last executing test programs: 9m39.301958475s ago: executing program 32 (id=1257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64=r1, @ANYBLOB="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"], 0x198) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r10, &(0x7f0000004900)={0x2020}, 0x2020) r11 = socket(0x10, 0x3, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r9, 0x40026f33, &(0x7f0000000000)) sendmsg$alg(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0c877c46615a251604b72a2f6fd4f4de71781aed6113931b61c1b84437f164f569be2e3bce98f655e7c29d70ef3534ee", 0x30}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x108, 0x40080c1}, 0x4000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 4m0.766838813s ago: executing program 33 (id=2221): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e25, 0x2, @mcast1, 0xffffffee}}, {{0xa, 0x4e21, 0x4a3, @remote}}}, 0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0xfff}, 0x90) 2m9.387941904s ago: executing program 34 (id=2748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0x6f2d, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05f1118c"], 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x7, @private=0xa010101}}}, 0x84) syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000140), 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28c80000", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x84) 2m3.305186557s ago: executing program 5 (id=2874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000008, 0x4031, 0xffffffffffffffff, 0x3000) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f00000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000003c0), 0x18}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0xfdfd, 0x1, 0x29}, './file0\x00'}) r11 = syz_open_dev$video(&(0x7f0000000400), 0x2, 0x20000) ioctl$NILFS_IOCTL_RESIZE(r11, 0xc0585609, &(0x7f0000000440)=0x6) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r12 = getpgid(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f00000a6000/0x3000)=nil, &(0x7f00008de000/0x1000)=nil, &(0x7f000024c000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d64000/0x4000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000071b000/0x2000)=nil, &(0x7f0000c12000/0x4000)=nil, &(0x7f0000b2b000/0x3000)=nil, &(0x7f0000411000/0x4000)=nil, &(0x7f0000000280)="733ff7ea578c9acbf2d86b5bf30ea84d50170f170c6926469bdce9151116eeca27c17d3373aca8b934a9f6032b6397c6c3c0d5d2abefa35947daa7b4bdd00c7ff8dfe75b6324aac524d0f8bc415facf0a817099ac215cab9fc9c63aefa1359a0c461559641eeebac6a949fdba2b77a0b9f072bce1857a79d9a5817ef7675f250", 0x80, r0}, 0x68) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r7, r8, 0xe, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x3], &(0x7f0000000200)=[0x4, 0x5, 0x4, 0x2, 0x1, 0x3], 0x6b3, 0x1, 0x1, r12}}, 0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m2.92268053s ago: executing program 5 (id=2876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f000029a000/0x3000)=nil, 0x3000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f000029a000/0x3000)=nil, 0x3000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x62a, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x62a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x6, 0x0, 0x3, 0x0, 0xd, 0x9, 0xfffffe0000000001, 0x463, 0x3}, 0x0) unshare(0x42060680) (async) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x6c6503, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002840)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRES64, @ANYRESDEC=r0, @ANYRES64, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x24008840) fsopen(0x0, 0x0) r4 = socket(0x2c, 0x1, 0x6dc5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(r5, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) futex(&(0x7f00000002c0)=0x2, 0x4, 0x2, 0x0, 0x0, 0xffffeffa) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x2, 0x3, 0xeeef0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x166fe000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000440)={0x0, r7, 0xf, 0x8, 0x9}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m2.706216655s ago: executing program 5 (id=2879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r5 = socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca", 0x24}], 0x1) r7 = msgget$private(0x0, 0x20) msgrcv(r7, &(0x7f00000003c0)={0x0, ""/214}, 0xde, 0x0, 0x2000) msgsnd(r7, &(0x7f0000000b80)={0x2}, 0x8, 0x800) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) write$uinput_user_dev(r9, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r9, 0x5501) 2m1.736478452s ago: executing program 5 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c0000", @ANYBLOB="0c0002800500230000000000080009001f94da87"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x200401, 0x6, 0x5, 0x5, 0xfffffffd, 0x7}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xf0106334041}]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x10}, &(0x7f0000000140)=0xc) 2m1.112176289s ago: executing program 5 (id=2890): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m0.296622419s ago: executing program 5 (id=2896): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xd8, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r4, @ANYBLOB="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"/1366], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x3, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x8001, 0x9, 0x80003fc, 0x7fffffff, 0xd2, 0x0, 0x9e}, 0x9c) socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 1m50.874471858s ago: executing program 3 (id=2938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x26, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x3000000) 1m50.615865805s ago: executing program 3 (id=2940): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa050090780100000047000000006800000011000000000000ac1414aa440c0001640101004e210000443c0001e0000001000011000000000000000000ac1414aa0000000000000000000000000000000000000000ac1e000100000000ac1414bb00000000"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x15c, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000980)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0xb8, 0xd, 0x7c, 0xff, 0x7}, 0x1f3, &(0x7f0000000680)={0x5, 0xf, 0x1f3, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x8, 0xaa20}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x2, 0x0, 0xef7b}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x6, 0xf00f, 0x8}, @generic={0xd5, 0x10, 0xa, "a6883d9a64fe9f77d63172a19ddeeb4c94b481d0d50bfb333917e951963f820fbafc5487fa0d9096e038b54d78c7ca85be5744ea6e26684d52ab6b6c978efb0bae26c4b4c3deb72986259cbdeb8ad1823e7a570bb26af3da7ae39af81b2c0b083c3ceb24b52cb4e79ffcd2f6b99bb511487455e35d09e817bb95e08a60aa9e376cb756440870145843d3b3bb71b448149e502a2e5e1591bb516508ede1a721e78a95de8f257f0716e2d04059d13e75e5d8beef144ad65ca6cb1b2decae9c7307cc1ba24da25633fe34ed184421442d9f04c4"}, @ptm_cap={0x3}, @generic={0xf7, 0x10, 0xa, "bd453a2ab4e12db5e5badedbc9fb31547127ab55a1769619f9444741ea3a6e2096533230a38ac14c94f59cff39790e5926672cd8cbc969b50dfa52ae950cd0b979ddcf0ac6113bcaa2679d9840696febacd01becea7ed3ae4cccbcff1296567853065e776f598510c9c5a7787688d47feba85550d2b3f7ebe919d9d7ffc584727a18cd41f401957efda294d0d4a1f6aece50f52aa11380cc59df39802a80c7ec0ca653a831b5eaabec2ac2e2918230571afe6adb7a4c1a5648049fcb2de959cef71b593ae5fde49ff8120b89676fb139a1ab2b1fb0a531951260f8e46a2b853207776fd9ef3414e6f104ecce74ce0410e367ba59"}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41a}}, {0x80, &(0x7f0000000900)=@string={0x80, 0x3, "7491b40a2d53c41c747ed73341ec9e8314a74bc429b6d9efe67c87179cab25f520fa75c354c12f0d7cec3b75f776f9691be48d773704a67a7c1f4b0b9c5f6b434706603588091ba1d26ecabe032e22f9e8f5157c09b27e493516575000b50968194b015a94e3044351bb7254b99bff067ba1f6afb769a46b38894e1c2375"}}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x5ea, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5080, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x13, 0x3, "fd7c400f2ffd10ac56a901205b56f4"}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) eventfd2(0xba6, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x125b, &(0x7f00000010c0)={0x0, 0xb508, 0x0, 0x6, 0x141}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000340)={0x0, 0xcc9d, 0x200, 0x7, 0x20002f7, 0x0, r5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 1m48.899854616s ago: executing program 3 (id=2948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0x2d) read$eventfd(r3, &(0x7f0000000040), 0x8) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x20}, [@nested={0x8, 0x15f, 0x0, 0x1, [@generic="a7b003fa"]}]}, 0x1c}}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000280)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) 1m48.266610264s ago: executing program 3 (id=2950): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x35, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x1, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0) r1 = socket$inet(0x2, 0x803, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x400000000000161, 0x40050) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000041", @ANYRES32=0x0, @ANYBLOB="17239009006c616e000000000c00028006000100e6c2ff59c0bfe61a000000000000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000000)="00569fa2", 0x4) r9 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2080, 0x80, 0x33}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x8, 0xe8, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x68, 0x0, 0x39, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x13, 0x6d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @loopback]}, @cipso={0x86, 0x1d, 0x2, [{0x2, 0x12, "d59707ff734a02fa85835727002e8bcf"}, {0x1, 0x5, "87784f"}]}, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x7, [{@broadcast, 0x728d}, {@remote, 0x281}]}]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x6, 0x0, 0x0, 0xc, 0x1}, @volatile={0x7}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000002c0)=""/66, 0x34, 0x42, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, r9, 0x5, '\x00', r10, r11, 0x4, 0x1, 0x5}, 0x50) write(r1, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r1, &(0x7f0000000200), 0x400000000000092, 0x72, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xc, "ca27"}]}}, 0x0}, 0x0) 1m46.524396252s ago: executing program 3 (id=2955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) close(r0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000200000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) close(r0) (async) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000200000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) 1m46.46330849s ago: executing program 3 (id=2956): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) io_setup(0x281, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xd8, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r4, @ANYBLOB="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"/1366], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x3, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x8001, 0x9, 0x80003fc, 0x7fffffff, 0xd2, 0x0, 0x9e}, 0x9c) socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 1m30.822003057s ago: executing program 36 (id=2956): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) io_setup(0x281, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1r1}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r5 = socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) r7 = msgget$private(0x0, 0x20) msgrcv(r7, &(0x7f00000003c0)={0x0, ""/214}, 0xde, 0x0, 0x2000) msgsnd(r7, &(0x7f0000000b80)={0x2}, 0x8, 0x800) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) write$uinput_user_dev(r9, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r9, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r9, 0x5501) 1m19.001833731s ago: executing program 9 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000000000ea79", 0xb}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x2, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0xff, 0xfd}, {0x3, 0x1, {0x2, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0xff, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (fail_nth: 7) 1m18.784506741s ago: executing program 9 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_CQ_RING(0x0, 0x40, 0x0, 0x100010, r3, 0x8000000) syz_io_uring_submit(r4, r7, r6, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x5, {0x2000}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x32788728937440d9, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x28d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x20, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x5, 0x7}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x404d6, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) r13 = socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff04000000000000000000000000d44ec3eecf912054b2d6e543fa480000000000060000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(r11) r15 = dup(r10) syz_ublk_setup_queues(r15, r9, &(0x7f0000000180)={0x0, 0xfffffff9, 0x0, 0x1, 0x255, 0x0, r3}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7043, 0x40000, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x400, 0x0, 0x380}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000ac68d8339a9d2bec5ffbad43c2b1ade6d4e735de3da91819ee09cb11f188bc187a2e1d19bff5fa8328d79a4d8dce5d1ddc94e193184081f8abeb079831d472c7cbd6147a60844c2216d7239e9cbedcab3be60df26196c3f56b96b5ffdfe30f1460f34286504e2f49f8827692abd85c917f42c3811f1f654eafc12263824d59c3e1f3bd5bdb59d663083c2d00000000000028008de09ef1d13e2932a5375ce1da62674fdae2add24883ba675a77ba74ce32555af806ff1f6253b2ff4d888f8566e763d408bb4930dd0763e90ac3a37732494b5d3b8b24376dffd39f4b45ae760efd64a3a7b2b7adc26e44fc4a3b5c03aae00e8b870a3544e7878316426d0f0eb0db373f246e7cf97da5dcbf7e707d33409a77e3b614fa644a089a0a5ea1fae03ad5865476392c", @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r16, @ANYBLOB="080027000200000008002600c1160000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004008}, 0x4040000) 1m15.520621393s ago: executing program 9 (id=3088): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x801a) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @sint={0x7, 0xc29a}}]}) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000080)=0x430f, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9", 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0xb, 0x95, 0xd}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 1m14.319629201s ago: executing program 9 (id=3093): r0 = socket(0x11, 0x80802, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ipvlan1\x00', @local}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) timerfd_create(0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) (async) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r6, 0x2, 0x6, @random="ec3c4156e448"}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1m13.920514117s ago: executing program 9 (id=3094): semget$private(0x0, 0x4, 0x280) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c2e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000100)=""/90) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) 59.639655379s ago: executing program 7 (id=3140): unshare(0x28000600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) prctl$PR_SET_DUMPABLE(0x34, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="0400"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x102, @loopback, 0x10003}, 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xc8, 0x33, 0x89, 0x8, 0x4c8, 0x720, 0xb651, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0xd4, 0x7, 0x0, 0x60, 0x3e, 0x70, 0x92}}, {{0x9, 0x4, 0xbc, 0x53, 0x0, 0x9b, 0x2a, 0x6b}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 58.296941394s ago: executing program 37 (id=3094): semget$private(0x0, 0x4, 0x280) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000100)=""/90) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) getxattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) 56.495628242s ago: executing program 7 (id=3151): syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0000000000000800452d0070006600000501907864010101ac1414bb030590780002000045e50002006400880029000402000000e000000294040100000044148771e000000180000001e0000002000000818913daac1e0101ac1414aa0a010102e0000002861000000003070a3607a2b59dd9cbf7000000"], 0x0) unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xa2d700ad}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xa2d700ad}]}}}]}, 0x40}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) 56.403957506s ago: executing program 7 (id=3152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r1, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x3, 0x4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200328bd7800ff00000000f5ffffff00000000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="140002006d616376746170300000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200008ee19c78ecc55a9dc3001400048010b7ff80090001006d617371000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x68}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e0418", 0xe}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 56.1744554s ago: executing program 7 (id=3153): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @md5sig={0x13, 0x12, "7af71b8f7a259a07a762754b57df04bf"}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) 55.955795629s ago: executing program 7 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 54.815227507s ago: executing program 7 (id=3157): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r4, @ANYBLOB="010028bd700000000000010000002c0508803000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500f9ff00004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675cac0400800600050003000000200004000a000009000000070000000000000000000000000000000003000000b8030980ac000080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200e000000105000300030000000600010002000000080002000a0101020500030002000000060001000200000008000200e0000001050003000200000001000080060001000a00000014000200fe8800000000000000000000000001010500030003000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a000000140002000000000000000000000000000000000005000300010000000600010002000000080002000000000005000300020000003c010080060001000a0000001400020000000000000000000000ffffe00000010500030003000000060001000200000008000200ac1e00010500030000000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200e00000020500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200640101000500030001000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000400008028000080060001000a0000001400020020010000000000000000000000000001050003000000000040000080060001000200000008000200000000000500030001000000060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200000008000200ac1e00010500030002000000a0000080060001000a00000014000200fc02000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a000000140002000000000000000000000000000000000105000300010000000600010002000000080002000a01010105000300030000001400040002004e227f000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002000c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b23324019124000200f1448a8e528a999aa0105b52a5c9c4640383354baf19b5f39af29b59422afd5524000200e7ff7701b926810da1b5902e7a364627b7e5194a545926646ae03e188b880fed2400020067145cfa4d7b699c1e0846a50afd9ba74e30480f6df0e68218cc108c2128c513060006004e2100001400020077673000"/1366], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000266000/0x2000)=nil, 0x2000, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xa4, 0x0, 0x9e}, 0x9c) socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 47.449003607s ago: executing program 0 (id=3178): socket$packet(0x11, 0x3, 0x300) (async) r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c01000013000100"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r2 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x40800) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x4, 0x34524742, 0x8, 0xc, [{0xfffffffe, 0xb}, {0x40, 0x7}, {0x800, 0x100}, {0x8, 0x1}, {0xfffffffb, 0x676e7560}, {0xc2f8, 0x5}, {0x3, 0x1}, {0x4, 0x165}], 0xe, 0x6, 0x7, 0x0, 0x3}}) (async) syz_usb_control_io$sierra_net(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x40, 0x5, 0x18, {0x18, 0x22, "44b5e16cc73db7e3e6b9260977a333fc828dd0cda02b"}}, 0x0}, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) unshare(0x20000400) (async) fcntl$setownex(r10, 0xf, &(0x7f0000000080)={0x2}) 46.286507982s ago: executing program 0 (id=3186): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000300)={&(0x7f0000000280)=[{0xbf4, 0x2, 0x1, 0xda, 0xfffffff7}, {0x5, 0x1, 0x3, 0x24a, 0xdf}], 0x2, 0x28, 0x800, 0x7}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60440a8}, 0x800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/consoles\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) sendfile(r6, r7, 0x0, 0x20000023896) 45.215797601s ago: executing program 0 (id=3189): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) fdatasync(r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x3, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "000000000000040400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000001da000009b4021ed9500"/32], 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x4d) dup2(0xffffffffffffffff, r1) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000500)=""/252, 0xfc}], 0x3, 0x9, 0xfffffffd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000084) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3e98, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0xa, "04a6aaed11476b145c4a"}}) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000140)=0x3) 44.157472005s ago: executing program 0 (id=3196): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x3a0, 0x0, &(0x7f0000000340)}) r2 = getpid() llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/43, 0x2b) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x16ba, &(0x7f0000000440)={0x0, 0xb1e1, 0x8, 0x2000003, 0x22c}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001032abd7000ffdbdf25020000000000000800000000edfad58ef24ea1fa55080c6f0b33f4feda9866845480b233abc7e14331abd030ff3c28e6a8766f5f1879060bede922f10a88b785a313d0015c2b52ee31160e721d2210cb24aa2f6a8a785d470251ba170a3627d2c45f4bb94c0528a213c098d1b3c2a97848400cdb598b2a42891d854752f4ac7e13b91174b675414b6f68db23a36663"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 43.328603348s ago: executing program 0 (id=3198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000"], 0xfc}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @md5sig={0x13, 0x12, "7af71b8f7a259a07a762754b57df04bf"}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) 43.190942948s ago: executing program 0 (id=3199): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x47ab, &(0x7f0000000040)={0x0, 0x7a24, 0xc000, 0x9, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) fsopen(&(0x7f0000000140)='qnx6\x00', 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0xa, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) 39.268489701s ago: executing program 38 (id=3157): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r4, @ANYBLOB="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"/1366], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000266000/0x2000)=nil, 0x2000, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xa4, 0x0, 0x9e}, 0x9c) socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 27.997324925s ago: executing program 39 (id=3199): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x47ab, &(0x7f0000000040)={0x0, 0x7a24, 0xc000, 0x9, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) fsopen(&(0x7f0000000140)='qnx6\x00', 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x2, 0xa, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) 25.107157675s ago: executing program 8 (id=3257): r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x4ac00) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x2, &(0x7f0000001840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000380)="5c481525091d07162f41181ff715f3c14ca1448dd1f567b66bff236a3a83cb8fa7a75155f41b39042e0866bc0b375075a0337c03fb600428239f72c4b727721a624ab1ec7aeb96b2aca5505948cd18741bd01e2ea4176e2eb67c9ae81b6b81964fe9ec920eb0fa51bce5", 0x6a, 0x9, 0x0, 0x2}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0xf0, r0, &(0x7f0000000800)="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", 0x1000, 0x5, 0x0, 0x2}]) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x8, 0x7, 0x1, 0x0, 0x9, 0x3, 0x82, 0x9, 0x0, 0x8, 0x2, 0x7e121eb9, 0x2, 0xfff, 0x10, 0x10, {0x10, 0xe}, 0x66}}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha512-generic\x00'}}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x1}}}}]}, 0x40}}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000008000a40000000042c000000050a05000000000000000000050000060c0002400000000000000001090001"], 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r7, 0x29, 0xcf, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0xc08c, 0x1c080, 0x9, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x200feff}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 23.500444629s ago: executing program 8 (id=3262): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x1, 0x1, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xf1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x38, 0x4}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0x2b, 0xb7, 0xff, 0xff}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "bd1589b8e39dc29d5d9556616a9b2a59"}]}, 0x7, [{0xf4, &(0x7f00000003c0)=@string={0xf4, 0x3, "ac234b96680ae64d3987ee98724624562653ff610b361f414d2fe865ee7243ef7347216ae9b0148e2fa0d7c181e0f08afc44562420f2d10cc0f4b75d70a1e40becebc90c48148dc20f2f0d777fc8f0f935980097ef4ea7fe4e427d2a9ed7e1c37fda7c191c7b57bfc4f66aa7faa24502d5a4d447d1d5cc87f341ff8d883528dd0271337910cae4f76b9a98e24066555c40129fc35adb15d074413667ec93562ee11ddfcc839006f51d4739d3e353c8575051b24de315ceb6f6bcb7fea6edf03cf4f88782204eda3e3cbcfdc6e69e695a9e8a51d14c1172cd657a3b57856cc649223f29f4e09a5ff30af1295b262278130219"}}, {0x58, &(0x7f00000004c0)=@string={0x58, 0x3, "a33de0426744042133d85305104b02ae9267a90821f963cb2fbc8104925055e27ca8820af4ee477aabfef53a8ab2384c2b827b845892860bc6dbf16354925e333fda3bf66838b8585dcdf290e8fe4e0b1b028401e5ed"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c09}}, {0xea, &(0x7f0000000640)=@string={0xea, 0x3, "61d3002a252187a71c6de556067d16c0a56ad8c7a747bf80616dd6a7252166d4777d522981316503f6ea68db288ebb699d972a27071380d5de9a3ebd5130fc940b3e523482dfc872808785cecf9bde720c307efa326bf4209029130282868e1909f34869e5f67d9de7e533a3b2a87fc25045b65e8ada74eb5e5e92164f4c0d92a754d15fcea4f4540931a2a56638da2c44643b30aa422c5202eb424ff2a3f1d38db891a90e9c2d0e68b6fa1d3d8449bca34c953790a92fdc4d5b294b8694d790d9ed8061d7f07c093df9226b85840c047f6d42406fddaf4d879fb0e6f8497297517f211c551afa2a"}}]}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) (async) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x20, 0x3, 0x57, 0xfffffff7, 0x18, "bb73e3489ae37f615b5e4fa21572c3beceb48f", 0xda, 0x1}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000300)={0x14, &(0x7f0000000180)={0x40, 0x8, 0xfa, {0xfa, 0x8, "d49371fae072883a7f0f438dba97c0929d1d30c1adaaaebe0ad1cdfec7acd14f41fa703975cdc40ffd75f9ae39e722aa1cfaab4534403951f77406cb89f5ab74c9cd251a56cadf6fddc362940168b8fe90159d1e2f4a451d4a8451beb963cef6a4977325e057ea2507304367c541800338c617c54fc4fdb36eb4f5823ede4134493e535115bb564ae02766e7c082f12b28d593b505749fa565ba1a933752237329572e9a09a0309ede26db046a1042059a131659ec356fa6af51d6eb39dbee6373dbb155c0381610df2578ea745fe334ce5f5f2c309a21c6d9cad31df2f148ab7a7ba4624840f72c9b776eb59fa01987dc8f6bb32632cb53"}}, &(0x7f0000000280)={0x0, 0x3, 0x71, @string={0x71, 0x3, "aa44bf05567b486fccea570afea62cb58eb751c46c82727aa76571122e264178503b2c2c1b6cef3c0dfb56a854b54624123b6470e67a05ea6c7c957f6834f888702c34d99c68881323d8ddacb3a0f8ffab909dd6ec8f69f702c72526504e92666bb36cfac76304ec10f07022841151"}}}, &(0x7f0000000d00)={0x1c, &(0x7f0000000340)={0x40, 0xe, 0x75, "da07741d288cadef1ac7789f400ded56dac4007c6d9baa26cc6f914d8a1b4e1dd774ad5b471146cfc5243c109c05ee0cf82c0ef6d008212249f73159678bc1acb41cdea9b08110704a365b050663eba3f15a6d63df9c89bb51fdbe0c534556d02278a25615bb00b38293a101d730a3520a26147280"}, &(0x7f0000000880)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000cc0)={0x21, 0x0, 0x4, "1b2b20c9"}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000031c0)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0xe000, {}, 0x0, 0x1}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.983382941s ago: executing program 8 (id=3264): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x200) (async) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4ac]}, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0xe8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x559000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x400000008000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_sctp(0x2, 0x915f661df7859e6b, 0x84) listen(r7, 0x9) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) recvfrom$inet(r7, 0x0, 0x0, 0x2, 0x0, 0x0) (async) recvfrom$inet(r7, 0x0, 0x0, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a748f75737465643a303030303030303030303030304e3420"], 0x32, 0xfffffffffffffff9) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a748f75737465643a303030303030303030303030304e3420"], 0x32, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000f, 0x2010, r1, 0x3000) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) 21.303454239s ago: executing program 8 (id=3269): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') r1 = socket$inet(0x2, 0x1, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, r2, {0x7, 0x4, 0xff, 0x5b0e}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x500}]}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) listen(r1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r11 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000140), 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r14}, 0x8) read$FUSE(r0, &(0x7f0000005dc0)={0x2020}, 0x2020) 19.364657821s ago: executing program 8 (id=3274): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/82, 0x52) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d09cc77e6000000441a69f2c53e292fe01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb229e8dbc772a8d19f87373ef179fce7eb6c1f6184a61789180d45f40c1372f09b84427b367b50c6"}, 0xe2) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x1}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) getdents64(r1, &(0x7f0000000180)=""/82, 0x52) (async) getdents64(r1, 0xfffffffffffffffe, 0x29) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d09cc77e6000000441a69f2c53e292fe01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb229e8dbc772a8d19f87373ef179fce7eb6c1f6184a61789180d45f40c1372f09b84427b367b50c6"}, 0xe2) (async) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x1}) (async) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) (async) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) (async) 19.215482369s ago: executing program 8 (id=3275): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062617461647600001400028010000100424101000000000000000000192265024393bb46d5248fbe5e569f1467dabe0d7f6a274e6c4c12d835d9c386f4cbde44599bf9dbefed0bb45e6b6edeb274bc01d9ffb2d0982aeca9dfe03f0e"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000004000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x80) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000002c0)={0x8, 0xb36}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10001, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(0x0, 0x42b42, 0x149) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r4) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30a5, 0x4000, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10001, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000003400129109000100626f6e640000000024000280080003007419000008000880ffffffff08000400000000000800090002000000"], 0x54}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r11 = fcntl$dupfd(r9, 0x406, r3) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x8008551d, &(0x7f0000000980)=ANY=[]) dup(r9) r12 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010102580fb3405a590100aa800102035a7f7cc20001803c4009ff03000000cb894f5cb4a4a814e748fca00b045c59c6e5adfc4f50af69f6c5d0e7dafb8193d4c1c9907a42fea46deed9ef08463d690225fc7303e1620000000f0000000000000000000000003517f9f3c5f57b7d05d97ebc9d0a00"/128], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3c, &(0x7f0000000700)=ANY=[@ANYBLOB="3c03a1000061b83bd250053c477a81d5a7317709ffae5ade28319081ba251db2b339ed2fdb5ec131b2b7d4f30f7f195b1ff61a2ba8f632e92a01dae13c63e5ca9073a86520f1b4daaaa3132afef14547379f962c46259c4035d9d7c42229d1b4cee4091bfa7a7cdbbf"]}]}) syz_usb_control_io$uac1(r12, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, 0x0) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000003ac0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0xfffffe32}}}, 0x0) syz_usb_control_io$rtl8150(r12, 0x0, 0x0) 14.755445936s ago: executing program 1 (id=3300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000002402609333340000000000129022400010000100009040000010301000009210000000122010009058103941eafc21d41e0e382f86692dc75292804b72838aa3ce6437ef3b1d6e19737c0e4cc60414895ea2cf9b84c2bae30fde5081366952edd723e77f4e0185926c8ca07b8ff9a789352ee26884428db5b2a41075585b7d836"], 0x0) syz_usb_disconnect(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000240)=0x9, 0x4) sendto$inet(r1, &(0x7f0000000480)="ec5c", 0x2, 0x48084, &(0x7f0000000540)={0x2, 0x4e20, @remote}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$notify(r4, 0x402, 0x31) 11.709816294s ago: executing program 1 (id=3310): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x80) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3, 0x2e, "ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e72a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_io_uring_setup(0xf02, &(0x7f0000000300)={0x0, 0x5962, 0x10000, 0x0, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r3, 0x9548c000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x80) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x3, 0x2e, "ba0d1f976a6c3b99533131b4d4f821ba761a124f70b30a342872a5fd0a64d7c5327db164e67efdfd8ad9ad5e72a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_io_uring_setup(0xf02, &(0x7f0000000300)={0x0, 0x5962, 0x10000, 0x0, 0x54}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r3, 0x9548c000) (async) 9.491405916s ago: executing program 1 (id=3316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001840), 0x401, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffefdfbffffff6, 0x2008) 9.175034187s ago: executing program 1 (id=3317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x0, @dev}}) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0xe}, {0x7, 0xd}, {0x5, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20008004) (async) listen(r7, 0x8) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x5, @remote, 0xd}, 0x1c) (async) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) (async) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={&(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) accept$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) 9.059252751s ago: executing program 1 (id=3318): gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="0b52b919bcd91c4dee2df48fb793e9", &(0x7f0000000900)="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"}}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c80)=@newqdisc={0x368, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x338, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xe2, 0x3, 0x401, 0x14, 0xc, 0x1e, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x7ff, 0xffffffff, 0x2, 0x12, 0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "e142c61a9a6edb3e4c4c7c8e6a6a6d41fa18ca52b7bd1c5a492079cfa14370b42e7535781605c3cee64f1742535d8b0f365e7e130f5da0100e8b47b76b3f90fe1db14735d8a52091166847bc313e07f91ed483fd56f84dea60a1bec6ac13f5133191a3bab77393bc6f77eddd114deea9e825bb4b77663a39b16507330dcfe2adbdfd06f8b3f92995734e3891c3c0f01dc500c47eefb9a2b9654ddfbcba00338fb44bad09a64f788332a96f3ced58d7bcc989b64023f308bdc8528b22aa1905d398f0dfbb135064e75014494b2a35d383349796ecff43d13ffadbd61606a074b40013b09a217f2fbeb89971cc8b5f76f4a5993748fe80fd9d7243d9ca9e797516"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x20000044}, 0x4048800) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) mlockall(0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], &(0x7f0000000040), 0x27, 0x0, 0x0, 0x8, 0x2e5debe220577a02, @value=r2}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff}}) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) sendto(r8, 0x0, 0x0, 0x4014, 0x0, 0x0) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], &(0x7f0000000400)='syzkaller\x00', 0x4, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', r5, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r10, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) 9.053934475s ago: executing program 1 (id=3319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r3 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000300)="4a00e6e3f1d3", 0x0, 0xfffffffc, 0x0, 0x2, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000081e0440304000010203010902700003010500090904000000010100000a240106001a000201020924030302040105db0724050500bb02"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2900}}, 0x0, 0x9, 0x80003fc, 0x0, 0x42, 0x2, 0x9e}, 0x9c) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @loopback, 0x3}, 0x1c) 4.347824021s ago: executing program 4 (id=3335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="020429bd7000fbdb00"], 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x4040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_uring_setup(0x34fa, &(0x7f0000000100)={0x0, 0x8b83, 0x8000, 0x0, 0x359}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.332227911s ago: executing program 4 (id=3336): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000409000000cf5affffffffffff0600000000000000020000000000000001000000000000000000000000000000000000000000000000000000000000000100000008000000070000000000000009000000000000005fcc0000000000000000008000"/224]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) io_setup(0x8, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000) io_submit(0x0, 0x0, &(0x7f0000004540)) r3 = gettid() r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0xe2165a6116e4aaf6, {0x42, 0x4, 0x4}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x10000011, 0x800000000004, @tid=r3}, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, &(0x7f0000000100)={0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x76, 0x0, 0x0, 0x1000, 0x4, r3, 0x0, 0xd}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, 0x0}) memfd_secret(0x80000) close(r1) ioctl$BLKZEROOUT(r5, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0xf, 0x1fb, 0x10000c38}) readv(r6, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0xa4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x800}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4010) readv(r6, &(0x7f0000002180)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd06e9000) 4.271351751s ago: executing program 2 (id=3337): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x9721, 0x1, 0x1, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @multicast}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r8, 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) r14 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@deltaction={0x224, 0x31, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8d2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6d53}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaa6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x20004014) 4.103350486s ago: executing program 40 (id=3275): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) keyctl$read(0xb, r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062617461647600001400028010000100424101000000000000000000192265024393bb46d5248fbe5e569f1467dabe0d7f6a274e6c4c12d835d9c386f4cbde44599bf9dbefed0bb45e6b6edeb274bc01d9ffb2d0982aeca9dfe03f0e"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000004000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x80) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000002c0)={0x8, 0xb36}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x10001, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) open(0x0, 0x42b42, 0x149) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r4) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30a5, 0x4000, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10001, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000003400129109000100626f6e640000000024000280080003007419000008000880ffffffff08000400000000000800090002000000"], 0x54}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) r11 = fcntl$dupfd(r9, 0x406, r3) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x8008551d, &(0x7f0000000980)=ANY=[]) dup(r9) r12 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010102580fb3405a590100aa800102035a7f7cc20001803c4009ff03000000cb894f5cb4a4a814e748fca00b045c59c6e5adfc4f50af69f6c5d0e7dafb8193d4c1c9907a42fea46deed9ef08463d690225fc7303e1620000000f0000000000000000000000003517f9f3c5f57b7d05d97ebc9d0a00"/128], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3c, &(0x7f0000000700)=ANY=[@ANYBLOB="3c03a1000061b83bd250053c477a81d5a7317709ffae5ade28319081ba251db2b339ed2fdb5ec131b2b7d4f30f7f195b1ff61a2ba8f632e92a01dae13c63e5ca9073a86520f1b4daaaa3132afef14547379f962c46259c4035d9d7c42229d1b4cee4091bfa7a7cdbbf"]}]}) syz_usb_control_io$uac1(r12, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, 0x0) syz_usb_control_io$cdc_ncm(r12, &(0x7f0000003ac0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0xfffffe32}}}, 0x0) syz_usb_control_io$rtl8150(r12, 0x0, 0x0) 4.102977642s ago: executing program 4 (id=3339): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0xc048aec8, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x6000) madvise(&(0x7f00009a6000/0xf000)=nil, 0xf000, 0xd) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) pipe(&(0x7f00000000c0)) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 3.676336929s ago: executing program 6 (id=3340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001060144d4bc2554d9c7391a7a0300000000000000000a00"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x80000) (async) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000140)="ad4bd966efb2d7ad25e5a9eba2c41db4590caee87f0325b21a3f93c68aeb595d503207385520181de440b0fb0254833cd403fc87398fd88fcbf1ed97959d768ccea4274e7c21853218f181dbeb55e5bee543f5cf8e0f4033", 0x58) mlockall(0x2) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, r2, 0x80000000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/config\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x80044100, 0x0) 3.580641389s ago: executing program 6 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff71a4f0ff000000003e040000000000002d000500000000005504000001ed0a001700000017ffffff9f040000000000007b0a00fe000000006e0400ffffff3f00c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.47467945s ago: executing program 6 (id=3342): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010ac056502000000000001090224000100005008090400fe0103000200096181000101222400090581034000030100"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r3, &(0x7f0000001080)) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) r4 = socket$netlink(0x10, 0x3, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) syz_usb_connect(0x3, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x3f, 0xb1, 0x40, 0xab4, 0x11, 0xcafb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x4f, 0xd, 0x2, 0xf3, 0x1d, 0x63, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x7, 0x1}}, {{0x9, 0x5, 0x82, 0x12, 0x3ff, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000100)='\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \"*\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.095376774s ago: executing program 4 (id=3343): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa1}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r3 = syz_open_dev$video(&(0x7f00000004c0), 0x7, 0x80c00) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f0020010000000000000000000000000001ff020000000000000000000000000001000022eb"], 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x16, 0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x100007, 0x81, 0x2, 0xb, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x150}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x23, 0x1, 0x3, 0x1, 0x2, 0x34, {0x9, 0x21, 0x4ea2, 0xc, 0x1, {0x22, 0xbe0}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x15, 0x80}}}}}]}}]}}, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)}, 0x10100) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_pauseparam={0x13, 0x8, 0x101, 0x17}}) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 2.019444101s ago: executing program 2 (id=3344): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) 1.440765315s ago: executing program 2 (id=3345): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @rand_addr=0x800, @rand_addr=0x64010101}}}}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400000000007f", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40408c0) 1.247297401s ago: executing program 4 (id=3346): futex(0x0, 0x204, 0x2, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x478, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x803, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xc2, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0xfffffffe, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0xffffffff, 0xd87, 0x10, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0x7, 0x200007, 0x10001, 0x5, 0x2, 0x6, 0xf, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x807, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0x0, 0x8, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffb, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x3, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x84bc, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x2007, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x1fff, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000500)={0x8b, 0x81, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.213798448s ago: executing program 2 (id=3347): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x131, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 1.120162634s ago: executing program 2 (id=3348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) 1.003658741s ago: executing program 2 (id=3349): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x10, 0xff}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="900000000102010400000000000000000a000007040001803c0003800c00188005000100110000002c00018014000300fe800000000000000000000000000029140004000000000000000000000000000000fa003c0002802c00018014000300fe80000000000000000000000000003b1400040000000000000000000000ffffe00000020c0002"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x20, 0xc, 0x28, {0x28, 0x23, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 987.613743ms ago: executing program 4 (id=3350): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/31], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015005a"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000c700000000000000000000000000000000000200000000000000000000000500000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000000000000000bdae209b058d2652390052b58d948ce01c7e3efb65440d04cb5c315bdfe992a406f924687862a652ad8aabe69c783607a1a5361eec7a820e3f"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x8000000000005, 0x4002) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_emit_vhci(0x0, 0xf) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) open$dir(0x0, 0xc4000, 0x20) 374.230322ms ago: executing program 6 (id=3351): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 191.577181ms ago: executing program 6 (id=3352): r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/101, 0x65}, {0x0}], 0x2, 0x1, 0x72) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}]}, 0x38}}, 0x440b0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x5, 0x200, {{0x5, 0x4, 0x1, 0x21, 0x14, 0x64, 0x0, 0xfb, 0x4, 0x0, @multicast1, @empty}}}}) 0s ago: executing program 6 (id=3353): r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x98}}, 0x0) kernel console output (not intermixed with test programs): d8 64 89 01 48 [ 821.789197][T16511] RSP: 002b:00007f0f23d44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.789211][T16511] RAX: ffffffffffffffda RBX: 00007f0f23025fa0 RCX: 00007f0f22d9de59 [ 821.789219][T16511] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 821.789226][T16511] RBP: 00007f0f23d44090 R08: 0000000000000000 R09: 0000000000000000 [ 821.789232][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.789239][T16511] R13: 00007f0f23026038 R14: 00007f0f23025fa0 R15: 00007f0f2314fa48 [ 821.789255][T16511] [ 821.796661][T16232] usb 9-1: Using ep0 maxpacket: 32 [ 822.065576][T16232] usb 9-1: no configurations [ 822.078317][T11961] Bluetooth: hci7: command tx timeout [ 822.091006][T16232] usb 9-1: can't read configurations, error -22 [ 822.098302][T16232] usb usb9-port1: unable to enumerate USB device [ 822.793770][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.929452][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3029'. [ 823.692115][T16232] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 823.862272][T16232] usb 9-1: Using ep0 maxpacket: 16 [ 823.900223][T16232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.912990][ T29] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 823.930242][T16232] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 823.931839][T16572] fuse: Bad value for 'fd' [ 824.008722][T16232] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 824.099044][T16232] usb 9-1: config 1 interface 1 has no altsetting 0 [ 824.152148][T11961] Bluetooth: hci7: command tx timeout [ 824.171359][T16232] usb 9-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 824.206402][T16232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.235397][T16232] usb 9-1: Product: syz [ 824.240022][ T5736] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-miglia-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 824.269784][T16232] usb 9-1: Manufacturer: syz [ 824.290713][T16232] usb 9-1: SerialNumber: syz [ 824.365414][ T5736] dvb-usb: found a 'WideView WT-220U PenType Receiver (Miglia)' in cold state, will try to load a firmware [ 824.445213][ T5736] usb 7-1: Direct firmware load for dvb-usb-wt220u-miglia-01.fw failed with error -2 [ 824.475972][ T5736] usb 7-1: Falling back to sysfs fallback for: dvb-usb-wt220u-miglia-01.fw [ 824.560601][T16232] usb 9-1: selecting invalid altsetting 0 [ 824.633783][T16585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.645406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.735085][T16588] macvlan0: mtu less than device minimum [ 824.745064][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.786429][T16589] syz_tun: entered allmulticast mode [ 824.786525][T16232] usb 9-1: USB disconnect, device number 10 [ 824.884439][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.985896][T16585] dvmrp8: entered allmulticast mode [ 825.035770][T16584] syz_tun: left allmulticast mode [ 825.119406][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.178183][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3042'. [ 825.221866][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3042'. [ 825.250873][T16602] netlink: 'syz.9.3042': attribute type 18 has an invalid length. [ 825.295315][T16605] netlink: 'syz.8.3043': attribute type 1 has an invalid length. [ 825.300018][T16604] netlink: 'syz.8.3043': attribute type 1 has an invalid length. [ 825.369368][T16610] loop5: detected capacity change from 0 to 7 [ 825.378785][T16610] Dev loop5: unable to read RDB block 7 [ 825.385336][T16610] loop5: AHDI p1 p3 [ 825.391603][T16610] loop5: partition table partially beyond EOD, truncated [ 825.400411][T16610] loop5: p3 size 8998240 extends beyond EOD, truncated [ 825.482744][T16232] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 825.515608][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 825.622675][T16232] usb 2-1: device descriptor read/64, error -71 [ 825.872240][T16232] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 825.912531][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.022161][T16232] usb 2-1: device descriptor read/64, error -71 [ 826.062231][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 826.142398][T16232] usb usb2-port1: attempt power cycle [ 826.202711][ T29] usb 9-1: device descriptor read/64, error -71 [ 826.232689][T11961] Bluetooth: hci7: command tx timeout [ 826.452156][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 826.482142][T16232] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 826.523058][T16232] usb 2-1: device descriptor read/8, error -71 [ 826.582187][ T29] usb 9-1: device descriptor read/64, error -71 [ 826.602562][ T5624] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 826.633575][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.702513][ T29] usb usb9-port1: attempt power cycle [ 826.742219][ T5624] usb 10-1: device descriptor read/64, error -71 [ 826.782961][T16232] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 826.802902][T16232] usb 2-1: device descriptor read/8, error -71 [ 826.912647][T16232] usb usb2-port1: unable to enumerate USB device [ 826.955678][T16232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.992183][ T5624] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 827.042478][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 827.063428][ T29] usb 9-1: device descriptor read/8, error -71 [ 827.122238][ T5624] usb 10-1: device descriptor read/64, error -71 [ 827.243225][ T5624] usb usb10-port1: attempt power cycle [ 827.276221][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.302257][ T29] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 827.322923][ T29] usb 9-1: device descriptor read/8, error -71 [ 827.434790][ T29] usb usb9-port1: unable to enumerate USB device [ 827.582273][ T5624] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 827.604117][ T5624] usb 10-1: device descriptor read/8, error -71 [ 827.837009][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.845816][ T5624] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 827.873123][ T5624] usb 10-1: device descriptor read/8, error -71 [ 827.983260][ T5624] usb usb10-port1: unable to enumerate USB device [ 827.994841][T16232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.312446][T11961] Bluetooth: hci7: command tx timeout [ 828.439737][T16630] capability: warning: `syz.1.3054' uses 32-bit capabilities (legacy support in use) [ 828.644630][T16637] syz.1.3056 (16637): drop_caches: 2 [ 828.658697][T16639] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3057'. [ 828.724677][T16637] input: syz1 as /devices/virtual/input/input94 [ 828.988116][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3058'. [ 829.032429][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.475957][T16647] netlink: 'syz.9.3060': attribute type 1 has an invalid length. [ 829.499212][T16647] vlan2: entered allmulticast mode [ 829.516946][T16647] veth0_to_team: entered allmulticast mode [ 829.866388][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3065'. [ 829.914089][T16662] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 830.007148][T16666] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3066'. [ 830.037693][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3066'. [ 830.038278][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3066'. [ 830.080743][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.092699][T16234] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 830.102101][T16667] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3066'. [ 830.124501][T16666] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3066'. [ 830.285272][T16234] usb 2-1: Using ep0 maxpacket: 8 [ 830.310252][T16234] usb 2-1: config 0 has no interfaces? [ 830.336194][T16234] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 830.361173][T16234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.389054][T16234] usb 2-1: config 0 descriptor?? [ 830.525150][T16681] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3069'. [ 830.747849][T16234] usb 2-1: USB disconnect, device number 84 [ 830.872442][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.918791][T16694] netlink: 'syz.8.3072': attribute type 1 has an invalid length. [ 830.997146][T16692] input: syz1 as /devices/virtual/input/input95 [ 831.066348][T16697] bond1: (slave bridge1): making interface the new active one [ 831.083652][T16697] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 831.113948][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.163765][T16694] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 831.217228][T16691] syz.9.3071 (16691): drop_caches: 2 [ 831.256144][T16697] macvlan2: entered promiscuous mode [ 831.300048][T16697] macvlan2: entered allmulticast mode [ 831.328047][T16697] bond1: entered promiscuous mode [ 831.358351][T16697] bridge1: entered promiscuous mode [ 831.397216][T16697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 831.430565][T16697] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 831.486722][T16697] bond1: left promiscuous mode [ 831.514674][T16697] bridge1: left promiscuous mode [ 831.559989][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3077'. [ 832.033306][ T5760] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 832.125719][T16712] netlink: 'syz.1.3079': attribute type 13 has an invalid length. [ 832.152479][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.193429][ T5760] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.223994][ T5760] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 832.240226][ T5760] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.251877][ T5760] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 832.266565][ T5760] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 832.284854][ T5760] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 832.298995][ T5760] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 832.307987][ T5760] usb 10-1: Product: syz [ 832.318192][ T5760] usb 10-1: Manufacturer: syz [ 832.338843][ T5760] cdc_wdm 10-1:1.0: skipping garbage [ 832.347346][ T5760] cdc_wdm 10-1:1.0: skipping garbage [ 832.362964][ T5760] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 832.371218][ T5760] cdc_wdm 10-1:1.0: Unknown control protocol [ 832.682180][ T5624] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 832.842548][ T5359] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 832.850694][ T5624] usb 2-1: Using ep0 maxpacket: 8 [ 832.870837][ T5624] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 832.892819][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 832.911530][ T5624] usb 2-1: Product: syz [ 832.921558][ T5624] usb 2-1: Manufacturer: syz [ 832.933606][ T5624] usb 2-1: SerialNumber: syz [ 832.950991][ T5624] usb 2-1: config 0 descriptor?? [ 832.968972][ T5624] gspca_main: sq905-2.14.0 probing 2770:9120 [ 833.014378][ T5359] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.044083][ T5359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 833.070285][ T5359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.096451][ T5359] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 833.125284][ T5359] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 833.156464][ T5359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.178931][ T5359] usb 9-1: config 0 descriptor?? [ 833.193961][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.210703][T16725] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22 [ 833.367026][ T5624] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 833.386192][ T5624] sq905 2-1:0.0: probe with driver sq905 failed with error -32 [ 833.514596][T16234] usb 2-1: USB disconnect, device number 85 [ 833.634414][ T5359] plantronics 0003:047F:FFFF.0043: reserved main item tag 0xd [ 833.661730][ T5359] hid_parser_main: 29 callbacks suppressed [ 833.661755][ T5359] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 833.733223][ T5359] plantronics 0003:047F:FFFF.0043: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 833.817390][ T30] audit: type=1326 audit(1783249086.155:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.7.3085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa88ad9de59 code=0x0 [ 833.847454][ T5359] usb 9-1: USB disconnect, device number 15 [ 833.869056][ T30] audit: type=1326 audit(1783249086.205:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16735 comm="syz.7.3085" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa88ad9de59 code=0x0 [ 833.913993][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.206136][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.234301][T16734] fido_id[16734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 834.250649][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.261847][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.422182][T16232] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 834.563836][T16232] usb 2-1: device descriptor read/64, error -71 [ 834.738104][T16742] syz.6.3087 (16742): drop_caches: 2 [ 834.812245][T16232] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 834.864287][T16742] input: syz1 as /devices/virtual/input/input97 [ 834.899454][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 834.904110][ T5359] usb 10-1: USB disconnect, device number 6 [ 834.906516][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 834.918275][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 835.002128][T16232] usb 2-1: device descriptor read/64, error -71 [ 835.124031][T16232] usb usb2-port1: attempt power cycle [ 835.272383][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.482124][T16232] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 835.526919][T16232] usb 2-1: device descriptor read/8, error -71 [ 835.732552][ T5359] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 835.783817][T16232] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 835.822894][T16232] usb 2-1: device descriptor read/8, error -71 [ 835.943222][T16232] usb usb2-port1: unable to enumerate USB device [ 836.304895][T16760] pimreg: entered allmulticast mode [ 836.313632][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.378616][T16760] pimreg: left allmulticast mode [ 836.784592][T16768] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 836.784592][T16768] program syz.7.3092 not setting count and/or reply_len properly [ 836.875990][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.954858][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.034043][T16772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.057113][T16772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.068787][T16772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.393964][T10675] cgroup: fork rejected by pids controller in /syz1 [ 837.735410][ T8284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.747599][ T8284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.949680][ T8284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.962571][ T8284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.242559][ T8284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.265702][ T8284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.317872][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 838.337007][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 838.346120][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 838.365990][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 838.379065][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 838.392343][ T5760] net_ratelimit: 1 callbacks suppressed [ 838.392362][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.445536][ T8284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.459230][ T8284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.812333][ T30] audit: type=1326 audit(1783249091.145:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 838.878613][ T30] audit: type=1326 audit(1783249091.145:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 838.884204][ T8284] lo: left allmulticast mode [ 838.925638][ T30] audit: type=1326 audit(1783249091.145:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 838.966838][ T30] audit: type=1326 audit(1783249091.145:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.015925][ T30] audit: type=1326 audit(1783249091.175:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.046437][ T30] audit: type=1326 audit(1783249091.175:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.072856][ T30] audit: type=1326 audit(1783249091.175:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.097950][ T30] audit: type=1326 audit(1783249091.175:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.146763][ T30] audit: type=1326 audit(1783249091.175:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.172251][ T30] audit: type=1326 audit(1783249091.175:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.197781][ T30] audit: type=1326 audit(1783249091.185:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.8.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 839.257222][T16790] syz.8.3101 (16790): drop_caches: 2 [ 839.336627][T16789] input: syz1 as /devices/virtual/input/input98 [ 839.433965][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.481439][ T8284] bond0 (unregistering): Released all slaves [ 839.520023][ T8284] bond1 (unregistering): Released all slaves [ 839.658451][ T8284] tipc: Disabling bearer [ 839.671807][ T8284] tipc: Left network mode [ 839.983755][T16780] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.022608][T16231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.042773][T16780] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.062393][T16780] bridge_slave_0: entered allmulticast mode [ 840.110816][T16780] bridge_slave_0: entered promiscuous mode [ 840.131494][T16811] program syz.8.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 840.179158][T16780] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.197335][T16780] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.242673][T16780] bridge_slave_1: entered allmulticast mode [ 840.250598][T16780] bridge_slave_1: entered promiscuous mode [ 840.439268][T16780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.467075][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3107'. [ 840.479877][T16780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.492087][T16232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.500668][ T5628] Bluetooth: hci0: command tx timeout [ 840.906838][T16780] team0: Port device team_slave_0 added [ 840.925422][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 840.939452][T16780] team0: Port device team_slave_1 added [ 840.961301][ T8284] hsr_slave_0: left promiscuous mode [ 840.976593][ T8284] hsr_slave_1: left promiscuous mode [ 841.003469][ T8284] veth1_macvtap: left promiscuous mode [ 841.009253][ T8284] veth0_macvtap: left promiscuous mode [ 841.017392][ T8284] veth1_vlan: left promiscuous mode [ 841.029436][ T8284] veth0_vlan: left promiscuous mode [ 841.527469][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.569147][T16780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.576209][T16780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.602393][T16780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.615163][T16780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.622234][T16780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.648700][T16780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.762996][T16780] hsr_slave_0: entered promiscuous mode [ 841.769878][T16780] hsr_slave_1: entered promiscuous mode [ 841.778153][T16780] debugfs: 'hsr0' already exists in 'hsr' [ 841.789048][T16780] Cannot create hsr debugfs directory [ 842.069457][ T8284] IPVS: stop unused estimator thread 0... [ 842.447789][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 842.553995][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.566280][ T5628] Bluetooth: hci0: command tx timeout [ 842.643155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.781742][T16780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 842.797040][T16780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.813657][T16780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 842.826794][T16780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.835577][T16780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 842.846979][T16780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.855856][T16780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 842.867931][T16780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.011199][T16780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.043525][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.055001][T16780] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.071112][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.078642][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.103260][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.110951][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.128050][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 843.214350][T16780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.272835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.341392][T16780] veth0_vlan: entered promiscuous mode [ 843.374950][T16780] veth1_vlan: entered promiscuous mode [ 843.457954][T16780] veth0_macvtap: entered promiscuous mode [ 843.490092][T16780] veth1_macvtap: entered promiscuous mode [ 843.527121][T16780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.569056][T16780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.594080][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.631292][T13737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.659770][T13737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.679579][T13737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.729833][T14825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.862595][T13737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.888263][T13737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.921720][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.933220][ T5760] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 843.963668][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.982462][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.018199][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 844.107997][ T5760] usb 9-1: Using ep0 maxpacket: 16 [ 844.136258][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.174216][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.189675][ T5760] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.203570][ T5760] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 844.214629][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.240402][ T5760] usb 9-1: config 0 descriptor?? [ 844.382229][ T29] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 844.456871][T16888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.465921][T16888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.542201][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 844.556284][ T29] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 844.565476][ T29] usb 2-1: config 179 has no interface number 0 [ 844.571818][ T29] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 844.583412][ T29] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 844.596339][ T29] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.608148][ T29] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 844.619716][ T29] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 844.633054][ T5628] Bluetooth: hci0: command tx timeout [ 844.635763][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.645922][ T29] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 844.658894][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.676349][T16893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 844.692157][ T5760] microsoft 0003:045E:07DA.0044: ignoring exceeding usage max [ 844.741367][ T5760] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0044/input/input99 [ 844.818557][ T5760] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 844.896542][T16888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.909726][T16888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.920419][ T5760] usb 9-1: USB disconnect, device number 17 [ 844.956448][T16903] fido_id[16903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 845.077900][ T5681] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input100 [ 845.147289][ T5624] usb 2-1: USB disconnect, device number 90 [ 845.147353][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 845.147400][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 845.672878][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.072460][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.160489][T16925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3119'. [ 846.473362][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.712432][ T5628] Bluetooth: hci0: command tx timeout [ 846.719968][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.318346][T16942] loop5: detected capacity change from 0 to 7 [ 847.389119][T16942] Dev loop5: unable to read RDB block 7 [ 847.426634][T16942] loop5: AHDI p1 p3 [ 847.456855][T16942] loop5: partition table partially beyond EOD, truncated [ 847.535364][T16942] loop5: p3 size 8998240 extends beyond EOD, truncated [ 847.630716][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 847.753865][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.042305][ T5759] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 848.235615][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.257111][ T5759] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.282259][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.295917][ T5759] usb 2-1: Product: syz [ 848.303822][ T5759] usb 2-1: Manufacturer: syz [ 848.314225][ T5759] usb 2-1: SerialNumber: syz [ 848.365200][T16960] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3131'. [ 848.611284][T16963] syz.8.3132 (16963): drop_caches: 2 [ 848.755347][T16962] input: syz1 as /devices/virtual/input/input101 [ 848.792861][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.122374][ T29] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 849.283972][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.296301][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.307082][ T29] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 849.316628][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.329237][ T29] usb 9-1: config 0 descriptor?? [ 849.512481][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.832653][T16348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.941288][ T29] usbhid 9-1:0.0: can't add hid device: -32 [ 849.948170][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 850.306741][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3133'. [ 850.361904][T16988] loop5: detected capacity change from 0 to 7 [ 850.369841][T16988] Dev loop5: unable to read RDB block 7 [ 850.379874][T16988] loop5: AHDI p1 p3 [ 850.384539][T16988] loop5: partition table partially beyond EOD, truncated [ 850.388292][ T29] usb 9-1: USB disconnect, device number 18 [ 850.393930][T16988] loop5: p3 size 8998240 extends beyond EOD, truncated [ 850.456516][T12131] udevd[12131]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 850.818644][ T5759] cdc_ncm 2-1:1.0: failed to get mac address [ 850.835373][ T5759] cdc_ncm 2-1:1.0: bind() failure [ 850.864079][ T5759] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 850.875751][T16348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.901891][T16993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.913674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.925222][ T5759] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 850.935024][ T5759] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 850.965435][ T5759] usb 2-1: USB disconnect, device number 91 [ 851.005899][T16997] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3142'. [ 851.097376][T16999] Cannot find add_set index 0 as target [ 851.105876][T16999] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 851.117061][T16999] binder: 16998:16999 ioctl 40046210 0 returned -14 [ 851.127423][T16999] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 851.143480][T17000] binder: 16998:17000 ioctl 40046210 0 returned -14 [ 851.672179][T16348] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 851.836953][T16348] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 851.858002][T16348] usb 9-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.871703][T16348] usb 9-1: config 0 interface 0 has no altsetting 0 [ 851.882311][T16348] usb 9-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 851.892138][T16348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.912709][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.944226][T16348] usb 9-1: config 0 descriptor?? [ 851.966957][T17008] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 852.481139][T11961] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 852.505180][T11961] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 852.515700][T11961] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 852.526344][T11961] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 852.535154][T11961] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 852.562796][ T5759] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 852.573062][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.722227][ T5759] usb 2-1: device descriptor read/64, error -71 [ 852.873396][T16231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.954833][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.962944][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.963114][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.983239][ T5759] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 852.983552][T17018] bridge_slave_0: entered allmulticast mode [ 853.010316][T17018] bridge_slave_0: entered promiscuous mode [ 853.025418][T17018] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.039252][T17018] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.051974][T17018] bridge_slave_1: entered allmulticast mode [ 853.065527][T17018] bridge_slave_1: entered promiscuous mode [ 853.132284][ T5759] usb 2-1: device descriptor read/64, error -71 [ 853.157528][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.184205][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.252352][ T5759] usb usb2-port1: attempt power cycle [ 853.270903][T17018] team0: Port device team_slave_0 added [ 853.289089][T17018] team0: Port device team_slave_1 added [ 853.354805][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.367043][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.413145][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.437177][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.452091][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.496405][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.593830][ T5759] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 853.626696][ T5759] usb 2-1: device descriptor read/8, error -71 [ 853.657319][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3149'. [ 853.676308][T17018] hsr_slave_0: entered promiscuous mode [ 853.683463][T17018] hsr_slave_1: entered promiscuous mode [ 853.692829][T17018] debugfs: 'hsr0' already exists in 'hsr' [ 853.702477][T17018] Cannot create hsr debugfs directory [ 853.839947][T17029] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3150'. [ 853.872342][ T5759] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 853.913614][ T5759] usb 2-1: device descriptor read/8, error -71 [ 853.995339][T14479] net_ratelimit: 1 callbacks suppressed [ 853.995358][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.032850][ T5759] usb usb2-port1: unable to enumerate USB device [ 854.451891][T17049] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3153'. [ 854.644382][T11961] Bluetooth: hci8: command tx timeout [ 854.661209][T17052] netlink: 'syz.7.3154': attribute type 1 has an invalid length. [ 854.753645][T17052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.783361][T17056] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 854.986641][T16348] usbhid 9-1:0.0: can't add hid device: -71 [ 855.005615][T16348] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 855.018688][T16348] usb 9-1: USB disconnect, device number 19 [ 855.208743][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3155'. [ 855.222663][T17052] bond1: (slave syz_tun): Removing an active aggregator [ 855.235849][T17052] bond1: (slave syz_tun): Releasing backup interface [ 855.251986][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.259772][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.379538][T17052] bridge_slave_0: left allmulticast mode [ 855.416844][T17052] bridge_slave_0: left promiscuous mode [ 855.427447][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.456039][T17052] bridge_slave_1: left allmulticast mode [ 855.461961][T17052] bridge_slave_1: left promiscuous mode [ 855.468634][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.496178][T17052] bond0: (slave bond_slave_0): Releasing backup interface [ 855.522445][T17052] bond0: (slave bond_slave_1): Releasing backup interface [ 855.541018][T17052] team0: Port device team_slave_0 removed [ 855.561125][T17052] team0: Port device team_slave_1 removed [ 855.571469][T17052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.581429][T17052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.591344][T17052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.604848][T17052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.618956][T17052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 855.744002][T16234] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 855.942321][T16234] usb 2-1: Using ep0 maxpacket: 8 [ 855.957441][T16234] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 855.982698][T16234] usb 2-1: config 179 has no interface number 0 [ 855.997695][T16234] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 856.026336][T16234] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 856.042538][ T5624] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 856.056226][T16234] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.093574][T16234] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 856.127566][T16234] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 856.161427][T16234] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 856.191738][T16234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.228216][T17073] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 856.236792][ T5624] usb 9-1: Using ep0 maxpacket: 8 [ 856.248901][T17087] veth1_macvtap: left promiscuous mode [ 856.251947][ T5624] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 856.267599][T17087] macsec0: entered allmulticast mode [ 856.302295][ T5624] usb 9-1: config 179 has no interface number 0 [ 856.334811][ T5624] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 856.359251][ T5624] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 856.361243][T17018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.371437][ T5624] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.398789][ T5624] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 856.409604][ T5624] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 856.427294][ T5624] usb 9-1: config 179 interface 65 has no altsetting 0 [ 856.440878][ T5624] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 856.442186][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.473697][ T5624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.518712][T16233] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input102 [ 856.531396][T17018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 856.615798][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.666707][T17018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 856.692848][T17073] IPv6: addrconf: prefix option has invalid lifetime [ 856.724252][T11961] Bluetooth: hci8: command tx timeout [ 856.811896][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.842598][ T5624] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input103 [ 856.889398][T17018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 856.966073][T16234] usb 2-1: USB disconnect, device number 96 [ 856.972207][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 856.972279][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.000101][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.057859][ T5624] usb 9-1: USB disconnect, device number 20 [ 857.421745][T17018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.551923][T17018] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.664686][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.672212][T13737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.754961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.762226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.972404][ T5624] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 858.058512][T17018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.060659][T17122] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3163'. [ 858.162846][ T5624] usb 2-1: Using ep0 maxpacket: 8 [ 858.173362][ T5624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.191686][T17018] veth0_vlan: entered promiscuous mode [ 858.195491][ T5624] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.220574][ T5624] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 858.231797][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 858.241957][ T5624] usb 2-1: Product: syz [ 858.250809][T17018] veth1_vlan: entered promiscuous mode [ 858.287274][ T5624] usb 2-1: Manufacturer: syz [ 858.298486][ T5624] usb 2-1: SerialNumber: syz [ 858.318462][ T5624] usb 2-1: config 0 descriptor?? [ 858.339108][ T5624] imon_raw 2-1:0.0: IR endpoint missing [ 858.380197][T17018] veth0_macvtap: entered promiscuous mode [ 858.420478][T17018] veth1_macvtap: entered promiscuous mode [ 858.472937][T17018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.499571][T17018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.539400][ T5624] usb 2-1: USB disconnect, device number 97 [ 858.577854][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.610271][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.620906][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.637340][ T8284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.797981][T11961] Bluetooth: hci8: command tx timeout [ 858.804281][T17140] program syz.6.3164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.907007][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.950075][T17140] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 858.966630][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.109068][T13737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.190280][T13737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.889476][T17152] input: syz1 as /devices/virtual/input/input104 [ 860.007219][T17161] syz.1.3168 (17161): drop_caches: 2 [ 860.072373][T16231] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 860.204227][ T5702] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 860.253292][T16231] usb 9-1: Using ep0 maxpacket: 16 [ 860.270712][T16231] usb 9-1: unable to get BOS descriptor or descriptor too short [ 860.291020][T16231] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 860.308595][T16231] usb 9-1: config 13 has no interface number 0 [ 860.317344][T16231] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 860.327798][T16231] usb 9-1: config 13 interface 50 has no altsetting 0 [ 860.340150][T16231] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 860.351339][T16231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.374421][T16231] usb 9-1: Product: syz [ 860.378811][T16231] usb 9-1: Manufacturer: syz [ 860.384505][T16231] usb 9-1: SerialNumber: syz [ 860.391526][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.397176][T17155] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 860.422223][ T29] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 860.450458][ T5702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.467154][ T5702] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 860.493995][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.518192][ T5702] usb 1-1: Product: syz [ 860.528320][ T5702] usb 1-1: Manufacturer: syz [ 860.539137][ T5702] usb 1-1: SerialNumber: syz [ 860.594614][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 860.670483][T16231] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 860.682341][T16231] usb 9-1: MIDIStreaming interface descriptor not found [ 860.743422][ T29] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 860.805661][T16231] usb 9-1: USB disconnect, device number 21 [ 860.883724][T11961] Bluetooth: hci8: command tx timeout [ 860.922505][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 860.935179][ T29] usb usb2-port1: attempt power cycle [ 861.038310][T12180] udevd[12180]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.283181][ T29] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 861.313930][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 861.399931][ T5702] usb 1-1: unit 4 not found! [ 861.420410][T17201] xt_policy: too many policy elements [ 861.452350][ T29] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 861.483730][ T29] usb 2-1: Invalid ep0 maxpacket: 32 [ 861.489997][ T5702] usb 1-1: USB disconnect, device number 77 [ 861.501481][ T29] usb usb2-port1: unable to enumerate USB device [ 861.548012][T12188] udevd[12188]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.713910][T16233] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 861.875556][T16233] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.893888][T16233] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 861.905294][T16233] usb 9-1: config 1 interface 0 has no altsetting 0 [ 861.918479][T16233] usb 9-1: string descriptor 0 read error: -22 [ 861.925398][T16233] usb 9-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 861.934960][T16233] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 861.965360][T16233] usb 9-1: 0:2 : does not exist [ 862.085173][T16233] usb-storage 9-1:1.1: USB Mass Storage device detected [ 862.390719][T16233] usb 9-1: us122l: couldn't allocate write buffer [ 862.413772][T16233] snd-usb-us122l 9-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 862.445068][T16233] usb 9-1: USB disconnect, device number 22 [ 863.372254][ T29] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 863.451765][T17268] syz.1.3181 (17268): drop_caches: 2 [ 863.535455][ T29] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 863.555560][ T29] usb 1-1: config 1 has no interface number 0 [ 863.572961][T17264] input: syz1 as /devices/virtual/input/input105 [ 863.579843][ T29] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 863.605223][ T29] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 863.619446][ T29] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.657064][ T29] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 863.666964][T16231] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 863.692419][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.710254][ T29] usb 1-1: Product: syz [ 863.720939][ T29] usb 1-1: Manufacturer: syz [ 863.732771][ T29] usb 1-1: SerialNumber: syz [ 863.749407][T17256] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 863.844591][T16231] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.857647][T16231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 863.876010][T16231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 863.894776][T16231] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 863.909020][T16231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.918399][T16231] usb 9-1: Product: syz [ 863.933794][T16231] usb 9-1: Manufacturer: syz [ 863.949101][T16231] usb 9-1: SerialNumber: syz [ 863.965175][T16231] usb 9-1: config 0 descriptor?? [ 863.972980][T17256] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 863.998844][T17271] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 864.016854][T17287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3178'. [ 864.129521][ T29] usb 1-1: Incompatible driver and firmware versions [ 864.142737][T16231] rc_core: IR keymap rc-streamzap not found [ 864.154919][T16231] Registered IR keymap rc-empty [ 864.170322][ T29] usb 1-1: USB disconnect, device number 78 [ 864.177684][T16231] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 864.235763][T16231] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input106 [ 864.370915][T17271] netlink: 'syz.8.3182': attribute type 10 has an invalid length. [ 864.473282][T17271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.499835][T17306] netlink: 'syz.8.3182': attribute type 10 has an invalid length. [ 864.522341][T17271] team0: Port device netdevsim1 added [ 864.704220][T17306] team0: Port device netdevsim1 removed [ 864.745521][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.799677][T17306] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 865.204843][T16233] usb 9-1: USB disconnect, device number 23 [ 865.571588][T17333] loop5: detected capacity change from 0 to 7 [ 865.618080][T17333] Dev loop5: unable to read RDB block 7 [ 865.637709][T17333] loop5: AHDI p1 p3 [ 865.654660][T17333] loop5: partition table partially beyond EOD, truncated [ 865.654971][T16233] IPVS: starting estimator thread 0... [ 865.670615][T17337] tipc: Started in network mode [ 865.680045][T17337] tipc: Node identity ac1414aa, cluster identity 4711 [ 865.690433][T17333] loop5: p3 size 8998240 extends beyond EOD, truncated [ 865.691198][T17337] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.709945][T17337] tipc: Enabled bearer , priority 10 [ 865.772154][T17339] IPVS: using max 30 ests per chain, 72000 per kthread [ 865.822325][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.830392][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 865.921717][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 865.921735][ T30] audit: type=1326 audit(1783249118.245:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951939de59 code=0x7ffc0000 [ 865.962390][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.013038][ T30] audit: type=1326 audit(1783249118.245:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951939de59 code=0x7ffc0000 [ 866.039345][ T30] audit: type=1326 audit(1783249118.255:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f951939de59 code=0x7ffc0000 [ 866.089408][T17354] syz.6.3193 (17354): drop_caches: 2 [ 866.102160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.109338][ T30] audit: type=1326 audit(1783249118.255:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951939de59 code=0x7ffc0000 [ 866.140513][ T30] audit: type=1326 audit(1783249118.255:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f951935e68e code=0x7ffc0000 [ 866.182428][ T5702] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 866.192103][ T30] audit: type=1326 audit(1783249118.255:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f951939daeb code=0x7ffc0000 [ 866.242107][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.251308][ T30] audit: type=1326 audit(1783249118.255:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f951939daeb code=0x7ffc0000 [ 866.282155][T16233] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 866.298246][ T30] audit: type=1326 audit(1783249118.265:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f951939daeb code=0x7ffc0000 [ 866.359901][ T30] audit: type=1326 audit(1783249118.265:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f951939daeb code=0x7ffc0000 [ 866.377703][ T5702] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 866.384669][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.399010][ T30] audit: type=1326 audit(1783249118.375:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.1.3194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f951939daeb code=0x7ffc0000 [ 866.429536][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.448649][T16233] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.465837][ T5702] usb 2-1: Product: syz [ 866.477695][T16233] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.489477][T16233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.498346][ T5702] usb 2-1: Manufacturer: syz [ 866.506305][ T5702] usb 2-1: SerialNumber: syz [ 866.512932][T16233] usb 9-1: Product: syz [ 866.522140][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.537210][T16233] usb 9-1: Manufacturer: syz [ 866.557783][T16233] usb 9-1: SerialNumber: syz [ 866.662128][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.802318][T14479] tipc: Node number set to 2886997162 [ 866.942155][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.212395][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.234599][T17387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3198'. [ 867.572173][T14479] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 867.687974][ T5702] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 867.700393][ T5702] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 867.719787][ T5702] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 867.732199][T14479] usb 1-1: Using ep0 maxpacket: 32 [ 867.744721][ T5702] usb 2-1: USB disconnect, device number 102 [ 867.768565][T14479] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 867.797010][T14479] usb 1-1: config 0 has no interface number 0 [ 867.820220][T14479] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.833887][T14479] usb 1-1: config 0 interface 184 has no altsetting 0 [ 867.843560][T14479] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 867.855041][T14479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.865078][T14479] usb 1-1: Product: syz [ 867.869357][T14479] usb 1-1: Manufacturer: syz [ 867.875963][T14479] usb 1-1: SerialNumber: syz [ 867.900875][T14479] usb 1-1: config 0 descriptor?? [ 867.919126][T14479] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 867.937296][T14479] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 868.377608][T17426] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 868.787254][T17446] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3204'. [ 868.805968][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 869.026521][T16233] cdc_ncm 9-1:1.0: failed to get mac address [ 869.034525][T16233] cdc_ncm 9-1:1.0: bind() failure [ 869.071958][T16233] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 869.107231][T16233] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 869.160739][T16233] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 869.204781][T16233] usb 9-1: USB disconnect, device number 24 [ 869.552209][T16233] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 869.725350][T16233] usb 9-1: config 1 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 869.737522][T16233] usb 9-1: config 1 interface 0 altsetting 69 endpoint 0x2 has invalid maxpacket 1503, setting to 1024 [ 869.754772][T16233] usb 9-1: config 1 interface 0 has no altsetting 0 [ 869.772071][T16233] usb 9-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 869.789140][T16233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.798227][T16233] usb 9-1: Product: 흀瞀თ뫪៤홂㮋혌吏첌ቷꞗ쬃鎩⟸離뱐ꣁᘎ멫瞈焥㰉ᡠ淮ꣻ歨౨氨푱휋괶綠菦釺됟⧧츲ಂ䔯眮ꘁ풬씵⮙燻ਹ鐱郄ﲾ㵕浵犊摲歲頔Ა耧ᰐ롡㣷泞깞ᜇ謋净ኩ寊蛄㨽估扛胄㕬摒㔲渼骵芇荞䁩袵봸셯곆楐顺좯ꧏ㑷ᴇ㵓岥읂ᒵꮋ嬼៻㍽峩痦ఙ㋼ [ 869.837696][T16233] usb 9-1: Manufacturer: Ђ [ 869.842957][T16233] usb 9-1: SerialNumber: Ѐጲˆ⵲팮䯻㽫陬爑淑ࣖ䵕퀃≕᎛ﱬˡ髕⭾䖊Ⰹ瘍據♫繲ꍒ鵘瘼鵪㨽ﴮᚥఙ켁鐓ꄕ뢋肤騕츘늡쭦᪌柢䉕ꊥⷾ [ 869.865611][T17455] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 869.926523][T17458] syz.1.3207 (17458): drop_caches: 2 [ 870.037719][T17460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.067068][T17460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.076468][T17454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.095977][T17454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.163969][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.170504][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.214669][T16233] usbhid 9-1:1.0: can't add hid device: -71 [ 870.246055][T16233] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 870.298668][T16233] usb 9-1: USB disconnect, device number 25 [ 870.465454][ T29] hid-generic 0000:0000:0000.0045: item fetching failed at offset 0/2 [ 870.485208][ T29] hid-generic 0000:0000:0000.0045: probe with driver hid-generic failed with error -22 [ 870.642702][T16231] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 870.802195][T16231] usb 2-1: Using ep0 maxpacket: 16 [ 870.811130][T16231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.824999][T16231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.836838][T16231] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.848594][T16231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.858707][T16231] usb 2-1: Product: syz [ 870.863765][T16231] usb 2-1: Manufacturer: syz [ 870.868542][T16231] usb 2-1: SerialNumber: syz [ 870.872373][ C0] net_ratelimit: 4 callbacks suppressed [ 870.872391][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 870.904673][T16231] usb 2-1: 0:2 : does not exist [ 871.113944][T16231] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 871.182702][T16231] usb 2-1: USB disconnect, device number 103 [ 871.271423][T12188] udevd[12188]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.389553][ T5628] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 871.408252][ T5628] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 871.420383][ T5628] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 871.431880][ T5628] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 871.446883][ T5628] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 871.642443][ T29] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 871.683710][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 871.683727][ T30] audit: type=1326 audit(1783249124.025:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.1.3214" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f951939de59 code=0x0 [ 871.802167][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 871.808145][T17481] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.816471][T17481] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.817685][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.824613][T17481] bridge_slave_0: entered allmulticast mode [ 871.842826][T17481] bridge_slave_0: entered promiscuous mode [ 871.852463][T17481] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.859710][T17481] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.861028][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.867490][T17481] bridge_slave_1: entered allmulticast mode [ 871.884686][T17481] bridge_slave_1: entered promiscuous mode [ 871.906536][ T29] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 871.912154][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 871.923499][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.935365][ T29] usb 9-1: SerialNumber: syz [ 871.945008][T17481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.961423][ T29] usb 9-1: 0:2 : does not exist [ 871.966360][T17481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.021848][T17481] team0: Port device team_slave_0 added [ 872.043935][T17481] team0: Port device team_slave_1 added [ 872.091710][T17481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.111815][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.140268][T17481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.152525][T17507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3218'. [ 872.158696][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.174891][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.187786][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.190337][T17481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.199132][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.216254][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.227693][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.247403][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.266843][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.280447][T17481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.286005][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.308503][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.326266][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.373248][T17481] hsr_slave_0: entered promiscuous mode [ 872.379960][T17481] hsr_slave_1: entered promiscuous mode [ 872.394005][T17481] debugfs: 'hsr0' already exists in 'hsr' [ 872.399779][T17481] Cannot create hsr debugfs directory [ 872.560166][ T29] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 872.585857][T17512] syz.1.3220 (17512): drop_caches: 2 [ 872.796161][ T29] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 872.952091][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 873.512184][ T5628] Bluetooth: hci9: command tx timeout [ 873.781831][T17544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.813199][T17544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.848800][T17542] gretap1: entered allmulticast mode [ 873.935708][T17481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 873.993376][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 874.003041][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.018367][T17481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 874.032508][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.039589][T17552] loop5: detected capacity change from 0 to 7 [ 874.044194][T17552] Dev loop5: unable to read RDB block 7 [ 874.049479][T17481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 874.057687][T17552] loop5: AHDI p1 p3 [ 874.064886][T17552] loop5: partition table partially beyond EOD, truncated [ 874.077966][T17552] loop5: p3 size 8998240 extends beyond EOD, truncated [ 874.078196][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.115948][T17481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 874.130908][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 874.147372][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.345491][T17481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.369445][T17481] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.387213][T13737] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.394444][T13737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.431854][T14479] usb 9-1: USB disconnect, device number 26 [ 874.448241][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.455485][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.502404][ T5359] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 874.674520][ T5359] usb 2-1: Using ep0 maxpacket: 16 [ 874.685859][ T5359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.707278][ T5359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 874.735448][ T5359] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 874.762252][ T5359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.783922][ T5359] usb 2-1: config 0 descriptor?? [ 874.801756][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.907300][T17481] veth0_vlan: entered promiscuous mode [ 874.922160][T14479] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 874.931670][T17481] veth1_vlan: entered promiscuous mode [ 875.006328][T17481] veth0_macvtap: entered promiscuous mode [ 875.019497][T17481] veth1_macvtap: entered promiscuous mode [ 875.032108][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 875.057555][T17481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.073693][T14479] usb 9-1: device descriptor read/64, error -71 [ 875.089919][T17481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.109262][T13737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.119566][T13737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.136716][T13737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.186734][T13737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.237980][T17565] ip6tnl1: entered promiscuous mode [ 875.267485][ T5359] kye 0003:0458:5019.0046: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 875.332452][T14479] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 875.347053][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x2 [ 875.366652][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.394588][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.406459][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.415472][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.428201][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.438950][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.449692][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.460989][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.470157][ T5359] kye 0003:0458:5019.0046: unknown main item tag 0x0 [ 875.482792][T14479] usb 9-1: device descriptor read/64, error -71 [ 875.490411][T13737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.499346][ T5359] kye 0003:0458:5019.0046: hidraw0: USB HID vff.fc Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 875.530255][T13737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.541355][ T5359] kye 0003:0458:5019.0046: tablet-enabling feature report not found [ 875.562856][ T5359] kye 0003:0458:5019.0046: tablet enabling failed [ 875.592769][ T5628] Bluetooth: hci9: command tx timeout [ 875.597675][ T5359] usb 2-1: USB disconnect, device number 104 [ 875.612473][T14479] usb usb9-port1: attempt power cycle [ 875.627025][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.649775][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.664673][T17588] fido_id[17588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 875.972512][T14479] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 876.003292][T14479] usb 9-1: device descriptor read/8, error -71 [ 876.072442][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 876.254304][T14479] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 876.294651][T14479] usb 9-1: device descriptor read/8, error -71 [ 876.372154][ T29] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 876.412485][T14479] usb usb9-port1: unable to enumerate USB device [ 876.536095][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 876.570573][ T29] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 876.601617][ T29] usb 2-1: config 0 has no interface number 0 [ 876.609037][ T29] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 876.630553][ T29] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 876.675977][ T29] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 876.702173][ T29] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.738953][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 876.759036][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.778742][ T29] usb 2-1: Product: syz [ 876.789408][ T29] usb 2-1: Manufacturer: syz [ 876.805604][ T29] usb 2-1: SerialNumber: syz [ 876.838159][ T29] usb 2-1: config 0 descriptor?? [ 876.850846][T17632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3232'. [ 876.852926][T17613] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 876.901540][ T29] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input107 [ 876.920266][ T4978] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 876.935583][ C1] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 877.112359][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 877.206110][T14479] usb 2-1: USB disconnect, device number 105 [ 877.672306][ T5628] Bluetooth: hci9: command tx timeout [ 878.012452][ T5359] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 878.079114][T17668] loop5: detected capacity change from 0 to 7 [ 878.152099][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 878.172631][ T5359] usb 9-1: device descriptor read/64, error -71 [ 878.186278][T17668] Dev loop5: unable to read RDB block 7 [ 878.223421][T17668] loop5: AHDI p1 p3 [ 878.256773][T17668] loop5: partition table partially beyond EOD, truncated [ 878.295165][T17668] loop5: p3 size 8998240 extends beyond EOD, truncated [ 878.447661][ T5359] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 878.498521][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 878.662728][ T5359] usb 9-1: device descriptor read/64, error -71 [ 878.698421][T17678] netlink: 'syz.4.3238': attribute type 3 has an invalid length. [ 878.809433][ T5359] usb usb9-port1: attempt power cycle [ 878.936419][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 879.182119][ T5359] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 879.192314][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 879.235346][ T5359] usb 9-1: device descriptor read/8, error -71 [ 879.502134][ T5359] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 879.547163][ T5359] usb 9-1: device descriptor read/8, error -71 [ 879.686752][ T5359] usb usb9-port1: unable to enumerate USB device [ 879.753037][ T5628] Bluetooth: hci9: command tx timeout [ 880.133628][ T5624] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 880.232297][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 880.352838][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 880.363184][ T5624] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 880.378892][ T5624] usb 5-1: config 0 has no interface number 0 [ 880.401695][ T5624] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 880.430970][ T5624] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 880.501500][ T5624] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 880.544664][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.584001][ T5624] usb 5-1: config 0 descriptor?? [ 880.906983][T17721] syzkaller0: entered promiscuous mode [ 880.921206][T17721] syzkaller0: entered allmulticast mode [ 881.097733][T17698] xt_hashlimit: size too large, truncated to 1048576 [ 881.272179][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 881.370331][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.370623][ T5624] uclogic 0003:28BD:0071.0047: pen parameters not found [ 881.419735][ T5624] uclogic 0003:28BD:0071.0047: interface is invalid, ignoring [ 881.435923][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.870614][T16348] usb 5-1: USB disconnect, device number 12 [ 882.146900][T17743] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 882.312586][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 882.530743][T17753] netlink: zone id is out of range [ 882.812659][ T5624] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 882.885089][T11961] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 882.900000][T11961] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 882.917202][T11961] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 882.926172][T11961] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 882.940550][T11961] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 883.012100][ T5624] usb 5-1: Using ep0 maxpacket: 8 [ 883.028128][ T5624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 883.049466][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 883.062223][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 883.072846][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 883.090504][ T5624] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 883.101177][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 883.112375][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 1024 [ 883.126481][ T5624] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 883.141621][ T5624] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 883.157382][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.166298][ T5624] usb 5-1: Product: syz [ 883.170639][ T5624] usb 5-1: Manufacturer: syz [ 883.175939][ T5624] usb 5-1: SerialNumber: syz [ 883.201201][ T5624] usb 5-1: config 0 descriptor?? [ 883.222943][T17753] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 883.258685][ T5624] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 883.352083][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 883.472226][ T5624] usb 5-1: USB disconnect, device number 13 [ 883.886628][T17781] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3253'. [ 884.307535][T17758] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.338113][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.367862][T17758] bridge_slave_0: entered allmulticast mode [ 884.392349][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 884.400360][T17758] bridge_slave_0: entered promiscuous mode [ 884.436949][T17758] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.469662][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.510361][T17758] bridge_slave_1: entered allmulticast mode [ 884.539942][T17758] bridge_slave_1: entered promiscuous mode [ 884.647629][T17758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.723072][T17758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.907446][T17758] team0: Port device team_slave_0 added [ 884.954851][T17758] team0: Port device team_slave_1 added [ 885.032398][ T5628] Bluetooth: hci10: command tx timeout [ 885.107473][T17758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.143420][T17758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.213617][T17758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.254876][T17758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.284361][T17758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.416464][T17758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.432108][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 885.523804][ T5736] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-miglia-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 885.581183][ T30] audit: type=1326 audit(1783249137.915:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 885.672681][ T30] audit: type=1326 audit(1783249137.955:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 885.728512][T17758] hsr_slave_0: entered promiscuous mode [ 885.767716][T17758] hsr_slave_1: entered promiscuous mode [ 885.789166][ T5736] dvb-usb: found a 'WideView WT-220U PenType Receiver (Miglia)' in cold state, will try to load a firmware [ 885.819772][T17758] debugfs: 'hsr0' already exists in 'hsr' [ 885.842449][ T30] audit: type=1326 audit(1783249137.955:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 885.849737][ T5736] usb 7-1: Direct firmware load for dvb-usb-wt220u-miglia-01.fw failed with error -2 [ 885.877336][T17758] Cannot create hsr debugfs directory [ 886.006044][ T5736] usb 7-1: Falling back to sysfs fallback for: dvb-usb-wt220u-miglia-01.fw [ 886.047185][ T30] audit: type=1326 audit(1783249137.955:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.158899][ T30] audit: type=1326 audit(1783249137.955:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.265424][ T30] audit: type=1326 audit(1783249137.955:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.371411][ T30] audit: type=1326 audit(1783249137.955:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.399468][T17830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 886.465550][ T30] audit: type=1326 audit(1783249137.955:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.472108][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 886.579255][ T30] audit: type=1326 audit(1783249137.955:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.623010][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 886.711057][ T30] audit: type=1326 audit(1783249137.955:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.8.3257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561799de59 code=0x7ffc0000 [ 886.862850][T17842] netlink: 'syz.4.3261': attribute type 3 has an invalid length. [ 887.122920][ T29] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 887.130633][ T5628] Bluetooth: hci10: command tx timeout [ 887.223966][T17758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.285465][T16348] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 887.311413][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.345104][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 887.387066][ T29] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 887.408549][ T29] usb 5-1: config 0 has no interface number 0 [ 887.422078][ T29] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 887.454595][ T29] usb 5-1: config 0 interface 88 has no altsetting 0 [ 887.486916][ T29] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 887.492235][T16348] usb 9-1: Using ep0 maxpacket: 16 [ 887.507428][ T29] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 887.512277][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 887.539618][ T29] usb 5-1: Product: syz [ 887.545581][T16348] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 887.546098][T17758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.566958][ T29] usb 5-1: SerialNumber: Љ [ 887.579599][T16348] usb 9-1: config 0 has no interface number 0 [ 887.583943][ T29] usb 5-1: config 0 descriptor?? [ 887.611317][T16348] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 887.619153][T17836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 887.647467][T16348] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 887.687950][T16348] usb 9-1: config 0 interface 41 has no altsetting 0 [ 887.724120][T16348] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 887.752248][T16348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.801641][T16348] usb 9-1: Product: syz [ 887.820293][T16348] usb 9-1: Manufacturer: syz [ 887.837737][T16348] usb 9-1: SerialNumber: syz [ 887.863602][T16348] usb 9-1: config 0 descriptor?? [ 887.890371][T17847] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 887.925631][T17758] bond0: (slave netdevsim1): Releasing backup interface [ 887.937645][T17847] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 887.945425][T17758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.042765][ T29] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input109 [ 888.142981][ T29] usb 5-1: USB disconnect, device number 14 [ 888.149050][ C1] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 888.193821][T17857] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 888.206621][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.287476][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.439991][T16348] sr9700 9-1:0.41: probe with driver sr9700 failed with error -71 [ 888.485141][T17758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.543194][T16348] usb 9-1: USB disconnect, device number 35 [ 888.552907][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 888.760197][T17868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 888.883514][ T5359] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 888.935150][T17874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3268'. [ 888.955640][T17758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.967481][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.977612][T17758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 888.988840][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.998018][T17758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.014204][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.023799][T17758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 889.040639][T17758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.048646][ T5359] usb 2-1: Using ep0 maxpacket: 32 [ 889.056785][ T5359] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 889.071980][ T5359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.097861][ T5359] usb 2-1: config 0 descriptor?? [ 889.132414][ T5359] as10x_usb: device has been detected [ 889.138649][ T5359] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 889.164456][ T5359] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 889.192821][ T5628] Bluetooth: hci10: command tx timeout [ 889.278882][ T5359] as10x_usb: error during firmware upload part1 [ 889.287774][ T5359] Registered device nBox DVB-T Dongle [ 889.335176][ T5359] usb 2-1: USB disconnect, device number 106 [ 889.335613][T17758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.409573][ T5359] Unregistered device nBox DVB-T Dongle [ 889.412524][T17758] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.412715][ T5359] as10x_usb: device has been disconnected [ 889.435858][T14823] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.443122][T14823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.471229][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.478465][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.592090][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 889.604809][T17758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.672951][T16348] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 889.677478][T17758] veth0_vlan: entered promiscuous mode [ 889.710715][T17758] veth1_vlan: entered promiscuous mode [ 889.774513][T17758] veth0_macvtap: entered promiscuous mode [ 889.797786][T17758] veth1_macvtap: entered promiscuous mode [ 889.829300][T17758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.832478][T16348] usb 9-1: Using ep0 maxpacket: 16 [ 889.841885][T17758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.853523][T16348] usb 9-1: unable to get BOS descriptor or descriptor too short [ 889.870393][T16348] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.878688][ T1023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.884602][T16348] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.899694][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.917327][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.926431][T16348] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.937167][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.954201][T16348] usb 9-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 889.979172][T16348] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.989501][T16348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.014951][T14479] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 890.045074][T16348] usb 9-1: Product: syz [ 890.066070][T16348] usb 9-1: Manufacturer: syz [ 890.103566][T16348] usb 9-1: SerialNumber: syz [ 890.147585][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.173275][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.210201][T14479] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 890.220520][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.230658][T14479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.231466][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.251755][T14479] usb 2-1: Product: syz [ 890.263483][T14479] usb 2-1: Manufacturer: syz [ 890.274222][T14479] usb 2-1: SerialNumber: syz [ 890.349822][T17884] sctp: [Deprecated]: syz.8.3269 (pid 17884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.349822][T17884] Use struct sctp_sack_info instead [ 890.423677][T16348] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 890.445958][T16348] cdc_ncm 9-1:1.0: bind() failure [ 890.470611][T16348] usb 9-1: USB disconnect, device number 36 [ 890.640159][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 890.881510][T14479] rtl8150 2-1:1.0: couldn't reset the device [ 890.894472][T14479] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 890.910804][T14479] usb 2-1: USB disconnect, device number 107 [ 891.274511][ T5628] Bluetooth: hci10: command tx timeout [ 891.298536][T17902] netlink: 'syz.8.3275': attribute type 21 has an invalid length. [ 891.412571][ T5359] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 891.584395][ T5359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 891.606964][ T5359] usb 3-1: not running at top speed; connect to a high speed hub [ 891.614711][T14479] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 891.647955][ T5359] usb 3-1: config 9 has an invalid interface number: 108 but max is 0 [ 891.668289][ T5359] usb 3-1: config 9 has no interface number 0 [ 891.672103][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 891.679755][ T5359] usb 3-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=4f.5a [ 891.693693][ T5359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.705220][ T5359] usb 3-1: Product: syz [ 891.709454][ T5359] usb 3-1: Manufacturer: syz [ 891.714481][ T5359] usb 3-1: SerialNumber: syz [ 891.765572][T14479] usb 9-1: unable to get BOS descriptor or descriptor too short [ 891.803697][T14479] usb 9-1: not running at top speed; connect to a high speed hub [ 891.832223][T14479] usb 9-1: too many configurations: 90, using maximum allowed: 8 [ 891.849332][T14479] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 891.872112][T14479] usb 9-1: can't read configurations, error -61 [ 891.933045][ T5359] gspca_main: finepix-2.14.0 probing 04cb:010b [ 891.954168][ T5359] usb 3-1: USB disconnect, device number 46 [ 892.012565][T14479] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 892.223080][T14479] usb 9-1: unable to get BOS descriptor or descriptor too short [ 892.244060][T14479] usb 9-1: not running at top speed; connect to a high speed hub [ 892.262191][T14479] usb 9-1: too many configurations: 90, using maximum allowed: 8 [ 892.283758][T14479] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 892.312716][T14479] usb 9-1: can't read configurations, error -61 [ 892.319926][T14479] usb usb9-port1: attempt power cycle [ 892.354585][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3277'. [ 892.369757][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 892.686878][T14479] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 892.712241][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 892.745888][T14479] usb 9-1: unable to get BOS descriptor or descriptor too short [ 892.756482][T14479] usb 9-1: not running at top speed; connect to a high speed hub [ 892.798688][T14479] usb 9-1: too many configurations: 90, using maximum allowed: 8 [ 892.827260][T14479] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 892.873948][T14479] usb 9-1: can't read configurations, error -61 [ 893.014199][T14479] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 893.067025][T14479] usb 9-1: unable to get BOS descriptor or descriptor too short [ 893.090509][T14479] usb 9-1: not running at top speed; connect to a high speed hub [ 893.127617][T14479] usb 9-1: too many configurations: 90, using maximum allowed: 8 [ 893.156817][T14479] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 893.185838][T14479] usb 9-1: can't read configurations, error -61 [ 893.223203][T14479] usb usb9-port1: unable to enumerate USB device [ 893.296476][T17954] input: syz1 as /devices/virtual/input/input110 [ 893.598752][T17948] syz.2.3286 (17948): drop_caches: 2 [ 893.752094][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 894.652787][ T5624] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 894.792220][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 894.804760][ T5624] usb 3-1: device descriptor read/64, error -71 [ 894.866155][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 894.866171][ T30] audit: type=1326 audit(1783249147.205:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.1.3296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f951939de59 code=0x0 [ 895.062169][ T5624] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 895.203117][ T5624] usb 3-1: device descriptor read/64, error -71 [ 895.313489][ T5624] usb usb3-port1: attempt power cycle [ 895.588904][T17998] syz.4.3299 (17998): drop_caches: 2 [ 895.651080][T17999] input: syz1 as /devices/virtual/input/input111 [ 895.674435][ T5624] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 895.713218][ T5624] usb 3-1: device descriptor read/8, error -71 [ 895.832141][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 895.972373][ T5624] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 895.993511][ T29] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 896.003113][ T5624] usb 3-1: device descriptor read/8, error -71 [ 896.112632][ T5624] usb usb3-port1: unable to enumerate USB device [ 896.163912][ T29] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 896.173703][ T29] usb 2-1: can't read configurations, error -22 [ 896.302183][ T29] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 896.451315][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 896.465222][T18004] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 896.477483][ T29] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 896.506356][ T29] usb 2-1: can't read configurations, error -22 [ 896.513291][ T29] usb usb2-port1: attempt power cycle [ 896.676423][T18017] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3305'. [ 896.687833][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'. [ 896.762268][ T5624] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 896.884204][ T29] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 896.922797][ T5624] usb 5-1: Invalid ep0 maxpacket: 32 [ 896.930275][ T29] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 896.939007][ T29] usb 2-1: can't read configurations, error -22 [ 897.052319][ T5624] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 897.072340][ T29] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 897.094748][ T29] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 897.104717][ T29] usb 2-1: can't read configurations, error -22 [ 897.111392][ T29] usb usb2-port1: unable to enumerate USB device [ 897.202246][ T5624] usb 5-1: Invalid ep0 maxpacket: 32 [ 897.208020][ T5624] usb usb5-port1: attempt power cycle [ 897.562390][ T5624] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 897.583048][ T5624] usb 5-1: Invalid ep0 maxpacket: 32 [ 897.712262][ T5624] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 897.732805][ T5624] usb 5-1: Invalid ep0 maxpacket: 32 [ 897.738457][ T5624] usb usb5-port1: unable to enumerate USB device [ 898.833122][ T29] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 898.993640][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.004661][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.015458][ T29] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 899.025251][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.037273][ T29] usb 3-1: config 0 descriptor?? [ 899.162144][ T5624] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 899.246589][ T29] usbhid 3-1:0.0: can't add hid device: -32 [ 899.253276][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 899.324128][ T5624] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 899.334113][ T5624] usb 2-1: config 0 interface 0 has no altsetting 0 [ 899.343531][ T5624] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 899.354485][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 899.364323][ T5624] usb 2-1: Product: syz [ 899.368527][ T5624] usb 2-1: Manufacturer: syz [ 899.373353][ T5624] usb 2-1: SerialNumber: syz [ 899.379954][ T5624] usb 2-1: config 0 descriptor?? [ 899.388635][ T5624] usb 2-1: selecting invalid altsetting 0 [ 899.588735][T14479] usb 2-1: USB disconnect, device number 112 [ 899.630025][ T29] usb 3-1: USB disconnect, device number 51 [ 899.788375][T18046] syz.2.3312 (18046): drop_caches: 2 [ 899.877910][T18043] input: syz1 as /devices/virtual/input/input112 [ 899.952318][ T5702] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 899.998124][T14479] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 900.102165][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 900.109120][ T5702] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 900.121286][ T5702] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 900.131097][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 900.139506][ T5702] usb 5-1: Product: syz [ 900.144291][ T5702] usb 5-1: Manufacturer: syz [ 900.149053][ T5702] usb 5-1: SerialNumber: syz [ 900.158440][ T5702] usb 5-1: config 0 descriptor?? [ 900.165912][T18040] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 900.175707][T14479] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.186761][ T5702] hub 5-1:0.0: bad descriptor, ignoring hub [ 900.192878][ T5702] hub 5-1:0.0: probe with driver hub failed with error -5 [ 900.200136][T14479] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 900.214989][T14479] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 900.226747][T14479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.240216][T14479] usb 2-1: config 0 descriptor?? [ 900.259782][T14479] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 900.267298][T14479] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 900.292363][ T5759] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 900.452172][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 900.459659][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.471753][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.485963][ T5759] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.497688][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.508191][ T5759] usb 3-1: config 0 descriptor?? [ 900.719593][ T5759] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 900.814681][T18052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.829708][T18052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.842308][T18054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.851064][T18054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.918253][ T30] audit: type=1326 audit(1783249153.255:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 900.946834][ T30] audit: type=1326 audit(1783249153.255:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 900.960305][ T5759] usb 2-1: USB disconnect, device number 113 [ 901.024036][ T30] audit: type=1326 audit(1783249153.285:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.050168][ T30] audit: type=1326 audit(1783249153.285:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.094971][ T30] audit: type=1326 audit(1783249153.285:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.123156][ T30] audit: type=1326 audit(1783249153.325:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.136324][T14479] usb 3-1: USB disconnect, device number 52 [ 901.150270][ T30] audit: type=1326 audit(1783249153.325:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.186220][ T30] audit: type=1326 audit(1783249153.335:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.211736][ T30] audit: type=1326 audit(1783249153.335:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.236821][ T30] audit: type=1326 audit(1783249153.335:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18039 comm="syz.4.3311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe19219de59 code=0x7ffc0000 [ 901.346289][T18065] netlink: 'syz.1.3317': attribute type 1 has an invalid length. [ 901.358449][T14823] raw-gadget.7 gadget.4: failed to queue suspend event [ 901.369539][T18065] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 901.432822][T18040] raw-gadget.7 gadget.4: failed to queue resume event [ 901.483461][T14825] raw-gadget.7 gadget.4: failed to queue suspend event [ 901.522847][T18056] raw-gadget.7 gadget.4: failed to queue disconnect event [ 901.849971][T18083] fuse: Bad value for 'group_id' [ 901.862182][T18083] fuse: Bad value for 'group_id' [ 901.912463][ T5759] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 902.075613][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 902.086449][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 902.107241][ T5759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.123037][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.151492][ T5759] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 902.187651][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.201408][ T5759] usb 2-1: Product: syz [ 902.207188][ T5759] usb 2-1: Manufacturer: syz [ 902.211922][ T5759] usb 2-1: SerialNumber: syz [ 902.304021][T18090] syz.2.3324 (18090): drop_caches: 2 [ 902.399474][T18090] input: syz1 as /devices/virtual/input/input113 [ 903.127501][T18094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.135161][T18095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.452275][T16348] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 903.632235][T16348] usb 3-1: Using ep0 maxpacket: 16 [ 903.640039][T16348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.651312][T16348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.662144][T16348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 903.676303][T16348] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 903.686894][T16348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.697835][T16348] usb 3-1: config 0 descriptor?? [ 904.123934][T16348] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0048/input/input114 [ 904.224373][T16348] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 904.325157][T16348] usb 3-1: USB disconnect, device number 53 [ 904.492247][ T5759] usb 2-1: 0:1 : does not exist [ 904.498788][ T5759] usb 2-1: 0:2 : does not exist [ 904.528128][ T5759] usb 2-1: USB disconnect, device number 114 [ 904.562981][T12131] udevd[12131]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.897643][T14479] usb 5-1: USB disconnect, device number 19 [ 904.983625][T18103] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 904.995767][T18103] netlink: 'syz.4.3330': attribute type 2 has an invalid length. [ 905.004153][T18103] netlink: 'syz.4.3330': attribute type 3 has an invalid length. [ 905.011949][T18103] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3330'. [ 905.222123][ T29] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 905.372172][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 905.379959][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 905.389125][ T29] usb 3-1: config 251 has an invalid interface number: 33 but max is 0 [ 905.397639][ T29] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 905.408225][ T29] usb 3-1: config 251 has no interface number 0 [ 905.415800][ T29] usb 3-1: config 251 interface 33 has no altsetting 0 [ 905.424923][ T29] usb 3-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 905.435685][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.443892][ T29] usb 3-1: Product: syz [ 905.448213][ T29] usb 3-1: Manufacturer: syz [ 905.452958][ T29] usb 3-1: SerialNumber: syz [ 905.677058][ T29] qmi_wwan 3-1:251.33: probe with driver qmi_wwan failed with error -22 [ 905.690725][ T29] usb 3-1: USB disconnect, device number 54 [ 905.867391][T18116] fuse: Bad value for 'fd' [ 906.025915][T18119] loop5: detected capacity change from 0 to 7 [ 906.035343][T18119] Dev loop5: unable to read RDB block 7 [ 906.040999][T18119] loop5: AHDI p1 p3 [ 906.045556][T18119] loop5: partition table partially beyond EOD, truncated [ 906.052959][T18119] loop5: p3 size 8998240 extends beyond EOD, truncated [ 906.102921][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 906.584792][T17480] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 906.607655][T17480] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 906.617605][T17480] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 906.628726][T17480] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 906.646754][T17480] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 906.820209][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3340'. [ 907.362280][T18134] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.369904][T18134] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.377575][T18134] bridge_slave_0: entered allmulticast mode [ 907.388161][T18134] bridge_slave_0: entered promiscuous mode [ 907.405369][T18134] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.413104][T18134] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.420793][T18134] bridge_slave_1: entered allmulticast mode [ 907.429125][T18134] bridge_slave_1: entered promiscuous mode [ 907.473133][T18134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.486757][T18134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.531022][T18134] team0: Port device team_slave_0 added [ 907.540469][T18134] team0: Port device team_slave_1 added [ 907.578540][T18134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.585643][T18134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.622137][T18134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.705358][T18151] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.713138][T18151] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.845209][T18151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.866593][T18151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.003462][T14479] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 908.047494][T18134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.062057][T18134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.104521][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 908.132243][T18134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.148162][T14825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.160122][T14825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.182378][T14825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.191627][T14825] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.204919][T14479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 908.233910][T14479] usb 5-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 908.262257][T14479] usb 5-1: config 1 interface 0 has no altsetting 0 [ 908.273950][T18134] hsr_slave_0: entered promiscuous mode [ 908.280635][T18134] hsr_slave_1: entered promiscuous mode [ 908.294500][T14479] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 908.312237][T14479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.321623][T18134] debugfs: 'hsr0' already exists in 'hsr' [ 908.332081][T18134] Cannot create hsr debugfs directory [ 908.338372][T14479] usb 5-1: Product: syz [ 908.352069][T14479] usb 5-1: Manufacturer: syz [ 908.362108][T14479] usb 5-1: SerialNumber: syz [ 908.629917][T18134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.656125][T18134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.671097][T14479] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input115 [ 908.691472][ T4978] bcm5974 5-1:1.0: could not read from device [ 908.712573][T11961] Bluetooth: hci11: command tx timeout [ 908.731857][ T4978] bcm5974 5-1:1.0: could not read from device [ 908.751203][T14479] usb 5-1: USB disconnect, device number 20 [ 908.775069][ T4978] bcm5974 5-1:1.0: could not read from device [ 908.808371][ T4978] bcm5974 5-1:1.0: could not read from device [ 908.967427][T18134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.989050][T18134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.019136][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3344'. [ 909.078036][T18157] loop5: detected capacity change from 0 to 7 [ 909.119801][T18157] Dev loop5: unable to read RDB block 7 [ 909.123699][T18134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.136131][T18134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.147554][T18157] loop5: AHDI p1 p3 [ 909.160613][T18157] loop5: partition table partially beyond EOD, truncated [ 909.180948][T18157] loop5: p3 size 8998240 extends beyond EOD, truncated [ 909.215867][T12188] udevd[12188]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 909.325038][T18134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.335842][T18134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.599449][T18134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 909.610264][T18134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.618370][T18134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 909.638371][T18134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.651248][T18134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 909.675528][T18134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.680699][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 909.692763][T18134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 909.703597][T18134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.713103][ T5681] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 909.859262][T18134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.872213][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 909.880531][ T5681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.888243][T18134] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.907267][ T5681] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 909.932468][ T5681] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 909.940058][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.949122][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.958831][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.985587][ T5681] usb 3-1: config 0 descriptor?? [ 909.993820][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.001014][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.208034][T18134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.380182][T18134] veth0_vlan: entered promiscuous mode [ 910.410537][T18134] veth1_vlan: entered promiscuous mode [ 910.443594][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 910.485428][ T5681] hid_parser_main: 28 callbacks suppressed [ 910.485473][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x2 [ 910.485534][ T31] INFO: task syz.2.2748:15562 blocked for more than 143 seconds. [ 910.521753][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 910.532586][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 [ 910.540107][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 [ 910.547945][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 [ 910.581979][T18134] veth0_macvtap: entered promiscuous mode [ 910.589662][ T31] Tainted: G L syzkaller #0 [ 910.597047][ T5681] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 [ 910.616062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 910.648075][T18134] veth1_macvtap: entered promiscuous mode [ 910.668254][ T31] task:syz.2.2748 state:D stack:28200 pid:15562 tgid:15561 ppid:10783 task_flags:0x400040 flags:0x00080002 [ 910.693057][ T5681] hid-picolcd 0003:04D8:C002.0049: No report with id 0x11 found [ 910.751639][ T31] Call Trace: [ 910.758994][ T5681] usb 3-1: USB disconnect, device number 55 [ 910.773572][ T31] [ 910.790922][ T31] __schedule+0x17d9/0x56c0 [ 910.792938][T11961] Bluetooth: hci11: command tx timeout [ 910.825679][ T31] ? __lock_acquire+0x683/0x2cf0 [ 910.851602][ T31] ? __pfx___schedule+0x10/0x10 [ 910.867458][ T31] ? schedule+0x90/0x2b0 [ 910.884624][ T31] schedule+0x164/0x2b0 [ 910.902054][ T31] schedule_preempt_disabled+0x13/0x30 [ 910.907696][ T31] __mutex_lock+0x7bf/0x1550 [ 910.922047][ T31] ? __mutex_lock+0x5d4/0x1550 [ 910.928376][ T31] ? usbdev_open+0x151/0x770 [ 910.942087][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 910.948780][ T31] ? bus_find_device+0x27d/0x2d0 [ 910.972294][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 910.977802][ T31] ? usbdev_open+0xa7/0x770 [ 910.986032][ T31] ? usbdev_open+0xa7/0x770 [ 911.002267][ T31] usbdev_open+0x151/0x770 [ 911.007043][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 911.022490][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 911.027786][ T31] chrdev_open+0x4d9/0x600 [ 911.042046][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 911.048516][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 911.062054][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 911.082045][ T31] do_dentry_open+0x816/0x1380 [ 911.086921][ T31] vfs_open+0x3b/0x340 [ 911.091008][ T31] ? path_openat+0x2e2d/0x3830 [ 911.102054][ T31] path_openat+0x2e44/0x3830 [ 911.114498][ T31] ? kasan_save_track+0x3e/0x80 [ 911.123952][ T31] ? do_sys_openat2+0xcc/0x200 [ 911.142391][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.148544][ T31] do_file_open+0x23e/0x4a0 [ 911.156253][ T31] ? __pfx_do_file_open+0x10/0x10 [ 911.163341][ T31] ? _raw_spin_unlock+0x28/0x50 [ 911.168248][ T31] ? alloc_fd+0x651/0x6c0 [ 911.172855][ T31] do_sys_openat2+0x115/0x200 [ 911.177581][ T31] ? __se_sys_futex+0x3a8/0x450 [ 911.182527][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 911.187748][ T31] ? rcu_is_watching+0x15/0xb0 [ 911.192956][ T31] __x64_sys_openat+0x138/0x170 [ 911.197886][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.204105][ T31] do_syscall_64+0x174/0x580 [ 911.208741][ T31] ? trace_irq_disable+0x3b/0x140 [ 911.213971][ T31] ? clear_bhb_loop+0x40/0x90 [ 911.218700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.224661][ T31] RIP: 0033:0x7f0d3775e68e [ 911.229095][ T31] RSP: 002b:00007f0d38637b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 911.237728][ T31] RAX: ffffffffffffffda RBX: 00007f0d386386c0 RCX: 00007f0d3775e68e [ 911.245771][ T31] RDX: 0000000000000000 RSI: 00007f0d38637c00 RDI: ffffffffffffff9c [ 911.254555][ T31] RBP: 00007f0d38637c00 R08: 0000000000000000 R09: 0000000000000000 [ 911.262741][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 911.270819][ T31] R13: 00007f0d37a26038 R14: 00007f0d37a25fa0 R15: 00007f0d37b4fa48 [ 911.279134][ T31] [ 911.282391][ T31] [ 911.282391][ T31] Showing all locks held in the system: [ 911.290180][ T31] 1 lock held by khungtaskd/31: [ 911.296718][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 911.306870][ T31] 2 locks held by kworker/u8:7/1023: [ 911.326671][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 911.336911][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 911.345991][ T31] 2 locks held by getty/5385: [ 911.350671][ T31] #0: ffff8880345500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 911.360638][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 911.370969][ T31] 6 locks held by kworker/0:6/5736: [ 911.376409][ T31] #0: ffff888022ee2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 911.387814][ T31] #1: ffffc90004a87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 911.399895][ T31] #2: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 911.408950][ T31] #3: ffff88803635a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 911.418557][ T31] #4: ffff888034d0b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 911.427913][ T31] #5: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 911.439202][ T31] 6 locks held by kworker/u8:14/8284: [ 911.444768][ T31] 4 locks held by udevd/12664: [ 911.449550][ T31] #0: ffff8880568b4518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 911.458586][ T31] #1: ffff88806618dc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 911.468114][ T31] #2: ffff888056ee25a8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 911.477953][ T31] #3: ffff88803635a1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 911.487572][ T31] 3 locks held by kworker/0:2/14479: [ 911.493220][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 911.504344][ T31] #1: ffffc90004377c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 911.517322][ T31] #2: ffff888030939250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 911.527598][ T31] 1 lock held by syz.2.2748/15562: [ 911.533030][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.542457][ T31] 1 lock held by syz.5.2896/16074: [ 911.547686][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.557107][ T31] 1 lock held by syz.3.2956/16263: [ 911.562296][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.571299][ T31] 1 lock held by syz.9.3094/16765: [ 911.576659][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.585908][ T31] 1 lock held by syz.7.3157/17084: [ 911.591057][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.600332][ T31] 1 lock held by syz.0.3199/17434: [ 911.605522][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.614694][ T31] 1 lock held by syz.8.3275/17902: [ 911.619835][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.628852][ T31] 1 lock held by syz.1.3319/18078: [ 911.634092][ T31] #0: ffff88802a6f31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 911.643213][ T31] 1 lock held by syz-executor/18134: [ 911.648498][ T31] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 911.659829][ T31] 1 lock held by syz.6.3353/18182: [ 911.665031][ T31] #0: ffff888055de1f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 911.675455][ T31] [ 911.716082][ T31] ============================================= [ 911.716082][ T31] [ 911.760289][ T31] NMI backtrace for cpu 0 [ 911.760311][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 911.760331][ T31] Tainted: [L]=SOFTLOCKUP [ 911.760336][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 911.760345][ T31] Call Trace: [ 911.760352][ T31] [ 911.760360][ T31] dump_stack_lvl+0xe8/0x150 [ 911.760388][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 911.760499][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 911.760525][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 911.760545][ T31] sys_info+0x135/0x170 [ 911.760560][ T31] watchdog+0xfd7/0x1030 [ 911.760584][ T31] ? watchdog+0x1c7/0x1030 [ 911.760605][ T31] kthread+0x388/0x470 [ 911.760627][ T31] ? __pfx_watchdog+0x10/0x10 [ 911.760642][ T31] ? __pfx_kthread+0x10/0x10 [ 911.760671][ T31] ret_from_fork+0x514/0xb70 [ 911.760697][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 911.760716][ T31] ? __switch_to+0xc89/0x1420 [ 911.760735][ T31] ? __pfx_kthread+0x10/0x10 [ 911.760754][ T31] ret_from_fork_asm+0x1a/0x30 [ 911.760780][ T31] [ 911.760787][ T31] Sending NMI from CPU 0 to CPUs 1: [ 911.876859][ C1] NMI backtrace for cpu 1 [ 911.876881][ C1] CPU: 1 UID: 0 PID: 18182 Comm: syz.6.3353 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.876905][ C1] Tainted: [L]=SOFTLOCKUP [ 911.876912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 911.876923][ C1] RIP: 0010:__lock_acquire+0x33a/0x2cf0 [ 911.876953][ C1] Code: e2 12 44 09 ea c1 e3 14 09 d3 41 c1 e1 13 41 c1 e4 15 45 09 cc 41 09 cc 41 09 dc 45 89 64 c7 20 41 89 7c c7 24 4c 89 7c 24 18 <4d> 8d 2c c7 41 81 e4 ff 1f 00 00 4c 0f a3 25 13 0b d2 12 73 10 49 [ 911.876969][ C1] RSP: 0000:ffffc90003bff338 EFLAGS: 00000002 [ 911.876985][ C1] RAX: 0000000000000000 RBX: 0000000000020000 RCX: 0000000000000007 [ 911.876997][ C1] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.877007][ C1] RBP: 0000000000000000 R08: ffffffff8176f21f R09: 0000000000000000 [ 911.877018][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000020007 [ 911.877030][ C1] R13: 0000000000020000 R14: ffff88804ab5dd00 R15: ffff88804ab5e8a0 [ 911.877043][ C1] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 911.877057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.877069][ C1] CR2: 0000200000183030 CR3: 000000000e946000 CR4: 00000000003526f0 [ 911.877085][ C1] Call Trace: [ 911.877091][ C1] [ 911.877105][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877125][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877141][ C1] lock_acquire+0x106/0x350 [ 911.877170][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877189][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877205][ C1] ? task_work_run+0x1d9/0x270 [ 911.877229][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877246][ C1] unwind_next_frame+0xac/0x2550 [ 911.877262][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877279][ C1] ? __fput+0x418/0xa50 [ 911.877300][ C1] ? unwind_next_frame+0x8f/0x2550 [ 911.877317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 911.877338][ C1] arch_stack_walk+0x11b/0x150 [ 911.877358][ C1] ? task_work_run+0x1d9/0x270 [ 911.877383][ C1] stack_trace_save+0xa9/0x100 [ 911.877403][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 911.877423][ C1] ? stack_depot_save_flags+0x33/0x800 [ 911.877447][ C1] save_stack+0x122/0x230 [ 911.877468][ C1] ? __pfx_save_stack+0x10/0x10 [ 911.877488][ C1] ? page_ext_get+0x22/0x2e0 [ 911.877506][ C1] ? free_pages_prepare+0x960/0xa60 [ 911.877525][ C1] ? __free_contig_range_common+0x174/0x340 [ 911.877550][ C1] ? free_pages_bulk+0x48/0x120 [ 911.877571][ C1] ? vfree+0x224/0x4a0 [ 911.877587][ C1] ? kcov_close+0x28/0x50 [ 911.877605][ C1] ? __fput+0x418/0xa50 [ 911.877623][ C1] ? task_work_run+0x1d9/0x270 [ 911.877650][ C1] ? page_ext_put+0x97/0xc0 [ 911.877672][ C1] __reset_page_owner+0x71/0x1f0 [ 911.877693][ C1] free_pages_prepare+0x960/0xa60 [ 911.877714][ C1] __free_contig_range_common+0x174/0x340 [ 911.877741][ C1] free_pages_bulk+0x48/0x120 [ 911.877795][ C1] vfree+0x224/0x4a0 [ 911.877813][ C1] ? __pfx_kcov_close+0x10/0x10 [ 911.877843][ C1] kcov_close+0x28/0x50 [ 911.877862][ C1] __fput+0x418/0xa50 [ 911.877884][ C1] task_work_run+0x1d9/0x270 [ 911.877909][ C1] ? __pfx_task_work_run+0x10/0x10 [ 911.877933][ C1] ? do_exit+0x735/0x2360 [ 911.877955][ C1] ? kmem_cache_free+0x182/0x650 [ 911.877976][ C1] ? put_net+0x191/0x260 [ 911.877996][ C1] do_exit+0x73a/0x2360 [ 911.878033][ C1] ? cgroup1_freezing+0x20/0x350 [ 911.878051][ C1] ? __pfx_do_exit+0x10/0x10 [ 911.878074][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 911.878108][ C1] do_group_exit+0x22d/0x2f0 [ 911.878131][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 911.878159][ C1] get_signal+0x121b/0x12c0 [ 911.878184][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 911.878207][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 911.878235][ C1] exit_to_user_mode_loop+0x104/0x730 [ 911.878257][ C1] ? rcu_is_watching+0x15/0xb0 [ 911.878282][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.878300][ C1] do_syscall_64+0x353/0x580 [ 911.878322][ C1] ? trace_irq_disable+0x3b/0x140 [ 911.878342][ C1] ? clear_bhb_loop+0x40/0x90 [ 911.878361][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.878377][ C1] RIP: 0033:0x7f0194f9de59 [ 911.878391][ C1] Code: Unable to access opcode bytes at 0x7f0194f9de2f. [ 911.878475][ C1] RSP: 002b:00007f019534fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 911.878493][ C1] RAX: 0000000000000000 RBX: 00007f019534fc90 RCX: 00007f0194f9de59 [ 911.878505][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 911.878516][ C1] RBP: 00000000000de4d3 R08: 0000000000000001 R09: 0000000000000000 [ 911.878526][ C1] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007f019534fcd0 [ 911.878538][ C1] R13: 00007f0195225fac R14: 00000000000de51a R15: 00007f0195225fa0 [ 911.878557][ C1] [ 912.440571][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 912.447471][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 912.458171][ T31] Tainted: [L]=SOFTLOCKUP [ 912.462507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 912.472576][ T31] Call Trace: [ 912.475854][ T31] [ 912.478784][ T31] vpanic+0x56c/0xa60 [ 912.482774][ T31] ? __pfx___schedule+0x10/0x10 [ 912.487621][ T31] ? __pfx_vpanic+0x10/0x10 [ 912.492128][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 912.498293][ T31] panic+0xc5/0xd0 [ 912.502015][ T31] ? __pfx_panic+0x10/0x10 [ 912.506462][ T31] ? preempt_schedule_common+0x82/0xd0 [ 912.511919][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 912.517376][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 912.523526][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 912.529678][ T31] watchdog+0x1030/0x1030 [ 912.534031][ T31] ? watchdog+0x1c7/0x1030 [ 912.538452][ T31] kthread+0x388/0x470 [ 912.542532][ T31] ? __pfx_watchdog+0x10/0x10 [ 912.547259][ T31] ? __pfx_kthread+0x10/0x10 [ 912.551875][ T31] ret_from_fork+0x514/0xb70 [ 912.556475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 912.561601][ T31] ? __switch_to+0xc89/0x1420 [ 912.566278][ T31] ? __pfx_kthread+0x10/0x10 [ 912.570870][ T31] ret_from_fork_asm+0x1a/0x30 [ 912.575657][ T31] [ 912.579063][ T31] Kernel Offset: disabled [ 912.583381][ T31] Rebooting in 86400 seconds..