last executing test programs: 9.387898873s ago: executing program 0 (id=1): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 8.65459304s ago: executing program 1 (id=2): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 8.593240959s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a0102000000000040bafba387000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000008010900010073797a31000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_usb_control_io$uac3(r4, 0x0, 0x0) 8.239804335s ago: executing program 3 (id=7): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 7.111572694s ago: executing program 0 (id=8): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 6.696871913s ago: executing program 2 (id=9): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc8c0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x44}}, 0x24040084) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'virt_wifi0\x00', {0x32c}, 0xd}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) syz_emit_ethernet(0x48, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x12, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5}]}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) syz_open_pts(r4, 0x40000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x3, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, 0x0, 0x0) 6.372276616s ago: executing program 1 (id=10): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) madvise(&(0x7f0000b24000/0x4000)=nil, 0x4000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) unshare(0x8000000) unshare(0x40000200) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001002dbd70000000000081808000000020000000000000000f0000000000140001002001000000030000000000100e662d8e1774ecc2015ff0e88c4a0e00000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 5.88183911s ago: executing program 3 (id=11): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 5.794393526s ago: executing program 2 (id=12): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 5.450609512s ago: executing program 4 (id=13): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', 0x0, 0x18) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x10, 0x2100, 0x10000006, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0x2, 0x2dd}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.366081481s ago: executing program 0 (id=14): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 5.199577705s ago: executing program 3 (id=15): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 5.120907154s ago: executing program 4 (id=16): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 4.108585142s ago: executing program 2 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f00000007c0)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="010000000400000004000000000100000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0xffffffd, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38b0, 0x200, 0x3, 0x92, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.037078748s ago: executing program 3 (id=18): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 3.441738138s ago: executing program 4 (id=19): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 3.266159198s ago: executing program 1 (id=20): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.201535431s ago: executing program 1 (id=21): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 3.13026511s ago: executing program 2 (id=22): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20046f39, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000540)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000007c0), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x44041}, 0x84841) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) 2.287073063s ago: executing program 0 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a0102000000000040bafba387000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000008010900010073797a31000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_usb_control_io$uac3(r4, 0x0, 0x0) 1.9641214s ago: executing program 3 (id=24): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x103}, 0xc) 1.75912284s ago: executing program 2 (id=25): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.438144517s ago: executing program 4 (id=26): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000500)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', 0x0, 0x18) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x10, 0x2100, 0x10000006, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0x2, 0x2dd}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.282588608s ago: executing program 1 (id=27): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) 1.093002505s ago: executing program 4 (id=28): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) madvise(&(0x7f0000b24000/0x4000)=nil, 0x4000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) unshare(0x8000000) unshare(0x40000200) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001002dbd70000000000081808000000020000000000000000f0000000000140001002001000000030000000000100e662d8e1774ecc2015ff0e88c4a0e00000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 676.707457ms ago: executing program 2 (id=29): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 112.060234ms ago: executing program 1 (id=30): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) madvise(&(0x7f0000b24000/0x4000)=nil, 0x4000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) unshare(0x8000000) unshare(0x40000200) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001002dbd70000000000081808000000020000000000000000f0000000000140001002001000000030000000000100e662d8e1774ecc2015ff0e88c4a0e00000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 0s ago: executing program 3 (id=31): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000bc0)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendfile(r0, r0, 0x0, 0x20000005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000440)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, &(0x7f0000000e80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r10 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd11d, 0x10000, 0x0, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 72.953391][ T5623] cgroup: Unknown subsys name 'net' [ 73.069172][ T5623] cgroup: Unknown subsys name 'cpuset' [ 73.078090][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.482924][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.213509][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.216647][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.223850][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.224258][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.225149][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.225517][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.228092][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.236577][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.237212][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.238603][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.239666][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.241719][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.242650][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.244807][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.245116][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.246697][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.249780][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.252199][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.252399][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.273043][ T4953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.273602][ T4953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.279038][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.279604][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.296253][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.300470][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.465484][ T5651] br_netfilter no longer supported in user namespaces [ 79.347065][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.347349][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.347481][ T5651] bridge_slave_0: entered allmulticast mode [ 79.349069][ T5651] bridge_slave_0: entered promiscuous mode [ 79.400304][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.400430][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.400511][ T5651] bridge_slave_1: entered allmulticast mode [ 79.401477][ T5651] bridge_slave_1: entered promiscuous mode [ 79.501526][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.523699][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.523836][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.524192][ T5652] bridge_slave_0: entered allmulticast mode [ 79.525479][ T5652] bridge_slave_0: entered promiscuous mode [ 79.538196][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.538332][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.538753][ T5652] bridge_slave_1: entered allmulticast mode [ 79.540453][ T5652] bridge_slave_1: entered promiscuous mode [ 79.572086][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572318][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572415][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.572526][ T5655] bridge_slave_0: entered allmulticast mode [ 79.574473][ T5655] bridge_slave_0: entered promiscuous mode [ 79.578100][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.578223][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.578634][ T5655] bridge_slave_1: entered allmulticast mode [ 79.580296][ T5655] bridge_slave_1: entered promiscuous mode [ 79.630654][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.630756][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.631150][ T5650] bridge_slave_0: entered allmulticast mode [ 79.633096][ T5650] bridge_slave_0: entered promiscuous mode [ 79.692853][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.692953][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.693071][ T5650] bridge_slave_1: entered allmulticast mode [ 79.694366][ T5650] bridge_slave_1: entered promiscuous mode [ 79.698832][ T5651] team0: Port device team_slave_0 added [ 79.714327][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.714429][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.714885][ T5653] bridge_slave_0: entered allmulticast mode [ 79.717435][ T5653] bridge_slave_0: entered promiscuous mode [ 79.720558][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.720711][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.720839][ T5653] bridge_slave_1: entered allmulticast mode [ 79.722640][ T5653] bridge_slave_1: entered promiscuous mode [ 79.730948][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.738868][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.757041][ T5651] team0: Port device team_slave_1 added [ 79.760893][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.817392][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.841145][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.886792][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.888797][ T5652] team0: Port device team_slave_0 added [ 79.891092][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.891972][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.891981][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.891994][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.910388][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.913574][ T5652] team0: Port device team_slave_1 added [ 79.943560][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.943576][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.943601][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.029556][ T5655] team0: Port device team_slave_0 added [ 80.059666][ T5650] team0: Port device team_slave_0 added [ 80.061466][ T5655] team0: Port device team_slave_1 added [ 80.094926][ T5650] team0: Port device team_slave_1 added [ 80.107057][ T5653] team0: Port device team_slave_0 added [ 80.107753][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.107767][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.107789][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.110793][ T5653] team0: Port device team_slave_1 added [ 80.180357][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.180374][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.180399][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.211008][ T5651] hsr_slave_0: entered promiscuous mode [ 80.213700][ T5651] hsr_slave_1: entered promiscuous mode [ 80.220704][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.220720][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.220744][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.224503][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.224517][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.224541][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.252390][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.252407][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.252431][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.268920][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.268937][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.268961][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.282751][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.282767][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.282791][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.296965][ T5634] Bluetooth: hci0: command tx timeout [ 80.297108][ T5634] Bluetooth: hci2: command tx timeout [ 80.297312][ T5640] Bluetooth: hci1: command tx timeout [ 80.370854][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.370872][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.370896][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.376006][ T54] Bluetooth: hci4: command tx timeout [ 80.376289][ T5640] Bluetooth: hci3: command tx timeout [ 80.409374][ T5652] hsr_slave_0: entered promiscuous mode [ 80.410496][ T5652] hsr_slave_1: entered promiscuous mode [ 80.411283][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 80.411381][ T5652] Cannot create hsr debugfs directory [ 80.527491][ T5655] hsr_slave_0: entered promiscuous mode [ 80.528503][ T5655] hsr_slave_1: entered promiscuous mode [ 80.529253][ T5655] debugfs: 'hsr0' already exists in 'hsr' [ 80.529271][ T5655] Cannot create hsr debugfs directory [ 80.551740][ T5650] hsr_slave_0: entered promiscuous mode [ 80.552785][ T5650] hsr_slave_1: entered promiscuous mode [ 80.553959][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 80.553977][ T5650] Cannot create hsr debugfs directory [ 80.637459][ T5653] hsr_slave_0: entered promiscuous mode [ 80.638559][ T5653] hsr_slave_1: entered promiscuous mode [ 80.639409][ T5653] debugfs: 'hsr0' already exists in 'hsr' [ 80.639426][ T5653] Cannot create hsr debugfs directory [ 81.078590][ T5651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.085205][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.100795][ T5651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.103975][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.104891][ T5651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.129031][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.135536][ T5651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.146819][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.191996][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.204143][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.207133][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.218031][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.218915][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.223381][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.244408][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.251949][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.315947][ T5650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.321485][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.322498][ T5650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.337429][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.357188][ T5650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.359943][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.377234][ T5650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.389077][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.480202][ T5655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.482911][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.493910][ T5655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.512230][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.512951][ T5655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.515326][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.551065][ T5655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.553980][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.596991][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.644033][ T5653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.654626][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.670713][ T5653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.680723][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.700819][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.701253][ T5653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.719710][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.720618][ T5653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.725126][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.764515][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.815953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.816091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.848414][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.848548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.874797][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.931590][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.931712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.979904][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.015342][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.102272][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.129323][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.129388][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.164656][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.164739][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.189969][ T5652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.207908][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.252743][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.275219][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.287805][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.326514][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.326615][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.349075][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.361802][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.361862][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.376514][ T54] Bluetooth: hci2: command tx timeout [ 82.376545][ T54] Bluetooth: hci0: command tx timeout [ 82.376659][ T5640] Bluetooth: hci1: command tx timeout [ 82.383809][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.410841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.411007][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.455203][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.455302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.457242][ T5634] Bluetooth: hci4: command tx timeout [ 82.457320][ T5640] Bluetooth: hci3: command tx timeout [ 82.540327][ T5651] veth0_vlan: entered promiscuous mode [ 82.542644][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.598185][ T5651] veth1_vlan: entered promiscuous mode [ 82.622365][ T5652] veth0_vlan: entered promiscuous mode [ 82.657397][ T5652] veth1_vlan: entered promiscuous mode [ 82.691476][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.711172][ T5650] veth0_vlan: entered promiscuous mode [ 82.750575][ T5651] veth0_macvtap: entered promiscuous mode [ 82.768666][ T5651] veth1_macvtap: entered promiscuous mode [ 82.774256][ T5650] veth1_vlan: entered promiscuous mode [ 82.787887][ T5652] veth0_macvtap: entered promiscuous mode [ 82.805476][ T5652] veth1_macvtap: entered promiscuous mode [ 82.825470][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.860745][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.880411][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.881286][ T5655] veth0_vlan: entered promiscuous mode [ 82.883484][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.917146][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.926729][ T5650] veth0_macvtap: entered promiscuous mode [ 82.942739][ T5655] veth1_vlan: entered promiscuous mode [ 82.969188][ T1228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986546][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986593][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986628][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986662][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986695][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986726][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986758][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.989124][ T5650] veth1_macvtap: entered promiscuous mode [ 83.113500][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.118073][ T5655] veth0_macvtap: entered promiscuous mode [ 83.146628][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.153596][ T5655] veth1_macvtap: entered promiscuous mode [ 83.174425][ T5653] veth0_vlan: entered promiscuous mode [ 83.219314][ T116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.219787][ T116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220574][ T116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.222516][ T5653] veth1_vlan: entered promiscuous mode [ 83.253519][ T5653] veth0_macvtap: entered promiscuous mode [ 83.260109][ T5653] veth1_macvtap: entered promiscuous mode [ 83.267951][ T181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289959][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.289985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.352685][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.352705][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.354935][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.402417][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.438437][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.438459][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.458838][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.463402][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.483809][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.483829][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.590380][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.590401][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.648873][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.651923][ T116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.751500][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.751522][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.787680][ T116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.787944][ T116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.788627][ T116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.809359][ T5652] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.842245][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.842266][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.846081][ T116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892208][ T5651] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 83.893282][ T5651] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 83.895246][ T5651] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 83.909132][ T5651] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 83.948987][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.949006][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.026437][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.026482][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.084344][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.084366][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.094902][ T5741] Zero length message leads to an empty skb [ 84.169264][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.169280][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.273278][ T5747] kAFS: unable to lookup cell '' [ 84.300934][ T30] audit: type=1326 audit(1793337644.473:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.325546][ T30] audit: type=1326 audit(1793337644.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.325593][ T30] audit: type=1326 audit(1793337644.503:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.325938][ T30] audit: type=1326 audit(1793337644.503:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.339457][ T30] audit: type=1326 audit(1793337644.523:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.412096][ T30] audit: type=1326 audit(1793337644.593:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.412792][ T30] audit: type=1326 audit(1793337644.593:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.412994][ T30] audit: type=1326 audit(1793337644.593:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.456382][ T5634] Bluetooth: hci0: command tx timeout [ 84.456414][ T5634] Bluetooth: hci2: command tx timeout [ 84.456537][ T5640] Bluetooth: hci1: command tx timeout [ 84.523484][ T30] audit: type=1326 audit(1793337644.703:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.525095][ T30] audit: type=1326 audit(1793337644.703:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.2.6" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6f1c code=0x7ffc0000 [ 84.536153][ T54] Bluetooth: hci4: command tx timeout [ 84.536237][ T5640] Bluetooth: hci3: command tx timeout [ 84.876305][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.046636][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 85.050989][ T10] usb 3-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 85.074923][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 85.079222][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 85.121535][ T5764] kAFS: unable to lookup cell '' [ 85.133494][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.133521][ T10] usb 3-1: Product: syz [ 85.134136][ T10] usb 3-1: Manufacturer: syz [ 85.134155][ T10] usb 3-1: SerialNumber: syz [ 85.154200][ T5765] IPv6: Can't replace route, no match found [ 85.173339][ T5765] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.199663][ T10] usb 3-1: config 0 descriptor?? [ 85.218701][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 85.218730][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 85.266144][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.446432][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.601631][ T29] usb 5-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 85.615820][ T5751] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.626135][ T29] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 85.626161][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.626178][ T29] usb 5-1: config 0 has no interface number 0 [ 85.626223][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 85.626247][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 85.626267][ T29] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.649944][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.649972][ T29] usb 5-1: Product: syz [ 85.649986][ T29] usb 5-1: Manufacturer: syz [ 85.650000][ T29] usb 5-1: SerialNumber: syz [ 85.675950][ T29] usb 5-1: config 0 descriptor?? [ 85.685159][ T5769] input: syz1 as /devices/virtual/input/input5 [ 85.788966][ T5751] usb 2-1: Using ep0 maxpacket: 16 [ 85.796945][ T5751] usb 2-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 85.826254][ T5689] usb 3-1: USB disconnect, device number 2 [ 85.831931][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 85.831952][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 85.878447][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.878465][ T5751] usb 2-1: Product: syz [ 85.878490][ T5751] usb 2-1: Manufacturer: syz [ 85.878498][ T5751] usb 2-1: SerialNumber: syz [ 85.971794][ T5751] usb 2-1: config 0 descriptor?? [ 86.010884][ T5751] hub 2-1:0.0: bad descriptor, ignoring hub [ 86.010906][ T5751] hub 2-1:0.0: probe with driver hub failed with error -5 [ 86.179920][ T5751] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.320370][ T5764] input: syz1 as /devices/virtual/input/input7 [ 86.447765][ T5751] usb 2-1: USB disconnect, device number 2 [ 86.524478][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.536111][ T54] Bluetooth: hci2: command tx timeout [ 86.536143][ T54] Bluetooth: hci0: command tx timeout [ 86.536196][ T5640] Bluetooth: hci1: command tx timeout [ 86.576770][ T5776] kAFS: unable to lookup cell '' [ 86.617805][ T5634] Bluetooth: hci4: command tx timeout [ 86.617848][ T5640] Bluetooth: hci3: command tx timeout [ 86.778787][ T196] cfg80211: failed to load regulatory.db [ 86.866212][ T5717] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.015903][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 87.018534][ T5717] usb 1-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 87.022563][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 87.022595][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 87.033436][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.033463][ T5717] usb 1-1: Product: syz [ 87.033476][ T5717] usb 1-1: Manufacturer: syz [ 87.033490][ T5717] usb 1-1: SerialNumber: syz [ 87.055245][ T5717] usb 1-1: config 0 descriptor?? [ 87.069522][ T5717] hub 1-1:0.0: bad descriptor, ignoring hub [ 87.069550][ T5717] hub 1-1:0.0: probe with driver hub failed with error -5 [ 87.082560][ T5717] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.381923][ T5785] input: syz1 as /devices/virtual/input/input8 [ 87.421165][ T5718] usb 1-1: USB disconnect, device number 2 [ 87.735265][ T5790] kAFS: unable to lookup cell '' [ 87.985817][ T5732] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.021808][ T5718] usb 5-1: USB disconnect, device number 2 [ 88.096267][ T5717] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.139246][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 88.140097][ T5732] usb 3-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 88.143591][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 88.143620][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 88.158092][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.158117][ T5732] usb 3-1: Product: syz [ 88.158130][ T5732] usb 3-1: Manufacturer: syz [ 88.158144][ T5732] usb 3-1: SerialNumber: syz [ 88.193479][ T5732] usb 3-1: config 0 descriptor?? [ 88.213567][ T5732] hub 3-1:0.0: bad descriptor, ignoring hub [ 88.213594][ T5732] hub 3-1:0.0: probe with driver hub failed with error -5 [ 88.245534][ T5732] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.247509][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 88.252639][ T5717] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.255295][ T5717] usb 2-1: config 0 has no interfaces? [ 88.260648][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.260672][ T5717] usb 2-1: Product: syz [ 88.260685][ T5717] usb 2-1: Manufacturer: syz [ 88.260699][ T5717] usb 2-1: SerialNumber: syz [ 88.303979][ T5717] usb 2-1: config 0 descriptor?? [ 88.551497][ T5790] input: syz1 as /devices/virtual/input/input9 [ 88.591134][ T10] usb 3-1: USB disconnect, device number 3 [ 88.937819][ T5784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 89.310030][ T5732] usb 2-1: USB disconnect, device number 3 [ 89.562664][ T5818] kAFS: unable to lookup cell '' [ 89.581555][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 89.581569][ T30] audit: type=1326 audit(1793337649.763:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.581595][ T30] audit: type=1326 audit(1793337649.763:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.587670][ T30] audit: type=1326 audit(1793337649.773:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.587716][ T30] audit: type=1326 audit(1793337649.773:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.587753][ T30] audit: type=1326 audit(1793337649.773:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.588233][ T30] audit: type=1326 audit(1793337649.773:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.589618][ T30] audit: type=1326 audit(1793337649.773:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.590170][ T30] audit: type=1326 audit(1793337649.773:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.592937][ T30] audit: type=1326 audit(1793337649.773:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.592979][ T30] audit: type=1326 audit(1793337649.773:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.18" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000 [ 89.856556][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.005899][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 90.006981][ T5732] usb 4-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 90.008601][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 90.008632][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 90.021113][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.021141][ T5732] usb 4-1: Product: syz [ 90.021156][ T5732] usb 4-1: Manufacturer: syz [ 90.021170][ T5732] usb 4-1: SerialNumber: syz [ 90.077587][ T5732] usb 4-1: config 0 descriptor?? [ 90.106688][ T5732] hub 4-1:0.0: bad descriptor, ignoring hub [ 90.106716][ T5732] hub 4-1:0.0: probe with driver hub failed with error -5 [ 90.119261][ T5732] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.179664][ T5821] kAFS: unable to lookup cell '' [ 90.330952][ T5825] kAFS: unable to lookup cell '' [ 90.435771][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.469579][ T5826] input: syz1 as /devices/virtual/input/input10 [ 90.533918][ T5717] usb 4-1: USB disconnect, device number 2 [ 90.564342][ T5649] udevd[5649]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 90.586114][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.595834][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 90.612455][ T10] usb 5-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 90.627868][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 90.627899][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 90.662965][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.662991][ T10] usb 5-1: Product: syz [ 90.663005][ T10] usb 5-1: Manufacturer: syz [ 90.663020][ T10] usb 5-1: SerialNumber: syz [ 90.695088][ T10] usb 5-1: config 0 descriptor?? [ 90.704928][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 90.704954][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 90.727631][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.743208][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 90.751969][ T9] usb 2-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 90.774310][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 90.774351][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 90.815024][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.815050][ T9] usb 2-1: Product: syz [ 90.815063][ T9] usb 2-1: Manufacturer: syz [ 90.815077][ T9] usb 2-1: SerialNumber: syz [ 90.853193][ T9] usb 2-1: config 0 descriptor?? [ 90.863485][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 90.863511][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 90.981303][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.178117][ T5821] input: syz1 as /devices/virtual/input/input11 [ 91.231863][ T5732] usb 5-1: USB disconnect, device number 3 [ 91.364396][ T5825] input: syz1 as /devices/virtual/input/input12 [ 91.390886][ T5717] usb 2-1: USB disconnect, device number 4 [ 91.484153][ T5836] IPv6: Can't replace route, no match found [ 91.505253][ T5836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23'. [ 91.646795][ T5838] kAFS: unable to lookup cell '' [ 91.776276][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.917296][ T5732] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.926540][ T29] usb 1-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 91.927500][ T29] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 91.927522][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.927539][ T29] usb 1-1: config 0 has no interface number 0 [ 91.927579][ T29] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 91.927602][ T29] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 91.927624][ T29] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.948291][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.948316][ T29] usb 1-1: Product: syz [ 91.948330][ T29] usb 1-1: Manufacturer: syz [ 91.948344][ T29] usb 1-1: SerialNumber: syz [ 91.953940][ T29] usb 1-1: config 0 descriptor?? [ 92.066216][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 92.068677][ T5732] usb 4-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 92.072530][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11 [ 92.072549][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024 [ 92.088997][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.089024][ T5732] usb 4-1: Product: syz [ 92.089037][ T5732] usb 4-1: Manufacturer: syz [ 92.089072][ T5732] usb 4-1: SerialNumber: syz [ 92.103297][ T5732] usb 4-1: config 0 descriptor?? [ 92.128357][ T5732] hub 4-1:0.0: bad descriptor, ignoring hub [ 92.128383][ T5732] hub 4-1:0.0: probe with driver hub failed with error -5 [ 92.153813][ T5732] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.486151][ T5853] input: syz1 as /devices/virtual/input/input14 [ 92.561693][ T5732] usb 4-1: USB disconnect, device number 3 [ 93.518367][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 93.518541][ T5854] [ 93.529661][ T5854] ============================================ [ 93.535809][ T5854] WARNING: possible recursive locking detected [ 93.541967][ T5854] syzkaller #0 Not tainted [ 93.546366][ T5854] -------------------------------------------- [ 93.552521][ T5854] syz.4.28/5854 is trying to acquire lock: [ 93.558333][ T5854] ffff88802554c168 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 93.569047][ T5854] [ 93.569047][ T5854] but task is already holding lock: [ 93.576432][ T5854] ffff88802554c168 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 93.586893][ T5854] [ 93.586893][ T5854] other info that might help us debug this: [ 93.594941][ T5854] Possible unsafe locking scenario: [ 93.594941][ T5854] [ 93.602374][ T5854] CPU0 [ 93.605638][ T5854] ---- [ 93.608911][ T5854] lock(&sb->s_type->i_mutex_key#10); [ 93.614352][ T5854] lock(&sb->s_type->i_mutex_key#10); [ 93.619802][ T5854] [ 93.619802][ T5854] *** DEADLOCK *** [ 93.619802][ T5854] [ 93.627923][ T5854] May be due to missing lock nesting notation [ 93.627923][ T5854] [ 93.636226][ T5854] locks held by syz.4.28/5854: 1, last CPU#1: [ 93.642275][ T5854] #0: ffff88802554c168 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 93.653208][ T5854] [ 93.653208][ T5854] stack backtrace: [ 93.659108][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT(full) [ 93.668201][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.678253][ T5854] Call Trace: [ 93.681518][ T5854] [ 93.684434][ T5854] dump_stack_lvl+0xe8/0x150 [ 93.689016][ T5854] print_deadlock_bug+0x27a/0x290 [ 93.694071][ T5854] __lock_acquire+0x25db/0x2de0 [ 93.698917][ T5854] ? __lock_acquire+0x747/0x2de0 [ 93.703845][ T5854] lock_acquire+0x115/0x350 [ 93.708362][ T5854] ? blkdev_buffered_write+0xd7/0x160 [ 93.713724][ T5854] down_read+0x45/0x320 [ 93.717871][ T5854] ? blkdev_buffered_write+0xd7/0x160 [ 93.723229][ T5854] blkdev_buffered_write+0xd7/0x160 [ 93.728411][ T5854] blkdev_write_iter+0x6d5/0x810 [ 93.733340][ T5854] aio_write+0x5cb/0x870 [ 93.737565][ T5854] ? __pfx_aio_write+0x10/0x10 [ 93.742313][ T5854] io_submit_one+0x798/0x13d0 [ 93.746999][ T5854] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.752180][ T5854] ? irqentry_exit+0x2a0/0x9b0 [ 93.756926][ T5854] ? __pfx_io_submit_one+0x10/0x10 [ 93.762018][ T5854] ? lock_acquire+0x115/0x350 [ 93.766680][ T5854] ? __might_fault+0xaf/0x130 [ 93.771350][ T5854] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 93.777146][ T5854] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 93.783475][ T5854] ? __might_fault+0xaf/0x130 [ 93.788136][ T5854] __do_fast_syscall_32+0x28b/0x6c0 [ 93.793318][ T5854] ? do_fast_syscall_32+0x33/0x70 [ 93.798324][ T5854] ? irqentry_exit+0x10f/0x9b0 [ 93.803073][ T5854] ? trace_irq_disable+0x3b/0x140 [ 93.808083][ T5854] do_fast_syscall_32+0x33/0x70 [ 93.812922][ T5854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.819230][ T5854] RIP: 0023:0xf747ef1c [ 93.823288][ T5854] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 93.842883][ T5854] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 93.851283][ T5854] RAX: ffffffffffffffda RBX: 00000000f7fde000 RCX: 00000000000000f3 [ 93.859264][ T5854] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.867217][ T5854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.875168][ T5854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.883122][ T5854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.891084][ T5854] [ 94.465024][ T9] usb 1-1: USB disconnect, device number 3 [ 94.795733][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.945786][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 94.946442][ T5732] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.946921][ T5732] usb 2-1: config 0 has no interfaces? [ 94.949405][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.949418][ T5732] usb 2-1: Product: syz [ 94.949425][ T5732] usb 2-1: Manufacturer: syz [ 94.949432][ T5732] usb 2-1: SerialNumber: syz [ 94.950304][ T5732] usb 2-1: config 0 descriptor?? [ 95.241440][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 95.242872][ T10] usb 2-1: USB disconnect, device number 5