last executing test programs: 4m41.950340622s ago: executing program 2 (id=1312): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000005b00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) ioctl(r1, 0x4, &(0x7f0000000040)="f66a0c542e22f80b1b96124b60434c5959ffa869ffceaf23aa6a5560323ecde142f439890f01123f0b34a885fa582ff8bdcc4c4f45c15db6cf6df10ce1abd92a88c4329cc8d1a7ba6d3e2e162f7c729ca61a40acb54930fef24c90e6eeecf2e4e5324ce163f25b215422a7e135300cd826a235c5457c6985aed43b90ab70ea0a6ea6d78bc4be1b591d1912bcc3053014f8cc3896a16a044cddf9a3094f4c7a654ccbb97f6691c6159a671ae6a18911adbebcfaddcb809ada2b1311ff1e3ae90cdfdfaaeebe67c28bc94548f4da70e9ce97eb11a144e95910764e82e6233314a2b1e26ad13bef3332681b940198deba705eee47406da1f645f16348387d34") 4m41.740085333s ago: executing program 2 (id=1313): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0xb, 0x5, 0x4, 0xff, 0x3, 0x8, 0x9, 0xbf, 0x2, 0x8f, 0x76, 0x1, 0x8}, {0xffffffff, 0x4, 0x12, 0x7, 0x1, 0x1, 0x5, 0xf1, 0x6, 0x1, 0x2, 0x8, 0x593d}, {0x7fffffff, 0x7, 0x5, 0x3, 0x2, 0x6f, 0x4, 0x7, 0xfb, 0x5, 0x81, 0xa, 0x1}], 0x1}) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x5, 0x4, {{0x2a, 0x4, 0x2, 0x20, 0xa8, 0x68, 0x0, 0x7, 0x2, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x17, 0x19, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1]}, @lsrr={0x83, 0x13, 0x21, [@local, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0xd2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x26, 0x3, [{0x5, 0x6, "a8299d5c"}, {0x0, 0x3, 'b'}, {0x5, 0x2}, {0x6, 0x12, "a2cc667aa30a3c0ef014cdc389a14ea2"}, {0x5, 0x3, '\f'}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0xf, [{@private=0xa010102, 0x1}, {@rand_addr=0x64010100, 0x1db}]}, @end, @timestamp={0x44, 0x18, 0xc5, 0x0, 0x8, [0x80000000, 0x7, 0xfffffff7, 0x3, 0x8]}]}}}}}) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000200)=@ll={0x11, 0x18, r1, 0x1, 0x4, 0x6, @link_local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)="04fb744d360142197a2182b20e71695e3ddb851e2093a8d2a3f1a898f5b3d0fefea7c3353ec9d46ef509f6a242576df295d315b763c35acc1a8f6f90e0b0c6a863296d1ac71cfcff3767869fc714401d33f80c5ba0913e32e25ad7ab487854b839584fe4edbc3d644078ece47a5c7766f9e3dad5448e71eb6cf8f098961f70174c75598e37c21bf7500437647c72033d3b7478fdb40993883df49c17fa252a7f65136f8b464fe13d8bd2492699", 0xad}, {&(0x7f0000000340)="cdd5b12380899cb52faa4e3f019dfed05432d846d6fcf25c93596467167a7de31a4f0ca121c165429ab7f56423cbea6780157cfe317c0e6dc3ecb3e31c16e571c6176bacdd306ad8aaae1c2937baf0b675233cc6309ec03e3dab962880cfadc1904bb96af17a92c3039f67c23bd5bb2ea6a292bb9358020d8bf43f846299341fa01b65da82777771c93efa021c86f4dac2a3bea52457cb13cdeecf18f8f3ac267abab065493633c91ebb53d68c0ed5b84533469f29f68c757514fa132a1154b2684d", 0xc2}, {&(0x7f0000000440)="67fd2b75418dc173dfcae7da7a7cd77c99df7f007c2dd2fdea23ee72aabd15647f4389126a27823b67e6259cb24638e08b45b1314fc2cf706a94e84abbc3ee934a4e07d71a6212d8c4b39998507edbc1dceff637c077c09f634457121f6366a22b092d0d21e99909e3e1f787248b1b91368e29cc3b05973f9bab465acd02897b04b96d779e4d653f6d2245a12558076f82fa8c4e2eebfeeaf0d437bcb774263ecf327afca4d7ffe9da6de9e38dd24253a6fc9c686d36cb88703f8273cbdcf0bca851ddc6cd24fe40d430d886f4be4a9270d69539a8fcf13fd68fba490c7dc123287296c65050f93b09a0b022ee08e7668b50adeba16e6247f6", 0xf9}, {&(0x7f0000000540)="ca526633d1c830661dadf0c6fa0f53592b839459ced6f3346be3cf18e0d25fbaf032e09bd766f90f700d0d83c4928618e0c48531607e7af19809ee977b841a1da80ee7ca1ebd280b09fa0a47c523ce4099a0b1aad1af8e80c4ffdd6f502aac7c7326c26a32c85cee28590edf107a90cd6cae9b28bd225a314485650b0d201d6cff213f2424bfcc1d695300bd691a1159ca5948d8", 0x94}, {&(0x7f0000000600)="40c1c4e7f30a30f01a5349d9900c372a369c6dec9ce9c0286a94fe4b22312bc6d4600cee7a67bd8738f02ef303b8e897535dd2599673d7c097efca0e6ccb1515c97ab04014", 0x45}, {&(0x7f0000000680)="eff2a19b7afc48814355d233ab308c04de86d2ae60e466af415c78d0c9e9ca31fcdb59fa61f94f534c5363a937022513b52685e6be35df5424a5a11089fb1ab06fbf06050cd13f9f322f6e00550dbb95037895563867eb33e8de8905002fea0c41c8450ebb642a9d36446f96fc6c34c94d644837de5793333d051c251c9b778b1b97299a19a8fd24d00d8573bd39370527f94ba35b49b2c9d81cfb56f902feec3b8a82121a6b4734c458c7c0cdf232bdcfb33801cb6ad6f01bdf38c46a515265cd1cb9ec9326651a60a3d49caba6a4c940992f0bb680026feaae5c0d50e041d348cdfba0762c5f38e7bdf916d15b5f44acc40cbf2a92", 0xf6}], 0x6, &(0x7f0000000800)=[{0x28, 0x118, 0x800, "25398db317e0f0ae376be71c48f9101d758996"}, {0x68, 0x107, 0x5, "ac117d935f6254195b62aa36d3aebece1eada05e96b7c0821eec1a778598df9216428e1013a62249a4e1e4bad3a0a42d099876e36678482e20aed6e5c805a1803ab97faafdb18438d8c50ea1df0dfb4ab0ac99"}], 0x90}}], 0x1, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f00000009c0)={0x80000000, 0xe, 0x1e, "cdce475e3c520c5066de9a02208892e1f916ea80898d1f92fe6dcd63be42b5e5de5f8044edd652203c675b993d7fdcf19843bd3b1dca700e40f66923", 0xb, "cb44cd0430e4e95eff1e275ab27a105412fde6e251a3556a794f77fed3fade27863b66228a1c559fc0331d1bf0a6e5a9d2deb99ece42a95933c36108", 0x30}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000a80)={0x0, 0x300, [0x5, 0x10, 0xfffffffffffffff9, 0x4, 0x9, 0xf]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x121, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "df120ecb189d371c7d3d6543cb701c5a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6785f264d33d"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r5 = accept4$packet(r0, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c80)=0x14, 0x0) close(r5) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x400, 0x0) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f0000000d00)=0x4) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x3}, 0x8) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000d80)=0x2, 0x4) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40041}, 0x20004800) (async) r9 = accept4(r3, &(0x7f0000000e80)=@xdp, &(0x7f0000000f00)=0x80, 0x80800) (async) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000f40)=0x4) (async) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000f80), 0x100, 0x0) write$fb(r10, &(0x7f0000000fc0)="39b0fa7e2b1e20e0af0cbaddf95b330bd2d0d956aa70d6a8edf839cf0227ce1716d1d3f46e857927b0849b3812b542c73384aca8767c1d76de9c1930a3694305a61626197eef582d9bd490", 0x4b) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001040)={0x0, 0x0}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r11, &(0x7f00000010c0), 0x4001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl2\x00', r6, 0x29, 0x10, 0x7, 0x7, 0x10, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x7, 0x7}}) r12 = syz_open_dev$dri(&(0x7f00000011c0), 0x8, 0xc100) ioctl$DRM_IOCTL_MODE_ADDFB2(r12, 0xc06864b8, &(0x7f0000001440)={0x0, 0x0, 0xfffffff8, 0xff, 0x0, [], [0x8, 0xe0e0, 0x1, 0x9], [0x9, 0x2, 0x5, 0x2], [0x81, 0xa9, 0x7ff, 0xac]}) 4m41.658217182s ago: executing program 2 (id=1314): syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x4045) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="62b93be65d0d56e504ff71a3273c8c34e4b2559c6942faabacc284282e0ed627a203ecce2f1657d4dc6a67005798ccb65d1ba439079028a99b165bf7baa52a57b8633a500864506fc00c57e7dbf6d17c9ccb1e64075939008bc56ca4be9564a46a8c96d970a539eac44578fdef89da79dbffe2f32fca2ad25c53bb7bb5901eb0f78a66fadfdacc06c72784d409b662c29df2261d2caea7d79dcca1908f97a245821a62fcd05b19886c291ec4adf0e74b64dfb7ce625e0eec6b58377f3982607519806231efb69525035bf84e06c47b2b874dd85f1bf26cae2d00"], 0xb4}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 4m39.791238877s ago: executing program 2 (id=1320): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x300, 0x0, 0x0, 0x309eba7ed7b7db85}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002000000eb68534826be523a6d01ff0000000000f01881a1deb9fbff22"], 0x48}, 0x300}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x62000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x5, 0xb4, @buffer={0x0, 0xb8, &(0x7f0000000640)=""/184}, &(0x7f0000000500)="ae0acad5f3", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r5}) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010c61cff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x4001, 0x3, 0x3c8, 0x140, 0x0, 0x148, 0x140, 0x148, 0x330, 0x240, 0x240, 0x330, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x84, 0x1, 0x31}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e23, 0x4e22, 0x4e30, 0x4e20, 0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e25, 0x4e24, 0x4e20, 0x4e20, 0x4e20], [0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1]}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x85d, 0xf, [0x12, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x41, 0x417, 0x19, 0x24, 0x2c, 0x3d, 0x7, 0x3b, 0x1e, 0x1], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x1, 0x1, 'syz1\x00', 0xff}}, @common=@icmp={{0x28}, {0x10, "ca5d"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="55adff6f49ac", 0x32, 0x2, [0x21, 0x2a, 0x26, 0xa, 0x18, 0x3a, 0x1d, 0xd, 0x28, 0x2b, 0xa, 0x36, 0x8, 0x1f, 0x13, 0x33], 0x2, 0x4, 0xce1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r9, 0x0, 0x0) 4m38.182052833s ago: executing program 2 (id=1331): io_setup(0x5885, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x8, 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000200)=0x7, 0x4) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/94, 0x5e}], 0x2, 0x4, 0x4a915c89) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r3, 0xfffffffa, 0x9, 0xf6}, 0x10) syz_usb_connect(0x6, 0x9e5, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2f, 0xb5, 0x15, 0x8, 0x5e0, 0x2001, 0x82b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d3, 0x4, 0xa, 0x54, 0x60, 0x1, [{{0x9, 0x4, 0x6f, 0x8, 0xb, 0xd, 0x53, 0x7f, 0xb, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x7f, 0x4, 0x1e, [@generic={0x53, 0x7, "0e815547a380d7d7e48ed41cac8d27b670b023233dfec90ec192908bbd7775d54b27abb0b960ab25ed2f5fc7e0ac2df496cc5953c37eb9425e74ec4d167b27a9bc0efbd2d1903b123e9b987639606cb4ac"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0xff, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6, 0x1, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x2, 0x29, 0x20}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x5, 0x6, 0x2, [@generic={0x7b, 0xc, "819d7a68c14b929c3719873ce96892ecd9e64c33001ff665a23df4d1bf3ffa5ad1a79c00683eb0e20b4f0259251327c7d3379ec319b76203f718de73c13b18f2e80ef477fb3ba3cfd16f641834d697b366659df30a189af55ff8f754129460a74a5af6a60c3b9823d309e061bfb5b5f3a063e2df8f338ce1b9"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x9, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xb}, @generic={0x60, 0x3, "68504de436531bce8f9a086539f82b4e090b4f01989ed21df4fb08d97a20cf4fc94823d1704ebc8bec3b2342ba1962807b0578f9496589315eb7be332bcf60cac314f5ee17dd13d6e49fe8a291dc3484c18c269a4aee18d41b4874ffa031"}]}}, {{0x9, 0x5, 0xc, 0xd055f1f8a25bd239, 0x40, 0x4, 0x9, 0x9, [@generic={0x73, 0x7, "e0b323f901c39435bbf9c85374fdffa93fcb9d3dec4eb6e95b71f7e98ba94d5503a8b3fdf38d8643f6a6f3c5717ed0a79568e0a6da0c60477959aa2aed7caff66579fdd36de828a8bd38dd0a56ae492bfb4e1ad7be5bfdf88502864f713de52ec7b739effa3db2104fd024e52dbef1d166"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x3, 0x9e, 0xb}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0xa9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x6f, 0x5, 0x40, [@generic={0x16, 0x24, "28656deb30511cbc8a85c2c2d491ec1046eacd73"}, @generic={0xa9, 0xa, "c57955a7da01acb4fd48e2975b0df9ccb2508a8d259b4120c66bd6ef3f0d4dc7279fbd8933c9a669f170803e291e42ac4a47fb8dd0a261a34f045ae8bfda8cb6e82578c5a2f60bff642dae0b094a3de1f1b93208b1dc610e21c8d88304dcf3255adf131fa7f3263b2de08ba62b62fe7baa5feab2872401f3bd79f3dc4b82f20141db646929a2132b8a490b982b0cf9674524a95f5c6a9fa08abce932bb6d8ad0d019c9ee460223"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x10, 0x6, 0x2}}]}}, {{0x9, 0x4, 0x41, 0x4, 0xb, 0xfe, 0x3, 0x0, 0xea, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "d860092a20"}, {0x5, 0x24, 0x0, 0x22d}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x1, 0x401, 0xb3}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x0, 0x5, 0x6e, 0xff}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x7d, 0x3, 0x8, [@generic={0x60, 0x21, "334c50051fa0ae565379bdd8d9f885fa34476ab705769a0409cb59a5e2dab3251f21a8faeadd03f11fc02f66da1768482d436199daacc4d712438d9ed8090a73c367731cb32ace119acd59b93202031c51da9821922106a888e9da34e46d"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x80, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9590}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0xd8, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x2, 0x5, 0x0, [@generic={0xa3, 0x3, "83a5045110baaa0a11014ce84937e95ba77049329d9c7acff7c7e7052f32fcdc2c2a075ca5e9ebce8c6561e46db0e1e11ff1ef8c953f299c0340e44ed2fb1b8fbde0496ef970aca1f8e0204c62549c5b5534e6f151ad84d1f7dca1b7bbcb75a149e5f0287a4cbedf322db4836ce38f416d90f9591592743fef6a7d0e6727169d765db396c05ce9e038bea936cd76c87b64c37d40e50d0b0ca1d36f8214c950c15e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x39}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0x9, [@generic={0xa1, 0x1, "49c2186a1f6382ec524758af63346dc2a379170fa43bb5d021127a16478d5e08fd980b8884a11743d2030d279301077c2f52171a9a9319c236b287cc76dbbafbb76c36effaa8c0aa41137b53fb0a66bc546de0a1f95e535bd36b802afc19d8cf51062f707bdf27742aa7fc7cad79f6c83b1381ae246416e1f0092025820cced0ed1b1b392706c9d17952441e76df6efd13f85585c5d02e968aa9ccad21fe1f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x9, 0x9, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x82, [@generic={0xc2, 0x7, "e5802f66282ded575b8d66019c9e0df9557acbc0027cc3653f2344e3acf2d8ad8f8518857bed1304f7d2c115666956a55c84e04c6a553971c7eb6bc6872bc596c7829cb451ef5e794991ed1f86bdc822fa96156d17dc1a961c363e352a9ddcd56385dcfb3c973ce2ccf6457daee5c06be400d3b4c521f9d15b3e1dd0350a25f0ed9416e51c0ff969325d7ffb13c903b1e51bba69fd0647df2e0a46113d442387e5b1c3048eae5ecb8122408c74af247693c678dafe1d6821713eb32c21c38e51"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x74, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x18, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x4ee}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0xa, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x7, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1}}]}}, {{0x9, 0x4, 0x3, 0x0, 0xc, 0x82, 0xe3, 0x22, 0x6, [@uac_as], [{{0x9, 0x5, 0x3, 0xc, 0x400, 0xff, 0x8, 0x4, [@generic={0xb5, 0x26, "38117f3cdc1bb4900f9d0fe39613b9c1df2de236d481d57c92d8b00071120d65bc92cadff727f0a1ce79e6a74c1bbd9739f253f56584fdbfcaab4e1afd9381e9713ae841041685f5851352a690fc57d36d5e432034a085ce84489d2aa504387b985ef997a797d418a23c92d772600bb7e252ff05ac384866b432d15eadd0a7d2ead80cb2fdb359841c624f2210208f741a0132481e844fdb55f14bdc7b47239efb5f03f6767546979e09e528f5827752e4b4ea"}, @generic={0x3d, 0x6, "ee7a35dcf96489805ba5fdc60c22054f3e4b0b28245a31308f1ca71f36a707e7fb3a3baa6c5c1dac588b15e929c207d8d4ac0a01044243070abf73"}]}}, {{0x9, 0x5, 0xd, 0x13, 0x400, 0xf, 0x81, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x6}, @generic={0xde, 0x21, "a3cdef3c74f85f97a66544b38f805a872832817e2224c47a8c393d9b24ce21fb7b08ebfced6a89a07235f50e60dfcf42545f5f38a36939d3af2a3d2e1bbd77ecfbba2b12ce260b8605b552f2b2d4d5784ae8210d67c01502e6e1832eee24c1f2762c8b8fe6891f097e7fc96d2c1aecea89bcaefbf14aea339398b9999a4048e3e1d41833cdbf80ed063fd2f2aec2289a84ec34d97c151eb98dd7292ed828c3188dbd381d1a53f56527dadee975bbb319638fabd5a09ac0b18e82408f2acc619d8ca59457fec71da24a990f74476613bbdf6514993f27c15c645fb119"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0x22, 0x7, [@generic={0x4d, 0x31, "091c47aed6a893566c51a8c842e385e56b7564fb0cb02f68fc13f06d2a5fab5dbe26624f0f065bb39db879784082b20a1917cf9301244a80a0172be2e2b44bd42d1060a9b6769f9042f41c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x9, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3c, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x9, 0x6}}, {{0x9, 0x5, 0x5, 0x9, 0x40, 0x8, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x7}, @generic={0x72, 0x11, "9a735b683c91e3719a3c43c8a7397fe35562bb055922bdf8471e1ef50418a45ae9b5809583667d5458fb493a0fc6a110ee7c592d3886cb53dbb5e6d7ae8ffddf4bf2261d8ea851e6aab115cbbe81890803aa97c7b2bdfac7c4735960cf75ce38b1bcee9254ff26bf63866c9da9825328"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xc0, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0xa59}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x2, 0x95, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x85, 0x0, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x2, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2b}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x3, 0x7, 0x6, [@generic={0x81, 0x1, "8ebc5c0eac227cedea861cf317c2275d1bb9ee27c268672a286bf12a352f15060a3fd6321a6ec2f303f34097cd067ebde3202a2fb4b4b8795a75842546f0bcd2d884bd84901ffb5472c7f569a3277d09a349afaccf20959bc4c59cecc8d6aba5f683f3f39ed5c441bb3dad333a06e0af5366a5f6f1c356a1e64289b6c9528d"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x4, 0x3, 0x5}}]}}, {{0x9, 0x4, 0x68, 0xf9, 0x0, 0x70, 0x4f, 0xc2, 0x3}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x1, 0xad, 0x3, 0x8, 0x6}, 0x43, &(0x7f0000000f00)={0x5, 0xf, 0x43, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "32732ea7ddaa232e88b65f161b942e19"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "28f99fd7545bfcd13fe9d8f971e5e456"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x24, 0x1, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x64, 0x8, 0x9, 0x8, 0x3}]}, 0x3, [{0xd3, &(0x7f0000000f80)=@string={0xd3, 0x3, "d0fdac14d4ca2270a438cc8d8931ef6237c483709dcbbb44695d203a17f360eae0de067a3746aaafa4e5f50f7af6fb8d49c737c4b13f27a0fc8816d998a9a999e8443a735e65efd8802a6bd06604b9078f29a98e0fcb6a099a2977d03b323d14fed464f5a30fc03ab1a27a1e01d8aea778d8afc66f76a7b144120fec30fe83ca4a94080734cbf451bb2ba4523483a186dc36acb753d91ee497172877b675ff8f984dd8ee6b2d0b5b740a6258f9dc66ae667133bb7f9011be67b3b470bba055b679a269b8fe54716df0c1a117a297f7f713"}}, {0x7f, &(0x7f0000001080)=@string={0x7f, 0x3, "80e139cd87a62a208999221345e826cb1592e2f5cc3b8b0b7a6a894f58b40031c08e807074cabecec49fb7ba9523e1113b8c24ce533b5b0babbff5d77c69f7f4f4512559f046e7feb615a92781554822883fd4885875addfe8ca8e075c101d80f5577fc47b90d33f93e8552072dcbb34331b3ed14d5794d656dcd3ee25"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x424}}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000001180)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x8, 0x3}, 0x20) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000011c0)={r3, 0x5}, &(0x7f0000001200)=0x8) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001240)=0x1) listen(0xffffffffffffffff, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001280)={'wg1\x00'}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000012c0)={{0x2c, @multicast1, 0x4e23, 0x4, 'nq\x00', 0x1, 0x2, 0x24}, {@loopback, 0x4e21, 0x4, 0x3, 0x6, 0x3}}, 0x44) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001380), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000013c0)={'wg2\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'veth0_to_batadv\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000002640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f0000001440)={0x119c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8946}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "22c047c1e2875e3b109914a0bd3b24d827d2c3fe7109ee9abfe15be85c4ba824"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}]}, @WGDEVICE_A_PEERS={0x5a8, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7b4cd1c2171805fb8ad20a48669d9c9284e7cf1b13c1d9a66a64f37448f6c5e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4f0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x3e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b23ec9a8fd87f4c3d2d689f95bfe06348e35c2ef7d30aaabd0d5c4f91d7cc5c"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "16b40affe144e2889a4d7c6ecbbfb38f7bfda5284f0bd1ad6a8f1d723392b10b"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}]}]}, @WGDEVICE_A_PEERS={0xb00, 0x8, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @remote, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x14c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x90c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "759089dc8ad6e5fd4969524133d8b0eba2801b27876206130b175181a6056cdc"}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x428, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x7}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x119c}, 0x1, 0x0, 0x0, 0x840}, 0x26000810) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002680)={'macvlan0\x00', 0x2}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002700)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x100080c0) (async) r10 = syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000002840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000002880)) (async) pwritev2(r2, &(0x7f0000002900)=[{&(0x7f00000028c0)="c29be2c323e3d1f6", 0x8}], 0x1, 0xcf, 0xf84b, 0x0) (async) r11 = openat2(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x10080, 0x2, 0x2e}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f00000029c0)={r5, 0x53, "cce13ec76e0769a9ae53ea0951b48f0e81ef350662a0b1c499dd9713bf7222579bb51e4d53e236888631e509383c48eca049ff27432af3412ac149a0d4f0275202953992dcf753a154e7fed1cc264cf0e5e358"}, &(0x7f0000002a40)=0x5b) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000002a80)={'caif0\x00', 0x8000}) 4m38.001857472s ago: executing program 2 (id=1332): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}]}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f000001d600)=@delchain={0xe88, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x8, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6, 0x5, 0xdf1162e24d7f6227, 0xc, 0x7ca}, 0xd, 0xf6}, [{0x10000000, 0x3, 0x1, 0x6, 0x80000000, 0x8}, {0xa, 0x0, 0x5, 0x7, 0x3, 0x7fffffff}, {0xff, 0x7, 0xc84, 0x2, 0x1, 0x3}, {0x1, 0x2, 0x100, 0x5, 0x40, 0xfffffffc}, {0x1, 0x4, 0x790, 0xfffffc00, 0x0, 0x8f7}, {0x4, 0x1000, 0x1, 0x5, 0x4cfb, 0x90}, {0x8, 0x6, 0x6, 0x2414, 0x10001, 0x7c46}, {0x3ff, 0x7, 0x3eb57221, 0x101, 0x8, 0x7}, {0x4, 0x6, 0x1, 0x10000, 0x2, 0x7}, {0x8, 0x6, 0x1, 0x9, 0x9, 0x7}, {0x10000, 0x81, 0xd, 0x401, 0x70e64856, 0x8}, {0xff, 0x91, 0x88, 0x1, 0x10000, 0x4}, {0x27c0a2f2, 0x100, 0xfffffff8, 0x7872, 0x1000}, {0xfffffff0, 0x4, 0x3ff, 0x7fffffff, 0x401, 0xfffffffb}, {0x9, 0x1000, 0x7, 0x8abb, 0x2, 0x2}, {0x8000, 0x3, 0x63f, 0xfffffffb, 0x6f, 0x8}, {0x3ff, 0x4, 0xfffffffd, 0x200, 0x2fbb, 0x5}, {0x5d3, 0x6, 0x8822, 0x4, 0x4840efa0, 0x401}, {0x4, 0x3, 0x80, 0x400000, 0x10000, 0x9}, {0x4, 0x7ff, 0xc8, 0x609, 0x3, 0x7}, {0xc, 0xa, 0x6bc9, 0xd75a, 0x3, 0x1}, {0x816c, 0x2ca, 0x0, 0x5471, 0x7fff, 0x9}, {0x1ff, 0x41a, 0x6, 0xfffffffd, 0x4, 0xfffffffa}, {0xb7, 0x100, 0x80, 0x3, 0x80000001, 0x9}, {0x2, 0x55f2, 0x10000, 0xffe000, 0xfffffffe, 0x3}, {0x1, 0x2b, 0xa59, 0x8501, 0x9, 0x6}, {0xbaec, 0x39, 0x0, 0x5, 0x7ff}, {0x40, 0x7, 0x9, 0x5, 0x1, 0x7ff}, {0x7ff, 0xb37, 0x9, 0xfb, 0x3, 0x1ff}, {0xfc, 0x4, 0xffff749d, 0xd, 0x45, 0x3}, {0x5, 0x1, 0x6, 0x10, 0x6, 0x80}, {0x2, 0x8, 0x38, 0x7, 0xaa, 0x8000}, {0x4, 0x80, 0x5, 0x5, 0x9, 0xd5}, {0x6, 0x1f10000, 0x0, 0x4, 0x2e495bb3, 0x1}, {0x7, 0xfffffffc, 0x910, 0x6, 0x5, 0xb}, {0x6, 0x34e, 0xffff, 0x160000, 0x9, 0x2}, {0x8, 0x6, 0x3, 0x6, 0x68, 0x8}, {0x3, 0x8, 0x1, 0xa1d7, 0x2, 0x9}, {0x6e, 0xa, 0x0, 0x7c0, 0x3, 0x1}, {0x0, 0xd7, 0x8000, 0xd7a1, 0x1, 0x800}, {0xb, 0xfffffff8, 0x2, 0x1f, 0x4, 0x4}, {0xe, 0x2, 0x7fffffff, 0xfffffffd, 0x5, 0x2}, {0x2, 0x0, 0xfffffffa, 0x93f9, 0xfffffe00, 0x1}, {0x9, 0x7, 0x2, 0x0, 0x3, 0x3}, {0xffffffff, 0x7fffffff, 0x9, 0x4, 0x2, 0x8a86}, {0x6, 0x6, 0x5, 0x7000000, 0xfffffff5, 0x200}, {0x4, 0x100, 0x4, 0x6, 0x7, 0x9}, {0x1ff, 0x101, 0xe10d, 0xf, 0x0, 0x3ba9}, {0xffffb72d, 0x0, 0x259, 0x401, 0x0, 0x10}, {0x80000001, 0x8, 0x3, 0x1, 0x9, 0x3}, {0x4, 0x1, 0x8, 0x80000001, 0x70b, 0x7ff}, {0x7, 0xace, 0x4bfbdcfa, 0x4, 0x1, 0x7065cb9c}, {0xfffffffd, 0x5, 0x4, 0x7, 0x6, 0x7}, {0x7fff, 0x3, 0x0, 0x34, 0x8, 0x7}, {0x8, 0x2, 0x1000, 0x3, 0xd31, 0x6}, {0x4, 0x1, 0x10001, 0x9, 0x7, 0x844}, {0x4, 0x0, 0x54a, 0x5, 0x0, 0x1}, {0x80000000, 0x4, 0xfffffbff, 0xffffffff, 0x9, 0x5}, {0x3, 0x80, 0x3, 0x1, 0xc0000000, 0x4}, {0x3, 0x8, 0x3, 0x1, 0x1, 0xf}, {0x1, 0x6, 0x8, 0x0, 0xfffffffe, 0x6}, {0x0, 0x1000, 0x5, 0x6f19, 0x9}, {0xd, 0x5, 0x6, 0x1, 0x0, 0xd}, {0x7, 0x8, 0x8001, 0x80000000, 0x5, 0xbbc6}, {0xfff, 0x0, 0xed99, 0x2b, 0x7e, 0x1}, {0x1, 0x2, 0x28000, 0x9, 0x8}, {0x40, 0x6, 0xb, 0x80, 0x9, 0x1}, {0x9, 0x3, 0x1, 0x3, 0xf, 0x6e80}, {0xff, 0xb0a, 0x80, 0xd, 0x7, 0x14c}, {0x7aaf, 0x1, 0x9, 0x0, 0x8, 0x1}, {0x5, 0x5, 0x4, 0x2, 0xb5b}, {0x4, 0x80000000, 0x9, 0x2, 0x3, 0x9}, {0x7, 0x0, 0x460, 0x800, 0x9, 0x7}, {0x3, 0x81, 0x4, 0x4, 0x7, 0x3}, {0x94f, 0x8, 0x5d99, 0x0, 0xd, 0x7}, {0xf8, 0x1, 0x5, 0x2, 0x1, 0x80000001}, {0x38, 0x5, 0x2, 0x1, 0x2, 0x884}, {0x1, 0xfffffffe, 0xffffefc5, 0x10, 0x5, 0x9}, {0x5, 0x16, 0xfffffffd, 0x19, 0x5, 0x80000000}, {0x143, 0x0, 0x7, 0x9, 0x101, 0x3}, {0x0, 0x5, 0x3, 0x4d, 0x3, 0x3}, {0x2, 0x9, 0x401, 0x6, 0x6, 0xfffffffd}, {0xff, 0x380, 0x5, 0x7, 0x2, 0x3086}, {0xfffff800, 0x8, 0x8, 0x84c, 0x4, 0xc9}, {0x2, 0x8, 0x9, 0xb, 0xff, 0xc}, {0x3, 0x3, 0x3, 0x4, 0xd, 0xfffffffd}, {0xc5, 0x0, 0xffffffd6, 0xffff, 0xfff, 0x4d}, {0x4, 0x6, 0x101, 0x100, 0x9, 0x31}, {0x4d, 0x5, 0xff, 0x9, 0xf, 0xffffffff}, {0x9, 0x3, 0xd, 0xe, 0x101, 0x5}, {0x9, 0x1, 0x4, 0x3, 0x7, 0xe559}, {0x7, 0x4, 0x0, 0x9, 0x7, 0x1000}, {0x401, 0x8, 0x2, 0x8, 0xd, 0x59}, {0x5, 0x8f, 0x8, 0x10, 0x9, 0x8}, {0x7, 0x3, 0xce, 0xdb99, 0x78, 0x81}, {0xfffffffe, 0x10001, 0x1, 0x0, 0x0, 0x7}, {0x5, 0xfffff602, 0x400, 0x484b}, {0x7fff, 0x5, 0x1, 0x8, 0x1, 0x2}, {0x100, 0xed5, 0x8000, 0x6, 0x2155, 0x200}, {0x8, 0x34, 0x0, 0x10001, 0x7f, 0x9}, {0x1a1, 0x6, 0x8, 0x8, 0xff, 0x81}, {0x7, 0xffffffff, 0x6, 0x80, 0x0, 0x5}, {0xe, 0x8, 0xd, 0x100, 0x95a4, 0x80}, {0x5, 0x2, 0x7, 0x401, 0x1, 0x401}, {0x3, 0x2, 0x9, 0x4, 0x7ff, 0x1}, {0xb, 0x2, 0x8, 0x2, 0x7, 0x3}, {0x8, 0x2, 0xc42d, 0x4, 0x4, 0xffff}, {0xfffffffa, 0x0, 0xfffffe00, 0x1, 0x80000001, 0x7}, {0x4, 0x9, 0xb21, 0x9, 0x38, 0x4}, {0x8, 0x9, 0x2, 0x16, 0x100, 0x7}, {0x4, 0x2, 0x7, 0x6, 0xdccb, 0x4}, {0x0, 0x6, 0x7, 0x9, 0x3, 0x6}, {0x4a0a, 0x3, 0x6, 0xfffffc00, 0xd43a, 0x2}, {0x0, 0x6, 0x7, 0x80000001, 0x400, 0x5}, {0x0, 0x5, 0x1000, 0xf4cf, 0x3, 0x5}, {0x800, 0xc5d, 0x2, 0x0, 0xef, 0x8}, {0x6, 0x7ff, 0xd45, 0x101, 0x8, 0x8}, {0x200, 0x57a, 0xe1, 0xffffffff, 0xe1, 0x6}, {0xb44, 0x2, 0x4bac, 0x3e3, 0x4, 0xffff1c94}, {0x8, 0x8a4, 0xdc74, 0x4}, {0x0, 0xdfa, 0x9, 0x4, 0xcfea, 0x1}, {0x0, 0x48, 0x5d5, 0x3, 0x3, 0x2}, {0x80000001, 0x68, 0x0, 0x1, 0x3, 0xfd72}, {0x1, 0x80000000, 0x4, 0x6, 0x7, 0x70b}, {0x7fff, 0x200, 0x7, 0x5, 0xfed, 0x8}, {0xfff, 0x5, 0x3b22, 0x9, 0x0, 0x8}, {0x1, 0x5, 0x1000, 0x1, 0x2, 0x10000}, {0x7, 0x8, 0x4, 0x6, 0x2}], [{0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x8bfae17b4fe9ca8d}, {}, {0x0, 0x7b612c70bcccfe08}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x6}, {}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x199770ca245ea55e, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x7ca8be81dfa35eb5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x4}, {0x4, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r5, &(0x7f0000000280)="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", 0x100000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 4m22.914728836s ago: executing program 32 (id=1332): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{}, {}]}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f000001d600)=@delchain={0xe88, 0x65, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x8, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6, 0x5, 0xdf1162e24d7f6227, 0xc, 0x7ca}, 0xd, 0xf6}, [{0x10000000, 0x3, 0x1, 0x6, 0x80000000, 0x8}, {0xa, 0x0, 0x5, 0x7, 0x3, 0x7fffffff}, {0xff, 0x7, 0xc84, 0x2, 0x1, 0x3}, {0x1, 0x2, 0x100, 0x5, 0x40, 0xfffffffc}, {0x1, 0x4, 0x790, 0xfffffc00, 0x0, 0x8f7}, {0x4, 0x1000, 0x1, 0x5, 0x4cfb, 0x90}, {0x8, 0x6, 0x6, 0x2414, 0x10001, 0x7c46}, {0x3ff, 0x7, 0x3eb57221, 0x101, 0x8, 0x7}, {0x4, 0x6, 0x1, 0x10000, 0x2, 0x7}, {0x8, 0x6, 0x1, 0x9, 0x9, 0x7}, {0x10000, 0x81, 0xd, 0x401, 0x70e64856, 0x8}, {0xff, 0x91, 0x88, 0x1, 0x10000, 0x4}, {0x27c0a2f2, 0x100, 0xfffffff8, 0x7872, 0x1000}, {0xfffffff0, 0x4, 0x3ff, 0x7fffffff, 0x401, 0xfffffffb}, {0x9, 0x1000, 0x7, 0x8abb, 0x2, 0x2}, {0x8000, 0x3, 0x63f, 0xfffffffb, 0x6f, 0x8}, {0x3ff, 0x4, 0xfffffffd, 0x200, 0x2fbb, 0x5}, {0x5d3, 0x6, 0x8822, 0x4, 0x4840efa0, 0x401}, {0x4, 0x3, 0x80, 0x400000, 0x10000, 0x9}, {0x4, 0x7ff, 0xc8, 0x609, 0x3, 0x7}, {0xc, 0xa, 0x6bc9, 0xd75a, 0x3, 0x1}, {0x816c, 0x2ca, 0x0, 0x5471, 0x7fff, 0x9}, {0x1ff, 0x41a, 0x6, 0xfffffffd, 0x4, 0xfffffffa}, {0xb7, 0x100, 0x80, 0x3, 0x80000001, 0x9}, {0x2, 0x55f2, 0x10000, 0xffe000, 0xfffffffe, 0x3}, {0x1, 0x2b, 0xa59, 0x8501, 0x9, 0x6}, {0xbaec, 0x39, 0x0, 0x5, 0x7ff}, {0x40, 0x7, 0x9, 0x5, 0x1, 0x7ff}, {0x7ff, 0xb37, 0x9, 0xfb, 0x3, 0x1ff}, {0xfc, 0x4, 0xffff749d, 0xd, 0x45, 0x3}, {0x5, 0x1, 0x6, 0x10, 0x6, 0x80}, {0x2, 0x8, 0x38, 0x7, 0xaa, 0x8000}, {0x4, 0x80, 0x5, 0x5, 0x9, 0xd5}, {0x6, 0x1f10000, 0x0, 0x4, 0x2e495bb3, 0x1}, {0x7, 0xfffffffc, 0x910, 0x6, 0x5, 0xb}, {0x6, 0x34e, 0xffff, 0x160000, 0x9, 0x2}, {0x8, 0x6, 0x3, 0x6, 0x68, 0x8}, {0x3, 0x8, 0x1, 0xa1d7, 0x2, 0x9}, {0x6e, 0xa, 0x0, 0x7c0, 0x3, 0x1}, {0x0, 0xd7, 0x8000, 0xd7a1, 0x1, 0x800}, {0xb, 0xfffffff8, 0x2, 0x1f, 0x4, 0x4}, {0xe, 0x2, 0x7fffffff, 0xfffffffd, 0x5, 0x2}, {0x2, 0x0, 0xfffffffa, 0x93f9, 0xfffffe00, 0x1}, {0x9, 0x7, 0x2, 0x0, 0x3, 0x3}, {0xffffffff, 0x7fffffff, 0x9, 0x4, 0x2, 0x8a86}, {0x6, 0x6, 0x5, 0x7000000, 0xfffffff5, 0x200}, {0x4, 0x100, 0x4, 0x6, 0x7, 0x9}, {0x1ff, 0x101, 0xe10d, 0xf, 0x0, 0x3ba9}, {0xffffb72d, 0x0, 0x259, 0x401, 0x0, 0x10}, {0x80000001, 0x8, 0x3, 0x1, 0x9, 0x3}, {0x4, 0x1, 0x8, 0x80000001, 0x70b, 0x7ff}, {0x7, 0xace, 0x4bfbdcfa, 0x4, 0x1, 0x7065cb9c}, {0xfffffffd, 0x5, 0x4, 0x7, 0x6, 0x7}, {0x7fff, 0x3, 0x0, 0x34, 0x8, 0x7}, {0x8, 0x2, 0x1000, 0x3, 0xd31, 0x6}, {0x4, 0x1, 0x10001, 0x9, 0x7, 0x844}, {0x4, 0x0, 0x54a, 0x5, 0x0, 0x1}, {0x80000000, 0x4, 0xfffffbff, 0xffffffff, 0x9, 0x5}, {0x3, 0x80, 0x3, 0x1, 0xc0000000, 0x4}, {0x3, 0x8, 0x3, 0x1, 0x1, 0xf}, {0x1, 0x6, 0x8, 0x0, 0xfffffffe, 0x6}, {0x0, 0x1000, 0x5, 0x6f19, 0x9}, {0xd, 0x5, 0x6, 0x1, 0x0, 0xd}, {0x7, 0x8, 0x8001, 0x80000000, 0x5, 0xbbc6}, {0xfff, 0x0, 0xed99, 0x2b, 0x7e, 0x1}, {0x1, 0x2, 0x28000, 0x9, 0x8}, {0x40, 0x6, 0xb, 0x80, 0x9, 0x1}, {0x9, 0x3, 0x1, 0x3, 0xf, 0x6e80}, {0xff, 0xb0a, 0x80, 0xd, 0x7, 0x14c}, {0x7aaf, 0x1, 0x9, 0x0, 0x8, 0x1}, {0x5, 0x5, 0x4, 0x2, 0xb5b}, {0x4, 0x80000000, 0x9, 0x2, 0x3, 0x9}, {0x7, 0x0, 0x460, 0x800, 0x9, 0x7}, {0x3, 0x81, 0x4, 0x4, 0x7, 0x3}, {0x94f, 0x8, 0x5d99, 0x0, 0xd, 0x7}, {0xf8, 0x1, 0x5, 0x2, 0x1, 0x80000001}, {0x38, 0x5, 0x2, 0x1, 0x2, 0x884}, {0x1, 0xfffffffe, 0xffffefc5, 0x10, 0x5, 0x9}, {0x5, 0x16, 0xfffffffd, 0x19, 0x5, 0x80000000}, {0x143, 0x0, 0x7, 0x9, 0x101, 0x3}, {0x0, 0x5, 0x3, 0x4d, 0x3, 0x3}, {0x2, 0x9, 0x401, 0x6, 0x6, 0xfffffffd}, {0xff, 0x380, 0x5, 0x7, 0x2, 0x3086}, {0xfffff800, 0x8, 0x8, 0x84c, 0x4, 0xc9}, {0x2, 0x8, 0x9, 0xb, 0xff, 0xc}, {0x3, 0x3, 0x3, 0x4, 0xd, 0xfffffffd}, {0xc5, 0x0, 0xffffffd6, 0xffff, 0xfff, 0x4d}, {0x4, 0x6, 0x101, 0x100, 0x9, 0x31}, {0x4d, 0x5, 0xff, 0x9, 0xf, 0xffffffff}, {0x9, 0x3, 0xd, 0xe, 0x101, 0x5}, {0x9, 0x1, 0x4, 0x3, 0x7, 0xe559}, {0x7, 0x4, 0x0, 0x9, 0x7, 0x1000}, {0x401, 0x8, 0x2, 0x8, 0xd, 0x59}, {0x5, 0x8f, 0x8, 0x10, 0x9, 0x8}, {0x7, 0x3, 0xce, 0xdb99, 0x78, 0x81}, {0xfffffffe, 0x10001, 0x1, 0x0, 0x0, 0x7}, {0x5, 0xfffff602, 0x400, 0x484b}, {0x7fff, 0x5, 0x1, 0x8, 0x1, 0x2}, {0x100, 0xed5, 0x8000, 0x6, 0x2155, 0x200}, {0x8, 0x34, 0x0, 0x10001, 0x7f, 0x9}, {0x1a1, 0x6, 0x8, 0x8, 0xff, 0x81}, {0x7, 0xffffffff, 0x6, 0x80, 0x0, 0x5}, {0xe, 0x8, 0xd, 0x100, 0x95a4, 0x80}, {0x5, 0x2, 0x7, 0x401, 0x1, 0x401}, {0x3, 0x2, 0x9, 0x4, 0x7ff, 0x1}, {0xb, 0x2, 0x8, 0x2, 0x7, 0x3}, {0x8, 0x2, 0xc42d, 0x4, 0x4, 0xffff}, {0xfffffffa, 0x0, 0xfffffe00, 0x1, 0x80000001, 0x7}, {0x4, 0x9, 0xb21, 0x9, 0x38, 0x4}, {0x8, 0x9, 0x2, 0x16, 0x100, 0x7}, {0x4, 0x2, 0x7, 0x6, 0xdccb, 0x4}, {0x0, 0x6, 0x7, 0x9, 0x3, 0x6}, {0x4a0a, 0x3, 0x6, 0xfffffc00, 0xd43a, 0x2}, {0x0, 0x6, 0x7, 0x80000001, 0x400, 0x5}, {0x0, 0x5, 0x1000, 0xf4cf, 0x3, 0x5}, {0x800, 0xc5d, 0x2, 0x0, 0xef, 0x8}, {0x6, 0x7ff, 0xd45, 0x101, 0x8, 0x8}, {0x200, 0x57a, 0xe1, 0xffffffff, 0xe1, 0x6}, {0xb44, 0x2, 0x4bac, 0x3e3, 0x4, 0xffff1c94}, {0x8, 0x8a4, 0xdc74, 0x4}, {0x0, 0xdfa, 0x9, 0x4, 0xcfea, 0x1}, {0x0, 0x48, 0x5d5, 0x3, 0x3, 0x2}, {0x80000001, 0x68, 0x0, 0x1, 0x3, 0xfd72}, {0x1, 0x80000000, 0x4, 0x6, 0x7, 0x70b}, {0x7fff, 0x200, 0x7, 0x5, 0xfed, 0x8}, {0xfff, 0x5, 0x3b22, 0x9, 0x0, 0x8}, {0x1, 0x5, 0x1000, 0x1, 0x2, 0x10000}, {0x7, 0x8, 0x4, 0x6, 0x2}], [{0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x8bfae17b4fe9ca8d}, {}, {0x0, 0x7b612c70bcccfe08}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x6}, {}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x199770ca245ea55e, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x7ca8be81dfa35eb5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x4}, {0x4, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r5, &(0x7f0000000280)="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", 0x100000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 1m14.313740571s ago: executing program 0 (id=2288): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) timerfd_gettime(r1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140), 0x7, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1e}}, 0x14}}, 0x20044884) 1m10.257544594s ago: executing program 5 (id=2302): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.978984151s ago: executing program 0 (id=2304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x0, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) (async, rerun: 32) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x18, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x80, 0x8, 0x47}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f05080087"]}) 1m9.606039623s ago: executing program 5 (id=2305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x4840}}, {{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20, 0x8890}}], 0x2, 0x8900) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000380)=')', 0x1, 0x11, 0x0, 0x0) mlock(&(0x7f00002ca000/0x3000)=nil, 0x3000) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000200)=0x800) socket$nl_generic(0x10, 0x3, 0x10) 1m8.506015721s ago: executing program 0 (id=2312): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000040)={0xa1a, 0xb, 0x8, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 1m8.00623138s ago: executing program 5 (id=2315): unshare(0x2040400) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/191, 0xbf}], 0x1}, 0x40000001}], 0x1, 0x40002122, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m7.821952641s ago: executing program 5 (id=2318): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x10000000}, 0x10) move_mount(r2, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100) 1m6.744948716s ago: executing program 5 (id=2321): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x54000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) io_uring_enter(r1, 0x847ba, 0x2, 0xe, 0x0, 0x0) 1m6.687626534s ago: executing program 0 (id=2323): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 1m6.457657915s ago: executing program 5 (id=2325): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x24000082}}], 0x1, 0x4044000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0xfffe, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['1![\xb0\xfd\x00', '+\x00'], 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="a956", 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) 1m6.081983841s ago: executing program 33 (id=2325): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x24000082}}], 0x1, 0x4044000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0xfffe, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['1![\xb0\xfd\x00', '+\x00'], 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="a956", 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) 1m5.729343638s ago: executing program 0 (id=2329): r0 = socket$kcm(0x29, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = dup3(0xffffffffffffffff, r4, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f", 0x70}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7bef9044b6ed4dce53adbaeb7778fc95aee91141f2188a2502880e4c67be52dbf0ef3bba4f98a6fa1ed2f6ee2ebacfc49ef6414e8abbbe12713de9850d800f140c903c1f63eac4365a56147501d8e9d56f77263d43a3ac5defd91e7b865ff0cd46bf8dff9c5ed31a03682576836b1a6ae95c69039f7857830154be52eea8898bf8f04c3661a01dc61d", 0xec}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000000) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x38, 0x3) r9 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602030405060708090a0b0c0d0e0f101dfcff29"], 0x48, 0xffffffffffffffff) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000980)=""/105, 0x6f}, {&(0x7f0000000800)=""/202, 0xca}], 0x3, &(0x7f0000000900)=""/52, 0x34}, 0x40010140) keyctl$set_timeout(0xf, r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 1m5.403575601s ago: executing program 0 (id=2331): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0xdbba7fdc476a7ed, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004841) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000000c0)={{0x6, 0x3, 0x8, 0x4, '\x00', 0x8}, 0x1, [0x4, 0x0, 0xfffffffffffffff7, 0x9a25, 0x0, 0x0, 0x6d1900000000000, 0xfffffffffffffffd, 0xc83, 0xffff, 0x10001, 0xffffffffffff0a46, 0x9, 0x4, 0x4, 0x6e, 0x6, 0xfffffffffffffff7, 0x1, 0x9, 0xe8f9, 0x0, 0x14, 0x3, 0x1, 0x7, 0x2, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x200, 0x798, 0x2, 0x1, 0x7, 0x1eb, 0x9, 0x7, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0x62, 0xfffffffffffffffd, 0x6, 0x9, 0x4, 0x7, 0x3, 0x8, 0x8, 0xf58, 0xda, 0xa2, 0x9, 0x6, 0x4, 0x3, 0x4, 0x9, 0x1, 0x3, 0x81, 0x0, 0x6, 0x8, 0x4, 0x9, 0x9, 0x889, 0x2, 0x4, 0x3ff, 0x4, 0x3, 0x800, 0x7c04, 0x1, 0x5, 0x2, 0x3, 0x6, 0xda70, 0x5c6, 0x10, 0x61, 0x7, 0xffffffff, 0xb, 0x2, 0x8000000000000000, 0x4, 0x3, 0x8, 0x0, 0x8, 0xa, 0xe01, 0x1, 0x1, 0x35b, 0x2, 0xa97, 0xe5100, 0x4f, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0x9f41, 0xfff, 0x200, 0x9, 0xa8, 0x1ff, 0x4, 0x3, 0xb0c, 0x8, 0x100, 0x1ff, 0x3, 0x0, 0x2, 0x11a, 0xa7, 0x8000000000000000]}) 1m5.149562392s ago: executing program 34 (id=2331): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0xdbba7fdc476a7ed, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004841) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000000c0)={{0x6, 0x3, 0x8, 0x4, '\x00', 0x8}, 0x1, [0x4, 0x0, 0xfffffffffffffff7, 0x9a25, 0x0, 0x0, 0x6d1900000000000, 0xfffffffffffffffd, 0xc83, 0xffff, 0x10001, 0xffffffffffff0a46, 0x9, 0x4, 0x4, 0x6e, 0x6, 0xfffffffffffffff7, 0x1, 0x9, 0xe8f9, 0x0, 0x14, 0x3, 0x1, 0x7, 0x2, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x200, 0x798, 0x2, 0x1, 0x7, 0x1eb, 0x9, 0x7, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0x62, 0xfffffffffffffffd, 0x6, 0x9, 0x4, 0x7, 0x3, 0x8, 0x8, 0xf58, 0xda, 0xa2, 0x9, 0x6, 0x4, 0x3, 0x4, 0x9, 0x1, 0x3, 0x81, 0x0, 0x6, 0x8, 0x4, 0x9, 0x9, 0x889, 0x2, 0x4, 0x3ff, 0x4, 0x3, 0x800, 0x7c04, 0x1, 0x5, 0x2, 0x3, 0x6, 0xda70, 0x5c6, 0x10, 0x61, 0x7, 0xffffffff, 0xb, 0x2, 0x8000000000000000, 0x4, 0x3, 0x8, 0x0, 0x8, 0xa, 0xe01, 0x1, 0x1, 0x35b, 0x2, 0xa97, 0xe5100, 0x4f, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0x9f41, 0xfff, 0x200, 0x9, 0xa8, 0x1ff, 0x4, 0x3, 0xb0c, 0x8, 0x100, 0x1ff, 0x3, 0x0, 0x2, 0x11a, 0xa7, 0x8000000000000000]}) 9.642101902s ago: executing program 3 (id=2505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x32}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x4, 0x20}}, 0xf0}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000200)={0x77359400}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1710c0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @local, 0x4}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x401, 0xf478, 0x208, 0x530, 0x2, 0x6, 0x8, 0x3, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x2}, &(0x7f00000001c0)=0x8) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x0, 0x7, 0x3865, 0x2008, 0x11d, 0x5, 0x2, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.492402359s ago: executing program 1 (id=2507): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) sendfile(r0, r0, &(0x7f0000000240)=0x1, 0x2) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x6a12, &(0x7f0000000180)={0x0, 0xbb0, 0x10003, 0x0, 0x32c}, &(0x7f0000000040), &(0x7f0000000200)) keyctl$read(0xb, r3, &(0x7f0000000440)=""/221, 0xdd) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') pread64(r9, &(0x7f0000000300)=""/246, 0xf6, 0x0) listen(r4, 0x3) connect$inet(r4, &(0x7f0000003c40)={0x2, 0x4e24, @multicast2}, 0x10) listen(r4, 0x5) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f00000000c0)='\x00', &(0x7f0000000100)) getrusage(0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x208100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 8.110014916s ago: executing program 1 (id=2508): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x5, 0x3, 0x10000000000000, 0x3, 0x3, 0x3, 0x8f1}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r4, r4, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23ea4cc149681153151ff9b9e26"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x8, &(0x7f0000000380)=[{0x8, 0x8, 0x1, 0xdf}, {0x6, 0x3a, 0xee, 0x9}, {0x9, 0x8, 0x27, 0xa}, {0x8, 0x91, 0xe, 0x7}, {0x9, 0x2, 0x6, 0x8}, {0x1, 0x81, 0x4, 0xffff}, {0x1, 0x3, 0xb, 0xfffffffc}, {0x800, 0xfb, 0xff, 0x1}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) readv(r5, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000001540)=""/83, 0x53}], 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7.44158849s ago: executing program 7 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100000095a7a0259972c186aaa6b335620900010073797a020000000040000000030a01020000000000000000010002000900030073797a3200000000140004800800024032658aeb08000140000000030900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000c000580080001408000080024000480140002800800024001000004080001400000001214000000111d01"], 0xd4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf25010000000000000002"], 0x30}, 0x1, 0x0, 0x0, 0x4008082}, 0x40) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'eth', 0x3a, 'veth0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7.149822609s ago: executing program 7 (id=2511): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008008"], 0x50) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x83b, 0x1}) getsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x40, 0xf0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0xc3, 0x0, {0x7, 0x25, 0x1, 0x81, 0x40, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7b, 0x2, 0x9, {0x7, 0x25, 0x1, 0x0, 0x1b, 0x8000}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x6, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x66, 0xf00f, 0xfffa, [0x3f00, 0xffa0f0]}]}}) 6.953666546s ago: executing program 4 (id=2512): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x6573, 0x7}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = syz_io_uring_setup(0x3e9, &(0x7f0000000000)={0x0, 0x92c2, 0x40, 0x3, 0x11e}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x2, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x5}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000200)={0x9, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {}, {0x1, 0xc, 0xd2, 0x6, 0x9, 0x6, "0066ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000148000/0x5000)=nil, 0x5000, 0x3000001, 0x10, r3, 0x95df1000) syncfs(r7) socket(0xa, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x100000000) 6.885041291s ago: executing program 6 (id=2513): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x5, 0x92, 0x2, 0x8, 0x681, 0x5, 0x56c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0xfc, 0x8, 0x1, 0xa, 0xf4, 0x77, 0x5, [], [{{0x9, 0x5, 0xf, 0x1, 0x40, 0xe8, 0x6, 0x95}}]}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_ep_read(r0, 0xb, 0xca, &(0x7f0000000000)=""/202) 5.905572357s ago: executing program 3 (id=2514): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, r0, 0x2e, 0x0, 0x0, @void, @value=r0}, 0x20) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80000000, 0x4a000) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x8, 0x200, '\x00', &(0x7f0000000080)=0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) set_mempolicy(0x1, 0x0, 0x7582) (async) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 5.211691808s ago: executing program 4 (id=2515): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 5.094968511s ago: executing program 3 (id=2516): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5.050101997s ago: executing program 4 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffff7f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) (rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x2, 0x20, 0x8, 0x3}, 0x0) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xf0, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e24, @empty}], 0x10) (async) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="27b5aaaaaaaa0180c200000308004d000048ffff000000069078ac1e0001ac1414278903a244140503000000000001000000000400000000cd8606ffffffff0000004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0xfff}]}, 0x10) (rerun: 32) splice(r10, 0x0, r8, 0x0, 0x20000000000002, 0x2) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (rerun: 64) 4.970626769s ago: executing program 1 (id=2518): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000082, 0x9, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x4002004c2, 0x1004, 0x45c5, 0x8, 0x4, 0x105, 0x3, 0x2000000000000000, 0x0, 0x10], 0xeeee0000, 0x3287}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$alg(0x26, 0x5, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) epoll_create(0x7) (async, rerun: 32) epoll_create1(0x0) socket(0x10, 0x803, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x813000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.83999726s ago: executing program 4 (id=2519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockname$packet(r1, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000004280)='system.posix_acl_access\x00', &(0x7f0000008480)={{}, {}, [{0x2, 0x1, 0xffffffffffffffff}], {}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x2c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.68209593s ago: executing program 1 (id=2520): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36d"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x2, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) tkill(0x0, 0x3f) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x7, 0xdddd0000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xdb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x0, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_setup(0x410e, &(0x7f0000000200)={0x0, 0x892dc, 0x40, 0xffffffff, 0x2ff}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) 4.68014019s ago: executing program 4 (id=2521): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2023, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000400)={&(0x7f0000000180)}) syz_usb_control_io(r5, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000500)={0x2c, 0x8, r7, 0x25}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, r9, 0x0}]) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.060757075s ago: executing program 3 (id=2522): r0 = socket(0x10, 0x803, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) unshare(0x2a020480) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r4 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x6}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x5, 0x1f}, 0x20) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x1505, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 4.024044698s ago: executing program 7 (id=2523): r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/63) r1 = dup(r0) r2 = dup(r1) ioctl$TIOCEXCL(r1, 0x540c) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) fcntl$notify(r0, 0x402, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x3a000) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000100)) getsockopt$inet6_buf(r1, 0x29, 0x50, &(0x7f0000000140)=""/161, &(0x7f0000000200)=0xa1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{0x0, 0x1, 0x10, 0x81}, {0x5, 0x1, 0x4, 0x2}, {0x14f, 0x4, 0x9, 0x93}, {0x7, 0x7, 0x6, 0xd4f}, {0xf5c4, 0x7f, 0x7}, {0x0, 0x4, 0x2}]}) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000002c0)="c5394ca3f11542bbfb76a58dbc133dd7df3911fb5364bb05d03e726495f192bf41fb65eb48a79c4776d90d2b3f3f1e22bd8a858a46d49a460a62a5a554e5adbffc7e49872440f54ac8f516a1e35240afa382088c4ca15d0d0ea4aa8ff562326c8d33ecf7a9a08f4c13f5b0a85b9baa2037d237c41562a617fce99b5bed738bad60d2abf82794e3fd7494236251f4e0", 0x8f}, {&(0x7f0000000380)="2a7d4cdc8a772e50479bb008fd51ac05aa35af239f", 0x15}, {&(0x7f00000003c0)="aeb88fc3f7eb6803e0f9e0eae5427dcfa80a9b2c532de80ec4915063a6d1f5ac4f591a9e27338f3a5fccdbbc866c0164743b4dfa15b4837d5aab81c1837a7177087b9905078e3432d57d74cc7bae927a6b7bc1fcb7aac27290861b780a70f4a64c58", 0x62}], 0x3, 0xd) socket$inet_sctp(0x2, 0x84703643e2e4c07, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000540)={r8, 0x1, 0x6, @random="c35b0d591a18"}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000580)={0x1, 0x9}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x8, 0xfd, 0x5, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) timer_create(0x3, &(0x7f00000006c0)={0x0, 0x11, 0x2, @tid=r10}, &(0x7f0000000700)) remap_file_pages(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000000, 0x3, 0x3) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x88080, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000780)=0xcb6a) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x2010, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x114, &(0x7f00000007c0)=0x6000, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000008c0)=[r7, 0xffffffffffffffff, r4], 0x3) 3.897675095s ago: executing program 7 (id=2524): r0 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x2, 0x3ff, 0x7, 0x9755, 0x3, "03f37f0ce56ca288"}) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/105, 0x69}], 0x4a) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000480)=0x20a, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x10, 0x4) (async) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xe000) 3.724860157s ago: executing program 6 (id=2525): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) pread64(r0, &(0x7f0000000080)=""/206, 0xce, 0x7) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000004240), 0x220000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x110, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000004280), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000042c0)={'nicvf0\x00', 0x400}) r4 = open$dir(&(0x7f0000004300)='./file0\x00', 0x606502, 0x28) r5 = openat(r4, &(0x7f0000004340)='./file0\x00', 0x10000, 0x16) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r2, 0x75484000) (async, rerun: 64) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000004380)={0x1, 0x8, 0x1}) (async, rerun: 64) r6 = accept4$inet(r5, &(0x7f00000043c0)={0x2, 0x0, @remote}, &(0x7f0000004400)=0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000004480)={0x6, &(0x7f0000004440)=[{0x4, 0x4, 0x14, 0xe41}, {0x2, 0x0, 0xff, 0x1}, {0x7fff, 0x40, 0x7, 0x7f}, {0x7, 0x79, 0x5, 0xffff}, {0xa, 0x10, 0x3, 0x7fff}, {0x798f, 0x10, 0x9, 0x7}]}, 0x10) (async, rerun: 64) sigaltstack(&(0x7f0000004540)={&(0x7f00000044c0)=""/118, 0x80000002, 0x76}, &(0x7f00000045c0)={&(0x7f0000004580)}) (async, rerun: 64) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000004740)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)={0xc0, 0x453, 0x800, 0x70bd26, 0x25dfdbfd, "e533e4e84c6119338c5cae5351836d60fc5876d986a4755290ad29156d172f0fa7deaa8ac6be2cb80c61b45c10be885dd0dff8939d8012b191a7fb44f403e8ff3b20b58cb57b18e506e1e06854f91af4823ded98fced3643ff8ccad06cd9809b910bd10787571a98e6a20f2b3c22ada7e71fa67d1a2e890d39d8bc49aa4302a1bcaedb314e6fb024cd462ce88543a2722814ad9138748bca92aac613d84a4f66be9d0cad2a78ed7ccfc3c7f032", ["", "", "", "", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008051}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000047c0)={'sit0\x00', &(0x7f0000004780)={@ipv4={'\x00', '\xff\xff', @loopback}, @multicast1, 0xc, 0xf}}) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000004800)={'broute\x00', 0x0, 0x0, 0x0, [0xb8de, 0xcd17, 0x81, 0x80, 0x8, 0x6]}, &(0x7f0000004880)=0x78) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000048c0)={0x0, 0x3}, &(0x7f0000004900)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000004940)={r7, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x8, 0xfffe, 0xffffffff, 0x0, 0x4a, 0xe, 0x9}, 0x9c) (async) sendmsg$AUDIT_USER(r5, &(0x7f0000004ac0)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x38, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfe, "303b35b70f2ead50c1830131410b5b21d666887c21c39e5d94f2f23f694d6307fd379c7a1872", ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004b00)=@bloom_filter={0x1e, 0x10000, 0x6, 0x4, 0x8000, r0, 0xd9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x6, @value=r5}, 0x50) (async, rerun: 32) r9 = syz_create_resource$binfmt(&(0x7f0000004b80)='./file0\x00') execveat$binfmt(r5, r9, &(0x7f0000004c40)={[&(0x7f0000004bc0)='nicvf0\x00', &(0x7f0000004c00)='\x00']}, &(0x7f0000004e80)={[&(0x7f0000004c80)='{\\\x00', &(0x7f0000004cc0)='nicvf0\x00', &(0x7f0000004d00)='\x00', &(0x7f0000004d40)='&\x00', &(0x7f0000004d80)='[/}([\\@!$){%\\)*$+/)-]]\x00', &(0x7f0000004dc0)='\x00', &(0x7f0000004e00)='\x00', &(0x7f0000004e40)='^\x00']}, 0x800) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000004f00)={0x2, r2, 0x80000}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000004f40)={r7, 0x3b, "7736f2377c0164dbf095d9137b10ddce5594e12f86ffb57f754f962b8b603bb3bcb560f714a9aee160adca662c7be9cd68df97f809d5c124fa68c0"}, &(0x7f0000004fc0)=0x43) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000005000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000005280)={{r8}, r11, 0x18, @inherit={0x68, &(0x7f0000005200)={0x1, 0x4, 0xc2d, 0x0, {0x19, 0x0, 0x7fffffff, 0x7, 0x401}, [0x2, 0x2d72, 0x3, 0x800]}}, @name="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"}) chroot(&(0x7f0000006280)='./file0\x00') 3.413476948s ago: executing program 6 (id=2526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x41000, 0x10, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000019, 0x0, 0x26000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) 3.261572991s ago: executing program 3 (id=2527): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x50c7, @rand_addr=' \x01\x00', 0x40100000}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_clone3(&(0x7f0000000000)={0x84000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) 3.121338098s ago: executing program 6 (id=2528): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x347}}, './file0\x00'}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x50c}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc010) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x40000) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000001c0)=""/76, &(0x7f0000000240)=0x4c) (async, rerun: 64) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000280)=0x8) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000300)={'dvmrp0\x00', 0x8}) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x8, 0x7}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={r4, 0x6, 0x8, [0x7fff, 0xaef3, 0x8, 0x100, 0x2, 0x8000, 0x1, 0x9]}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8050}, 0x60000004) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f00000005c0)=0xd40c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x80, 0x0, 0x7, 0x8001, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @empty, {[@noop, @rr={0x7, 0x7, 0x7a, [@multicast1]}]}}}}}) connect$pppl2tp(r0, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0xc, @rand_addr=' \x01\x00', 0xfffffff7}}}, 0x32) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f00000006c0)) r6 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000700)={0xa, 0x4e20, 0x2, @remote, 0xfffffff9}, 0x1c) (async) umount2(&(0x7f0000000740)='./file0\x00', 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x338, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7000}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffff8d, @mcast1, 0x2}}}}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x777}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57e}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb55d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf578}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "54475aca344e9d282f46a4edb5f0030660614bfd81a1e6ca84cb3bac07592a184edfb70b85d5ab868c51a1d3dad28d436bfcd4825954aa0c76af436d745917a338c826c7560aaf7d90543030f36583dfb3ad79dcc5e444b182cfc5ae87d1fcdf0b114793be644e071d3ed0a56ba27357c8d90275ee20f59ca52ff4dcce156ed4df941f256c0af6d4a8bf60a84eab1fb4d8d528fc85cbae37b401a303f1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1925def20f4adc5f86d10a9e910c5b2f097e709d916e5f87"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0b55e5b0f039216c76ac00b12c5d9c4402befce79a6e638f2e4552f24aa18a3e5a68"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}]}]}, 0x338}}, 0x8801) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x40041, 0x12) execveat$binfmt(r8, 0x0, &(0x7f0000000c80)={[&(0x7f0000000c00)='eth', &(0x7f0000000c40)='syz1\x00']}, &(0x7f0000000ec0)={[&(0x7f0000000cc0)='veth0_to_bond\x00', &(0x7f0000000d00)='syz0\x00', &(0x7f0000000d40)='\x80[\x06:!$.}\x00', &(0x7f0000000d80)='(!:(.\x00', &(0x7f0000000dc0)='dvmrp0\x00', &(0x7f0000000e00)='syz1\x00', &(0x7f0000000e40)='syz0\x00', &(0x7f0000000e80)='#}/']}, 0x1000) (async, rerun: 32) mkdirat(r0, &(0x7f0000000f40)='./file0\x00', 0x198) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs2/binder0\x00', 0x1001, 0x0) openat$cgroup_ro(r0, &(0x7f0000001040)='memory.stat\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001080)={[0xd]}, 0x8, 0xc00) 2.854658828s ago: executing program 6 (id=2529): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r5 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) accept4(r8, 0x0, 0x0, 0x800) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x50, 0x0, 0xfffd, 0x0, &(0x7f00000007c0)="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", 0x7, 0x0, 0x1}) (async) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg(r1, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x5, 0x0, @loopback}, 0x1c) 1.704209358s ago: executing program 7 (id=2530): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7800, 0x40, 0x17, 0x7, {{0x33, 0x4, 0x1, 0x2a, 0xcc, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0x17, 0xf6, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @local]}, @cipso={0x86, 0x75, 0x3, [{0x0, 0x5, "3c451a"}, {0x5, 0xb, "d6637196aa8e965527"}, {0x6, 0xd, "d2de07d00a12ed7ad34a5f"}, {0x2, 0x6, "47fc3a17"}, {0x1, 0xf, "9887af38d83dcd809f112f7ef0"}, {0x4, 0xc, "0ac5a19ba9f5408a0df6"}, {0x4, 0x11, "29d1eb625071e16adde144fcaa337e"}, {0x7, 0xb, "cd42f06b8240ce7303"}, {0x7, 0xe, "2ab1d437bd3536cfe37aa1c8"}, {0x2, 0x7, "2f5e688d73"}]}, @ssrr={0x89, 0x17, 0xbe, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @generic={0x44, 0x12, "1300984201e173edccacfca718b09a18"}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0xb8d5, 0xce3, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0x21, [@broadcast, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "cf7c1bf84411e82b6d"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x1, 0x9, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x20, 0x1, 0xfffffffe}}) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="fd3e405532503c0a76f2fcb911ee8fa797e075be72618a2398edb47be6b6afb44445da674f34c5b22a45a2477cb21a5dfc8458eaca58e34c9ed4aecb36485e70de8021330ae0f1bfec7da4df20185b9501f701781fc2f6853aa9917bb4a05c1551bf3cd8233124a58cc027afcfaf57118f4b060ce854be721d75dcc295dba613103129d815c3f25581c9167b6758e440a730cd18a9372484b94f", 0x9a}], 0x1, &(0x7f0000000480)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@rr={0x7, 0xb, 0xd8, [@local, @remote]}, @rr={0x7, 0x7, 0x73, [@multicast2]}, @rr={0x7, 0xf, 0xba, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x16, 0x1, 0xe, [{@empty, 0x58a6}, {@local, 0x4}, {@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @ssrr={0x89, 0x1b, 0x70, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_addr={0x44, 0x34, 0xb, 0x1, 0xf, [{@rand_addr=0x64010102, 0x8001}, {@broadcast, 0x10000}, {@loopback, 0x81}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@broadcast, 0x10000}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7a27}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd53}}], 0x1a0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/13, 0xd}], 0x3, &(0x7f0000000840)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}, 0x2100) r17 = syz_open_dev$loop(&(0x7f0000000a00), 0xc5aa, 0x21800) ioctl$LOOP_CHANGE_FD(r17, 0x4c06, r8) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x7f, 0x6, 0x24, @mcast1, @private0, 0x10, 0x1, 0xd, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r12, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x118, r18, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$VHOST_VDPA_SET_STATUS(r8, 0x4001af72, &(0x7f0000000d80)=0x9) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r11, 0xc0585609, &(0x7f0000000e80)=@multiplanar_mmap={0x0, 0xc, 0x4, 0x1, 0x2, {r21, r22/1000+10000}, {0x2, 0x2, 0x40, 0x1, 0x4, 0x73, "6a4131a5"}, 0xb9c, 0x1, {&(0x7f0000000e00)=[{0x7, 0x10, {0x6}, 0x7f}, {0x3, 0x100, {0x5}, 0x2}]}, 0x2, 0x0, r16}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r13, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r10, {0xc555}}, './file0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000f40)) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r15, 0xc008ae05, &(0x7f0000000f80)={0x1, 0x0, [{0x80000007, 0x0, 0x5, 0x3, 0xadbb, 0x0, 0x9}]}) fsetxattr$trusted_overlay_nlink(r14, &(0x7f0000000fc0), &(0x7f0000001000)={'L+', 0x7}, 0x16, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000001040)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x2, 0x0, "91fae5fb8da3f11e5f584b349fa9d6c7d955c0d7b38cb6fec6dba42058025c5befe4e57beab03b1ff5a2f59bcd404dcddde4e0f060ccdde62f1c2199ae38e105ad3c062cd097fa36bfbb944fefd3cff4"}, 0xd8) r23 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x50500, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r23, 0x89f0, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl0\x00', r1, 0x40, 0x8, 0x4, 0x2, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x67, 0x0, 0x1f, 0x73, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x8, [{@rand_addr=0x64010101, 0x800}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x3}]}, @lsrr={0x83, 0x17, 0x45, [@local, @broadcast, @multicast2, @local, @private=0xa010101]}, @timestamp={0x44, 0x18, 0xd2, 0x0, 0x8, [0x0, 0x4, 0x0, 0x7, 0x8]}, @end, @lsrr={0x83, 0xf, 0xe7, [@loopback, @multicast1, @loopback]}]}}}}}) io_uring_enter(r13, 0x2681, 0x6b6d, 0x40, &(0x7f0000001280)={[0x10001]}, 0x8) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001480)=@urb_type_bulk={0x3, {0xf}, 0x6, 0x41, &(0x7f00000012c0)="bc191f82a2338db6bd6447a6ea21b7524a42da5af03257d90204a7a873c64ca76b90d82a3f58c9d181c134e614c41edbacfad571aedb4718bad48ae52f8fc9c7eabb0ccbd684599286c9eeeafccdfbbc2f3c0bd513f16adee1936dbe09c5239c2699fd3b2cf37a0efee60c9ad223c7a452b104d689a06eb50c7ec40af7d27d3d12ecf3beb2ac87e1d7c13f916f6d6da29b64a3ab28459b6574c7a0674628ef4098489dcac994bc2f7b554c636c4fab0d1484bda9ceaf5ec36b5165f2cd26d1627739e332797bea960f886acf88e30688d98c811790f8deca71f8bb9afcd30e89d092", 0xe2, 0xe, 0xf, 0x7, 0x8, 0xfff, &(0x7f00000013c0)="7aa9cee64d8cac5817edbd7d52d188cde4770b09f25197ffc5e784b3920b008b83a28afd85f6744e82c09457c061b2fd5dd5132e4a43005788954c49ff9887aacdc6598c0af23d1724dc5b9124c367dafff1f556ca43ca2faaed6f335f23183bb4e4181675113541d3cd7776d3fb20c641db3c87561919654dd71f2a0a4c3582a78382332137a06c0af9e628391d9a3afb0af26ee04aea124a5a07bbcfb0c8836b073c5b299d5497136f72aedc49732731286faf"}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/hardlockup_count', 0x600d41, 0x0) ioctl$USBDEVFS_IOCTL(r23, 0xc0105512, &(0x7f0000001600)=@usbdevfs_driver={0x8feb, 0x4427, &(0x7f0000001500)="dd92eff3118517dd940f9f4616719b752cbae51181a628d6e5f3185542f9011624c6e5c53af7c5471fcdf6c987dab92cfc056e16a4c4ef0712c6f860d748b19c7fca73b328155e2fd87b5ae63c84f50edf05db0432b5cd24a7d19733e332ec4a97181077f9fed180ed0e35161e81da6a86f7be7306a7690e43d77520e99a48c731d1b467c6afe3ebe60f0c063fcf6a102ea258f3e2fd7eb827de83cc57c9e76124b717be4465a47d991448f1b79cac85b3a712126f1a073279a7dd31b7a16d104dca25aadcd17efca4531a735c3f6fe09072d793635625ead6ba3d7786120b"}) openat(r8, &(0x7f0000001640)='./file0\x00', 0x2040, 0x4) 1.442084672s ago: executing program 4 (id=2531): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_usb_connect(0x1, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889eb5b3842a6d09323b392b049e339070000000000000000008000", 0x3147504d}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 1.344932605s ago: executing program 6 (id=2532): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {}, {0x7}}, [{0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r7 = openat(r6, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) fcntl$lock(r7, 0x24, &(0x7f0000001800)={0x1, 0x0, 0xffffffffffffff7f, 0x5a60}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x6, 0x2, 0xffffffffffffff7b, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003d00)) 1.287313626s ago: executing program 1 (id=2533): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0, 0x19}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x60, 0x45}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0, 0x19}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x60, 0x45}, 0x0) socket(0x400000000010, 0x2, 0x0) (async) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x2, {0x2, 0x18, 0x54, 0xff, r6}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xffff, 0x3}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x0) (async) sendmsg$nl_route_sched(r11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000080)={0x79, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @generic={0xb, 0xc, "3ae67271af0fa4a8baf42476"}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x4}]}, 0x30) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 925.959577ms ago: executing program 1 (id=2534): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000280), 0x0, 0x6, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$notify(r6, 0x402, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00') r9 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r11, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) keyctl$set_timeout(0xf, r9, 0x4) read$FUSE(r8, &(0x7f000001a140)={0x2020}, 0x2020) 130.504346ms ago: executing program 7 (id=2535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000020000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r8, 0xc, 0x1) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 0s ago: executing program 3 (id=2536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200800000002400128009000100626f6e64000000001400028005000100060000000800020001db2405"], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x200, 0x7}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001200010100000000000000000a"], 0x1c}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x7f, 0x40, 0x10000}, 0x10) kernel console output (not intermixed with test programs): T15405] netlink: 'syz.5.2086': attribute type 1 has an invalid length. [ 544.363233][T15405] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2086'. [ 544.380982][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 544.389745][ T5882] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 544.400211][ T5882] usb 1-1: config 1 has no interface number 1 [ 544.406861][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.419523][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 544.453928][ T5882] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.477292][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input61 [ 544.495262][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.509536][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.523255][ T5882] usb 1-1: Product: syz [ 544.540793][ T5882] usb 1-1: Manufacturer: syz [ 544.545427][ T5882] usb 1-1: SerialNumber: syz [ 544.551259][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 544.572473][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 544.590613][ T10] usb 2-1: USB disconnect, device number 120 [ 544.693248][ T10] appletouch 2-1:1.0: input: appletouch disconnected [ 544.741439][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 544.783326][T15414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.833835][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 544.928456][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 544.938677][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 544.941488][T15414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.991871][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 545.004790][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.015894][ T5882] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 545.018101][ T24] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 545.215358][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.247494][ T24] usb 4-1: Product: syz [ 545.264217][ T24] usb 4-1: Manufacturer: syz [ 545.290838][ T24] usb 4-1: SerialNumber: syz [ 545.332926][ T24] usb 4-1: config 0 descriptor?? [ 545.361547][ T24] kvaser_usb 4-1:0.0: error -EMSGSIZE: Cannot get software info [ 545.379956][ T24] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 545.403307][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 545.972501][T15443] syzkaller0: entered promiscuous mode [ 545.978058][T15443] syzkaller0: entered allmulticast mode [ 546.074771][T15444] tipc: Enabled bearer , priority 0 [ 546.082628][T15441] syzkaller0: entered promiscuous mode [ 546.088331][T15441] syzkaller0: entered allmulticast mode [ 546.209617][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.232979][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.267245][T15441] tipc: Resetting bearer [ 546.342764][ T5882] usb 1-1: USB disconnect, device number 120 [ 546.353039][T15440] tipc: Resetting bearer [ 546.422450][T15440] tipc: Disabling bearer [ 547.218462][T15465] syzkaller0: entered promiscuous mode [ 547.224112][T15465] syzkaller0: entered allmulticast mode [ 547.233039][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.242185][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.344015][T15470] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 547.404215][ T55] usb 4-1: USB disconnect, device number 21 [ 547.680426][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 547.730497][ T5882] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 547.810715][ T24] usb 2-1: device descriptor read/64, error -71 [ 547.820488][ T55] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 547.906543][ T5882] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.925755][ T5882] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.955851][ T5882] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.975900][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.012768][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.026629][ T5882] usb 6-1: invalid MIDI out EP 0 [ 548.084674][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 548.090529][ T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 548.101897][ T55] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 548.115206][ T55] usb 4-1: config 0 has no interface number 0 [ 548.124423][ T55] usb 4-1: config 0 interface 237 has no altsetting 0 [ 548.153362][ T55] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 548.163400][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.172927][ T55] usb 4-1: Product: syz [ 548.177755][ T55] usb 4-1: Manufacturer: syz [ 548.186954][ T55] usb 4-1: SerialNumber: syz [ 548.197425][ T55] usb 4-1: config 0 descriptor?? [ 548.211086][ T55] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 548.231514][ T24] usb 2-1: device descriptor read/64, error -71 [ 548.342862][ T5882] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 548.351416][ T24] usb usb2-port1: attempt power cycle [ 548.409700][ T55] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 548.422852][ T55] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 548.441593][ T55] snd_usb_podhd 4-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 548.611713][ T55] usb 4-1: USB disconnect, device number 22 [ 548.710525][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 548.731467][ T24] usb 2-1: device descriptor read/8, error -71 [ 548.946433][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 548.980437][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 549.023565][ T24] usb 2-1: device descriptor read/8, error -71 [ 549.150862][ T24] usb usb2-port1: unable to enumerate USB device [ 549.208503][T15505] usb usb8: usbfs: process 15505 (syz.4.2110) did not claim interface 0 before use [ 550.260690][T15517] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 550.392637][ T55] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 550.578000][ T55] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.593397][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2115'. [ 550.603136][ T55] usb 4-1: config 0 has no interface number 0 [ 550.650464][ T55] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 550.700529][ T55] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 550.728893][ T55] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 550.869269][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.895672][ T55] usb 4-1: config 0 descriptor?? [ 550.911552][T15509] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 551.059567][ T55] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 551.207491][T15509] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 551.343989][ T55] usb 4-1: USB disconnect, device number 23 [ 551.450457][ T5871] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 551.649394][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 551.674046][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 551.701822][ T5871] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 551.734204][ T5871] usb 1-1: config 7 has no interface number 0 [ 551.743908][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 551.749584][T15539] netlink: 'syz.4.2121': attribute type 21 has an invalid length. [ 551.763167][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.771131][T15539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.781064][ T5871] usb 1-1: Product: syz [ 551.785260][ T5871] usb 1-1: Manufacturer: syz [ 551.786032][T15539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.789856][ T5871] usb 1-1: SerialNumber: syz [ 551.893401][T15539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.910979][T15539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.003248][T15546] CIFS: VFS: Malformed UNC in devname [ 552.060736][T15534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.094158][T15534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.918383][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 553.753960][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 553.846303][T12378] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.855485][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 553.864647][T12378] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.883987][T12378] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.911415][T12378] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.105784][ T5837] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 554.123449][ T5871] usb 1-1: USB disconnect, device number 121 [ 554.283238][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.293665][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.315155][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.327823][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.380460][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 554.504756][ T30] audit: type=1326 audit(1768777423.444:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.0.2137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x0 [ 554.555365][ T10] usb 4-1: device descriptor read/64, error -71 [ 554.702587][T15611] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 554.710812][T15611] netlink: 'syz.1.2140': attribute type 2 has an invalid length. [ 554.718615][T15611] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 554.727622][T15611] netlink: 'syz.1.2140': attribute type 3 has an invalid length. [ 554.810688][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 554.940002][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 554.990490][ T10] usb 4-1: device descriptor read/64, error -71 [ 555.008349][T15623] binder: 15621:15623 ioctl c018620c 200000000000 returned -22 [ 555.110728][ T10] usb usb4-port1: attempt power cycle [ 555.247497][T15636] tipc: Enabled bearer , priority 0 [ 555.473399][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 555.518249][ T10] usb 4-1: device descriptor read/8, error -71 [ 555.533514][T15637] syzkaller0: entered promiscuous mode [ 555.539027][T15637] syzkaller0: entered allmulticast mode [ 555.686098][T15637] tipc: Resetting bearer [ 555.880411][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 555.920932][ T10] usb 4-1: device descriptor read/8, error -71 [ 555.930800][T15637] tipc: Disabling bearer [ 556.089477][T15649] netlink: 'syz.1.2149': attribute type 3 has an invalid length. [ 556.250950][ T10] usb usb4-port1: unable to enumerate USB device [ 556.422333][ T24] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 556.592434][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.602917][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 556.612219][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 556.640147][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.653986][ T24] usb 2-1: config 0 descriptor?? [ 556.672413][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 556.679567][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 556.704842][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 556.720165][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 556.735381][ T24] usb 2-1: media controller created [ 556.745559][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.768622][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 556.783111][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 556.798753][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 556.813925][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 556.822868][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 556.874079][T15647] dvb-usb: bulk message failed: -22 (2/0) [ 556.986032][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 556.993612][ T24] dvb-usb: error while querying for an remote control event. [ 557.170663][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 557.176755][ T108] dvb-usb: error while querying for an remote control event. [ 557.242969][T15671] ALSA: mixer_oss: invalid OSS volume '' [ 557.341116][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 557.347071][ T108] dvb-usb: error while querying for an remote control event. [ 557.519828][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 557.525711][ T108] dvb-usb: error while querying for an remote control event. [ 557.700560][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 557.706345][ T108] dvb-usb: error while querying for an remote control event. [ 557.780188][T15677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.918668][T15677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.943817][T15677] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2157'. [ 557.964277][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 557.973530][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 557.979420][ T108] dvb-usb: error while querying for an remote control event. [ 557.998556][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 558.160478][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 558.174841][ T108] dvb-usb: error while querying for an remote control event. [ 558.360696][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 558.366474][ T108] dvb-usb: error while querying for an remote control event. [ 558.464120][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 558.613834][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 558.630671][ T108] dvb-usb: error while querying for an remote control event. [ 558.790449][ T108] dvb-usb: bulk message failed: -22 (1/0) [ 558.796275][ T108] dvb-usb: error while querying for an remote control event. [ 558.974752][ T10] usb 2-1: USB disconnect, device number 125 [ 559.086131][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 559.530829][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 559.540494][ T5871] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 559.718058][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 559.728244][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.743484][ T5871] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.759977][ T5871] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.775492][ T10] usb 2-1: Product: syz [ 559.788220][ T10] usb 2-1: Manufacturer: syz [ 559.793628][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 559.805916][ T10] usb 2-1: SerialNumber: syz [ 559.814057][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 559.835692][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 559.848230][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.868017][ T5882] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 559.930419][ T55] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 559.950780][ T5871] usb 4-1: config 0 descriptor?? [ 560.100457][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 560.121138][ T55] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 560.129688][ T55] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 560.159665][ T55] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 560.282034][ T55] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 560.305818][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 560.336969][ T55] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 560.354828][ T55] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 560.389913][ T55] usb 1-1: Product: syz [ 560.403380][ T55] usb 1-1: Manufacturer: syz [ 560.416678][ T55] usb 1-1: SerialNumber: syz [ 560.441756][ T55] usb 1-1: config 0 descriptor?? [ 560.467098][ T55] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 560.499055][ T55] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 560.594594][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 560.606486][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 560.645312][ T5871] usb 4-1: USB disconnect, device number 28 [ 560.677296][ T10] usb 1-1: USB disconnect, device number 122 [ 560.688070][ T10] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 561.180480][ T5882] usb 2-1: Service connection timeout for: 256 [ 561.198450][ T5882] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 561.266024][ T5882] ath9k_htc: Failed to initialize the device [ 561.277843][ T5882] usb 2-1: ath9k_htc: USB layer deinitialized [ 562.335527][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.344866][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.525551][ T10] usb 2-1: USB disconnect, device number 126 [ 562.580462][ T5871] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 562.636216][T15751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.647119][T15751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.741570][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 562.751253][ T5871] usb 4-1: config 68 has an invalid interface number: 25 but max is 0 [ 562.759969][ T5871] usb 4-1: config 68 has no interface number 0 [ 562.766842][ T5871] usb 4-1: config 68 interface 25 has no altsetting 0 [ 562.776166][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=8a.8c [ 562.785488][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.794518][ T5871] usb 4-1: Product: syz [ 562.798840][ T5871] usb 4-1: Manufacturer: syz [ 562.803759][ T5871] usb 4-1: SerialNumber: syz [ 562.920517][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 562.933653][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.940047][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.030208][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:68.25/input/input66 [ 563.048673][ T5184] bcm5974 4-1:68.25: could not read from device [ 563.058286][ T5184] bcm5974 4-1:68.25: could not read from device [ 563.077493][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 563.087262][ T5871] usb 4-1: USB disconnect, device number 29 [ 563.091949][ T5184] bcm5974 4-1:68.25: could not read from device [ 563.093402][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.112416][ T10] usb 2-1: Product: syz [ 563.116886][ T10] usb 2-1: Manufacturer: syz [ 563.122712][ T10] usb 2-1: SerialNumber: syz [ 563.143249][ T10] usb 2-1: config 0 descriptor?? [ 563.159550][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 563.426913][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.441891][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.462062][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.481004][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.636228][T15766] vti0: entered promiscuous mode [ 563.654288][T15766] vti0: entered allmulticast mode [ 563.728283][T15773] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 563.746319][T15773] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2185'. [ 563.756476][T15772] netlink: 'syz.0.2185': attribute type 3 has an invalid length. [ 563.765119][T15772] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2185'. [ 563.780936][T15772] loop5: detected capacity change from 0 to 7 [ 563.811324][T15772] Dev loop5: unable to read RDB block 7 [ 563.827795][T15772] loop5: unable to read partition table [ 563.836535][ T30] audit: type=1400 audit(1768777432.764:936): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":l-subdev#" pid=15774 comm="syz.3.2186" [ 563.890835][T15772] loop5: partition table beyond EOD, truncated [ 563.931513][T15772] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 564.276476][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.287027][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.350474][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 564.368310][ T10] gspca_sunplus: reg_w_riv err -71 [ 564.380526][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 564.401604][ T10] usb 2-1: USB disconnect, device number 127 [ 564.520525][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 564.532570][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.553156][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.575406][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.602581][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 564.622046][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.643614][ T24] usb 1-1: config 0 descriptor?? [ 564.649186][T15794] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 564.892002][T15801] F2FS-fs: Conflicting test_dummy_encryption options [ 565.083772][T15803] syzkaller1: entered promiscuous mode [ 565.089503][T15803] syzkaller1: entered allmulticast mode [ 565.270510][T15790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.291063][T15790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.360880][T15809] random: crng reseeded on system resumption [ 565.438802][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 565.445107][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 565.469720][ T24] usb 1-1: USB disconnect, device number 123 [ 566.620566][ T24] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 566.780693][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 566.791307][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.958528][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 567.019421][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.043375][ T24] usb 1-1: config 0 descriptor?? [ 567.574897][T15826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.651272][T15826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.716901][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.746659][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.772761][ T30] audit: type=1326 audit(1768777436.714:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 567.867026][ T30] audit: type=1326 audit(1768777436.734:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 567.940472][ T30] audit: type=1326 audit(1768777436.734:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 568.016619][ T30] audit: type=1326 audit(1768777436.744:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.3.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 568.590641][T15864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.244015][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.271886][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.329509][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.355630][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.474259][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 569.482715][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 569.528528][ T24] usb 1-1: USB disconnect, device number 124 [ 569.581795][ T30] audit: type=1326 audit(1768777438.524:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15895 comm="syz.1.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 569.900185][T15909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2219'. [ 570.247875][T15929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.263804][T15929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.274094][T15930] netlink: 'syz.5.2225': attribute type 1 has an invalid length. [ 570.361113][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 570.528220][ T55] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 570.548990][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.570157][ T55] usb 2-1: Product: syz [ 570.590761][ T55] usb 2-1: Manufacturer: syz [ 570.597591][ T55] usb 2-1: SerialNumber: syz [ 570.624053][ T55] usb 2-1: config 0 descriptor?? [ 570.642529][ T55] f81232 2-1:0.0: f81232 converter detected [ 570.669884][ T55] usb 2-1: f81232 converter now attached to ttyUSB0 [ 570.924486][T15934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.955088][T15936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.031733][T15936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.039600][T15934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.075884][T15936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.104378][T15936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.257985][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.283891][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.600584][ T24] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 572.763644][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.772963][ T24] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 572.783731][ T24] usb 4-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 572.794787][ T24] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 572.808509][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 572.818756][ T24] usb 4-1: string descriptor 0 read error: -22 [ 572.825558][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.834884][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.862826][ T24] usb 4-1: bad CDC descriptors [ 572.919977][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.933698][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.220586][ T5882] usb 2-1: USB disconnect, device number 2 [ 573.285404][ T30] audit: type=1326 audit(1768777442.114:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.290718][ T5882] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 573.368008][ T5882] f81232 2-1:0.0: device disconnected [ 573.424020][ T30] audit: type=1326 audit(1768777442.114:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.464203][ T30] audit: type=1326 audit(1768777442.114:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.491193][ T30] audit: type=1326 audit(1768777442.114:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.514434][ T30] audit: type=1326 audit(1768777442.124:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.610473][ T30] audit: type=1326 audit(1768777442.164:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.692227][ T30] audit: type=1326 audit(1768777442.174:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 573.764622][ T30] audit: type=1326 audit(1768777442.174:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f293a38e1ff code=0x7ffc0000 [ 573.789675][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.799876][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.845744][ T30] audit: type=1326 audit(1768777442.174:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15972 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 574.435622][T15989] netlink: 'syz.0.2241': attribute type 8 has an invalid length. [ 574.461569][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 574.931271][T16003] xt_TCPMSS: Only works on TCP SYN packets [ 575.342800][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 575.367423][ T24] usb 4-1: USB disconnect, device number 30 [ 575.520462][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 575.527776][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 575.538632][ T55] usb 2-1: config 4 has an invalid interface number: 146 but max is 0 [ 575.548632][ T55] usb 2-1: config 4 has no interface number 0 [ 575.601755][ T55] usb 2-1: config 4 interface 146 has no altsetting 0 [ 575.627990][ T55] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 575.664584][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.684384][ T55] usb 2-1: Product: syz [ 575.694849][ T55] usb 2-1: Manufacturer: syz [ 575.705902][ T55] usb 2-1: SerialNumber: syz [ 575.789165][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 575.925365][T16031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.934642][T16031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.973557][T16012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.982901][T16012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.051718][ T55] comedi comedi5: could not set alternate setting 3 in high speed [ 576.059765][ T55] usbduxsigma 2-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 576.116453][ T55] usbduxsigma 2-1:4.146: probe with driver usbduxsigma failed with error -71 [ 576.145548][ T55] usb 2-1: USB disconnect, device number 3 [ 576.240953][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2252'. [ 576.786431][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.864040][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.085076][T16064] xt_hashlimit: max too large, truncated to 1048576 [ 578.093175][T16064] xt_hashlimit: overflow, rate too high: 0 [ 578.756111][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 579.431310][T16090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.445865][T16090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.641768][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.653670][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 579.673531][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.716456][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2267'. [ 580.474228][T16116] CUSE: info not properly terminated [ 580.516055][T16116] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 580.534603][T16116] bond2 (unregistering): Released all slaves [ 580.695438][T16121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2274'. [ 580.873539][T16124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.900946][T16124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.133875][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.156775][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.586004][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 581.586021][ T30] audit: type=1326 audit(1768777450.514:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 581.632293][T16141] program syz.1.2279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.655839][T16141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 581.664443][ T30] audit: type=1326 audit(1768777450.514:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 581.666246][T16141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.842022][ T30] audit: type=1326 audit(1768777450.514:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 581.952525][ T30] audit: type=1326 audit(1768777450.514:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.009119][ T30] audit: type=1326 audit(1768777450.514:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.126114][ T30] audit: type=1326 audit(1768777450.524:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.168251][ T30] audit: type=1326 audit(1768777450.524:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.208808][ T30] audit: type=1326 audit(1768777450.524:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.468946][ T30] audit: type=1326 audit(1768777450.524:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.589552][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.613598][ T30] audit: type=1326 audit(1768777450.524:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293a38f749 code=0x7ffc0000 [ 582.618561][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.826084][T16154] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 582.961537][T16160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.986755][T16160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.003827][T16160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.020678][T16160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.051164][T16160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.072672][T16160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.151020][ T108] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 583.154036][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f3e8400: rx timeout, send abort [ 583.318467][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 583.330617][ T108] usb 4-1: Using ep0 maxpacket: 16 [ 583.338846][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.393677][ T55] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 583.423159][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.439980][ T108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.526848][ T108] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 583.547151][ T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.555279][ T55] usb 1-1: device descriptor read/64, error -71 [ 583.579264][ T108] usb 4-1: config 0 descriptor?? [ 583.655445][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026e57800: rx timeout, send abort [ 583.668751][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f3e8400: abort rx timeout. Force session deactivation [ 583.770873][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 583.920550][ T55] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 583.968263][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.979778][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.020463][ T108] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 584.060454][ T55] usb 1-1: device descriptor read/64, error -71 [ 584.080473][ T108] microsoft 0003:045E:07DA.0023: no inputs found [ 584.086905][ T108] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 584.163841][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026e57800: abort rx timeout. Force session deactivation [ 584.213474][ T55] usb usb1-port1: attempt power cycle [ 584.232933][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 584.332361][ T5882] usb 4-1: USB disconnect, device number 31 [ 584.580521][ T55] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 584.601288][ T55] usb 1-1: device descriptor read/8, error -71 [ 584.850518][ T55] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 584.921223][ T55] usb 1-1: device descriptor read/8, error -71 [ 585.125495][ T55] usb usb1-port1: unable to enumerate USB device [ 585.200145][T16211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 586.560459][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 586.740681][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 586.770127][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.811100][ T55] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 586.841399][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.878229][ T55] usb 2-1: config 0 descriptor?? [ 587.327999][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2302'. [ 587.382332][T16224] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 587.632037][T16224] team1: entered promiscuous mode [ 587.653151][T16224] team1: entered allmulticast mode [ 587.676604][T16224] 8021q: adding VLAN 0 to HW filter on device team1 [ 588.386589][T16244] netlink: 'syz.4.2307': attribute type 16 has an invalid length. [ 588.426855][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 588.433414][ T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 588.474714][ T55] usb 2-1: USB disconnect, device number 4 [ 588.491373][T16244] netlink: 'syz.4.2307': attribute type 17 has an invalid length. [ 588.572464][T16244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.390472][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 589.540557][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 589.548701][ T10] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 589.558207][ T10] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 589.607466][ T10] usb 1-1: config 6 has no interface number 0 [ 589.640635][ T10] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 589.814143][ T10] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 589.817240][T16282] vivid-007: disconnect [ 589.830864][ T10] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.858705][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 589.931385][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.940388][ T10] usb 1-1: Product: syz [ 589.944737][ T10] usb 1-1: Manufacturer: syz [ 589.949500][ T10] usb 1-1: SerialNumber: syz [ 590.012199][ T10] hso 1-1:6.2: Failed to find INT IN ep [ 590.194211][ T10] usb 1-1: USB disconnect, device number 3 [ 590.354948][T16287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.366783][T16287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.535162][T16277] vivid-007: reconnect [ 590.561788][ T55] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 590.738439][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 590.747059][ T55] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.763952][ T55] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 590.779972][ T55] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 590.796659][ T55] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.806246][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 590.814597][ T55] usb 4-1: SerialNumber: syz [ 590.823716][T16285] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 590.833226][ T55] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 590.905969][ T10] usb 6-1: USB disconnect, device number 48 [ 590.940748][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 591.043492][ T55] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 591.084966][ T55] usb 4-1: USB disconnect, device number 32 [ 591.106168][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 591.124589][ T6251] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.149468][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 591.168795][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.228129][ T5871] pvrusb2: Hardware description: Terratec Grabster AV400 [ 591.235634][ T5871] pvrusb2: ********** [ 591.239908][ T5871] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 591.255546][ T5871] pvrusb2: Important functionality might not be entirely working. [ 591.263889][ T5871] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 591.276369][ T5871] pvrusb2: ********** [ 591.332692][ T6251] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.434069][ T2345] pvrusb2: Invalid write control endpoint [ 591.483121][ T6251] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.559570][ T2345] pvrusb2: Invalid write control endpoint [ 591.575115][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 591.602726][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 591.615190][ T6251] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.628172][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 591.662002][ T2345] pvrusb2: Device being rendered inoperable [ 591.680551][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 591.697061][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 591.725252][ T2345] pvrusb2: Attached sub-driver cx25840 [ 591.738009][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 591.759774][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 591.794252][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.812673][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.822523][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.832569][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.840209][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.064833][ T6251] bridge_slave_1: left allmulticast mode [ 592.072744][ T6251] bridge_slave_1: left promiscuous mode [ 592.080777][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.098370][ T6251] bridge_slave_0: left allmulticast mode [ 592.104809][ T6251] bridge_slave_0: left promiscuous mode [ 592.111209][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.225117][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 592.435557][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 592.445826][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.474180][ T10] usb 4-1: config 0 descriptor?? [ 592.480224][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.503041][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.567186][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.578515][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.587241][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.595535][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.623152][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.699671][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 592.713839][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 592.766918][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 592.773783][ T10] [drm] Initialized udl on minor 2 [ 592.790961][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 592.811173][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 592.830252][ T5871] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 592.839724][ T10] usb 4-1: USB disconnect, device number 33 [ 592.855985][ T5871] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 592.914150][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.926533][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.936703][ T6251] bond0 (unregistering): Released all slaves [ 592.952968][ T6251] bond1 (unregistering): Released all slaves [ 593.359496][T16308] chnl_net:caif_netlink_parms(): no params data found [ 593.485042][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 593.767044][ T55] usb 2-1: USB disconnect, device number 5 [ 593.811007][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 593.865463][T16337] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.891831][ T5837] Bluetooth: hci2: command tx timeout [ 593.932936][T16316] chnl_net:caif_netlink_parms(): no params data found [ 593.979471][T16343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.015861][T16343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.046329][ T6251] hsr_slave_0: left promiscuous mode [ 594.061885][ T6251] hsr_slave_1: left promiscuous mode [ 594.072281][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.089639][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.101477][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.113000][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.165458][ T6251] veth1_macvtap: left promiscuous mode [ 594.171388][ T6251] veth0_macvtap: left promiscuous mode [ 594.177192][ T6251] veth1_vlan: left promiscuous mode [ 594.189789][ T6251] veth0_vlan: left promiscuous mode [ 594.266388][ T55] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 594.485205][ T55] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 594.493430][ T55] usb 2-1: config 1 has no interface number 0 [ 594.507093][ T55] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 594.541403][ T55] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 594.561935][ T55] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.599685][ T55] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 594.616865][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.646121][ T55] usb 2-1: Product: syz [ 594.674833][ T55] usb 2-1: Manufacturer: syz [ 594.679409][ T55] usb 2-1: SerialNumber: syz [ 594.695602][ T5837] Bluetooth: hci0: command tx timeout [ 594.703520][T16341] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 594.779789][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.810952][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.971172][T16341] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 595.414466][T16364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.428378][T16364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.478542][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 595.529326][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 595.980579][ T5837] Bluetooth: hci2: command tx timeout [ 596.119397][ T55] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 596.119524][T16366] tipc: Enabling of bearer rejected, failed to enable media [ 596.178584][T16308] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.198435][T16308] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.208301][T16308] bridge_slave_0: entered allmulticast mode [ 596.218571][T16308] bridge_slave_0: entered promiscuous mode [ 596.243062][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 596.243094][ T30] audit: type=1326 audit(1768777465.184:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.274143][ T30] audit: type=1326 audit(1768777465.214:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.297293][ T30] audit: type=1326 audit(1768777465.214:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.321505][T16308] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.330299][T16308] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.337926][T16308] bridge_slave_1: entered allmulticast mode [ 596.340869][ T30] audit: type=1326 audit(1768777465.214:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.346064][T16308] bridge_slave_1: entered promiscuous mode [ 596.369389][ T30] audit: type=1326 audit(1768777465.214:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.396231][ T55] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 596.416475][ T55] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 596.429841][ T55] usb 2-1: USB disconnect, device number 6 [ 596.441675][ T55] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 596.454264][ T30] audit: type=1326 audit(1768777465.214:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.480673][ T30] audit: type=1326 audit(1768777465.214:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.517099][ T30] audit: type=1326 audit(1768777465.214:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.566367][ T30] audit: type=1326 audit(1768777465.214:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.589387][ T30] audit: type=1326 audit(1768777465.214:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 596.593925][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.650778][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.660090][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.668134][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.675480][T16316] bridge_slave_0: entered allmulticast mode [ 596.681266][ T55] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 596.684054][T16316] bridge_slave_0: entered promiscuous mode [ 596.718908][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.728250][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.737301][T16316] bridge_slave_1: entered allmulticast mode [ 596.744542][T16316] bridge_slave_1: entered promiscuous mode [ 596.780491][ T5837] Bluetooth: hci0: command tx timeout [ 596.831291][T16308] team0: Port device team_slave_0 added [ 596.875788][T16308] team0: Port device team_slave_1 added [ 596.998956][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.032905][T16387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.045386][T16387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.066001][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.106830][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.119599][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.147337][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.201576][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.220802][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.264517][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.309245][T16316] team0: Port device team_slave_0 added [ 597.320477][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 597.339750][T16316] team0: Port device team_slave_1 added [ 597.398330][T16308] hsr_slave_0: entered promiscuous mode [ 597.405331][T16308] hsr_slave_1: entered promiscuous mode [ 597.413042][T16308] debugfs: 'hsr0' already exists in 'hsr' [ 597.419073][T16308] Cannot create hsr debugfs directory [ 597.500763][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 597.515158][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.519633][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.523426][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.561694][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.567818][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.580459][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.602921][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.610019][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.627889][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.646823][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.650514][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.695579][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.713352][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.722369][ T10] usb 2-1: Manufacturer: syz [ 597.755844][ T10] usb 2-1: config 0 descriptor?? [ 597.769901][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.797028][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.827875][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.840554][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.903103][T16316] hsr_slave_0: entered promiscuous mode [ 597.909725][T16316] hsr_slave_1: entered promiscuous mode [ 597.923907][T16316] debugfs: 'hsr0' already exists in 'hsr' [ 597.929669][T16316] Cannot create hsr debugfs directory [ 598.051380][ T5837] Bluetooth: hci2: command tx timeout [ 598.110454][ T10] rc_core: IR keymap rc-hauppauge not found [ 598.116425][ T10] Registered IR keymap rc-empty [ 598.122026][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.140713][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.174581][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 598.188029][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.207406][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.225670][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input68 [ 598.264496][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.291976][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.331963][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.369398][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.420556][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.453601][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.502809][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.531571][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.561695][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.600779][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 598.648891][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 598.698838][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 598.744973][ T10] usb 2-1: USB disconnect, device number 7 [ 598.850608][ T5837] Bluetooth: hci0: command tx timeout [ 598.935788][ T55] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 599.110496][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 599.142087][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.153814][ T55] usb 4-1: config 0 has no interfaces? [ 599.173169][ T55] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 599.182718][ T55] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 599.191693][ T55] usb 4-1: Manufacturer: syz [ 599.247425][ T55] usb 4-1: config 0 descriptor?? [ 599.774603][ T10] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 599.955689][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 599.963541][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 599.976395][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.066148][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.119813][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 600.129119][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.148043][ T5837] Bluetooth: hci2: command tx timeout [ 600.175327][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.411091][ T6251] bond2 (unregistering): (slave gretap1): Releasing active interface [ 600.695648][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.729455][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 600.745358][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 600.766492][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.793274][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 600.937463][ T5837] Bluetooth: hci0: command tx timeout [ 600.992114][ T10] usb 2-1: string descriptor 0 read error: -22 [ 601.003890][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 601.013586][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.064582][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 601.904466][ T6251] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.923991][ T6251] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.939797][ T6251] .` (unregistering): (slave dummy0): Releasing backup interface [ 601.959323][ T6251] .` (unregistering): Released all slaves [ 602.166718][ T6251] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 602.176791][ T6251] bond1 (unregistering): Released all slaves [ 602.193413][ T6251] bond0 (unregistering): Released all slaves [ 602.208705][ T6251] bond2 (unregistering): Released all slaves [ 602.226434][ T6251] bond3 (unregistering): Released all slaves [ 602.243081][ T6251] bond4 (unregistering): Released all slaves [ 602.472855][ T10] usb 2-1: USB disconnect, device number 8 [ 602.506224][ T6251] bond5 (unregistering): (slave veth3): Releasing active interface [ 602.523711][ T6251] bond5 (unregistering): (slave veth5): Releasing active interface [ 602.535395][ T6251] bond5 (unregistering): Released all slaves [ 602.570110][T16436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.598946][T16454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.896827][ T6251] tipc: Disabling bearer [ 602.922291][ T6251] tipc: Disabling bearer [ 602.943575][T16308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 602.950858][ T6251] tipc: Left network mode [ 603.037843][T16308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 603.180490][T16308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 603.224435][ T55] usb 4-1: USB disconnect, device number 34 [ 603.246081][ T6251] IPVS: stopping backup sync thread 12140 ... [ 603.261606][T16308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 603.647401][T16316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 603.733353][T16316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 603.756319][T16316] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 603.798611][T16316] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 603.994104][ T6251] hsr_slave_0: left promiscuous mode [ 604.000264][ T6251] hsr_slave_1: left promiscuous mode [ 604.011637][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.025512][ T6251] batman_adv: batadv0: Removing interface: 26 [ 604.279665][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.307457][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.317665][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.341960][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.352563][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.374996][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.394474][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.403620][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.420867][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.429851][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 604.719430][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.729988][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.859938][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 605.025135][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 605.034372][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 605.061465][ T5882] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 605.083306][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.092499][ T5882] usb 2-1: Product: syz [ 605.096875][ T5882] usb 2-1: Manufacturer: syz [ 605.105107][ T5882] usb 2-1: SerialNumber: syz [ 605.110233][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 605.133850][ T5882] usb 2-1: config 0 descriptor?? [ 605.236866][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 605.558726][ T5882] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 605.566358][ T5882] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 606.375072][T16526] vcan0: entered promiscuous mode [ 606.384379][T16526] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 606.541204][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 606.553298][T16308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.633068][T16308] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.658920][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.666070][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.736078][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 606.775408][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1088, setting to 1024 [ 606.787942][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 606.810496][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.817667][T12276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.819808][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 606.835296][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.852328][ T24] usb 4-1: Product: syz [ 606.910053][ T24] usb 4-1: Manufacturer: syz [ 606.916321][ T24] usb 4-1: SerialNumber: syz [ 606.967309][ T24] usb 4-1: config 0 descriptor?? [ 606.986160][T16547] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 606.994947][T16547] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 607.226936][T16546] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 607.264763][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.276152][T16546] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 607.387673][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.454461][ T6251] IPVS: stop unused estimator thread 0... [ 607.464921][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.579107][ T5882] usb 2-1: USB disconnect, device number 9 [ 607.674536][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.681838][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.731550][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.738847][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.843235][T16570] openvswitch: netlink: Flow key attr not present in new flow. [ 608.431919][T16308] veth0_vlan: entered promiscuous mode [ 608.568348][T16308] veth1_vlan: entered promiscuous mode [ 608.621876][T16316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.670403][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.866448][T16308] veth0_macvtap: entered promiscuous mode [ 609.045523][T16308] veth1_macvtap: entered promiscuous mode [ 609.117667][T16316] veth0_vlan: entered promiscuous mode [ 609.156451][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.195706][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 609.204606][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.256694][T12276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.347186][ T24] dm9601 4-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 609.347660][T16316] veth1_vlan: entered promiscuous mode [ 609.388720][ T24] usb 4-1: USB disconnect, device number 35 [ 609.406307][T12276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.420150][ T24] dm9601 4-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 609.463557][T12276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.506793][T12276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.592507][T16592] syzkaller0: entered promiscuous mode [ 609.598393][T16592] syzkaller0: entered allmulticast mode [ 609.759774][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.793900][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.854956][T16316] veth0_macvtap: entered promiscuous mode [ 609.893477][T12276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.921030][T12276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.932985][T16316] veth1_macvtap: entered promiscuous mode [ 609.989404][T16604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.989743][T16604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.032546][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.077312][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.115072][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.183829][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.232937][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 610.232954][ T30] audit: type=1326 audit(1768777479.174:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.289874][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.359446][ T30] audit: type=1326 audit(1768777479.204:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.571395][ T5871] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 610.604283][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.605069][T16613] program syz.1.2381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.631142][ T30] audit: type=1326 audit(1768777479.204:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.709098][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.723160][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.750094][ T30] audit: type=1326 audit(1768777479.204:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.777942][T16627] usb usb8: usbfs: process 16627 (syz.4.2383) did not claim interface 0 before use [ 610.798623][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 610.808621][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.817073][ T5871] usb 4-1: config 6 has an invalid interface number: 55 but max is 0 [ 610.836927][ T5871] usb 4-1: config 6 has no interface number 0 [ 610.841587][T16630] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 610.854928][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.854942][ T30] audit: type=1326 audit(1768777479.204:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.894103][ T5871] usb 4-1: config 6 interface 55 has no altsetting 0 [ 610.910132][ T30] audit: type=1326 audit(1768777479.204:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 610.941295][ T5871] usb 4-1: New USB device found, idVendor=085a, idProduct=0026, bcdDevice= 1.0a [ 610.953997][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.962143][ T5871] usb 4-1: Manufacturer: ໲敇安域녝삇缷㚌ꈑ䈡᛻厸퍥⭭茢馜扴㫂㥉螆슻泉쟰弘ꤖ켟䝞䋻➣霃`⣊火퀵⏙햅ꐓﱞ╺ፓᾧ먪皁瀖懈댱헺姀鲙滛슳好㨃쳚㛞ᦡ [ 611.037333][ T30] audit: type=1326 audit(1768777479.204:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 611.064974][T12378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.086625][T12378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.095463][ T5871] usb 4-1: SerialNumber: ᐪ [ 611.174319][ T30] audit: type=1326 audit(1768777479.204:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 611.232736][ T30] audit: type=1326 audit(1768777479.204:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 611.296271][ T30] audit: type=1326 audit(1768777479.204:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dc258f749 code=0x7ffc0000 [ 611.610992][ T5871] usb-storage 4-1:6.55: USB Mass Storage device detected [ 611.640919][ T5871] usb-storage 4-1:6.55: Quirks match for vid 085a pid 0026: 4 [ 611.714851][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 611.716411][ T5871] usb 4-1: USB disconnect, device number 36 [ 611.924038][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.943484][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 612.340944][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.399704][ T24] usb 2-1: Product: syz [ 612.500172][ T24] usb 2-1: Manufacturer: syz [ 612.524692][ T24] usb 2-1: SerialNumber: syz [ 612.569249][ T24] usb 2-1: config 0 descriptor?? [ 612.790555][ T5871] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 612.930988][ T5871] usb 4-1: device descriptor read/64, error -71 [ 613.183456][ T5871] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 613.320421][ T5871] usb 4-1: device descriptor read/64, error -71 [ 613.421228][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.431626][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.441380][ T5871] usb usb4-port1: attempt power cycle [ 613.780563][ T5871] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 613.801297][ T5871] usb 4-1: device descriptor read/8, error -71 [ 614.026858][T16691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.036387][T16691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.050598][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 614.075195][ T5871] usb 4-1: device descriptor read/8, error -71 [ 614.112365][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 614.123707][ T24] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 614.161188][ T24] usb 2-1: USB disconnect, device number 10 [ 614.194512][ T5871] usb usb4-port1: unable to enumerate USB device [ 614.716516][T16703] __nla_validate_parse: 61 callbacks suppressed [ 614.716542][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2392'. [ 614.866483][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.878303][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.895256][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2395'. [ 615.500757][ T108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 615.701330][ T108] usb 2-1: Using ep0 maxpacket: 32 [ 615.713491][ T108] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 615.742368][ T108] usb 2-1: config 2 has no interface number 0 [ 615.769064][ T108] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 615.815837][ T108] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.921022][ T108] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 615.950993][ T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.998505][ T108] usb 2-1: Product: syz [ 616.015807][ T108] usb 2-1: Manufacturer: syz [ 616.033912][ T108] usb 2-1: SerialNumber: syz [ 616.066083][ T108] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 616.101290][ T108] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 616.140702][ T5947] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 616.289594][ T108] usb 2-1: USB disconnect, device number 11 [ 616.296257][ T5947] usb 4-1: device descriptor read/64, error -71 [ 616.309980][ T108] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 616.347691][ T108] kobil_sct 2-1:2.45: device disconnected [ 616.540947][ T5947] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 616.681040][ T5947] usb 4-1: device descriptor read/64, error -71 [ 616.808653][ T5947] usb usb4-port1: attempt power cycle [ 617.171317][ T5947] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 617.251690][ T5947] usb 4-1: device descriptor read/8, error -71 [ 617.461392][T16776] vlan0: entered promiscuous mode [ 617.466576][T16776] bridge0: entered promiscuous mode [ 617.524712][ T5947] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 617.553117][ T5947] usb 4-1: device descriptor read/8, error -71 [ 617.664626][ T5947] usb usb4-port1: unable to enumerate USB device [ 617.885740][T16775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.373249][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 620.182576][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.197231][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.208479][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.226199][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.234353][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.609629][T16606] usb 5-1: USB disconnect, device number 32 [ 621.010557][T16606] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 621.162259][T16606] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.174552][T16606] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 621.188381][T16606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 621.199996][T16606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 621.211577][T16606] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.213989][T16837] chnl_net:caif_netlink_parms(): no params data found [ 621.228412][T16606] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 621.270908][T16606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.281668][T16606] usb 4-1: Product: syz [ 621.287730][T16606] usb 4-1: Manufacturer: syz [ 621.297313][T16606] usb 4-1: SerialNumber: syz [ 621.320988][T16606] usb 4-1: config 0 descriptor?? [ 621.328977][T16843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.353852][T16606] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input70 [ 621.571829][T16837] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.572971][T16843] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 621.579117][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.631423][T16837] bridge_slave_0: entered allmulticast mode [ 621.662535][T16837] bridge_slave_0: entered promiscuous mode [ 621.708566][T16843] netlink: 'syz.3.2423': attribute type 11 has an invalid length. [ 621.718232][T16837] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.726041][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2423'. [ 621.746705][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.758788][T16837] bridge_slave_1: entered allmulticast mode [ 621.778393][T16837] bridge_slave_1: entered promiscuous mode [ 622.067239][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.102657][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.186797][T16837] team0: Port device team_slave_0 added [ 622.209871][T16837] team0: Port device team_slave_1 added [ 622.286211][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.293505][ T5840] Bluetooth: hci5: command tx timeout [ 622.301603][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.348232][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.363648][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.371045][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.397745][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.474448][T16837] hsr_slave_0: entered promiscuous mode [ 622.484164][T16837] hsr_slave_1: entered promiscuous mode [ 622.492114][T16837] debugfs: 'hsr0' already exists in 'hsr' [ 622.497978][T16837] Cannot create hsr debugfs directory [ 622.505764][T16606] usb 4-1: USB disconnect, device number 45 [ 622.590773][ T108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 622.760954][ T108] usb 2-1: Using ep0 maxpacket: 16 [ 622.767935][ T108] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 622.777217][ T108] usb 2-1: config 0 has no interface number 0 [ 622.786581][ T108] usb 2-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 622.861996][ T108] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 622.874408][ T108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.891066][ T108] usb 2-1: Product: syz [ 622.895612][ T108] usb 2-1: Manufacturer: syz [ 622.906902][ T108] usb 2-1: SerialNumber: syz [ 622.925560][ T108] usb 2-1: config 0 descriptor?? [ 622.957782][T16870] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 622.973684][ T108] kvaser_usb 2-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 622.990657][T16606] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 623.160519][T16606] usb 4-1: Using ep0 maxpacket: 16 [ 623.168727][T16606] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 623.187051][T16606] usb 4-1: config 0 has no interface number 0 [ 623.197250][T16606] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 623.214770][T16837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 623.231301][T16870] netlink: 'syz.1.2427': attribute type 2 has an invalid length. [ 623.244535][T16606] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 623.256883][T16837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 623.263949][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 623.275261][T16606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.284131][T16606] usb 4-1: Product: syz [ 623.289714][T16606] usb 4-1: Manufacturer: syz [ 623.297775][T16837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 623.304923][T16606] usb 4-1: SerialNumber: syz [ 623.315265][T16606] usb 4-1: config 0 descriptor?? [ 623.325086][T16837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 623.367824][T16870] netlink: 'syz.1.2427': attribute type 2 has an invalid length. [ 623.410266][T16870] : entered promiscuous mode [ 623.734636][T16837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.916451][T16837] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.962773][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.970041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.010403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.017542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.041774][T16885] syz.7.2429 (16885): drop_caches: 2 [ 624.372051][ T5840] Bluetooth: hci5: command tx timeout [ 624.380029][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.387369][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.418391][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.642077][T16837] veth0_vlan: entered promiscuous mode [ 624.724512][T16837] veth1_vlan: entered promiscuous mode [ 624.858288][T16837] veth0_macvtap: entered promiscuous mode [ 624.898245][T16837] veth1_macvtap: entered promiscuous mode [ 624.974346][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.995406][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.037519][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.059721][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.094771][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.117757][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.338060][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.352051][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.405499][ T5871] usb 2-1: USB disconnect, device number 12 [ 625.715708][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.750958][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.251299][T16606] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 626.268636][T16606] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 626.333068][T16606] usb 4-1: USB disconnect, device number 46 [ 626.580135][ T5840] Bluetooth: hci5: command tx timeout [ 627.140905][ T5947] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 627.301134][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 627.308953][ T5947] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 627.421457][ T5947] usb 5-1: config 0 has no interface number 0 [ 627.490966][ T5947] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 627.540932][ T5947] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 627.641025][ T55] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 627.657462][ T5947] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 627.683901][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.711275][ T5947] usb 5-1: Product: syz [ 627.719615][ T5947] usb 5-1: Manufacturer: syz [ 627.736690][ T5947] usb 5-1: SerialNumber: syz [ 627.763299][ T5947] usb 5-1: config 0 descriptor?? [ 627.824510][ T55] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 627.837401][ T55] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 627.853317][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 627.867462][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 627.877237][ T55] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 627.886334][ T55] usb 2-1: Product: syz [ 627.891485][ T55] usb 2-1: Manufacturer: syz [ 627.896195][ T55] usb 2-1: SerialNumber: syz [ 627.952020][T16969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.974265][ T55] usb 2-1: config 0 descriptor?? [ 627.988114][ T55] usb 2-1: selecting invalid altsetting 0 [ 628.231166][ T5947] radio-si470x 5-1:0.35: DeviceID=0x5c9c ChipID=0xb44b [ 628.331400][T16971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.431258][T16941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.501908][T16979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.539757][T16941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.571260][T16979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.611443][ T5840] Bluetooth: hci5: command tx timeout [ 628.617711][ T5947] radio-si470x 5-1:0.35: software version 92, hardware version 156 [ 628.818326][ T5947] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 628.888113][ T5947] radio-si470x 5-1:0.35: submitting int urb failed (-90) [ 628.912713][ T5947] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 628.937966][ T5947] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -22 [ 629.062206][ T5947] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 629.089880][ T5947] usb 5-1: USB disconnect, device number 33 [ 629.690419][T16905] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 629.991084][T16905] usb 5-1: Using ep0 maxpacket: 32 [ 630.057823][T16905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.237817][T16905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.286691][T16905] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 630.327342][T16905] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 630.351646][T16905] usb 5-1: Product: syz [ 630.374238][T16905] usb 5-1: Manufacturer: syz [ 630.418041][T16905] hub 5-1:4.0: USB hub found [ 630.620854][T16905] hub 5-1:4.0: 2 ports detected [ 631.109254][ T55] usb 2-1: USB disconnect, device number 13 [ 631.371510][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2448'. [ 631.381993][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2448'. [ 631.397763][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 631.397777][ T30] audit: type=1326 audit(1768777500.334:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.7.2448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f123438f749 code=0x0 [ 631.465599][T17037] netlink: 'syz.1.2449': attribute type 1 has an invalid length. [ 631.517382][T17037] input input73: cannot allocate more than FF_MAX_EFFECTS effects [ 631.832045][T16905] hub 5-1:4.0: activate --> -90 [ 631.938288][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 632.034987][T16997] trusted_key: encrypted_key: insufficient parameters specified [ 632.043678][T16905] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 632.043939][ T5947] usb 5-1: USB disconnect, device number 34 [ 632.130496][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 632.152324][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.226514][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.262567][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 632.320451][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 632.347854][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.379349][ T10] usb 2-1: config 0 descriptor?? [ 632.636793][ T10] logitech 0003:046D:C293.0024: unknown main item tag 0x0 [ 632.659277][ T10] logitech 0003:046D:C293.0024: unknown main item tag 0x0 [ 632.680570][ T10] logitech 0003:046D:C293.0024: unknown main item tag 0x0 [ 632.717956][ T10] logitech 0003:046D:C293.0024: unknown main item tag 0x0 [ 632.742547][ T10] logitech 0003:046D:C293.0024: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 632.775537][ T10] logitech 0003:046D:C293.0024: no inputs found [ 632.825551][T17064] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 632.827551][ T10] usb 2-1: USB disconnect, device number 14 [ 632.984392][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2454'. [ 633.009683][T17061] fido_id[17061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 633.051418][ T5947] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 633.240777][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 633.254288][ T5947] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 633.293889][ T5947] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 633.322897][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.346810][ T5947] usb 5-1: Product: syz [ 633.351804][ T5947] usb 5-1: Manufacturer: syz [ 633.356424][ T5947] usb 5-1: SerialNumber: syz [ 633.404790][ T5947] usb 5-1: config 0 descriptor?? [ 633.458985][ T5947] cdc_phonet 5-1:0.0: skipping garbage [ 633.473589][ T5947] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 633.663723][ T5947] usb 5-1: USB disconnect, device number 35 [ 634.207068][T17104] program syz.4.2461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.439043][T17108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.665042][ T55] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 634.842932][ T55] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 634.851519][ T55] usb 2-1: config 0 has no interface number 0 [ 634.857676][ T55] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 634.869864][ T55] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.880708][ T55] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 634.894138][ T55] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 634.915137][ T55] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 634.924839][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.933784][ T55] usb 2-1: Product: syz [ 634.938029][ T55] usb 2-1: Manufacturer: syz [ 634.943214][ T55] usb 2-1: SerialNumber: syz [ 635.015437][ T55] usb 2-1: config 0 descriptor?? [ 635.137018][ T55] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 635.203347][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input74 [ 635.341894][T17134] bridge_slave_1: left allmulticast mode [ 635.835335][T17135] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 635.851807][T17134] bridge_slave_1: left promiscuous mode [ 635.858786][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.209674][T17134] bridge_slave_0: left allmulticast mode [ 636.232604][T17134] bridge_slave_0: left promiscuous mode [ 636.264894][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.641502][ T10] usb 2-1: USB disconnect, device number 15 [ 637.190571][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 637.358948][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 637.463011][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.760594][ T10] usb 2-1: config 0 descriptor?? [ 637.792322][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 638.192664][ T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 638.574143][T17178] : renamed from veth0_to_bond (while UP) [ 638.943921][ T5947] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 639.097685][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 639.100960][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 639.105396][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 639.111679][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 639.134443][ T5947] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 639.153259][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.153650][ T10] usb 2-1: USB disconnect, device number 16 [ 639.169308][ T5947] usb 5-1: Product: syz [ 639.174971][ T5947] usb 5-1: Manufacturer: syz [ 639.179977][ T5947] usb 5-1: SerialNumber: syz [ 639.232746][ T5947] usb 5-1: config 0 descriptor?? [ 639.428992][T17192] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 639.458502][ T5947] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 639.469881][T17192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.493422][ T5947] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 639.503095][T17195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2476'. [ 639.540102][ T5947] usb 5-1: USB disconnect, device number 36 [ 639.569943][T17197] tipc: Failed to remove unknown binding: 66,0,0/0:4134359225/4134359226 [ 639.628442][T17197] tipc: Failed to remove unknown binding: 66,0,0/0:4134359225/4134359226 [ 639.775421][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 639.791029][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 639.800812][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 639.811046][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 639.841841][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 640.149906][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.196857][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.350485][ T5882] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 640.470506][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 640.530500][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 640.538005][ T5882] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 640.549624][ T5882] usb 5-1: config 0 has no interface number 0 [ 640.558435][ T5882] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 640.567691][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.575981][ T5882] usb 5-1: Product: syz [ 640.580238][ T5882] usb 5-1: Manufacturer: syz [ 640.584879][ T5882] usb 5-1: SerialNumber: syz [ 640.591821][ T5882] usb 5-1: config 0 descriptor?? [ 640.599201][ T5882] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 640.620691][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 640.627340][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 640.636344][ T10] usb 2-1: config 0 has no interface number 0 [ 640.642631][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 640.653022][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 640.662479][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.670591][ T10] usb 2-1: Product: syz [ 640.674873][ T10] usb 2-1: Manufacturer: syz [ 640.679482][ T10] usb 2-1: SerialNumber: syz [ 640.687021][ T10] usb 2-1: config 0 descriptor?? [ 640.814960][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 640.835686][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 640.903642][ T30] audit: type=1326 audit(1768777509.844:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 640.929191][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 640.936075][T17223] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 640.945795][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 640.945821][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 640.945924][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 640.951812][ T10] usb 2-1: USB disconnect, device number 17 [ 640.976692][ T30] audit: type=1326 audit(1768777509.844:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.006471][ T30] audit: type=1326 audit(1768777509.874:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.038427][T17223] 8021q: adding VLAN 0 to HW filter on device bond29 [ 641.038576][T17214] binder: 17208:17214 unknown command 0 [ 641.061238][T17214] binder: 17208:17214 ioctl c0306201 200000000080 returned -22 [ 641.082657][T17224] bond29: (slave veth3): Enslaving as an active interface with a down link [ 641.085439][ T30] audit: type=1326 audit(1768777509.874:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.125979][ T30] audit: type=1326 audit(1768777509.874:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.128927][T17223] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 641.152164][ T30] audit: type=1326 audit(1768777509.874:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.158214][T17223] bond29: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 641.184090][ T30] audit: type=1326 audit(1768777509.874:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.224671][ T30] audit: type=1326 audit(1768777509.874:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.256188][ T30] audit: type=1326 audit(1768777509.874:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.286216][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 641.294478][ T10] usb 5-1: USB disconnect, device number 37 [ 641.305007][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 641.326328][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 641.345119][ T30] audit: type=1326 audit(1768777509.874:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17222 comm="syz.3.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc66ad8f749 code=0x7ffc0000 [ 641.377424][ T10] quatech2 5-1:0.51: device disconnected [ 641.613632][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 642.292154][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 642.500540][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 642.546133][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 642.565923][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.590500][ T10] usb 4-1: Product: syz [ 642.594703][ T10] usb 4-1: Manufacturer: syz [ 642.609480][ T10] usb 4-1: SerialNumber: syz [ 642.652108][ T10] usb 4-1: config 0 descriptor?? [ 642.670946][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 642.686395][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 642.717748][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 642.739319][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 642.764351][ T10] usb 4-1: media controller created [ 642.808144][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.873135][T17242] cxusb: i2c rd: len=110 is too big! [ 642.873135][T17242] [ 643.249243][T17250] netlink: 'syz.3.2489': attribute type 4 has an invalid length. [ 643.291284][T17250] netlink: 'syz.3.2489': attribute type 4 has an invalid length. [ 643.291980][T17249] block device autoloading is deprecated and will be removed. [ 644.860740][ T108] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 645.099317][ T108] usb 2-1: device descriptor read/64, error -71 [ 645.135932][ T10] cxusb: set interface failed [ 645.146788][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 645.274058][ T10] DVB: Unable to find symbol mt352_attach() [ 645.279987][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 645.351767][ T108] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 645.420619][ T10] rc_core: IR keymap rc-dvico-portable not found [ 645.433893][ T10] Registered IR keymap rc-empty [ 645.445030][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 645.475583][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input75 [ 645.491104][ T108] usb 2-1: device descriptor read/64, error -71 [ 645.522651][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 645.537106][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 645.584421][ T10] usb 4-1: USB disconnect, device number 47 [ 645.611500][ T108] usb usb2-port1: attempt power cycle [ 645.646045][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 645.960497][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 645.971389][ T108] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 645.992056][ T108] usb 2-1: device descriptor read/8, error -71 [ 646.110498][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 646.119055][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 646.130373][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.138397][ T10] usb 4-1: Product: syz [ 646.143359][ T10] usb 4-1: Manufacturer: syz [ 646.148002][ T10] usb 4-1: SerialNumber: syz [ 646.154965][ T10] usb 4-1: config 0 descriptor?? [ 646.241990][ T108] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 646.282145][ T108] usb 2-1: device descriptor read/8, error -71 [ 646.364570][ T10] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 646.401204][ T108] usb usb2-port1: unable to enumerate USB device [ 647.419000][ T10] usb write operation failed. (-71) [ 647.435964][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.441027][ T108] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 647.447754][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 647.460966][ T10] usb 4-1: media controller created [ 647.466537][ T10] usb read operation failed. (-71) [ 647.472142][ T10] usb write operation failed. (-71) [ 647.479808][ T10] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 647.492287][ T10] usb 4-1: USB disconnect, device number 48 [ 647.615076][ T108] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 647.631524][ T108] usb 5-1: config 0 has no interface number 0 [ 647.638325][ T108] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 647.655073][ T108] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 647.669123][ T108] usb 5-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 647.678713][ T108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.687771][ T108] usb 5-1: Product: syz [ 647.693153][ T108] usb 5-1: Manufacturer: syz [ 647.697867][ T108] usb 5-1: SerialNumber: syz [ 647.707849][ T108] usb 5-1: config 0 descriptor?? [ 647.733938][ T108] spcp8x5 5-1:0.201: SPCP8x5 converter detected [ 647.744607][ T108] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 648.007699][ T10] usb 5-1: USB disconnect, device number 38 [ 648.022434][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 648.038623][ T10] spcp8x5 5-1:0.201: device disconnected [ 648.161075][ T108] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 649.074543][ T108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.186407][ T108] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 649.242037][ T108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.256900][ T108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.272450][ T108] usb 4-1: Product: syz [ 649.289889][ T108] usb 4-1: Manufacturer: syz [ 649.314555][ T108] usb 4-1: SerialNumber: syz [ 649.374968][ T108] cdc_mbim 4-1:1.0: skipping garbage [ 649.397781][T17310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'. [ 649.548390][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 649.548407][ T30] audit: type=1326 audit(1768777518.484:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.6.2509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f570e18f749 code=0x0 [ 649.578736][T17297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 649.677034][T17316] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 649.720731][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 649.882693][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.897189][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 649.921078][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 649.960070][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.972703][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.029794][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.103283][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2510'. [ 650.198240][T17297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 650.222455][ T108] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 650.244791][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.262198][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.282873][ T108] wwan wwan0: port wwan0mbim0 attached [ 650.288967][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.299770][ T30] audit: type=1326 audit(1768777519.234:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.1.2508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dc258f749 code=0x0 [ 650.304998][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 650.433213][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.443003][ T108] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, be:9a:0c:bd:ef:ca [ 650.468981][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.825539][T17328] use of bytesused == 0 is deprecated and will be removed in the future, [ 650.834771][T17328] use the actual size instead. [ 651.491393][ T108] usb 4-1: USB disconnect, device number 49 [ 651.508599][ T108] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 651.604382][ T108] wwan wwan0: port wwan0mbim0 disconnected [ 652.461480][ T6660] usb 2-1: USB disconnect, device number 22 [ 652.531480][ T30] audit: type=1326 audit(1768777521.474:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17367 comm="syz.3.2516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc66ad8f749 code=0x0 [ 652.641711][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 653.000469][ T979] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 653.072426][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 653.172754][ T979] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 653.181282][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.192568][ T979] usb 2-1: config 0 has no interface number 0 [ 653.198810][ T979] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 653.209037][ T979] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.224148][ T979] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 653.233953][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.242167][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 653.247474][ T979] usb 2-1: Product: syz [ 653.252240][ T979] usb 2-1: Manufacturer: syz [ 653.256861][ T979] usb 2-1: SerialNumber: syz [ 653.264215][ T979] usb 2-1: config 0 descriptor?? [ 653.271430][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 653.281225][T17381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 653.289833][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.303515][ T979] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 653.310019][ T979] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 653.318800][ T10] usb 5-1: config 0 descriptor?? [ 653.509762][T17389] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 653.541339][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 653.663579][T17392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.735435][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 653.753336][ T10] dib0700: firmware download failed at 7 with -22 [ 653.757152][T17399] xt_hashlimit: size too large, truncated to 1048576 [ 653.788185][T17389] 8021q: adding VLAN 0 to HW filter on device bond30 [ 653.788702][T17399] xt_hashlimit: Unknown mode mask 7665642F, kernel too old? [ 653.816840][T17394] bond30: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 654.636500][T17419] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2527'. [ 655.899302][ T6660] usb 5-1: USB disconnect, device number 39 [ 656.135390][ T108] usb 2-1: USB disconnect, device number 23 [ 656.380844][ T6660] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 656.546663][ T6660] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 656.556653][ T6660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.750917][ T6660] usb 5-1: Product: syz [ 656.785500][ T6660] usb 5-1: Manufacturer: syz [ 656.790269][ T6660] usb 5-1: SerialNumber: syz [ 656.798485][ T6660] hub 5-1:24.0: bad descriptor, ignoring hub [ 656.833328][ T6660] hub 5-1:24.0: probe with driver hub failed with error -5 [ 656.941356][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 657.122000][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 657.322351][ T24] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 657.350967][ T24] usb 2-1: config 0 has no interface number 0 [ 657.362679][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.371767][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 657.391023][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.399113][ T24] usb 2-1: Product: syz [ 657.432414][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.552115][ T6660] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 657.571025][ T24] usb 2-1: Manufacturer: syz [ 657.575662][ T24] usb 2-1: SerialNumber: syz [ 657.583414][ T6660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 657.597714][ T24] usb 2-1: config 0 descriptor?? [ 657.606867][ T6660] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 657.743219][ T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 657.753395][ T6660] usb 5-1: media controller created [ 657.773130][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 657.798006][ T6660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.810891][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 657.828046][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 657.869695][ T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 657.927315][ T24] usb 2-1: media controller created [ 657.942439][T17443] ------------[ cut here ]------------ [ 657.948121][T17443] usb 5-1: BOGUS control dir, pipe 80002880 doesn't match bRequestType c0 [ 657.957027][T17443] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.1.2534/17443 [ 657.960979][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.967659][T17443] Modules linked in: [ 657.978141][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.1.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.989188][T17443] Tainted: [L]=SOFTLOCKUP [ 657.994552][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.005124][T17443] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 658.010868][T17443] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 658.030557][T17443] RSP: 0018:ffffc90003d4f940 EFLAGS: 00010246 [ 658.036669][T17443] RAX: 0000000000000000 RBX: ffff88807ba73700 RCX: 0000000080002880 [ 658.045121][T17443] RDX: ffff88802919e040 RSI: ffffffff8c140aa0 RDI: ffffffff8f8ef0c0 [ 658.053311][T17443] RBP: 1ffff110043fd180 R08: 00000000000000c0 R09: 0000000000000000 [ 658.061304][T17443] R10: ffffc90003d4fa40 R11: fffff520007a9f54 R12: ffff8880285e6100 [ 658.069270][T17443] R13: ffff888021fe8c00 R14: 0000000080002880 R15: ffff88802919e040 [ 658.077390][T17443] FS: 00007f2dc33d36c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 658.086358][T17443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.092960][T17443] CR2: 000000110c319855 CR3: 000000003f298000 CR4: 00000000003526f0 [ 658.101106][T17443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 658.109178][T17443] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 658.117270][T17443] Call Trace: [ 658.120581][T17443] [ 658.123517][T17443] ? __init_swait_queue_head+0xa9/0x150 [ 658.129061][T17443] usb_start_wait_urb+0x115/0x4f0 [ 658.134154][T17443] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 658.139698][T17443] usb_control_msg+0x232/0x3e0 [ 658.144518][T17443] dib0700_i2c_xfer+0xba7/0xf70 [ 658.149624][T17443] __i2c_transfer+0x79a/0x1f00 [ 658.154570][T17443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.160459][T17443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.166289][T17443] ? i2c_transfer+0xc8/0x2d0 [ 658.170950][T17443] i2c_transfer+0x1cc/0x2d0 [ 658.175450][T17443] i2cdev_ioctl_rdwr+0x460/0x740 [ 658.180471][T17443] i2cdev_ioctl+0x64b/0x820 [ 658.184981][T17443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 658.190007][T17443] ? __fget_files+0x3a0/0x420 [ 658.194737][T17443] ? __fget_files+0x2a/0x420 [ 658.199329][T17443] ? bpf_lsm_file_ioctl+0x9/0x20 [ 658.204292][T17443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 658.209303][T17443] __se_sys_ioctl+0xfc/0x170 [ 658.214185][T17443] do_syscall_64+0xec/0xf80 [ 658.218680][T17443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.224761][T17443] ? trace_irq_disable+0x37/0x100 [ 658.229793][T17443] ? clear_bhb_loop+0x60/0xb0 [ 658.234504][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.240432][T17443] RIP: 0033:0x7f2dc258f749 [ 658.244859][T17443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.265705][T17443] RSP: 002b:00007f2dc33d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.274383][T17443] RAX: ffffffffffffffda RBX: 00007f2dc27e6090 RCX: 00007f2dc258f749 [ 658.282484][T17443] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 658.291128][T17443] RBP: 00007f2dc2613f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.299100][T17443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.307102][T17443] R13: 00007f2dc27e6128 R14: 00007f2dc27e6090 R15: 00007f2dc290fa28 [ 658.315106][T17443] [ 658.318123][T17443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 658.325399][T17443] CPU: 0 UID: 0 PID: 17443 Comm: syz.1.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.336313][T17443] Tainted: [L]=SOFTLOCKUP [ 658.340632][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.350695][T17443] Call Trace: [ 658.353968][T17443] [ 658.356886][T17443] vpanic+0x1e0/0x670 [ 658.360865][T17443] panic+0xb9/0xc0 [ 658.364672][T17443] ? __pfx_panic+0x10/0x10 [ 658.369078][T17443] __warn+0x317/0x4b0 [ 658.373040][T17443] ? usb_submit_urb+0x105c/0x18d0 [ 658.378054][T17443] ? usb_submit_urb+0x105c/0x18d0 [ 658.383072][T17443] __report_bug+0x288/0x500 [ 658.387562][T17443] ? usb_submit_urb+0x105c/0x18d0 [ 658.392569][T17443] ? __pfx___report_bug+0x10/0x10 [ 658.397575][T17443] ? lockdep_hardirqs_on+0x7b/0x110 [ 658.402756][T17443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.408636][T17443] report_bug_entry+0x19a/0x290 [ 658.413483][T17443] ? usb_submit_urb+0x111c/0x18d0 [ 658.418490][T17443] ? usb_submit_urb+0x1121/0x18d0 [ 658.423497][T17443] handle_bug+0xca/0x200 [ 658.427726][T17443] exc_invalid_op+0x1a/0x50 [ 658.432212][T17443] asm_exc_invalid_op+0x1a/0x20 [ 658.437053][T17443] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 658.442669][T17443] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 658.462262][T17443] RSP: 0018:ffffc90003d4f940 EFLAGS: 00010246 [ 658.468406][T17443] RAX: 0000000000000000 RBX: ffff88807ba73700 RCX: 0000000080002880 [ 658.476359][T17443] RDX: ffff88802919e040 RSI: ffffffff8c140aa0 RDI: ffffffff8f8ef0c0 [ 658.484319][T17443] RBP: 1ffff110043fd180 R08: 00000000000000c0 R09: 0000000000000000 [ 658.492361][T17443] R10: ffffc90003d4fa40 R11: fffff520007a9f54 R12: ffff8880285e6100 [ 658.500344][T17443] R13: ffff888021fe8c00 R14: 0000000080002880 R15: ffff88802919e040 [ 658.508335][T17443] ? __init_swait_queue_head+0xa9/0x150 [ 658.513881][T17443] usb_start_wait_urb+0x115/0x4f0 [ 658.518898][T17443] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 658.524447][T17443] usb_control_msg+0x232/0x3e0 [ 658.529210][T17443] dib0700_i2c_xfer+0xba7/0xf70 [ 658.534059][T17443] __i2c_transfer+0x79a/0x1f00 [ 658.538809][T17443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.544606][T17443] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.550410][T17443] ? i2c_transfer+0xc8/0x2d0 [ 658.555026][T17443] i2c_transfer+0x1cc/0x2d0 [ 658.559544][T17443] i2cdev_ioctl_rdwr+0x460/0x740 [ 658.564568][T17443] i2cdev_ioctl+0x64b/0x820 [ 658.569066][T17443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 658.574085][T17443] ? __fget_files+0x3a0/0x420 [ 658.578897][T17443] ? __fget_files+0x2a/0x420 [ 658.583491][T17443] ? bpf_lsm_file_ioctl+0x9/0x20 [ 658.588418][T17443] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 658.593430][T17443] __se_sys_ioctl+0xfc/0x170 [ 658.598041][T17443] do_syscall_64+0xec/0xf80 [ 658.602539][T17443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.608619][T17443] ? trace_irq_disable+0x37/0x100 [ 658.613997][T17443] ? clear_bhb_loop+0x60/0xb0 [ 658.618691][T17443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.624675][T17443] RIP: 0033:0x7f2dc258f749 [ 658.629089][T17443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.648685][T17443] RSP: 002b:00007f2dc33d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.657100][T17443] RAX: ffffffffffffffda RBX: 00007f2dc27e6090 RCX: 00007f2dc258f749 [ 658.665106][T17443] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 658.673109][T17443] RBP: 00007f2dc2613f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.681078][T17443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.689039][T17443] R13: 00007f2dc27e6128 R14: 00007f2dc27e6090 R15: 00007f2dc290fa28 [ 658.697035][T17443] [ 658.700656][T17443] Kernel Offset: disabled [ 658.705014][T17443] Rebooting in 86400 seconds..