last executing test programs: 16.22815485s ago: executing program 2 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000001540)=0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 15.562695535s ago: executing program 0 (id=2): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x94, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 13.927147823s ago: executing program 4 (id=5): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0xb, 0x3}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xc}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1, 0x1, 0x1, 0x4, 0x4, 0x80000001}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x48, 0x4, 0x40dfff, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d4, 0x2b}, 0x6, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="1d003300d00009000802110000010802110000005050", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x44}}, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xff7f, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) 12.733471092s ago: executing program 0 (id=6): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 12.090719226s ago: executing program 2 (id=7): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 12.090139079s ago: executing program 4 (id=8): r0 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e001010007058103100001070502020002000705820200"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x7, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x68, &(0x7f0000000040)=ANY=[]) 11.789365543s ago: executing program 1 (id=9): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x8e080) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="aa", 0x1, 0x0, 0x0, 0x4}]) socket$inet(0xa, 0x801, 0x84) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x2, 0x19, "d1c759b1ddcf3514fa3800000000000000014f61f48731346a6f2d7105a86cd451fe2b4a3afa7976be1d5d4162fdab4c3e8855be083a28e69730a021d43cead9", "b4397d7b6efb5ba32db6d5f4812d1ee6c1267b7370d8aac083d947837bac641e", [0x5, 0x9]}) ptrace(0x10, 0x1) openat(0xffffffffffffff9c, 0x0, 0x78d41, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000140)={0xfe, 0x101, 0x1000, 0x10, 0xc, "24667d7029b3856e66e74b1117149e7a265ae1"}) 11.611918895s ago: executing program 3 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001000000000000000a208020", @ANYBLOB='\x00\x00\x00E'], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x11, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @remote, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x1, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 10.171776173s ago: executing program 1 (id=11): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x94, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 10.171472266s ago: executing program 3 (id=12): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x94, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 8.812446953s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 8.756029746s ago: executing program 4 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ac0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3190, 0x8, 0x10000000, 0x8, 0x80000000}, 0x4, 0xae}, [{0x9, 0xffffffc0, 0x100, 0xee3, 0x8, 0x4}, {0x8, 0x0, 0x7, 0x401, 0x7c, 0xfffffffa}, {0x5, 0x551, 0x2, 0xf, 0x401, 0xffffff81}, {0x80000000, 0x0, 0x7fffffff, 0x2, 0x4}, {0x1, 0x6, 0x4, 0x9, 0x2, 0x40}, {0x400, 0x7, 0x1ff, 0xf09b, 0xa0b5, 0x5}, {0x2, 0xfffffffd, 0x101, 0xb, 0x2, 0x5}, {0xd9, 0x3, 0x9, 0x2, 0x8, 0x9}, {0x10001, 0x80, 0x7, 0x7fffffff, 0x4f, 0x6}, {0x8c, 0x200, 0x7fffffff, 0x4, 0x0, 0x1}, {0xb, 0x2, 0xa155, 0x7, 0x6, 0x6}, {0x74, 0x7b2, 0x83f, 0x4, 0x2, 0x3ff}, {0x8000, 0x5, 0x4, 0x86, 0x5, 0x7fffffff}, {0x0, 0xfffffffe, 0x4, 0x5, 0x75, 0x9}, {0x1, 0xd8f4, 0x3, 0xffff1790, 0x8, 0x5}, {0x48, 0x53, 0xb1a, 0x4, 0x8, 0x3}, {0x7, 0x0, 0xc, 0x1, 0x7ffd, 0x8}, {0xb, 0xffff0e4e, 0x0, 0x2, 0x400}, {0x9, 0xb83, 0x9, 0xfffffffc, 0x400, 0x1}, {0x4, 0x9, 0x5, 0x7ff, 0xa, 0xe}, {0x2faa0c38, 0x8, 0x1, 0x4, 0x4, 0x8001}, {0x9, 0x6, 0xfffffff9, 0x4, 0x6, 0x7bf}, {0x0, 0x292d, 0x5, 0x6, 0xa, 0x1}, {0x3, 0x10, 0xbb6, 0x101, 0x7, 0x96e71a1b}, {0x7, 0x9, 0x87, 0xff, 0x8000, 0x5}, {0x0, 0x3ff, 0x3, 0x3ff, 0x2, 0xa}, {0xed1a, 0x1, 0x9, 0x8, 0x3, 0x46}, {0x9, 0x4, 0x2, 0x5ed5, 0x0, 0x3ff}, {0x0, 0x9, 0x100, 0xa, 0xeb8, 0x40}, {0x7ff, 0xff, 0x1ff, 0x7, 0x9, 0xe3f0}, {0xc7, 0x3, 0xffffffff, 0x6, 0x3, 0x7b9}, {0x6, 0x5, 0xfffffffa, 0xfffffffb, 0x4, 0xeb2f}, {0x1, 0xeed, 0x4, 0x5, 0x0, 0x5}, {0xffffffff, 0xa, 0x4ce, 0x5, 0x0, 0x8}, {0x5, 0xd, 0xd8a, 0xff, 0x9, 0x4}, {0x401, 0xb, 0x3, 0xc0, 0x28, 0x9}, {0x4, 0xb1, 0x5, 0x81, 0x4, 0x3}, {0x5, 0x6, 0x8, 0x2, 0x6d, 0x3ff800}, {0x2, 0xffffffff, 0xce, 0x8, 0x0, 0xe}, {0x8, 0x8, 0x3, 0x7fff, 0x5, 0x1}, {0x3ff, 0xfffffffd, 0x8, 0x2, 0x7, 0x7}, {0x10001, 0x6, 0x10, 0x9, 0x3, 0x9}, {0x7, 0xe, 0x9, 0xfffffffb, 0x80, 0x3}, {0x7, 0x1, 0xb187, 0x2, 0x4, 0x4}, {0x10001, 0x9, 0xde3, 0x8, 0x1c000, 0x7f}, {0x7, 0x4, 0x0, 0x7fff, 0x2, 0x7fff}, {0x3, 0xffff7fff, 0xfffffff7, 0x3, 0x4, 0x400}, {0x4, 0x1, 0x4, 0x6}, {0x0, 0x2e9d, 0x3, 0xeb5, 0x8, 0x1}, {0x3, 0x7, 0x3, 0xc50c, 0x81, 0x3}, {0xffff, 0x5, 0xf, 0x2, 0xe, 0xffffff51}, {0x6, 0x1, 0x8, 0xcf9, 0xe3d7, 0x8}, {0x3, 0x3, 0x7, 0x401, 0x1, 0x7}, {0x5, 0x4, 0xf, 0x7d, 0xffffffff, 0x80000000}, {0xe7, 0xa, 0x10, 0x6, 0xfffffffb, 0x2}, {0x800, 0xb95, 0x101, 0x8, 0x2, 0xffff}, {0x7, 0x7, 0x1ff, 0x401, 0x0, 0xc}, {0x1, 0x6, 0xff, 0x0, 0x4, 0x9db}, {0x247, 0x2, 0x44e6, 0x10, 0x7, 0x400}, {0x9, 0x7, 0x800, 0xffff552e, 0x1, 0xb}, {0xd3c9, 0x5, 0x10, 0x2eb, 0x5, 0x9}, {0x9, 0x0, 0xfffffffd, 0x8001, 0x5, 0x80000001}, {0xff, 0x8, 0xa7a, 0x5, 0x5, 0x50}, {0x400, 0x8001, 0xc7, 0xab, 0x6d}, {0x80000001, 0x10000, 0x9, 0xbe, 0x1a4, 0x4}, {0x8, 0xfffff801, 0x6226, 0x7, 0xacb, 0x1}, {0x7fff, 0x1, 0xb, 0x41c, 0x8, 0x2}, {0x5d9d, 0x3, 0x0, 0x3, 0x8, 0x9}, {0x9, 0x800, 0x5, 0x0, 0x10001, 0x9}, {0x13, 0x5, 0x7fffffff, 0xff, 0x0, 0x2}, {0x81, 0x2, 0xfff, 0x101, 0x9, 0x3}, {0xffffffff, 0x8000, 0x5, 0x7f, 0xd, 0x7f}, {0x9, 0x4, 0x0, 0x7fff, 0xfffffeb2, 0x2}, {0x4, 0x0, 0x8d, 0x2, 0x5, 0x4}, {0xbdbe, 0x9, 0x5, 0xf698, 0x8000, 0x4}, {0x8001, 0x0, 0x89e, 0x9, 0x8, 0x4}, {0xd05, 0x2, 0xc, 0x8, 0x3, 0xdebe}, {0x81, 0xda, 0xb, 0x75, 0x60a, 0xfffffff9}, {0x9, 0x8, 0x4, 0xd59b, 0xf4, 0x7fffffff}, {0x2, 0x7, 0x8000, 0x3, 0x3, 0x1}, {0xb558, 0x1, 0x2, 0x7, 0x1, 0x7f}, {0x1, 0x7, 0x81, 0x7fffffff, 0xfffff5d8, 0x200000}, {0x9, 0x10001, 0x2, 0x1, 0xe3, 0x2}, {0x6, 0x6, 0x7f, 0x20000, 0x10001, 0x2}, {0x7, 0xe8d, 0x844, 0x9, 0xa, 0x6}, {0x6, 0x1, 0x10000, 0x38, 0x65d, 0x1}, {0x0, 0x2, 0x4, 0x9cd, 0x80000001, 0x5}, {0x40, 0x209bc3bb, 0x800, 0x5, 0xff, 0x800}, {0x800, 0x4, 0x3, 0x8, 0xae0, 0x8}, {0x4, 0x2b11, 0x3e8, 0x1, 0x6, 0x5}, {0x4, 0x4, 0x4, 0x100, 0xffffffff, 0x9a}, {0x6, 0x8, 0x4, 0x0, 0x5, 0x6}, {0x9, 0xfffffffd, 0x8, 0xe, 0xfffffff8, 0xaa16}, {0x4, 0x0, 0xfffffff8, 0x8, 0x8d}, {0xfffffffc, 0x5d, 0x80000001, 0x203f, 0x4, 0xff}, {0x5, 0xb, 0x4, 0x8, 0x401, 0x4}, {0x1, 0x3bf7, 0x0, 0x14000, 0x4, 0xfff}, {0x0, 0x80, 0x0, 0x0, 0xbd, 0x3ff}, {0x5, 0x5, 0x6, 0x2, 0x5, 0xfffffffc}, {0xfffffff5, 0x101, 0x10, 0x7, 0x6, 0x81}, {0x6, 0x7, 0x10000, 0x9, 0x2, 0xffffffff}, {0x852, 0x3ff, 0xe00, 0xfffffff7, 0xffffdec5, 0x3ff}, {0x8, 0x7, 0x2, 0x401, 0x8ec0, 0x2}, {0x5, 0x6, 0xfff, 0x0, 0x31, 0x3}, {0x1, 0x1, 0x7fffffff, 0x1, 0x8, 0x2}, {0x8, 0x4, 0xc, 0x100, 0x10000, 0x8000}, {0x9, 0x6, 0xfd, 0x101, 0x2, 0x8}, {0x98c, 0x0, 0x8000, 0x5, 0x9}, {0x7, 0x4, 0x3, 0x8, 0x6, 0x3}, {0xffffffff, 0x5, 0x9, 0x800, 0x0, 0x4}, {0x0, 0x61, 0x7, 0x3322, 0x80000000, 0x800}, {0xa, 0x3, 0xb, 0x5}, {0x2, 0x4, 0xf, 0x85, 0xa, 0xffff}, {0x9, 0xcd2, 0x77cbcd53, 0x4, 0xe1d3, 0x4}, {0x1, 0x9f27, 0x8, 0x401, 0xfffffffe, 0x7fffffff}, {0x7, 0x40000000, 0x1, 0x8000, 0xff, 0x4}, {0x400, 0x0, 0xd, 0x2, 0x401, 0x9}, {0xe1d8, 0xa42, 0xfffff765, 0x0, 0x8}, {0x4, 0x9e, 0x100, 0x100, 0x10, 0x1}, {0xfffffffb, 0x8, 0x4, 0xe, 0x7fffffff, 0x9}, {0x2, 0x3, 0x2, 0x0, 0x32, 0x2}, {0xffffffff, 0xe714, 0x10, 0x2, 0x1, 0x2}, {0x9, 0x0, 0xf01, 0x1, 0x800, 0x7fff}, {0x1, 0xf43, 0x7, 0x7ffc, 0x8, 0x5}, {0x5a, 0x7, 0xfffffffd, 0xff, 0x8a9, 0x8}, {0x2, 0xffff, 0x2d6, 0x8, 0xfffffff1, 0x1}, {0x80e, 0xffff0000, 0x200, 0x200, 0x80000001}, {0x8, 0x6, 0x0, 0x97, 0x6, 0x1000}], [{0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x7982117bd21a5ff5}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {}, {0x4}, {0x3, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x7}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x4}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0xd000672a110aba1b}, {0x4}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='kF', 0x2}], 0x1}, 0x20000885) 8.184653807s ago: executing program 1 (id=15): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 8.006055733s ago: executing program 3 (id=16): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$inet(r2, 0x0, 0x7e8166965e22236a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000001540)=0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0xff, @loopback, 0x10}}, 0x2, 0x0, 0x9690, 0x6, 0x2, 0x4, 0x8}, &(0x7f00000005c0)=0x9c) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x20002200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 7.946951456s ago: executing program 4 (id=17): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x95, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc6d674883efcb12400cbeca1b29940feb1e66"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000a80)={'veth1_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 7.946778905s ago: executing program 2 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.122985275s ago: executing program 0 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)="b53e", 0x2}], 0x1}, 0x4048010) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002dc0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="010003000000000000000000000008000100"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.122663434s ago: executing program 4 (id=20): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000340)={0x3, 0x0, 0x9}) 5.932939574s ago: executing program 1 (id=21): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5.51136363s ago: executing program 2 (id=22): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 5.511076233s ago: executing program 3 (id=23): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5.12898377s ago: executing program 0 (id=24): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.4588791s ago: executing program 2 (id=25): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 3.45788769s ago: executing program 1 (id=35): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.185877875s ago: executing program 4 (id=26): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfb, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000682000/0x1000)=nil, 0x1000}}) madvise(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$evdev(0x0, 0x9, 0x4000) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0xd8, &(0x7f0000000480)=""/216) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x64, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x7, 0x40, 0xdc, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "60d20d"}, {0x5, 0x24, 0x0, 0xf131}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x4, 0x204, 0xfa}, [@acm={0x4, 0x24, 0x2, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xde}, @obex={0x5, 0x24, 0x15, 0x705}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x4, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0xa, 0xc}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x9, 0x4, 0x3, 0xff, 0x8}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9ef74fd26ef6949fd38381227789a03e24393c1a90"]}]}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x7, {0xffffffff7ffffffa, 0x1, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x201, 0x3, 0x6d6d, 0x9, 0x200207, 0xe000, 0x601d824b499141fd, 0xcd35, 0xffffffffffffffff, 0x0, 0x4, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.769582343s ago: executing program 0 (id=27): syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b00020100200009040000000101"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001900), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201002) 2.769374809s ago: executing program 3 (id=28): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2441, 0x192) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0102, 0x10a) flock(r2, 0x2) 325.236311ms ago: executing program 1 (id=29): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 0s ago: executing program 3 (id=30): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 76.452162][ T5605] cgroup: Unknown subsys name 'net' [ 76.582027][ T5605] cgroup: Unknown subsys name 'cpuset' [ 76.585546][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.250543][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.596395][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.606389][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.619167][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.620443][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.622824][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.625511][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.629181][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.632481][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.641231][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.643372][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.645058][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.645874][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.653558][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.653776][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.654299][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.656771][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.658037][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.661377][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.667174][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.672527][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.682320][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.689346][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.690687][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.701655][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.708197][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.936691][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.936867][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.937010][ T5633] bridge_slave_0: entered allmulticast mode [ 81.956612][ T5633] bridge_slave_0: entered promiscuous mode [ 82.002522][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.002681][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.002976][ T5633] bridge_slave_1: entered allmulticast mode [ 82.004433][ T5633] bridge_slave_1: entered promiscuous mode [ 82.008582][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.008874][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.010693][ T5635] bridge_slave_0: entered allmulticast mode [ 82.016231][ T5635] bridge_slave_0: entered promiscuous mode [ 82.092351][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.092471][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.092568][ T5635] bridge_slave_1: entered allmulticast mode [ 82.094445][ T5635] bridge_slave_1: entered promiscuous mode [ 82.168596][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.168696][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.168817][ T5636] bridge_slave_0: entered allmulticast mode [ 82.170411][ T5636] bridge_slave_0: entered promiscuous mode [ 82.213242][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.232316][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.232423][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.232853][ T5636] bridge_slave_1: entered allmulticast mode [ 82.234506][ T5636] bridge_slave_1: entered promiscuous mode [ 82.267054][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.267207][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.267333][ T5632] bridge_slave_0: entered allmulticast mode [ 82.281846][ T5632] bridge_slave_0: entered promiscuous mode [ 82.297856][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.300716][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.341054][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.341268][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.341404][ T5632] bridge_slave_1: entered allmulticast mode [ 82.343057][ T5632] bridge_slave_1: entered promiscuous mode [ 82.377966][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.398464][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.398577][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.398719][ T5634] bridge_slave_0: entered allmulticast mode [ 82.400307][ T5634] bridge_slave_0: entered promiscuous mode [ 82.469695][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.470104][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.470219][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.470373][ T5634] bridge_slave_1: entered allmulticast mode [ 82.472064][ T5634] bridge_slave_1: entered promiscuous mode [ 82.483414][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.492333][ T5633] team0: Port device team_slave_0 added [ 82.531127][ T5635] team0: Port device team_slave_0 added [ 82.533491][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.568619][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.570629][ T5633] team0: Port device team_slave_1 added [ 82.573029][ T5635] team0: Port device team_slave_1 added [ 82.645291][ T5636] team0: Port device team_slave_0 added [ 82.653564][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.696927][ T5636] team0: Port device team_slave_1 added [ 82.703926][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.705778][ T5632] team0: Port device team_slave_0 added [ 82.706980][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.706994][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.707024][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.715796][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.715840][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.715911][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.802540][ T5629] Bluetooth: hci2: command tx timeout [ 82.802662][ T5629] Bluetooth: hci1: command tx timeout [ 82.815102][ T5628] Bluetooth: hci0: command tx timeout [ 82.815271][ T5628] Bluetooth: hci4: command tx timeout [ 82.815355][ T5628] Bluetooth: hci3: command tx timeout [ 82.838404][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.838453][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.838520][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.844126][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.844170][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.844245][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.860340][ T5632] team0: Port device team_slave_1 added [ 82.973816][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.973832][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.973856][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.015588][ T5634] team0: Port device team_slave_0 added [ 83.028989][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.029008][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.029039][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.030050][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.030063][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.030085][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.045965][ T5634] team0: Port device team_slave_1 added [ 83.142414][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.142431][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.142454][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.237549][ T5635] hsr_slave_0: entered promiscuous mode [ 83.239285][ T5635] hsr_slave_1: entered promiscuous mode [ 83.260852][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.260866][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.260884][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.267512][ T5633] hsr_slave_0: entered promiscuous mode [ 83.270149][ T5633] hsr_slave_1: entered promiscuous mode [ 83.272657][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 83.272874][ T5633] Cannot create hsr debugfs directory [ 83.326007][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.326050][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.326125][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.360960][ T5636] hsr_slave_0: entered promiscuous mode [ 83.363929][ T5636] hsr_slave_1: entered promiscuous mode [ 83.366297][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 83.366353][ T5636] Cannot create hsr debugfs directory [ 83.491189][ T5632] hsr_slave_0: entered promiscuous mode [ 83.492252][ T5632] hsr_slave_1: entered promiscuous mode [ 83.492830][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 83.492845][ T5632] Cannot create hsr debugfs directory [ 83.625112][ T5634] hsr_slave_0: entered promiscuous mode [ 83.625943][ T5634] hsr_slave_1: entered promiscuous mode [ 83.626502][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 83.626524][ T5634] Cannot create hsr debugfs directory [ 84.116648][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.131012][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.132669][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.152722][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.155439][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.169323][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.189059][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.192955][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.265744][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.277938][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.280080][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.285444][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.303021][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.322836][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.323839][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.326952][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.433123][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.443928][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.459943][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.464280][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.493363][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.496567][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.504562][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.523018][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.632692][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.636667][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.662638][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.667173][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.689740][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.693705][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.696776][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.732836][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.736121][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.835335][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.847103][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.859026][ T5629] Bluetooth: hci3: command tx timeout [ 84.859067][ T5629] Bluetooth: hci4: command tx timeout [ 84.859091][ T5629] Bluetooth: hci0: command tx timeout [ 84.859114][ T5629] Bluetooth: hci1: command tx timeout [ 84.859136][ T5629] Bluetooth: hci2: command tx timeout [ 84.862018][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.862938][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.866390][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.867305][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.884449][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.941425][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.945447][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.975227][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.975343][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.011628][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.011769][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.060527][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.135301][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.154197][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.181791][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.181866][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.217870][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.217949][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.237057][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.264658][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.264734][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.266425][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.266520][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.413642][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.442801][ T5635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.466817][ T5636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.495570][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.516599][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.554471][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.554552][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.576934][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.591539][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.591614][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.654468][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.671927][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.691469][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.710194][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.710269][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.739628][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.739740][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.785873][ T5633] veth0_vlan: entered promiscuous mode [ 85.847146][ T5633] veth1_vlan: entered promiscuous mode [ 85.922684][ T5635] veth0_vlan: entered promiscuous mode [ 85.926814][ T5636] veth0_vlan: entered promiscuous mode [ 85.943603][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.985912][ T5635] veth1_vlan: entered promiscuous mode [ 85.994085][ T5636] veth1_vlan: entered promiscuous mode [ 86.012186][ T5633] veth0_macvtap: entered promiscuous mode [ 86.032982][ T5633] veth1_macvtap: entered promiscuous mode [ 86.104897][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.119963][ T5636] veth0_macvtap: entered promiscuous mode [ 86.127440][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.153192][ T5636] veth1_macvtap: entered promiscuous mode [ 86.172233][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.191527][ T5632] veth0_vlan: entered promiscuous mode [ 86.196223][ T5635] veth0_macvtap: entered promiscuous mode [ 86.232521][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.232995][ T5635] veth1_macvtap: entered promiscuous mode [ 86.266698][ T5632] veth1_vlan: entered promiscuous mode [ 86.305401][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.349505][ T1294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.353809][ T5634] veth0_vlan: entered promiscuous mode [ 86.397011][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.418403][ T1294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.419768][ T1294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.420335][ T1294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.425781][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.485103][ T5634] veth1_vlan: entered promiscuous mode [ 86.494524][ T1294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.494575][ T1294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.494611][ T1294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.540906][ T5632] veth0_macvtap: entered promiscuous mode [ 86.584591][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.584613][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.621981][ T5632] veth1_macvtap: entered promiscuous mode [ 86.703321][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.733696][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.733719][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.774782][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.805427][ T5634] veth0_macvtap: entered promiscuous mode [ 86.813897][ T1287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.813974][ T1287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.814014][ T1287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.845445][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.845467][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.869559][ T1294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.940890][ T5628] Bluetooth: hci2: command tx timeout [ 86.940925][ T5628] Bluetooth: hci1: command tx timeout [ 86.940948][ T5628] Bluetooth: hci0: command tx timeout [ 86.940970][ T5628] Bluetooth: hci4: command tx timeout [ 86.940992][ T5628] Bluetooth: hci3: command tx timeout [ 86.987031][ T5634] veth1_macvtap: entered promiscuous mode [ 86.996065][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.996087][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.025491][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.084575][ T5633] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 87.085602][ T5633] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 87.087373][ T5633] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 87.129267][ T5633] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 87.165174][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.165199][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.217057][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.229650][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249533][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249580][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249615][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.249646][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.314034][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.314056][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.366359][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.493837][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.493856][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.582156][ T1287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.593206][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624377][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624416][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845370][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.845389][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.180055][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.186229][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.186253][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.329715][ T5722] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[5722] [ 88.358037][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 88.359968][ T5702] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 88.363064][ T5702] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.363096][ T5702] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.363125][ T5702] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.363161][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.471538][ T5702] usb 3-1: config 0 descriptor?? [ 88.510324][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.510346][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.019888][ T5629] Bluetooth: hci3: command tx timeout [ 89.021004][ T5629] Bluetooth: hci4: command tx timeout [ 89.021035][ T5629] Bluetooth: hci0: command tx timeout [ 89.021060][ T5629] Bluetooth: hci1: command tx timeout [ 89.021083][ T5629] Bluetooth: hci2: command tx timeout [ 89.526134][ T5730] syz.0.2 uses obsolete (PF_INET,SOCK_PACKET) [ 89.714152][ T5735] ±ÿ)”ë: renamed from lo (while UP) [ 89.809684][ T5737] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.022303][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.022678][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.069973][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.071125][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.134176][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.134697][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.135151][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.178064][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.206306][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.206656][ T5732] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.283883][ T5702] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0B05:18C6.0001/input/input5 [ 90.652554][ T5702] asus 0003:0B05:18C6.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.2-1/input0 [ 90.768077][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.835091][ T5745] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 91.630646][ T5680] usb 3-1: USB disconnect, device number 2 [ 91.909827][ T190] cfg80211: failed to load regulatory.db [ 92.108158][ T5673] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.233216][ T5757] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 92.268550][ T5673] usb 5-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 92.276148][ T5673] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.276179][ T5673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.276230][ T5673] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.276254][ T5673] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.346013][ T5673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.346045][ T5673] usb 5-1: Product: syz [ 92.346062][ T5673] usb 5-1: Manufacturer: syz [ 92.346078][ T5673] usb 5-1: SerialNumber: syz [ 92.370796][ T5680] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.391709][ T5758] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[5758] [ 92.491847][ T5628] Bluetooth: hci5: urb ffff888075fddd00 submission failed (90) [ 92.553280][ T5680] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 92.555068][ T5680] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.555100][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.624156][ T5680] option 3-1:1.0: GSM modem (1-port) converter detected [ 92.665814][ T5680] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 94.776899][ T5680] usb 3-1: USB disconnect, device number 3 [ 94.839696][ T5680] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 94.840890][ T5680] option 3-1:1.0: device disconnected [ 94.919792][ T5733] usb 5-1: USB disconnect, device number 2 [ 95.029758][ T5767] sctp_transport_update_pmtu: 72 callbacks suppressed [ 95.029785][ T5767] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.030491][ T5767] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.030788][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.033046][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.033149][ T5770] ±ÿ)”ë: renamed from lo (while UP) [ 95.059452][ T5767] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.068863][ T5767] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.070211][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.070692][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.071128][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.071689][ T5764] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.197311][ T5765] ±ÿ)”ë: renamed from lo (while UP) [ 95.420012][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.580892][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 95.586215][ T25] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 95.596647][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.612590][ T25] usb 1-1: config 0 descriptor?? [ 95.654932][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.137666][ T5680] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.138344][ T5702] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.288324][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 96.291689][ T5702] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 96.293407][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.296426][ T5702] usb 3-1: config 0 descriptor?? [ 96.349293][ T5680] usb 4-1: Using ep0 maxpacket: 16 [ 96.367272][ T5702] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.367494][ T5680] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 96.391349][ T5680] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.391385][ T5680] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.396564][ T5680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.396614][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.445549][ T5680] usb 4-1: config 0 descriptor?? [ 96.614650][ T5786] ±ÿ)”ëf: renamed from lo (while UP) [ 96.696807][ T25] gspca_vc032x: reg_w err -71 [ 96.696870][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696879][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696885][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696891][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696898][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696904][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696910][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696931][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696941][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696951][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696961][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.696969][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697003][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697012][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697025][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697032][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697038][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697044][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 96.697050][ T25] gspca_vc032x: Unknown sensor... [ 96.697152][ T25] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 96.857814][ T25] usb 1-1: USB disconnect, device number 2 [ 97.250724][ T5680] usbhid 4-1:0.0: can't add hid device: -71 [ 97.250837][ T5680] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.283382][ T5680] usb 4-1: USB disconnect, device number 2 [ 97.438518][ T5702] gspca_vc032x: reg_w err -71 [ 97.438544][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438556][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438565][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438574][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438583][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438591][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438600][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438609][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438619][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438627][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438636][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438645][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438654][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438662][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438672][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438681][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438690][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438699][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.438708][ T5702] gspca_vc032x: Unknown sensor... [ 97.438782][ T5702] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 97.588223][ T5702] usb 3-1: USB disconnect, device number 4 [ 97.823289][ T5797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.832706][ T5797] Zero length message leads to an empty skb [ 97.927698][ T5680] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 98.089669][ T5680] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.091028][ T5680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.091058][ T5680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.091081][ T5680] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.091111][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.095047][ T5680] usb 5-1: config 0 descriptor?? [ 98.723379][ T5680] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.987722][ T5702] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 99.144776][ T5702] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.146396][ T5702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.146430][ T5702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 99.146466][ T5702] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.146501][ T5702] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.146520][ T5702] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 99.241455][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.241485][ T5702] usb 1-1: Product: syz [ 99.241501][ T5702] usb 1-1: Manufacturer: syz [ 99.241516][ T5702] usb 1-1: SerialNumber: syz [ 99.294432][ T5809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 99.543576][ T5809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.176334][ T5809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.389139][ T5702] cdc_ncm 1-1:1.0: bind() failure [ 100.411950][ T5702] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 100.412594][ T5702] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 100.414382][ T5702] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 100.448272][ T5702] usb 1-1: USB disconnect, device number 3 [ 100.589638][ T5680] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.745715][ T5680] usb 2-1: Using ep0 maxpacket: 8 [ 100.749376][ T5680] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 100.765524][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.781263][ T5709] usb 5-1: USB disconnect, device number 3 [ 100.796479][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 100.798404][ T5680] usb 2-1: config 0 descriptor?? [ 100.829181][ T5680] usb 2-1: probing VID:PID(0424:012C) [ 100.893115][ T5680] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 100.893139][ T5680] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 100.893153][ T5680] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 100.893166][ T5680] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 100.893183][ T5680] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 101.279688][ T5680] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 101.317745][ T5733] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.507683][ T5709] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 101.539932][ T5733] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 101.541588][ T5733] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 101.541618][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.541638][ T5733] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.544092][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.544119][ T5733] usb 1-1: Product: syz [ 101.544134][ T5733] usb 1-1: Manufacturer: syz [ 101.544149][ T5733] usb 1-1: SerialNumber: syz [ 101.624337][ T5680] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 101.664071][ T5733] usb 1-1: cannot find UAC_HEADER [ 101.676216][ T5709] usb 5-1: not running at top speed; connect to a high speed hub [ 101.676244][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.679075][ T5709] usb 5-1: config 1 interface 0 has no altsetting 0 [ 101.707061][ T5709] usb 5-1: language id specifier not provided by device, defaulting to English [ 101.741298][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.741319][ T5709] usb 5-1: Product: syz [ 101.741329][ T5709] usb 5-1: SerialNumber: syz [ 101.768159][ T5820] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 102.136793][ T5733] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.415018][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.207037][ T5680] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 103.239268][ T5680] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 103.241060][ T5680] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 103.245480][ T25] usb 2-1: USB disconnect, device number 2 [ 104.096726][ T25] ------------[ cut here ]------------ [ 104.096788][ T25] ODEBUG: free active (active state 0) object: ffff888020f71270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x3f0 [ 104.096850][ T25] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: kworker/1:0/25 [ 104.127354][ T25] Modules linked in: [ 104.132276][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 104.141730][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.152937][ T25] Workqueue: usb_hub_wq hub_event [ 104.158091][ T25] RIP: 0010:debug_print_object+0x18a/0x230 [ 104.163960][ T25] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 dd bc 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 32 8f 0b 48 83 c4 10 5b 41 5c [ 104.183764][ T25] RSP: 0000:ffffc900001f7218 EFLAGS: 00010246 [ 104.190300][ T25] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 104.198865][ T25] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff90858b80 [ 104.207005][ T25] RBP: ffffffff8c6db940 R08: ffff888020f71270 R09: ffffffff8c0f9700 [ 104.215182][ T25] R10: dffffc0000000000 R11: ffffffff81b3f5d0 R12: 0000000000000000 [ 104.223497][ T25] R13: ffffffff90858b80 R14: ffff888020f71270 R15: ffffffff8c0f83a0 [ 104.231568][ T25] FS: 0000000000000000(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 104.240598][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.247298][ T25] CR2: 000000005700a470 CR3: 0000000065f62000 CR4: 00000000003526f0 [ 104.255366][ T25] Call Trace: [ 104.258753][ T25] [ 104.261711][ T25] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 104.268470][ T25] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 104.275198][ T25] debug_check_no_obj_freed+0x2e3/0x450 [ 104.280867][ T25] kfree+0x13e/0x650 [ 104.284793][ T25] ? device_release+0xc4/0x1f0 [ 104.289676][ T25] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 104.296167][ T25] device_release+0xc4/0x1f0 [ 104.301151][ T25] kobject_put+0x222/0x550 [ 104.305632][ T25] ? mmc_pwrseq_free+0x86/0xa0 [ 104.310483][ T25] vub300_disconnect+0x280/0x2f0 [ 104.315484][ T25] usb_unbind_interface+0x295/0x9f0 [ 104.320935][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.326713][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.332542][ T25] ? __pfx_usb_unbind_interface+0x10/0x10 [ 104.338445][ T25] device_release_driver_internal+0x4f5/0x880 [ 104.344561][ T25] bus_remove_device+0x444/0x560 [ 104.349633][ T25] ? __pfx_bus_remove_device+0x10/0x10 [ 104.355228][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.361059][ T25] device_del+0x524/0x8f0 [ 104.365457][ T25] ? __pfx_device_del+0x10/0x10 [ 104.370408][ T25] ? kobject_put+0x516/0x550 [ 104.375037][ T25] usb_disable_device+0x3d4/0x8d0 [ 104.377704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.388637][ T25] usb_disconnect+0x346/0x9a0 [ 104.393615][ T25] hub_event+0x1bbb/0x4d30 [ 104.398364][ T25] ? kthread+0x38b/0x480 [ 104.402658][ T25] ? ret_from_fork+0x514/0xb70 [ 104.407479][ T25] ? register_lock_class+0x31/0x2e0 [ 104.412823][ T25] ? __pfx_hub_event+0x10/0x10 [ 104.417672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.425868][ T25] ? rcu_is_watching+0x16/0xb0 [ 104.430817][ T25] ? process_scheduled_works+0x97a/0x1630 [ 104.437050][ T25] process_scheduled_works+0xc3d/0x1630 [ 104.442781][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 104.449001][ T25] ? assign_work+0x3cf/0x5d0 [ 104.453686][ T25] worker_thread+0xa47/0xfb0 [ 104.457699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.466835][ T25] kthread+0x38b/0x480 [ 104.471135][ T25] ? __pfx_worker_thread+0x10/0x10 [ 104.476287][ T25] ? __pfx_kthread+0x10/0x10 [ 104.480980][ T25] ret_from_fork+0x514/0xb70 [ 104.485624][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 104.490825][ T25] ? __switch_to+0xc89/0x1420 [ 104.495907][ T25] ? __pfx_kthread+0x10/0x10 [ 104.500747][ T25] ret_from_fork_asm+0x1a/0x30 [ 104.505599][ T25] [ 104.507674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.516865][ T25] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.524190][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 104.533508][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.543613][ T25] Workqueue: usb_hub_wq hub_event [ 104.548694][ T25] Call Trace: [ 104.552009][ T25] [ 104.554973][ T25] vpanic+0x56d/0xa60 [ 104.559001][ T25] ? __pfx__printk+0x10/0x10 [ 104.563628][ T25] ? __pfx_vpanic+0x10/0x10 [ 104.568172][ T25] ? is_bpf_text_address+0x292/0x2b0 [ 104.573606][ T25] ? is_bpf_text_address+0x26/0x2b0 [ 104.578867][ T25] panic+0xc5/0xd0 [ 104.582670][ T25] ? __pfx_panic+0x10/0x10 [ 104.587158][ T25] ? ret_from_fork_asm+0x1a/0x30 [ 104.592163][ T25] __warn+0x315/0x4c0 [ 104.596192][ T25] ? debug_print_object+0xec/0x230 [ 104.601366][ T25] ? debug_print_object+0xec/0x230 [ 104.606541][ T25] __report_bug+0x276/0x570 [ 104.611184][ T25] ? debug_print_object+0xec/0x230 [ 104.616359][ T25] ? __pfx___report_bug+0x10/0x10 [ 104.621492][ T25] report_bug_entry+0x19b/0x290 [ 104.626394][ T25] ? debug_print_object+0x18a/0x230 [ 104.631631][ T25] ? debug_print_object+0x18f/0x230 [ 104.636874][ T25] handle_bug+0xce/0x200 [ 104.641165][ T25] exc_invalid_op+0x1a/0x50 [ 104.645698][ T25] asm_exc_invalid_op+0x1a/0x20 [ 104.650599][ T25] RIP: 0010:debug_print_object+0x18a/0x230 [ 104.656444][ T25] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 dd bc 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 73 32 8f 0b 48 83 c4 10 5b 41 5c [ 104.676087][ T25] RSP: 0000:ffffc900001f7218 EFLAGS: 00010246 [ 104.682286][ T25] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 104.690402][ T25] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff90858b80 [ 104.698436][ T25] RBP: ffffffff8c6db940 R08: ffff888020f71270 R09: ffffffff8c0f9700 [ 104.706454][ T25] R10: dffffc0000000000 R11: ffffffff81b3f5d0 R12: 0000000000000000 [ 104.714467][ T25] R13: ffffffff90858b80 R14: ffff888020f71270 R15: ffffffff8c0f83a0 [ 104.722507][ T25] ? __pfx_timer_debug_hint+0x10/0x10 [ 104.727935][ T25] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 104.734651][ T25] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 104.741371][ T25] debug_check_no_obj_freed+0x2e3/0x450 [ 104.746997][ T25] kfree+0x13e/0x650 [ 104.750918][ T25] ? device_release+0xc4/0x1f0 [ 104.755722][ T25] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 104.762018][ T25] device_release+0xc4/0x1f0 [ 104.766659][ T25] kobject_put+0x222/0x550 [ 104.771117][ T25] ? mmc_pwrseq_free+0x86/0xa0 [ 104.775951][ T25] vub300_disconnect+0x280/0x2f0 [ 104.780928][ T25] usb_unbind_interface+0x295/0x9f0 [ 104.786188][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.791966][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.797737][ T25] ? __pfx_usb_unbind_interface+0x10/0x10 [ 104.803519][ T25] device_release_driver_internal+0x4f5/0x880 [ 104.809640][ T25] bus_remove_device+0x444/0x560 [ 104.816123][ T25] ? __pfx_bus_remove_device+0x10/0x10 [ 104.821625][ T25] ? kernfs_remove_by_name_ns+0x101/0x140 [ 104.827380][ T25] device_del+0x524/0x8f0 [ 104.831779][ T25] ? __pfx_device_del+0x10/0x10 [ 104.836660][ T25] ? kobject_put+0x516/0x550 [ 104.841302][ T25] usb_disable_device+0x3d4/0x8d0 [ 104.846385][ T25] usb_disconnect+0x346/0x9a0 [ 104.851127][ T25] hub_event+0x1bbb/0x4d30 [ 104.855604][ T25] ? kthread+0x38b/0x480 [ 104.859875][ T25] ? ret_from_fork+0x514/0xb70 [ 104.864680][ T25] ? register_lock_class+0x31/0x2e0 [ 104.869939][ T25] ? __pfx_hub_event+0x10/0x10 [ 104.874779][ T25] ? rcu_is_watching+0x16/0xb0 [ 104.879602][ T25] ? process_scheduled_works+0x97a/0x1630 [ 104.885363][ T25] process_scheduled_works+0xc3d/0x1630 [ 104.890988][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 104.897161][ T25] ? assign_work+0x3cf/0x5d0 [ 104.901799][ T25] worker_thread+0xa47/0xfb0 [ 104.906458][ T25] kthread+0x38b/0x480 [ 104.910555][ T25] ? __pfx_worker_thread+0x10/0x10 [ 104.915677][ T25] ? __pfx_kthread+0x10/0x10 [ 104.920284][ T25] ret_from_fork+0x514/0xb70 [ 104.924919][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 104.930065][ T25] ? __switch_to+0xc89/0x1420 [ 104.934792][ T25] ? __pfx_kthread+0x10/0x10 [ 104.939422][ T25] ret_from_fork_asm+0x1a/0x30 [ 104.944258][ T25] [ 104.947911][ T25] Kernel Offset: disabled [ 104.952250][ T25] Rebooting in 86400 seconds..