][T16355] usbtmc 6-1:16.0: can't read capabilities [ 1817.148132][ T3210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.188023][ T3210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.314342][T29884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1818.329837][T29884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1818.348735][T29884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1818.363223][T29884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1818.372711][T29884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1818.797545][T25338] usb 6-1: USB disconnect, device number 30 [ 1820.476834][T29883] Bluetooth: hci3: command tx timeout [ 1821.273352][T16646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1821.328275][T16646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.417098][ T5868] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1821.447104][ T3354] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1821.606714][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 1821.640312][ T5868] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1821.718886][ T5868] usb 5-1: config 179 has no interface number 0 [ 1821.725240][ T5868] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1821.876724][ T5868] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1821.926989][ T5868] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1821.952558][T16646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1821.956616][ T5868] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1822.034479][ T5868] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1822.058007][ T5868] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1822.123240][T16646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.196629][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.646187][T29883] Bluetooth: hci3: command tx timeout [ 1822.704109][T16646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1822.719754][T16646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.862479][ T3374] syzkaller0: entered promiscuous mode [ 1822.896961][ T3374] syzkaller0: entered allmulticast mode [ 1823.021484][ T3404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6122'. [ 1823.512184][ T3245] chnl_net:caif_netlink_parms(): no params data found [ 1823.972692][ T3443] netlink: 'syz.8.6123': attribute type 4 has an invalid length. [ 1824.716784][T29883] Bluetooth: hci3: command tx timeout [ 1824.903440][ T3245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.916913][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.929947][ T3245] bridge_slave_0: entered allmulticast mode [ 1824.974888][ T3245] bridge_slave_0: entered promiscuous mode [ 1825.083779][ T3245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.128455][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.191295][ T3245] bridge_slave_1: entered allmulticast mode [ 1825.230994][ T3245] bridge_slave_1: entered promiscuous mode [ 1825.245243][ T3516] loop4: detected capacity change from 0 to 524287936 [ 1825.269915][T25338] usb 5-1: USB disconnect, device number 41 [ 1825.610992][ T3528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1826.003451][ T3245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.038062][ T3541] netlink: 'syz.4.6127': attribute type 21 has an invalid length. [ 1826.080805][ T3541] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1826.283085][ T3245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.341471][ T3541] netlink: 'syz.4.6127': attribute type 5 has an invalid length. [ 1826.374820][ T3541] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6127'. [ 1826.546190][T16646] bridge0: port 1(hsr0) entered disabled state [ 1826.798486][T29883] Bluetooth: hci3: command tx timeout [ 1826.932245][ T3578] x_tables: duplicate underflow at hook 1 [ 1827.769771][ T3596] loop2: detected capacity change from 0 to 7 [ 1827.861913][ T3596] Dev loop2: unable to read RDB block 7 [ 1827.956658][ T3596] loop2: AHDI p1 p2 p3 [ 1827.961099][ T3596] loop2: partition table partially beyond EOD, truncated [ 1827.988953][ T3596] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1828.019503][ T3596] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1828.482988][T16646] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1828.536644][ T3613] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1828.640519][T16646] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1828.665879][T16646] gretap2 (unregistering): left allmulticast mode [ 1829.170124][T16646] dvmrp1 (unregistering): left allmulticast mode [ 1829.573230][T16646] bond0 (unregistering): left promiscuous mode [ 1829.600917][T16646] bond0 (unregistering): Released all slaves [ 1829.636435][T16646] bond1 (unregistering): Released all slaves [ 1829.663499][T16646] bond2 (unregistering): Released all slaves [ 1829.696391][T16646] bond3 (unregistering): Released all slaves [ 1829.730032][T16646] bond4 (unregistering): Released all slaves [ 1829.828417][ T3245] team0: Port device team_slave_0 added [ 1829.837313][ T5868] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1829.859208][ T3245] team0: Port device team_slave_1 added [ 1830.079718][ T3245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.106697][ T5868] usb 10-1: Using ep0 maxpacket: 16 [ 1830.108267][ T3245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.147045][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.221589][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1830.274585][ T3245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.537906][ T5868] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1830.568644][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.578660][ T3245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.586093][ T3245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.642721][ T5868] usb 10-1: Product: syz [ 1830.662333][ T5868] usb 10-1: Manufacturer: syz [ 1830.696762][ T5868] usb 10-1: SerialNumber: syz [ 1830.721478][T16646] IPVS: stopping master sync thread 19432 ... [ 1830.730793][ T3245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.298547][ T5868] usb 10-1: 0:2 : does not exist [ 1831.485922][ T5868] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1831.855712][ T5868] usb 10-1: USB disconnect, device number 9 [ 1831.992964][T22075] udevd[22075]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1832.166021][ T3245] hsr_slave_0: entered promiscuous mode [ 1832.284422][ T3245] hsr_slave_1: entered promiscuous mode [ 1832.353938][ T3245] debugfs: 'hsr0' already exists in 'hsr' [ 1832.386607][ T3245] Cannot create hsr debugfs directory [ 1832.808451][T16646] hsr_slave_0: left promiscuous mode [ 1832.889328][T16646] hsr_slave_1: left promiscuous mode [ 1832.978917][T16646] veth1_macvtap: left promiscuous mode [ 1833.009590][T16646] veth0_macvtap: left promiscuous mode [ 1833.646669][ T5868] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1833.822232][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1834.096816][ T5868] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1834.237104][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1834.347112][ T5868] usb usb5-port1: attempt power cycle [ 1834.374260][ T3798] loop5: detected capacity change from 0 to 7 [ 1834.404972][ T3798] Dev loop5: unable to read RDB block 7 [ 1834.440405][ T3798] loop5: unable to read partition table [ 1834.458361][ T3798] loop5: partition table beyond EOD, truncated [ 1834.482263][ T3798] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1834.531357][ T5195] Dev loop5: unable to read RDB block 7 [ 1834.539732][ T5195] loop5: unable to read partition table [ 1834.545742][ T5195] loop5: partition table beyond EOD, truncated [ 1834.717663][ T5868] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1834.787496][ T5868] usb 5-1: device descriptor read/8, error -71 [ 1835.047015][ T5868] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1835.082263][ T5868] usb 5-1: device descriptor read/8, error -71 [ 1835.099259][ T3806] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6146'. [ 1835.237756][ T5868] usb usb5-port1: unable to enumerate USB device [ 1835.702019][ T3871] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1836.136287][T16646] IPVS: stop unused estimator thread 0... [ 1836.523463][T25348] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1836.687803][T25348] usb 10-1: Using ep0 maxpacket: 16 [ 1836.734548][T25348] usb 10-1: config 0 has an invalid interface number: 4 but max is 0 [ 1836.791220][T25348] usb 10-1: config 0 has no interface number 0 [ 1836.843701][T25348] usb 10-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.990294][T25348] usb 10-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.071612][T25348] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1837.168337][T25348] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.220158][T25348] usb 10-1: config 0 descriptor?? [ 1837.668698][ T3938] loop5: detected capacity change from 0 to 7 [ 1837.708676][ T3938] loop5: [ 1837.711767][ T3938] loop5: partition table partially beyond EOD, truncated [ 1837.749907][ T3245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1837.795141][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.851149][ T3245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1837.867248][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.992224][T25348] usbhid 10-1:0.4: can't add hid device: -71 [ 1838.010382][ T3245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1838.027200][T25348] usbhid 10-1:0.4: probe with driver usbhid failed with error -71 [ 1838.054189][ T3245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1838.086840][T25348] usb 10-1: USB disconnect, device number 10 [ 1838.967938][ T3245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1839.149230][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6157'. [ 1839.205440][ T3245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1839.361300][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.368586][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1839.488697][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.496006][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.747946][T16357] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1839.814844][ T3245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1840.027211][T16357] usb 10-1: Using ep0 maxpacket: 32 [ 1840.075838][T16357] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1840.106813][T16357] usb 10-1: config 0 has no interface number 0 [ 1840.118583][T16357] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1840.131034][T16357] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.134513][ T3245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.141204][T16357] usb 10-1: Product: syz [ 1840.152293][T16357] usb 10-1: Manufacturer: syz [ 1840.161562][T16357] usb 10-1: SerialNumber: syz [ 1840.177337][T16357] usb 10-1: config 0 descriptor?? [ 1840.202419][T16357] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1840.234701][T16357] usb 10-1: selecting invalid altsetting 1 [ 1840.243742][T16357] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1840.277157][T16357] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1840.364078][T16357] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1840.457144][T16357] usb 10-1: media controller created [ 1840.479851][ T3985] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1840.486440][ T3985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1840.535273][T16357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1840.583774][ T3985] vhci_hcd vhci_hcd.0: Device attached [ 1840.628931][ T4031] vhci_hcd: connection closed [ 1840.629402][ T6276] vhci_hcd vhci_hcd.9: stop threads [ 1840.704664][ T6276] vhci_hcd vhci_hcd.9: release socket [ 1840.726428][ T3245] veth0_vlan: entered promiscuous mode [ 1840.727052][ T6276] vhci_hcd vhci_hcd.9: disconnect device [ 1840.758716][T16357] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1840.765860][T16357] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1840.808014][T16357] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1840.894370][T16357] usb 10-1: USB disconnect, device number 11 [ 1840.918554][ T3245] veth1_vlan: entered promiscuous mode [ 1841.113857][ T3245] veth0_macvtap: entered promiscuous mode [ 1841.189741][ T3245] veth1_macvtap: entered promiscuous mode [ 1841.793221][ T3245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.901852][ T3245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1841.987275][ T5868] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1842.083637][ T6276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.142078][ T6276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.169975][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 1842.197322][T16646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.219750][ T5868] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1842.253904][ T5868] usb 6-1: config 0 has no interface number 0 [ 1842.275451][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.297375][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1842.329268][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1842.380747][ T4075] loop5: detected capacity change from 0 to 7 [ 1842.413099][ T5868] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1842.469871][ T5868] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1842.510857][ T4075] loop5: [ 1842.513972][ T4075] loop5: partition table partially beyond EOD, truncated [ 1842.546227][ T5868] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1842.675986][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.771627][ T5868] usb 6-1: config 0 descriptor?? [ 1842.808262][ T5868] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1842.825114][ T4083] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6164'. [ 1842.905588][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.936969][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.075610][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6164'. [ 1843.111795][ T4063] input: syz0 as /devices/virtual/input/input103 [ 1843.134245][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.196036][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.329083][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.345398][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.506703][T16357] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1843.595892][T25341] usb 6-1: USB disconnect, device number 31 [ 1843.661014][T16357] usb 5-1: device descriptor read/64, error -71 [ 1843.685684][T25341] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1843.907911][T16357] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1844.080667][T16357] usb 5-1: device descriptor read/64, error -71 [ 1844.409458][T16357] usb usb5-port1: attempt power cycle [ 1844.828499][T16357] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1844.898346][T16357] usb 5-1: device descriptor read/8, error -71 [ 1844.969355][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6113'. [ 1845.286716][T16357] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1845.339609][T16357] usb 5-1: device descriptor read/8, error -71 [ 1845.477310][T16357] usb usb5-port1: unable to enumerate USB device [ 1847.159515][T25341] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1847.400475][T16357] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1847.421214][ T4211] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1847.523219][T25341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1847.541072][T25341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.567238][T16357] usb 6-1: Using ep0 maxpacket: 8 [ 1847.576185][T16357] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.606096][T16357] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.610641][T25341] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1847.622198][T16357] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1847.680585][T16357] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1847.686621][T25341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.695295][T16357] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1847.795222][T16357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.795767][T25341] usb 5-1: config 0 descriptor?? [ 1847.992348][T16357] usb 6-1: config 0 descriptor?? [ 1848.283113][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.328864][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.376626][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.422242][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.466701][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.553118][T25341] isku 0003:1E7D:319C.0047: unknown main item tag 0x0 [ 1848.603937][T25341] isku 0003:1E7D:319C.0047: item fetching failed at offset 6/7 [ 1848.655135][T16357] hid (null): invalid report_size 26545 [ 1848.676095][T25341] isku 0003:1E7D:319C.0047: parse failed [ 1848.716178][T25341] isku 0003:1E7D:319C.0047: probe with driver isku failed with error -22 [ 1848.759861][T16357] magicmouse 0003:05AC:0265.0048: unknown main item tag 0x6 [ 1848.797843][T25341] usb 5-1: USB disconnect, device number 50 [ 1848.815763][T16357] magicmouse 0003:05AC:0265.0048: invalid report_size 26545 [ 1848.871338][T16357] magicmouse 0003:05AC:0265.0048: item 0 2 1 7 parsing failed [ 1848.913099][T16357] magicmouse 0003:05AC:0265.0048: magicmouse hid parse failed [ 1849.094327][T16357] magicmouse 0003:05AC:0265.0048: probe with driver magicmouse failed with error -22 [ 1849.116653][T25348] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1849.305731][T25348] usb 10-1: Using ep0 maxpacket: 16 [ 1849.370761][T25348] usb 10-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 1849.404494][T25348] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.460025][T16357] usb 6-1: USB disconnect, device number 32 [ 1849.485240][T25348] usb 10-1: Product: à ¬ [ 1849.518499][T25348] usb 10-1: Manufacturer: 뫮呯㹩庹逰悆銣谒킉ãžå£¡èŠ¦ç½Œá¬ºë¬„æƒ¶ïª³ì«°áŠ¾è·ºç¥ƒâ¶©èª¶ë…ˆîŸ¡ï¬›ìŒ§î¸Ÿâ‹¨âº’êš„å…ƒè”ªê„ªì¦¯æ’½ì”¥ë¨ë²˜äŽ§ãˆ•î‘¥á¯‹æ¥§â‰¾êƒ®ï¼£è€µé¥†ë¤²â‰·æ¶€ä¹È‘➖⧖쟊뻂ᴄ鵣鷰哰í›ê‚ŒæŒ“핦⯈啕 [ 1849.588278][T25348] usb 10-1: SerialNumber: 涞뗢欛滺樫⟞ꥩï“â§ç¤¤é³á¥ˆå»ºæ ‹ãžäª‰æ€è¡µî—¨è—廙쮂뢬ዙᆓ輤嶪戜票í”̘맯죦ä â˜‰é±«è¨±é±±æˆ‘鹰ï¤é´€å¼‰ã¦°é¶¡æˆ•ï£î±€ã¼Šå‘»î©ê£¨à¨—ỳ좛徰骚醙꙳嬶è´ï˜¯ëŽ…è£‚ [ 1849.796631][ T5883] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1850.015055][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 1850.053092][T25348] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.062949][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1850.104902][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.177933][ T5883] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1850.221867][ T5883] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 1850.326113][ T5883] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1850.389059][T16359] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1850.399587][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.428864][T25348] usb 10-1: USB disconnect, device number 12 [ 1850.446683][ T5883] usb 5-1: Product: syz [ 1850.451002][ T5883] usb 5-1: Manufacturer: syz [ 1850.455639][ T5883] usb 5-1: SerialNumber: syz [ 1850.538747][T21355] udevd[21355]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1850.605452][T16359] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1850.632935][T16359] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1850.666710][T16359] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1850.688593][T16359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.726163][ T4282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1850.753474][T16359] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.982036][ T5883] usb 5-1: USB disconnect, device number 51 [ 1851.329089][T25341] usb 3-1: USB disconnect, device number 41 [ 1851.462657][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6183'. [ 1851.816645][T25348] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1851.986066][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.040463][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.077380][T25348] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1852.116632][T25348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.148247][T25348] usb 5-1: config 0 descriptor?? [ 1852.277206][T25341] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1852.404832][T25348] usbhid 5-1:0.0: can't add hid device: -71 [ 1852.433703][T25348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1852.462793][T25348] usb 5-1: USB disconnect, device number 52 [ 1852.486209][T25341] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.528749][T25341] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1852.569594][T25341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.580592][ T4414] loop5: detected capacity change from 0 to 7 [ 1852.588749][T21354] loop5: [ 1852.591956][T21354] loop5: partition table partially beyond EOD, truncated [ 1852.610526][ T4414] loop5: [ 1852.611121][T25341] usb 6-1: config 0 descriptor?? [ 1852.614281][ T4414] loop5: partition table partially beyond EOD, truncated [ 1852.670057][T25341] pwc: Askey VC010 type 2 USB webcam detected. [ 1852.708296][T16359] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1852.899119][T16359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.917435][T16359] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 129, using maximum allowed: 30 [ 1852.929630][T25348] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1852.953250][T16359] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1853.002632][T16359] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1853.020945][T16359] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.08 [ 1853.040739][T16359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.059863][T16359] usb 3-1: config 0 descriptor?? [ 1853.070819][T25341] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1853.083138][T16359] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1853.099593][T25341] pwc: recv_control_msg error -32 req 02 val 2700 [ 1853.105326][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.121316][T25341] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1853.125275][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.150929][T25348] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1853.165718][T25341] pwc: recv_control_msg error -32 req 04 val 1000 [ 1853.168838][T25348] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1853.181948][T25348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.193017][T25341] pwc: recv_control_msg error -32 req 04 val 1300 [ 1853.194502][ T4390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.224258][T25348] usb 5-1: config 0 descriptor?? [ 1853.231422][ T4390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.257631][T25341] pwc: recv_control_msg error -32 req 04 val 1400 [ 1853.284101][ T4406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.290534][T25341] pwc: recv_control_msg error -32 req 02 val 2000 [ 1853.293793][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.305725][T16359] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1853.315469][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.322521][T25341] pwc: recv_control_msg error -32 req 02 val 2100 [ 1853.331129][ T4406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.348849][T16357] usb 3-1: USB disconnect, device number 42 [ 1853.357598][T25341] pwc: recv_control_msg error -32 req 04 val 1500 [ 1853.377157][T25341] pwc: recv_control_msg error -32 req 02 val 2500 [ 1853.406347][T25341] pwc: recv_control_msg error -32 req 02 val 2400 [ 1853.430729][T25341] pwc: recv_control_msg error -32 req 02 val 2600 [ 1853.469841][T25341] pwc: recv_control_msg error -32 req 02 val 2900 [ 1853.486752][T16359] usb 10-1: Using ep0 maxpacket: 32 [ 1853.508011][T25341] pwc: recv_control_msg error -71 req 02 val 2800 [ 1853.515940][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.538761][T25341] pwc: recv_control_msg error -71 req 04 val 1100 [ 1853.545794][T25341] pwc: recv_control_msg error -71 req 04 val 1200 [ 1853.569267][T16359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.589939][T25341] pwc: Registered as video103. [ 1853.619273][T16359] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1853.634968][T25341] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 1853.676968][T16359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.694112][T25341] usb 6-1: USB disconnect, device number 33 [ 1853.750026][T16359] usb 10-1: config 0 descriptor?? [ 1853.813971][T16359] hub 10-1:0.0: USB hub found [ 1853.841994][T25348] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1853.877065][T16357] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1853.890173][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.898077][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.082412][T16357] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1854.111873][T16359] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 1854.137033][T16357] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1854.146139][T16357] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.220059][T16359] usbhid 10-1:0.0: can't add hid device: -71 [ 1854.252414][T16357] usb 3-1: config 220 has no interface number 2 [ 1854.273983][T16359] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1854.322482][T16357] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1854.361202][T16359] usb 10-1: USB disconnect, device number 13 [ 1854.397174][ T4506] xt_hashlimit: max too large, truncated to 1048576 [ 1854.416605][T16357] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1854.423536][T16357] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1854.479619][T16357] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1854.547188][T16357] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1854.590732][T16357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.628370][T16357] usb 3-1: Product: syz [ 1854.632723][T16357] usb 3-1: Manufacturer: syz [ 1854.660575][ T4513] netlink: 'syz.9.6196': attribute type 7 has an invalid length. [ 1854.660945][T16357] usb 3-1: SerialNumber: syz [ 1854.703795][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1854.721486][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1854.823330][T29884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1854.837730][T29884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1854.847336][T29884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1854.865557][T29884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1854.875860][T29884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1855.060344][ T4406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.135770][ T4406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.214442][ T77] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.249574][ T77] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.299761][T16357] usb 3-1: selecting invalid altsetting 0 [ 1855.325583][T16357] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1855.366973][T16357] uvcvideo 3-1:220.0: No valid video chain found. [ 1855.387906][ T77] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.422862][T16357] usb 3-1: selecting invalid altsetting 0 [ 1855.443299][ T77] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1855.456261][T16357] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1855.542579][T16357] usb 3-1: USB disconnect, device number 43 [ 1855.888426][T16355] usb 5-1: USB disconnect, device number 53 [ 1855.909435][T20545] syz_tun (unregistering): left allmulticast mode [ 1856.321711][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1856.348461][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.492024][ T4597] netlink: 'syz.4.6199': attribute type 12 has an invalid length. [ 1856.526658][ T4597] netlink: 'syz.4.6199': attribute type 29 has an invalid length. [ 1856.566712][ T4597] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6199'. [ 1856.578307][ T4597] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6199'. [ 1856.725701][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6198'. [ 1856.754591][ T4609] loop5: detected capacity change from 0 to 7 [ 1856.763336][ T4609] loop5: [ 1856.766335][ T4609] loop5: partition table partially beyond EOD, truncated [ 1856.961451][T29883] Bluetooth: hci1: command tx timeout [ 1857.063618][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.145950][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.386796][ T4628] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1857.558891][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1857.630824][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.809346][ T4522] chnl_net:caif_netlink_parms(): no params data found [ 1859.038733][T29883] Bluetooth: hci1: command tx timeout [ 1859.877113][T16357] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1860.098877][T16357] usb 5-1: Using ep0 maxpacket: 8 [ 1860.125600][T16357] usb 5-1: config 1 has an invalid interface number: 222 but max is 0 [ 1860.198330][ T4771] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1860.261417][T16357] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1860.287623][T16357] usb 5-1: config 1 has no interface number 0 [ 1860.304381][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6210'. [ 1860.305157][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6209'. [ 1860.323369][T16357] usb 5-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 1860.363217][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6210'. [ 1860.402943][T16357] usb 5-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 1860.425600][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.440033][T16357] usb 5-1: config 1 interface 222 has no altsetting 0 [ 1860.456863][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.545626][ T4522] bridge_slave_0: entered allmulticast mode [ 1860.587619][ T4522] bridge_slave_0: entered promiscuous mode [ 1860.661450][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.686917][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.712776][ T4522] bridge_slave_1: entered allmulticast mode [ 1860.713284][T16357] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1860.782393][ T4522] bridge_slave_1: entered promiscuous mode [ 1860.849592][T16357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.901985][T16357] usb 5-1: Product: syz [ 1860.919801][T16357] usb 5-1: Manufacturer: syz [ 1860.933599][T16357] usb 5-1: SerialNumber: syz [ 1861.117082][T29883] Bluetooth: hci1: command tx timeout [ 1861.144308][ T12] hsr0: left allmulticast mode [ 1861.149622][ T12] hsr_slave_0: left allmulticast mode [ 1861.194984][ T12] hsr_slave_1: left allmulticast mode [ 1861.230557][ T12] hsr0: left promiscuous mode [ 1861.269763][ T12] bridge0: port 4(hsr0) entered disabled state [ 1861.371327][ T12] team0: left allmulticast mode [ 1861.402136][ T12] team_slave_0: left allmulticast mode [ 1861.429199][ T12] team_slave_1: left allmulticast mode [ 1861.452839][ T12] team0: left promiscuous mode [ 1861.466405][ T12] team_slave_0: left promiscuous mode [ 1861.486985][ T12] team_slave_1: left promiscuous mode [ 1861.506349][ T12] bridge0: port 3(team0) entered disabled state [ 1861.780019][ T12] bridge_slave_1: left allmulticast mode [ 1861.813854][ T12] bridge_slave_1: left promiscuous mode [ 1861.844755][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.888315][ T12] bridge_slave_0: left allmulticast mode [ 1861.926722][ T12] bridge_slave_0: left promiscuous mode [ 1861.936247][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.630222][T16357] usb 5-1: USB disconnect, device number 54 [ 1862.741956][ T4841] loop5: detected capacity change from 0 to 7 [ 1862.765212][ T12] team0: Port device bridge1 removed [ 1862.781916][ T4841] loop5: [ 1862.788477][ T4841] loop5: partition table partially beyond EOD, truncated [ 1862.898649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.009952][ T4856] netlink: 'syz.8.6217': attribute type 10 has an invalid length. [ 1863.109537][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.190459][ T12] bond0 (unregistering): Released all slaves [ 1863.196972][T29883] Bluetooth: hci1: command tx timeout [ 1863.315447][ T4522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.424266][ T12] : left promiscuous mode [ 1863.538439][ T4522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.594862][T16355] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1863.626238][ T12] : left promiscuous mode [ 1863.908488][ T12] ý™: left promiscuous mode [ 1863.920649][T16355] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1863.972035][T16355] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1863.991511][ T4898] netlink: 'syz.9.6220': attribute type 10 has an invalid length. [ 1864.013983][ T4522] team0: Port device team_slave_0 added [ 1864.022281][T16355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1864.047960][T16355] usb 3-1: SerialNumber: syz [ 1864.139593][ T4898] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1864.196857][ T4522] team0: Port device team_slave_1 added [ 1864.240774][ T12] tipc: Disabling bearer [ 1864.263221][ T12] tipc: Left network mode [ 1864.315658][ T4522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.339431][T16355] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1864.349699][ T4522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.389694][T16355] usb 3-1: USB disconnect, device number 44 [ 1864.428927][ T4522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.513818][ T4522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.528228][ T4522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1864.631115][ T4522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.832696][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6221'. [ 1864.848817][ T4951] bridge_slave_0: default FDB implementation only supports local addresses [ 1864.912233][T16355] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1864.958512][ T4522] hsr_slave_0: entered promiscuous mode [ 1864.986960][ T4522] hsr_slave_1: entered promiscuous mode [ 1865.045754][ T4522] debugfs: 'hsr0' already exists in 'hsr' [ 1865.118668][ T4522] Cannot create hsr debugfs directory [ 1865.136254][T16355] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1865.226629][T16355] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1865.293487][T16355] usb 10-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 1865.351278][T16355] usb 10-1: config 220 has no interface number 2 [ 1865.457794][T16355] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1865.527738][T16355] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1865.606636][T16355] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1865.613674][T16355] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1865.632849][T16355] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1865.646905][T16355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.689718][T16355] usb 10-1: Product: syz [ 1865.694038][T16355] usb 10-1: Manufacturer: syz [ 1865.726384][T16355] usb 10-1: SerialNumber: syz [ 1865.979016][T16355] usb 10-1: selecting invalid altsetting 0 [ 1866.029391][T16355] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1866.084824][T16355] uvcvideo 10-1:220.0: No valid video chain found. [ 1866.170244][T16355] usb 10-1: selecting invalid altsetting 0 [ 1866.203908][T29883] Bluetooth: unknown link type 128 [ 1866.209614][T16355] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1866.217212][ T12] hsr_slave_0: left promiscuous mode [ 1866.222758][T16355] usb 10-1: USB disconnect, device number 14 [ 1866.242557][ T12] hsr_slave_1: left promiscuous mode [ 1866.302570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1866.349680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1866.404536][ T12] batadv0: mtu less than device minimum [ 1866.432057][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.443525][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.454959][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.466223][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.477396][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.488646][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.500008][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.511387][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.522659][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1866.829976][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1866.911281][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 1866.963548][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 1867.046727][ T12] veth1_macvtap: left promiscuous mode [ 1867.052292][ T12] veth0_macvtap: left promiscuous mode [ 1867.105420][ T5059] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1867.126058][ T12] veth1_vlan: left promiscuous mode [ 1867.146428][ T12] veth0_vlan: left promiscuous mode [ 1867.266219][ T5061] loop5: detected capacity change from 0 to 7 [ 1867.340994][T22075] loop5: [ 1867.344042][T22075] loop5: partition table partially beyond EOD, truncated [ 1867.394736][ T5061] loop5: [ 1867.398091][ T5061] loop5: partition table partially beyond EOD, truncated [ 1867.675553][ T12] pim6reg (unregistering): left allmulticast mode [ 1868.248680][T29883] Bluetooth: hci4: command 0x0c1a tx timeout [ 1868.875786][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1869.037681][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1869.834034][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6225'. [ 1869.892676][ T5086] team0: entered promiscuous mode [ 1869.899263][ T5086] team_slave_0: entered promiscuous mode [ 1869.922574][ T5086] team_slave_1: entered promiscuous mode [ 1870.172855][ T5125] pim6reg: entered allmulticast mode [ 1870.310209][ T5134] loop5: detected capacity change from 0 to 7 [ 1870.345707][ T5134] loop5: [ 1870.392001][ T5134] loop5: partition table partially beyond EOD, truncated [ 1870.522721][ T5154] netlink: 'syz.9.6233': attribute type 13 has an invalid length. [ 1870.530957][ T5154] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6233'. [ 1870.892822][ T5178] loop5: detected capacity change from 0 to 7 [ 1870.967057][ T5178] loop5: [ 1870.972004][ T5178] loop5: partition table partially beyond EOD, truncated [ 1871.338497][ T12] IPVS: stop unused estimator thread 0... [ 1871.368703][ T5205] kvm: kvm [5203]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x2 [ 1872.114930][ T5245] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1872.170718][ T4522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1872.378420][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6242'. [ 1872.390304][ T4522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1872.436096][ T4522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1872.533467][ T4522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1873.078703][ T4522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.186371][ T4522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.240970][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.248367][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.321256][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.328444][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.629789][ T5272] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6245'. [ 1873.840099][ T4522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.078263][ T4522] veth0_vlan: entered promiscuous mode [ 1874.122392][ T4522] veth1_vlan: entered promiscuous mode [ 1874.205457][ T4522] veth0_macvtap: entered promiscuous mode [ 1874.230744][ T4522] veth1_macvtap: entered promiscuous mode [ 1874.397359][T16357] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1874.549408][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.586737][T16357] usb 10-1: device descriptor read/64, error -71 [ 1874.660449][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1874.742366][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.768202][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.796639][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.832695][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.843118][T16357] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1874.874658][ T5299] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6248'. [ 1875.027418][T16357] usb 10-1: device descriptor read/64, error -71 [ 1875.160322][T16357] usb usb10-port1: attempt power cycle [ 1875.170135][T16647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.202172][T16647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.392376][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.439907][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.542621][T16357] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1875.627351][T16357] usb 10-1: device descriptor read/8, error -71 [ 1875.887132][T16357] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1875.940745][T16357] usb 10-1: device descriptor read/8, error -71 [ 1876.073684][T16357] usb usb10-port1: unable to enumerate USB device [ 1876.731816][ T5868] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1876.853622][ T5373] misc userio: No port type given on /dev/userio [ 1876.911771][ T5373] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1876.928928][ T5868] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1876.947002][ T5868] usb 3-1: config 0 has no interface number 0 [ 1876.970848][ T5868] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1877.009169][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.046778][ T5868] usb 3-1: Product: syz [ 1877.073880][ T5868] usb 3-1: Manufacturer: syz [ 1877.095217][ T5868] usb 3-1: SerialNumber: syz [ 1877.144146][ T5868] usb 3-1: config 0 descriptor?? [ 1877.345168][ T5390] program syz.9.6258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1877.778935][ T5868] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1877.807250][ T5868] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 1877.847186][ T5868] asix 3-1:0.251: probe with driver asix failed with error -61 [ 1877.896656][T16355] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1877.983331][T16357] usb 3-1: USB disconnect, device number 45 [ 1878.091936][T16355] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1878.134104][T16355] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1878.162696][T16355] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1878.182739][T16355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.201680][T16355] usb 10-1: Product: syz [ 1878.206018][T16355] usb 10-1: Manufacturer: syz [ 1878.221311][T16355] usb 10-1: SerialNumber: syz [ 1878.247915][T16355] usb 10-1: config 0 descriptor?? [ 1878.264539][ T5404] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1878.279261][T16355] port100 10-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1878.495122][T16355] usb 10-1: USB disconnect, device number 19 [ 1879.016988][T16359] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1879.190550][T16359] usb 3-1: Using ep0 maxpacket: 16 [ 1879.215686][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6268'. [ 1879.253987][T16359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.268441][T16359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.279219][T16359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1879.305202][T16359] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1879.325901][T16359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.390981][T16359] usb 3-1: config 0 descriptor?? [ 1879.860744][T16359] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1879.876826][T16359] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 1879.937686][T16359] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 1879.976204][T16359] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 1880.005954][T16359] microsoft 0003:045E:07DA.004A: usage index exceeded [ 1880.038344][T16359] microsoft 0003:045E:07DA.004A: item 0 0 2 2 parsing failed [ 1880.049919][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.073077][T16359] microsoft 0003:045E:07DA.004A: parse failed [ 1880.127195][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.139748][T16359] microsoft 0003:045E:07DA.004A: probe with driver microsoft failed with error -22 [ 1880.919439][T16355] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1881.317086][T16355] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1881.325410][T16355] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1881.387735][T16355] usb 10-1: config 0 has no interface number 0 [ 1881.408307][T16355] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1881.436863][T16355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.447354][ T5543] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1881.557133][T16355] usb 10-1: Product: syz [ 1881.567428][T16355] usb 10-1: Manufacturer: syz [ 1881.597742][T16355] usb 10-1: SerialNumber: syz [ 1881.637223][T16355] usb 10-1: config 0 descriptor?? [ 1882.100704][T16355] uvcvideo 10-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1882.182675][T16355] uvcvideo 10-1:0.64: No valid video chain found. [ 1882.272468][T16355] usb 10-1: USB disconnect, device number 20 [ 1883.240811][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6286'. [ 1884.347603][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.388548][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.414536][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.432551][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.494805][ T5632] loop5: detected capacity change from 0 to 7 [ 1884.534686][T22075] loop5: [ 1884.557606][T22075] loop5: partition table partially beyond EOD, truncated [ 1884.597257][ T5632] loop5: [ 1884.601634][ T5632] loop5: partition table partially beyond EOD, truncated [ 1885.089534][ T5647] netlink: 'syz.2.6299': attribute type 25 has an invalid length. [ 1886.527960][ T5674] loop7: detected capacity change from 0 to 7 [ 1886.554184][ C0] blk_print_req_error: 10 callbacks suppressed [ 1886.554207][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.570720][ C0] buffer_io_error: 11 callbacks suppressed [ 1886.570733][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.588060][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.644561][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.654305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.662454][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.673024][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.689826][ T5676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6303'. [ 1886.700406][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.710199][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.720293][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.730029][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.763951][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.773783][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.792068][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.802082][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.810124][T22075] ldm_validate_partition_table(): Disk read failed. [ 1886.819457][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.829227][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.838572][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1886.848217][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.857288][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1886.866666][T22075] Dev loop7: unable to read RDB block 0 [ 1886.884444][T22075] loop7: unable to read partition table [ 1886.902055][T22075] loop7: partition table beyond EOD, truncated [ 1886.942888][ T5674] ldm_validate_partition_table(): Disk read failed. [ 1886.983825][ T5674] Dev loop7: unable to read RDB block 0 [ 1887.117750][ T5674] loop7: unable to read partition table [ 1887.123910][ T5674] loop7: partition table beyond EOD, truncated [ 1887.135855][ T5674] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1888.619700][ T5714] loop5: detected capacity change from 0 to 7 [ 1888.773560][ T5714] loop5: [ 1888.784438][ T5714] loop5: partition table partially beyond EOD, truncated [ 1890.005655][ T5740] netlink: 'syz.2.6310': attribute type 25 has an invalid length. [ 1890.856623][T16357] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1890.866671][T16359] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1890.897700][ T5761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.928257][ T5761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.046865][T16359] usb 5-1: Using ep0 maxpacket: 8 [ 1891.058112][T16359] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1891.086752][T16359] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1891.097401][T16357] usb 10-1: too many configurations: 193, using maximum allowed: 8 [ 1891.111303][T16359] usb 5-1: Product: syz [ 1891.115541][T16359] usb 5-1: Manufacturer: syz [ 1891.128130][T16357] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1891.148546][T16359] usb 5-1: SerialNumber: syz [ 1891.153977][T16357] usb 10-1: can't read configurations, error -61 [ 1891.197775][T16359] usb 5-1: config 0 descriptor?? [ 1891.212343][T16359] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1891.333081][T16357] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1891.547642][T16357] usb 10-1: too many configurations: 193, using maximum allowed: 8 [ 1891.600260][T16357] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1891.647125][T16357] usb 10-1: can't read configurations, error -61 [ 1891.657095][T16357] usb usb10-port1: attempt power cycle [ 1891.757524][T16359] gspca_zc3xx: reg_w_i err -110 [ 1891.763081][T16359] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1891.998957][T16357] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1892.071158][T16357] usb 10-1: too many configurations: 193, using maximum allowed: 8 [ 1892.104824][T16357] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1892.132695][T16357] usb 10-1: can't read configurations, error -61 [ 1892.286783][T16357] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1892.339476][T16357] usb 10-1: too many configurations: 193, using maximum allowed: 8 [ 1892.372607][T16357] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1892.398116][T16357] usb 10-1: can't read configurations, error -61 [ 1892.422651][T16357] usb usb10-port1: unable to enumerate USB device [ 1892.633569][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1892.633591][ T29] audit: type=1326 audit(1773494311.379:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5788 comm="syz.2.6317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f387659c799 code=0x0 [ 1892.664803][ T5868] usb 5-1: USB disconnect, device number 55 [ 1893.400406][ T5804] loop5: detected capacity change from 0 to 7 [ 1893.437109][ T5804] loop5: [ 1893.477099][ T5804] loop5: partition table partially beyond EOD, truncated [ 1893.699011][ T5819] netlink: 'syz.5.6321': attribute type 1 has an invalid length. [ 1893.815406][ T5828] netlink: 'syz.9.6323': attribute type 25 has an invalid length. [ 1894.167355][ T5306] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1894.189814][ T5842] program syz.9.6324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1894.338103][ T5306] usb 5-1: Using ep0 maxpacket: 16 [ 1894.397349][ T5306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.426722][ T5306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1894.477647][ T5306] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1894.524145][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1894.555993][ T5306] usb 5-1: SerialNumber: syz [ 1894.608200][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1894.621040][ T5306] usb 5-1: 0:2 : does not exist [ 1894.757216][ T5868] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1894.776661][T25337] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1894.839203][ T5867] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1894.921820][ T5306] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1894.988154][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1895.007015][T25337] usb 6-1: not running at top speed; connect to a high speed hub [ 1895.023616][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 1895.041572][T25337] usb 6-1: config 64 has an invalid interface number: 50 but max is 1 [ 1895.052158][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6328'. [ 1895.078348][ T5306] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1895.093789][ T5868] usb 10-1: too many configurations: 142, using maximum allowed: 8 [ 1895.106599][T25337] usb 6-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.195367][T25337] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 1895.204655][ T5868] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 1895.228950][ T5868] usb 10-1: can't read configurations, error -22 [ 1895.247497][T25337] usb 6-1: config 64 has no interface number 0 [ 1895.261024][ T5306] usb 5-1: USB disconnect, device number 56 [ 1895.277211][T25337] usb 6-1: config 64 interface 50 altsetting 15 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1895.326717][T25337] usb 6-1: config 64 interface 50 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1895.339825][T22075] udevd[22075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1895.393662][T25337] usb 6-1: config 64 interface 50 has no altsetting 0 [ 1895.416821][ T5868] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1895.436755][T25337] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=72.27 [ 1895.456366][T25337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.486819][T25337] usb 6-1: Product: syz [ 1895.500140][T25337] usb 6-1: Manufacturer: syz [ 1895.515855][T25337] usb 6-1: SerialNumber: syz [ 1895.585170][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1895.727409][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 1895.764786][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.784723][ T5868] usb 10-1: too many configurations: 142, using maximum allowed: 8 [ 1895.786235][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.908824][ T5868] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 1895.948766][ T5868] usb 10-1: can't read configurations, error -22 [ 1895.979033][ T5868] usb usb10-port1: attempt power cycle [ 1896.363469][ T5868] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1896.391261][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1896.410237][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 1896.456692][ T5868] usb 10-1: too many configurations: 142, using maximum allowed: 8 [ 1896.490564][ T5868] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 1896.491306][ T5906] loop5: detected capacity change from 0 to 7 [ 1896.524955][ T5868] usb 10-1: can't read configurations, error -22 [ 1896.541198][ T5906] loop5: [ 1896.544240][ T5906] loop5: partition table partially beyond EOD, truncated [ 1896.584409][T25337] usb 6-1: Could not find all expected endpoints [ 1896.623585][T25337] usb 6-1: USB disconnect, device number 34 [ 1896.718541][ T5868] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1896.761661][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1896.788474][ T5868] usb 10-1: not running at top speed; connect to a high speed hub [ 1896.854241][ T5868] usb 10-1: too many configurations: 142, using maximum allowed: 8 [ 1896.894963][ T5868] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 1896.899580][ T5927] loop5: detected capacity change from 0 to 7 [ 1896.924734][ T5868] usb 10-1: can't read configurations, error -22 [ 1896.947845][ T5927] loop5: [ 1896.951085][ T5927] loop5: partition table partially beyond EOD, truncated [ 1896.956486][ T5868] usb usb10-port1: unable to enumerate USB device [ 1897.616877][ T5868] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1897.625745][ T5943] syzkaller0: entered promiscuous mode [ 1897.656275][ T5943] syzkaller0: entered allmulticast mode [ 1897.706132][ T5943] tc action pedit offset must be on 32 bit boundaries [ 1897.796992][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 1897.811605][ T5868] usb 5-1: config 0 has no interfaces? [ 1897.817854][ T5868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1897.837286][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.873946][ T5868] usb 5-1: config 0 descriptor?? [ 1898.160216][T25348] usb 5-1: USB disconnect, device number 57 [ 1898.430407][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6339'. [ 1898.641474][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.693569][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.286891][ T5981] loop5: detected capacity change from 0 to 7 [ 1899.317880][ T5981] loop5: [ 1899.320922][ T5981] loop5: partition table partially beyond EOD, truncated [ 1899.421315][ T5990] loop5: detected capacity change from 0 to 7 [ 1899.431596][ T5990] loop5: [ 1899.434701][ T5990] loop5: partition table partially beyond EOD, truncated [ 1899.495330][ T5991] tipc: Enabling of bearer rejected, failed to enable media [ 1899.539518][ T5991] syzkaller0: entered promiscuous mode [ 1899.573232][ T5991] syzkaller0: entered allmulticast mode [ 1900.186667][T25337] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1900.347764][T25337] usb 6-1: Using ep0 maxpacket: 8 [ 1900.368843][T25337] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1900.396806][T25337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.425464][T25337] usb 6-1: Product: syz [ 1900.445881][T25337] usb 6-1: Manufacturer: syz [ 1900.462486][T25337] usb 6-1: SerialNumber: syz [ 1900.492596][T25337] usb 6-1: config 0 descriptor?? [ 1900.534703][T25337] gspca_main: se401-2.14.0 probing 047d:5003 [ 1900.765975][ T6040] syzkaller0: entered promiscuous mode [ 1900.766029][ T6040] syzkaller0: entered allmulticast mode [ 1900.791289][ T6040] tipc: Started in network mode [ 1900.791328][ T6040] tipc: Node identity 26dbb2b60cd3, cluster identity 4711 [ 1900.791557][ T6040] tipc: Enabled bearer , priority 10 [ 1900.805270][ T6039] tipc: Resetting bearer [ 1900.931954][ T6039] tipc: Disabling bearer [ 1901.055679][T16357] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1901.154220][T25337] gspca_se401: ExtraFeatures: 195 [ 1901.196809][T16357] usb 10-1: device descriptor read/64, error -71 [ 1901.216693][T25337] gspca_se401: Frame size: 0x512 bayer [ 1901.216718][T25337] gspca_se401: Frame size: 22579x10101 bayer [ 1901.216730][T25337] gspca_se401: Frame size: 10267x10595 bayer [ 1901.216743][T25337] gspca_se401: Frame size: 27089x17043 bayer [ 1901.216756][T25337] gspca_se401: Frame size: 64904x39544 bayer [ 1901.216769][T25337] gspca_se401: Frame size: 32163x39022 bayer [ 1901.216780][T25337] gspca_se401: Frame size: 9394x17661 bayer [ 1901.216792][T25337] gspca_se401: Frame size: 23478x13105 bayer [ 1901.216804][T25337] gspca_se401: Frame size: 64591x52309 bayer [ 1901.436669][T29884] Bluetooth: hci5: command 0x0406 tx timeout [ 1901.446754][T16357] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1901.596799][T16357] usb 10-1: device descriptor read/64, error -71 [ 1902.042545][T16357] usb usb10-port1: attempt power cycle [ 1902.297661][T25337] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input106 [ 1902.413269][ T6076] loop5: detected capacity change from 0 to 7 [ 1902.414148][ T6076] loop5: [ 1902.414170][ T6076] loop5: partition table partially beyond EOD, truncated [ 1902.707269][T25337] usb 6-1: USB disconnect, device number 35 [ 1902.771774][ T6091] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1902.784056][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6361'. [ 1904.142244][T16357] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1904.713513][ T6134] fuse: blksize only supported for fuseblk [ 1904.868956][ T6136] Invalid argument reading file caps for ./file0 [ 1905.259583][T16359] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1905.376144][ T6151] loop5: detected capacity change from 0 to 7 [ 1905.405633][T22075] Dev loop5: unable to read RDB block 7 [ 1905.434124][T22075] loop5: unable to read partition table [ 1905.477669][T16359] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1905.496462][T22075] loop5: partition table beyond EOD, truncated [ 1905.506899][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.543824][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.556647][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.564956][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.574432][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.587815][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.596043][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.602870][ T6151] Dev loop5: unable to read RDB block 7 [ 1905.610846][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.622990][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.631449][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.640974][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.655425][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.660414][ T6151] loop5: unable to read partition table [ 1905.672044][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.683113][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.710821][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.723617][ T6151] loop5: partition table beyond EOD, truncated [ 1905.728060][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.741304][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.782149][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.787739][ T6151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1905.802293][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.827065][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.898108][ T5195] Dev loop5: unable to read RDB block 7 [ 1905.903855][ T5195] loop5: unable to read partition table [ 1905.914374][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1905.929459][ T5195] loop5: partition table beyond EOD, truncated [ 1905.937946][T16359] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1905.956645][T16359] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1905.972512][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.991859][T16359] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1906.002222][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.029158][T16359] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1906.044760][T16359] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1906.095740][T16359] usb 5-1: Product: syz [ 1906.114291][T16359] usb 5-1: Manufacturer: syz [ 1906.122214][T16359] usb 5-1: SerialNumber: syz [ 1906.153220][T16359] usb 5-1: config 0 descriptor?? [ 1906.173945][T16359] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1906.445005][T16359] usb 5-1: USB disconnect, device number 58 [ 1906.559664][T16359] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1906.591149][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1906.662109][ T6140] ip6t_rpfilter: unknown options [ 1906.682324][ T6190] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 1906.697883][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6375'. [ 1907.097063][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.157153][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.496728][ T5883] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1907.574061][ T6216] net_ratelimit: 11 callbacks suppressed [ 1907.574076][ T6216] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1907.601766][T25337] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 1907.610312][ T5868] IPVS: starting estimator thread 0... [ 1907.651629][T25337] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1907.696691][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 1907.706691][ T6219] IPVS: using max 34 ests per chain, 81600 per kthread [ 1907.715346][ T5883] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1907.745529][ T5883] usb 6-1: config 0 has no interface number 0 [ 1907.796587][ T5883] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1907.915726][ T6223] fido_id[6223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1907.916783][ T5883] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1908.046563][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.054985][ T5883] usb 6-1: Product: syz [ 1908.125567][ T5883] usb 6-1: Manufacturer: syz [ 1908.152201][ T5883] usb 6-1: SerialNumber: syz [ 1908.183030][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6379'. [ 1908.218548][ T5883] usb 6-1: config 0 descriptor?? [ 1908.616801][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6382'. [ 1909.224090][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1909.247064][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1909.336727][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1909.367852][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1909.396706][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1909.476615][ T5883] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1909.547517][ T5883] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1909.566645][T16355] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1909.607237][ T5883] usb 6-1: USB disconnect, device number 37 [ 1909.726752][T16355] usb 10-1: Using ep0 maxpacket: 8 [ 1909.769510][T16355] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1909.787092][T16355] usb 10-1: config 179 has no interface number 0 [ 1909.812805][T16355] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1909.845577][T16355] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1909.894566][T16355] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1909.925794][T16355] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1909.972086][T16355] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1910.001535][T16355] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1910.026676][T16355] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.069423][ T6279] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1910.077491][T16359] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1910.249945][T16359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1910.272698][T16359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1910.300700][T16359] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1910.312070][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6385'. [ 1910.330495][T16359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.379320][T16359] usb 6-1: config 0 descriptor?? [ 1910.520269][ T5883] usb 10-1: USB disconnect, device number 32 [ 1910.520267][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1910.520402][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1910.606143][T16359] ath6kl: Failed to submit usb control message: -71 [ 1910.617132][T16359] ath6kl: unable to send the bmi data to the device: -71 [ 1910.625093][T16359] ath6kl: Unable to send get target info: -71 [ 1910.633598][T16359] ath6kl: Failed to init ath6kl core: -71 [ 1910.655281][T16359] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1910.699372][T16359] usb 6-1: USB disconnect, device number 38 [ 1911.134907][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.184529][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.546927][ T6367] loop5: detected capacity change from 0 to 7 [ 1911.554358][ T6367] loop5: [ 1911.557670][ T6367] loop5: partition table partially beyond EOD, truncated [ 1912.250830][ T6409] CIFS: iocharset name too long [ 1912.302807][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.493033][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.097167][ T5306] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1913.199768][ T6428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1913.320445][ T5306] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1913.346154][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.395574][ T5306] usb 5-1: config 0 descriptor?? [ 1913.460421][ T5306] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1913.946752][T16359] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1914.045081][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.054770][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.147132][T16359] usb 6-1: device descriptor read/64, error -71 [ 1914.270132][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.288779][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.416875][T16359] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1914.418792][ T5306] usb 5-1: USB disconnect, device number 59 [ 1914.596627][T16359] usb 6-1: device descriptor read/64, error -71 [ 1914.708436][T16359] usb usb6-port1: attempt power cycle [ 1914.722666][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.730956][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.057237][ T5306] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1915.108913][ T6478] random: crng reseeded on system resumption [ 1915.157633][T16359] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 1915.177549][T16359] usb 6-1: device descriptor read/8, error -71 [ 1915.297549][ T5306] usb 5-1: device descriptor read/64, error -71 [ 1915.536993][T16359] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1915.607717][T16359] usb 6-1: device descriptor read/8, error -71 [ 1915.619239][ T5306] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1915.737089][T16359] usb usb6-port1: unable to enumerate USB device [ 1915.786681][ T5306] usb 5-1: device descriptor read/64, error -71 [ 1915.920767][ T5306] usb usb5-port1: attempt power cycle [ 1916.346866][ T5306] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1916.390770][ T5306] usb 5-1: device descriptor read/8, error -71 [ 1916.666604][ T5306] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1916.698088][ T5306] usb 5-1: device descriptor read/8, error -71 [ 1916.806917][ T6468] Bluetooth: hci0: command 0x0406 tx timeout [ 1916.822151][ T5306] usb usb5-port1: unable to enumerate USB device [ 1917.250922][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.267890][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.652130][ T6534] FAULT_INJECTION: forcing a failure. [ 1917.652130][ T6534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1917.760039][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.4.6419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.760073][ T6534] Tainted: [L]=SOFTLOCKUP [ 1917.760081][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1917.760093][ T6534] Call Trace: [ 1917.760101][ T6534] [ 1917.760110][ T6534] dump_stack_lvl+0xe8/0x150 [ 1917.760144][ T6534] should_fail_ex+0x412/0x560 [ 1917.760177][ T6534] _copy_to_user+0x31/0xb0 [ 1917.760201][ T6534] simple_read_from_buffer+0xe1/0x170 [ 1917.760234][ T6534] proc_fail_nth_read+0x1bb/0x230 [ 1917.760263][ T6534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1917.760291][ T6534] ? rw_verify_area+0x2a6/0x4d0 [ 1917.760312][ T6534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1917.760340][ T6534] vfs_read+0x20c/0xa70 [ 1917.760359][ T6534] ? fdget_pos+0x246/0x320 [ 1917.760387][ T6534] ? __pfx___mutex_lock+0x10/0x10 [ 1917.760411][ T6534] ? __pfx_vfs_read+0x10/0x10 [ 1917.760434][ T6534] ? __fget_files+0x2a/0x420 [ 1917.760464][ T6534] ? __fget_files+0x3a0/0x420 [ 1917.760488][ T6534] ? __fget_files+0x2a/0x420 [ 1917.760520][ T6534] ksys_read+0x150/0x270 [ 1917.760542][ T6534] ? __pfx_ksys_read+0x10/0x10 [ 1917.760571][ T6534] do_syscall_64+0x14d/0xf80 [ 1917.760592][ T6534] ? trace_irq_disable+0x3b/0x150 [ 1917.760619][ T6534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.760638][ T6534] ? clear_bhb_loop+0x40/0x90 [ 1917.760672][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.760692][ T6534] RIP: 0033:0x7f4043f5cfce [ 1917.760712][ T6534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1917.760729][ T6534] RSP: 002b:00007f4044ef5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1917.760756][ T6534] RAX: ffffffffffffffda RBX: 00007f4044ef66c0 RCX: 00007f4043f5cfce [ 1917.760771][ T6534] RDX: 000000000000000f RSI: 00007f4044ef60a0 RDI: 0000000000000004 [ 1917.760783][ T6534] RBP: 00007f4044ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 1917.760795][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.760806][ T6534] R13: 00007f4044216038 R14: 00007f4044215fa0 R15: 00007f404433fa48 [ 1917.760838][ T6534] [ 1918.516836][ T5306] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1918.699975][ T5306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.712853][ T5306] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1918.745683][ T5306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.786027][ T5306] usb 10-1: config 0 descriptor?? [ 1919.053982][ T5306] usbhid 10-1:0.0: can't add hid device: -71 [ 1919.077499][ T5306] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1919.117947][ T5306] usb 10-1: USB disconnect, device number 33 [ 1919.555888][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1919.576909][ T5306] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1919.796609][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1919.879727][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1919.906062][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1920.039123][ T5306] usb 10-1: Using ep0 maxpacket: 32 [ 1920.123650][ T5306] usb 10-1: config index 0 descriptor too short (expected 36, got 27) [ 1920.142329][ T5306] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1920.216882][ T5306] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1920.246757][ T5306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.371847][ T5306] usb 10-1: config 0 descriptor?? [ 1920.420117][ T5306] ldusb 10-1:0.0: Interrupt in endpoint not found [ 1920.483641][ T5306] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1920.591288][T16359] usb 10-1: USB disconnect, device number 34 [ 1921.558993][ T6620] ptrace attach of "./syz-executor exec"[1634] was attempted by "./syz-executor exec"[6620] [ 1921.793397][ T30] INFO: task syz.7.5962:1226 blocked for more than 143 seconds. [ 1921.813046][ T30] Tainted: G L syzkaller #0 [ 1921.893521][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1921.993929][ T30] task:syz.7.5962 state:D stack:25352 pid:1226 tgid:1223 ppid:21038 task_flags:0x400140 flags:0x00080002 [ 1922.109980][ T30] Call Trace: [ 1922.157780][ T30] [ 1922.201840][ T30] __schedule+0x15dd/0x52d0 [ 1922.224619][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1922.246742][ T30] ? __pfx___schedule+0x10/0x10 [ 1922.347859][ T30] ? schedule+0x90/0x360 [ 1922.366403][ T30] schedule+0x164/0x360 [ 1922.386214][ T30] schedule_preempt_disabled+0x13/0x30 [ 1922.424072][ T30] __mutex_lock+0x7fe/0x1300 [ 1922.444918][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1922.466713][ T30] ? usbdev_open+0x182/0x770 [ 1922.491936][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1922.505606][ T30] ? bus_find_device+0x27d/0x2d0 [ 1922.548545][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 1922.566743][ T30] ? usbdev_open+0xa7/0x770 [ 1922.578956][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1922.599018][ T30] usbdev_open+0x182/0x770 [ 1922.610353][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 1922.629536][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 1922.706895][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1922.729383][ T30] chrdev_open+0x4cd/0x5e0 [ 1922.744143][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1922.763718][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1922.782960][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1922.823591][ T30] do_dentry_open+0x785/0x14e0 [ 1922.844440][ T30] vfs_open+0x3b/0x340 [ 1922.855946][ T30] ? path_openat+0x2df0/0x3860 [ 1922.866677][ T30] path_openat+0x2e08/0x3860 [ 1922.969821][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1923.005498][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1923.132748][ T30] ? __pfx_path_openat+0x10/0x10 [ 1923.157536][ T30] ? __x64_sys_openat+0x138/0x170 [ 1923.176313][ T30] ? do_syscall_64+0x14d/0xf80 [ 1923.191235][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.217878][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1923.236014][ T30] do_file_open+0x23e/0x4a0 [ 1923.266234][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1923.286316][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1923.295897][ T30] ? alloc_fd+0x64b/0x6c0 [ 1923.303857][ T30] do_sys_openat2+0x113/0x200 [ 1923.313678][ T30] ? __se_sys_futex+0x3a8/0x450 [ 1923.319992][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1923.326411][ T30] __x64_sys_openat+0x138/0x170 [ 1923.331830][ T30] do_syscall_64+0x14d/0xf80 [ 1923.336713][ T30] ? trace_irq_disable+0x3b/0x150 [ 1923.341922][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.350515][ T30] ? clear_bhb_loop+0x40/0x90 [ 1923.355605][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.375949][ T30] RIP: 0033:0x7f598535cfce [ 1923.381725][ T30] RSP: 002b:00007f59861f0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1923.390791][ T30] RAX: ffffffffffffffda RBX: 00007f59861f16c0 RCX: 00007f598535cfce [ 1923.400939][ T30] RDX: 0000000000101301 RSI: 00007f59861f0c00 RDI: ffffffffffffff9c [ 1923.409872][ T30] RBP: 00007f59861f0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1923.419076][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1923.427637][ T30] R13: 00007f5985616038 R14: 00007f5985615fa0 R15: 00007f598573fa48 [ 1923.436110][ T30] [ 1923.446850][ T30] [ 1923.446850][ T30] Showing all locks held in the system: [ 1923.454781][ T30] 1 lock held by khungtaskd/30: [ 1923.461753][ T30] #0: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1923.483610][ T30] 2 locks held by getty/5584: [ 1923.488762][ T30] #0: ffff888036c200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1923.501371][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1923.513264][ T30] 7 locks held by kworker/0:9/25340: [ 1923.519357][ T30] 1 lock held by syz.7.5962/1226: [ 1923.524824][ T30] #0: ffff888029e09198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1923.535818][ T30] [ 1923.538438][ T30] ============================================= [ 1923.538438][ T30] [ 1923.547715][ T30] NMI backtrace for cpu 1 [ 1923.547739][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1923.547764][ T30] Tainted: [L]=SOFTLOCKUP [ 1923.547771][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1923.547782][ T30] Call Trace: [ 1923.547791][ T30] [ 1923.547799][ T30] dump_stack_lvl+0xe8/0x150 [ 1923.547832][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1923.547861][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1923.547886][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1923.547915][ T30] sys_info+0x135/0x170 [ 1923.547937][ T30] watchdog+0xfd9/0x1030 [ 1923.547971][ T30] ? watchdog+0x21a/0x1030 [ 1923.548005][ T30] kthread+0x388/0x470 [ 1923.548025][ T30] ? __pfx_watchdog+0x10/0x10 [ 1923.548050][ T30] ? __pfx_kthread+0x10/0x10 [ 1923.548070][ T30] ret_from_fork+0x51e/0xb90 [ 1923.548098][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.548121][ T30] ? __switch_to+0xc7d/0x1450 [ 1923.548146][ T30] ? __pfx_kthread+0x10/0x10 [ 1923.548167][ T30] ret_from_fork_asm+0x1a/0x30 [ 1923.548210][ T30] [ 1923.548217][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1923.671930][ C0] NMI backtrace for cpu 0 [ 1923.671952][ C0] CPU: 0 UID: 0 PID: 25340 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1923.671975][ C0] Tainted: [L]=SOFTLOCKUP [ 1923.671981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1923.671992][ C0] Workqueue: usb_hub_wq hub_event [ 1923.672017][ C0] RIP: 0010:unwind_next_frame+0xd34/0x23c0 [ 1923.672043][ C0] Code: 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 66 52 b9 00 48 89 5c 24 60 4c 89 64 24 18 <49> 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c [ 1923.672056][ C0] RSP: 0018:ffffc90000007558 EFLAGS: 00000046 [ 1923.672069][ C0] RAX: dffffc0000000000 RBX: ffffc90000007698 RCX: ffffffff90294bf8 [ 1923.672081][ C0] RDX: ffffffff90a51674 RSI: 0000000000000002 RDI: ffffffff8c27bca0 [ 1923.672093][ C0] RBP: 1ffff92000000ed2 R08: 0000000000000001 R09: ffffffff8e75e460 [ 1923.672103][ C0] R10: ffffc900000076d8 R11: fffff52000000edd R12: ffffc90000007720 [ 1923.672114][ C0] R13: 1ffff92000000ed3 R14: ffffc90000007688 R15: ffffc90000000000 [ 1923.672127][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 1923.672139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1923.672150][ C0] CR2: 00007fd76753eccc CR3: 00000000787a6000 CR4: 00000000003526f0 [ 1923.672167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1923.672176][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1923.672187][ C0] Call Trace: [ 1923.672194][ C0] [ 1923.672204][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1923.672226][ C0] ? arch_stack_walk+0xe3/0x150 [ 1923.672249][ C0] __unwind_start+0x5b8/0x760 [ 1923.672271][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1923.672288][ C0] arch_stack_walk+0xe3/0x150 [ 1923.672311][ C0] ? arch_stack_walk+0xe3/0x150 [ 1923.672332][ C0] stack_trace_save+0xa9/0x100 [ 1923.672348][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1923.672362][ C0] ? kasan_save_free_info+0x46/0x50 [ 1923.672384][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1923.672405][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1923.672423][ C0] ? irq_enter_rcu+0x50/0xf0 [ 1923.672440][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1923.672458][ C0] kasan_save_track+0x3e/0x80 [ 1923.672493][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1923.672511][ C0] kasan_save_free_info+0x46/0x50 [ 1923.672531][ C0] __kasan_slab_free+0x5c/0x80 [ 1923.672548][ C0] kfree+0x1c1/0x630 [ 1923.672562][ C0] ? dummy_timer+0xb59/0x45d0 [ 1923.672584][ C0] dummy_timer+0xb59/0x45d0 [ 1923.672606][ C0] ? __resched_curr+0x1ff/0x3f0 [ 1923.672628][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1923.672656][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1923.672676][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1923.672701][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1923.672716][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1923.672735][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1923.672754][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 1923.672781][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1923.672800][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1923.672822][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 1923.672846][ C0] handle_softirqs+0x22a/0x870 [ 1923.672866][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1923.672894][ C0] __irq_exit_rcu+0x5f/0x150 [ 1923.672912][ C0] irq_exit_rcu+0x9/0x30 [ 1923.672929][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1923.672945][ C0] [ 1923.672950][ C0] [ 1923.672957][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1923.672973][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1923.672989][ C0] Code: f7 e8 cd 3e f1 f5 f7 c3 00 02 00 00 74 05 e8 d0 96 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 34 fc e2 f5 65 8b 05 0d 10 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 1923.673000][ C0] RSP: 0018:ffffc9000596eb30 EFLAGS: 00000206 [ 1923.673013][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 1923.673023][ C0] RDX: 0000000000000006 RSI: ffffffff8def6a1d RDI: 0000000000000001 [ 1923.673033][ C0] RBP: 1ffff11011983119 R08: ffffffff90119ab7 R09: 1ffffffff2023356 [ 1923.673045][ C0] R10: dffffc0000000000 R11: fffffbfff2023357 R12: ffff88803b5ade88 [ 1923.673055][ C0] R13: 0000000000000246 R14: ffff88808cc18000 R15: dffffc0000000000 [ 1923.673073][ C0] ath6kl_usb_post_recv_transfers+0x1ed/0x6f0 [ 1923.673099][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 1923.673117][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 1923.673135][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1923.673154][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 1923.673170][ C0] ? __asan_memcpy+0x40/0x70 [ 1923.673185][ C0] ? ath6kl_core_create+0x7fb/0x9a0 [ 1923.673202][ C0] ath6kl_usb_probe+0x14df/0x15d0 [ 1923.673225][ C0] usb_probe_interface+0x668/0xc90 [ 1923.673249][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1923.673267][ C0] really_probe+0x267/0xaf0 [ 1923.673289][ C0] __driver_probe_device+0x18c/0x320 [ 1923.673309][ C0] driver_probe_device+0x4f/0x240 [ 1923.673329][ C0] __device_attach_driver+0x279/0x430 [ 1923.673350][ C0] bus_for_each_drv+0x258/0x2f0 [ 1923.673365][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1923.673385][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1923.673400][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1923.673416][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1923.673433][ C0] __device_attach+0x2c5/0x450 [ 1923.673452][ C0] ? __pfx___device_attach+0x10/0x10 [ 1923.673472][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1923.673487][ C0] device_initial_probe+0xa1/0xd0 [ 1923.673507][ C0] bus_probe_device+0x12a/0x220 [ 1923.673521][ C0] ? device_add+0x726/0xb70 [ 1923.673538][ C0] device_add+0x7b6/0xb70 [ 1923.673557][ C0] usb_set_configuration+0x1a87/0x2110 [ 1923.673585][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1923.673603][ C0] usb_probe_device+0x1c4/0x3b0 [ 1923.673622][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1923.673640][ C0] really_probe+0x267/0xaf0 [ 1923.673661][ C0] __driver_probe_device+0x18c/0x320 [ 1923.673681][ C0] driver_probe_device+0x4f/0x240 [ 1923.673702][ C0] __device_attach_driver+0x279/0x430 [ 1923.673722][ C0] bus_for_each_drv+0x258/0x2f0 [ 1923.673738][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1923.673758][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1923.673773][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1923.673789][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1923.673805][ C0] __device_attach+0x2c5/0x450 [ 1923.673824][ C0] ? __pfx___device_attach+0x10/0x10 [ 1923.673843][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1923.673858][ C0] device_initial_probe+0xa1/0xd0 [ 1923.673884][ C0] bus_probe_device+0x12a/0x220 [ 1923.673899][ C0] ? device_add+0x726/0xb70 [ 1923.673916][ C0] device_add+0x7b6/0xb70 [ 1923.673935][ C0] usb_new_device+0xa08/0x16f0 [ 1923.673955][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1923.673972][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1923.673988][ C0] hub_event+0x2a1c/0x4f30 [ 1923.674004][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1923.674039][ C0] ? __pfx_hub_event+0x10/0x10 [ 1923.674060][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1923.674079][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1923.674097][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1923.674128][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1923.674149][ C0] ? assign_work+0x3d5/0x5e0 [ 1923.674169][ C0] worker_thread+0xa53/0xfc0 [ 1923.674198][ C0] kthread+0x388/0x470 [ 1923.674214][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1923.674232][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.674247][ C0] ret_from_fork+0x51e/0xb90 [ 1923.674267][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.674285][ C0] ? __switch_to+0xc7d/0x1450 [ 1923.674303][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.674318][ C0] ret_from_fork_asm+0x1a/0x30 [ 1923.674345][ C0] [ 1924.472042][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1924.479820][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.490632][ T30] Tainted: [L]=SOFTLOCKUP [ 1924.495091][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1924.505983][ T30] Call Trace: [ 1924.509310][ T30] [ 1924.512430][ T30] vpanic+0x56c/0xa60 [ 1924.516539][ T30] ? __pfx___schedule+0x10/0x10 [ 1924.521793][ T30] ? __pfx_vpanic+0x10/0x10 [ 1924.526696][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1924.532018][ T30] panic+0xc5/0xd0 [ 1924.536038][ T30] ? __pfx_panic+0x10/0x10 [ 1924.540692][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1924.546453][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1924.552722][ T30] watchdog+0x1023/0x1030 [ 1924.557169][ T30] ? watchdog+0x21a/0x1030 [ 1924.561691][ T30] kthread+0x388/0x470 [ 1924.566132][ T30] ? __pfx_watchdog+0x10/0x10 [ 1924.571166][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.576122][ T30] ret_from_fork+0x51e/0xb90 [ 1924.580890][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1924.586269][ T30] ? __switch_to+0xc7d/0x1450 [ 1924.591043][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.595993][ T30] ret_from_fork_asm+0x1a/0x30 [ 1924.600867][ T30] [ 1924.605018][ T30] Kernel Offset: disabled [ 1924.610806][ T30] Rebooting in 86400 seconds..