last executing test programs: 9m41.602596854s ago: executing program 0 (id=917): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100fffffffffffffffe007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9m41.346157002s ago: executing program 0 (id=918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0xc) r2 = socket$inet6(0xa, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) (async) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) (async) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x800e, 0x9, 0x1, 0x0}, &(0x7f00000005c0)=0x10) syz_usb_connect(0x4, 0x34e, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1e, 0x53, 0xef, 0x8, 0x13d3, 0x5103, 0xcf9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33c, 0x2, 0x0, 0x3, 0x30, 0x0, "", [{{0x9, 0x4, 0xab, 0x7, 0x9, 0xe, 0x1, 0x0, 0x40, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "93"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x100, 0x7, 0x38}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x7, [0x7]}, @mdlm={0x15, 0x24, 0x12, 0x8}, @country_functional={0xc, 0x24, 0x7, 0xd, 0x1ff, [0x5bd, 0x9, 0x3]}, @acm={0x4, 0x24, 0x2, 0x2}]}, @uac_control={{0xa, 0x24, 0x1, 0x7f, 0x3f}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x9, "3580657f"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0x4, "72b26d"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x6, 0x0, 0x2bac, 0x3, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x503, 0x6, 0x6, 0xfb}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x0, 0x12, "b94e597382e2"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x2, 0x8, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xdd77}, @generic={0x86, 0x24, "dff4cfcfad8d98abd05816cf1ec762bca48d16ca216188f3b109013939c756f9b22612db339f4968ff665fa6406f8258b6226c9f710d29e40b9ef554ecf7313b6a07900ee3071c650a7c57047e82193ed6b3e82522ea37787d4647f9f8abc99ff4bdcb1c87270448f1bdc2eea6d4b260bbe8cb1b754e963fe15265e9112f9a2761269375"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x8, 0x1, 0x8, [@generic={0xd, 0x9, "8102ac42d9430accfbcc92"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0xfd, 0xe, [@generic={0x8a, 0x7, "6f2bfae196275fa2c873dd02b801c31b951792ad643da543cd88f6f8edf0b699323576b626556144fa9472f25090b94d47f5388c0e97cd58cdccc61f19874e438252b52869e178d086f89d8b79e2813c0ce2e17e7e6ee3aa6bcd33e45f749e8f55d16d1047f5ebc6fd1baf816657441bf8c16630214e4acac906ad337e75af1edbc6ffd695c40be8"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd4, 0x4}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x2, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x70, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0xb}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x0, 0x7, 0x5e, [@generic={0xef, 0x9, "04ffcf23e041cc5e310ca3b8332393a4b0a54d25681a903c9d6cabf08fcc2026b88edb753dd2e4afc615199c6a20160cecdca851fa11dbb265dc5b0ce9ac5896e7330e53fcbcc6014392ff917a5d7bfc617bf7588555a6f50a56d60f2e0eb382244404c1b0d983be1ed6925272dedee3af84e05db975cdfc61f55877dbf1aa5aed48758757e9a5e6a1afd163c68c3d41e5a2034e223db7879657ec65e2d34b0f20420827ad4daf4ed5af686bcfb93ea3b6fe643cc882829b55224f81b0a4427f42836133d2ba69e8a17d0092c838f58e3e640fa91569cc4cbeb44f4445d94ff9db67dc20a125f9b117a59806da"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xf, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x81, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x8, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6f}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x9, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8}]}}]}}, {{0x9, 0x4, 0xbf, 0x1, 0x1, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc1, 0x2}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0xba, 0x3, 0x9, 0x8, 0xd}, 0x16, &(0x7f0000000a00)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x8}]}, 0x4, [{0x9f, &(0x7f0000000a40)=@string={0x9f, 0x3, "085cf4f3aae27c3c7741c2b70aa87212a3c81a0a27901129d97127de2087bfad1902591f5cd5af34ef0ecf3b911e82a8ad157ceb0986fdb21a4e66762b6d7dbc72a5a36d9ae783d7861282f34d65f616b8cf506bb0301d0d82910c02d21d3a206051839ac0f5b72b861f7f59ac4c53b284ee6fa7d29e10210e943366146b6d505a90d5eb9ba022707241c1fc378fba805857aea6389b9ac3850f6773e9"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0xf, &(0x7f0000000b40)=@string={0xf, 0x3, "4d675fa69029f31d36f668722c"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x40d}}]}) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000600)={r5, 0x6}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000180)=0xf) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000500)={0x6, 0x0, [{0x233, 0x0, 0x3}, {0x8fa, 0x0, 0x1000000008}, {0xa0a, 0x0, 0x9}, {0x488, 0x0, 0x1}, {0x20, 0x0, 0x319e}, {0x922, 0x0, 0x3a800000000000}]}) 9m40.239808121s ago: executing program 0 (id=920): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7ffff, 0x1a3003) r1 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0xc, 0x8000, 0x1, 0x5}, 'syz1\x00', 0x56}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001080)="5abe69ae6200", 0x0, 0x1, 0x34, 0x22, 0x0}) 9m39.964380904s ago: executing program 0 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="0567376f0e0800ffff00"/20, 0x14}], 0x1}}], 0x1, 0x400c050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x5, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x2, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x3, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0x8, 0xfffffffc, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x401, 0x9, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0xff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0xfffffffe, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x5, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0x8, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x2, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x2, 0xdfd, 0x4, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x6, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x0, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x9350, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x2000005, 0x5, 0x0, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0x7, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x7, 0xfffffffa, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0x2, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x3, 0x7, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0xf, 0x340000, 0x8c6, 0x62, 0x0, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x7, 0x5, 0x3, 0x6, 0x4, 0x3ff, 0x401, 0xa40, 0xb, 0xfffffc01, 0x9, 0x2, 0x80, 0x9, 0x5, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x9, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x8000, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0xfffff100, 0x7, 0x80000000, 0x491, 0x3, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x101, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x3, 0x3, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8008, 0x2, 0x2, 0x5, 0x4, 0x595, 0x0, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x800, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x7, 0x3, 0x388, 0x2, 0x7, 0xca1b, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff61, 0x0, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x6, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x8, 0x4, 0x676d, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0xed90, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x7d0, 0x5, 0x20000007, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x400, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8e8, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0xd47, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000004, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x4, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x3, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x9, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0xd575, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x7c20c2c4, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x80f9, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x4, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x2, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x3, 0x9, 0x6, 0x2, 0xdcc, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x8000081, 0x7, 0xb1, 0x8, 0x10, 0x9, 0x1, 0x9c, 0xf, 0x6, 0x101, 0x3, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x1, 0x8000003, 0x38, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0x7, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff9, 0x3, 0x5, 0x8, 0x5, 0x1, 0x9, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe451, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0x1, 0x2, 0x9, 0xfffffff9, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x85, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x80000005, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0x7, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x1, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x4, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x4, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6ccb, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0xe, 0xa1f, 0x9, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0xa, 0x3, 0xffffffff, 0x7, 0xa, 0x6, 0x1b04e], 0x6, 0x400, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100039042cbd70002b3e07f11399ef61", @ANYRES32=0x0, @ANYBLOB="01980000800c0400240012800b00010067656e65766500001400028005000900000000000500080000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904"], 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x3fffd}]}) 9m39.158263325s ago: executing program 0 (id=926): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x440040, 0x0, 0x7, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x6008084, 0x0, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 9m38.757563998s ago: executing program 0 (id=927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000200)={'wlan0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) unshare(0x22020400) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 9m38.104206975s ago: executing program 32 (id=927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000200)={'wlan0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) unshare(0x22020400) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4m17.710687s ago: executing program 3 (id=2121): memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9f\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0x5, 0xfc, 0x100}, {0x7, 0x1, 0x3, 0x9}, {0x3, 0x4, 0xf1, 0x6}, {0x8, 0x6, 0x5, 0x4}, {0x2, 0x1, 0x3, 0x30}]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/211, 0xd3, 0x0, 0x3, 0x3}}, 0x48) socket$inet6(0xa, 0x80802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x6763, &(0x7f00000003c0)={0x0, 0x9621, 0x1000, 0x0, 0x204}, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x1, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240", @ANYRES64=r1, @ANYRES8=r0, @ANYRESHEX=r2], 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001a40)="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", 0x559, r4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r5}, &(0x7f0000000840)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x20, 0x13, 0x6, "aec05baeb463"}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="0020b0d6dd40273790a902000000149c3300"], 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3b3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000700)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b40)=@new_dev={0x1, 0xfb8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000007, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0x1, 0xae, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r13) 4m14.60080055s ago: executing program 3 (id=2132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000180)=0x8) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/198, 0xc6}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7a, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0xfffffffffffffffd]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000202c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x0) 4m13.377769098s ago: executing program 3 (id=2137): r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4e3f, &(0x7f0000000080)={0x0, 0xc48b, 0x2, 0x1, 0x8b}, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20) 4m12.945398104s ago: executing program 3 (id=2138): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000002c0), 0x80, 0x0) close(r0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020000600000000002000020000000000d39c783ec636728b3302da9b887417b9790c62b2f030833f074d05edcc854d609c8dd0b9eebcb3968557540b82ebd20452366ddaff72f984308e9f22f054c12801140f2cc028fb0546903b"], 0x1c, 0x2) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x28) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom$inet6(r3, &(0x7f00000006c0)=""/4096, 0x1000, 0x2000, &(0x7f00000016c0)={0xa, 0x4e22, 0x0, @mcast2, 0x800}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x0, 'netdevsim0\x00', {0x2}, 0x2}) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000300)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f00000000c0)=0x6a, 0x4) 4m12.475835535s ago: executing program 3 (id=2141): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000020900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c0002800800014000000001"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) (async) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="757365722e6d651b2530e7f930d2b5766d6f72792e6576656e74732e6c6f63636c00"]) creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x200, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x6]}, {0x1, 0x100, 0x1, 0x7ff}}, 0x5, &(0x7f00000001c0), 0x0}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x200, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x6]}, {0x1, 0x100, 0x1, 0x7ff}}, 0x5, &(0x7f00000001c0), 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x4008080) 4m11.508026781s ago: executing program 3 (id=2143): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_setup(0x3, &(0x7f00000006c0)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000800), &(0x7f0000000880)={&(0x7f0000000840), 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0xa0363159, 0x8, 0x0, 0x2a, 0x0, 0x9}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$TCXONC(r7, 0x5608, 0x3) clock_gettime(0x6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndmidi(&(0x7f00000003c0), 0xfff, 0x20000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001f40)={0x0, 0x1000, &(0x7f0000000f40)="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"}) unshare(0x26020480) r9 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x3a, 0x1, 0x0, 0x48) sendmsg$inet_sctp(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="da2f", 0x2}], 0x1, &(0x7f0000000940)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x6e}}, @sndinfo={0x1c, 0x84, 0x2, {0x40f, 0xa, 0x0, 0x1}}], 0x30, 0x1}, 0x20000081) socket$nl_netfilter(0x10, 0x3, 0xc) 3m56.457281822s ago: executing program 33 (id=2143): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_setup(0x3, &(0x7f00000006c0)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000800), &(0x7f0000000880)={&(0x7f0000000840), 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x10c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4}]}, 0x2c}}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0xa0363159, 0x8, 0x0, 0x2a, 0x0, 0x9}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$TCXONC(r7, 0x5608, 0x3) clock_gettime(0x6, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndmidi(&(0x7f00000003c0), 0xfff, 0x20000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001f40)={0x0, 0x1000, &(0x7f0000000f40)="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"}) unshare(0x26020480) r9 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x3a, 0x1, 0x0, 0x48) sendmsg$inet_sctp(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="da2f", 0x2}], 0x1, &(0x7f0000000940)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x6e}}, @sndinfo={0x1c, 0x84, 0x2, {0x40f, 0xa, 0x0, 0x1}}], 0x30, 0x1}, 0x20000081) socket$nl_netfilter(0x10, 0x3, 0xc) 2m43.494515571s ago: executing program 6 (id=2453): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x2, 0x7ff, 0x270a, 0x3, 0x0, 0x4f4, 0xbcb0}, 0x0) keyctl$update(0x2, r0, &(0x7f00000000c0)="4b7b8ab5444499000000000000000000", 0x10) 2m43.347413032s ago: executing program 6 (id=2454): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r3 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x101800, 0x182) mkdirat(r3, &(0x7f00000000c0)='./bus\x00', 0x140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000130900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0xf020880) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f00000003c0)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c0001800600", @ANYRES16, @ANYBLOB="785454f63ace2532535fe458e26a717fb1f470cbce39657622847a083b06c05d7cca8ca7fd3ef3"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) 2m41.444027064s ago: executing program 6 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x48, 0x3, 0x11, 0x0, @empty, @local}, "341517c1b7df"}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0x5e) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2, 0x2}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000000)={0x2}, 0x0) close(0x3) r8 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x30b5, 0x4, 0x0, 0x1fa}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSBRK(r12, 0x5409, 0x9) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000a80)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000180)={0x0, 0x7503, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x20, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0x80b2, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x8, 0x0, 0xff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x400, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x96, 0x4, 0x1, 0xc5, 0x9, 0xf3, 0xc4, 0x6, 0x9, 0x5, 0x84, 0x8, 0xfd, 0x1, 0xec}}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1ab8ff0000000079a2f8ff00000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x22, &(0x7f0000000200)=""/1000, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r14, 0xae80, 0x0) 2m40.670288072s ago: executing program 6 (id=2467): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) io_setup(0x0, &(0x7f0000000440)) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x2000, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2m39.030931734s ago: executing program 6 (id=2470): syz_usb_connect$uac2(0x5, 0xe0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002000000101e0410304000010203010902ce000301062000080b020101ff000f09040000000101290009240109000b3e000f09240d0302000100000c2403"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f0000001380), 0x7, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000100)) close(0x3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) poll(&(0x7f0000000040)=[{r0, 0x9000}], 0x1, 0x2f6) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/140) 2m38.743010997s ago: executing program 6 (id=2473): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r3 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x101800, 0x182) mkdirat(r3, &(0x7f00000000c0)='./bus\x00', 0x140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000400900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0xf020880) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f00000003c0)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c0001800600", @ANYRES16, @ANYBLOB="785454f63ace2532535fe458e26a717fb1f470cbce39657622847a083b06c05d7cca8ca7fd3ef3"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) 2m37.926762116s ago: executing program 34 (id=2473): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) r3 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x101800, 0x182) mkdirat(r3, &(0x7f00000000c0)='./bus\x00', 0x140) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000400900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0xf020880) renameat2(r6, &(0x7f00000002c0)='./file0\x00', r6, &(0x7f00000003c0)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c0001800600", @ANYRES16, @ANYBLOB="785454f63ace2532535fe458e26a717fb1f470cbce39657622847a083b06c05d7cca8ca7fd3ef3"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) 18.667887153s ago: executing program 1 (id=3014): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r1 = socket(0x2b, 0x1, 0xc926) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r2, r3]}}], 0x14, 0x24000000}}], 0x1, 0x4018080) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async) shutdown(r4, 0x1) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6}, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x3, 0xde, 0xffff8b75, 0xfffffffc, 0x84, 0x4, 0xe}, &(0x7f0000000280)=0x9c) 17.71195678s ago: executing program 1 (id=3017): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6, 0x0, 0xa00}]}]}, 0x24}}, 0x4000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r7, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000008000ff0f000061200000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x40f00}, 0x94) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) 16.203551827s ago: executing program 1 (id=3020): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x69, 0x2000, @fd=r0, 0x7, 0x0, 0x0, 0x19, 0x1, {0x3, 0x0, 0x5, '\x00', &(0x7f0000000580)={0x9, 0x3, 0xbe, &(0x7f00000004c0)="15423c1edf7375a0d51760dc9a4647e9de781103d1c433b34f5f64530a1c0717fcf2135f64e2719a61cd2e3bf8ebbc6dd54158cdb265f9318484acc6bf595b6129916eca9a03b56b5bc54fc8221ea42f48fbfe74c49c373050900571196b34e1eef6455c435e6862d5893aa55c842ca5f7ca6b6ed374a4a77e7ddfb32a7195dd4ba395be25907e153a5a9fbb50619df5c898320428993ef4e65a580aaaa93daaaac0415e6bc4a00095e0b7d2e1a08cddde4e7edbfd5211c309636a68bc08", 0x2a}, 0x9}}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000840)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_open_procfs(r4, &(0x7f00000008c0)='net/llc/socket\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="680100001000130700000000fcdbdf257f00000100000000000000000000000000000000000000000000000000000001000080024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/288], 0x168}}, 0x48080) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) r8 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) setxattr$incfs_metadata(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40), &(0x7f0000000a80)="b58c8e53512f440cf7926ec51206bf2d90ac4dd0937d65bbe6a70de7448970a7a02a2011a41a", 0x26, 0x3) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000b60000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa44e9ae33fbd862f180000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018620000060000000000000002000000185300000f00"/56], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x61, &(0x7f00000005c0)=""/97, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xa, 0x9, 0x10001}, 0x10, 0x244f4, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x3, 0x5, 0x2, 0x9}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000800)=r12, 0x4) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r14 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000001ac0)={r13, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c2aac3f80026d1a870200000000000000e04d528539f3d3289737f0374472a964a02447a75df8a69ea917deb7ba193b3e7772fd46f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) r15 = dup(r14) r16 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r16, 0x0) write$UHID_INPUT(r15, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 12.610981495s ago: executing program 1 (id=3025): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x33c13, 0x2009}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x24e4}, @IFLA_GROUP={0x8, 0x1b, 0x87}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xfe, 0xa, 0xfffffff8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0xf810, 0x10, 0xffff, 0x8}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000640)={@private1, 0x0}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}}, 0x20018080) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2000000000000139, 0x0, 0x0, 0x10}, 0x20040003) 10.864914497s ago: executing program 1 (id=3033): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4008840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x100000c, 0x2172, r3, 0x70d2000) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @sdr={0x20385655, 0x8}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x6}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bda887b752df250000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) close(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 10.651694626s ago: executing program 5 (id=3035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff0b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newchain={0x12fc, 0x64, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1}, {0x10, 0xf}, {0x5, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x78}, @filter_kind_options=@f_fw={{0x7}, {0x1058, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0xc2c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x270c}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0xe, 0x1, 0xfffffeff, 0x3fca, 0x9, 0xd35, 0x8, 0x2, 0x0, 0xfffffffd, 0x6, 0x0, 0x7, 0x1, 0x5, 0x7341, 0x0, 0x800, 0x6, 0xb, 0x6, 0x7, 0x9, 0x9, 0x5, 0x8001, 0x7fff, 0x9, 0x4, 0x101, 0x4, 0xb, 0x7, 0xe90d, 0x9b6, 0x3ff, 0x80, 0x5, 0x793, 0x5, 0x2, 0x5, 0x0, 0x800, 0x7, 0x29f, 0x401, 0x18, 0x2ce, 0x2, 0x8000, 0x9, 0x3, 0x5, 0x1411, 0x1, 0x8, 0x7, 0xca3, 0x7f, 0x4, 0x2, 0xfffffde1, 0x7fff, 0x4, 0x8, 0x3, 0x3ff, 0x9, 0x81, 0x3, 0xd, 0x593e38c6, 0x8, 0x9, 0x9, 0x1, 0x6, 0xffffffff, 0xf09, 0x465, 0xfffffffa, 0x9, 0x0, 0xffff5148, 0x5a1, 0xd648, 0x8f54, 0x5, 0x4, 0xeb, 0xf, 0x0, 0xff, 0x17, 0x21a, 0x7d0, 0x4, 0x4, 0x2, 0xfffffff3, 0x5, 0x4, 0xb, 0x81, 0x6, 0x234, 0x3, 0x6, 0x50e3, 0x0, 0x5, 0x1, 0xd, 0x641, 0x2, 0x4, 0x4, 0x8, 0x400, 0x0, 0x5, 0x6, 0x5, 0xde, 0x8, 0x400, 0x5, 0x2, 0xffffffff, 0x8, 0x3, 0x5, 0xff94, 0x3, 0x8, 0xc744, 0xd, 0x7, 0x4, 0x6, 0x3, 0xe41f3b5a, 0xd, 0x7, 0x1, 0x7, 0x7ff, 0x6, 0x5, 0x4, 0x7597d81f, 0x8e, 0x7, 0xa, 0x3, 0x3, 0x87, 0x5, 0x1, 0x5, 0x4, 0x10001, 0x2, 0x58a1, 0x42, 0x1, 0x2, 0x50f, 0xfffffbf5, 0x6, 0xfd, 0xffffff94, 0x6, 0x8, 0x1, 0x2, 0x3, 0x6, 0x6, 0x0, 0x6d7, 0x1, 0x7, 0x4f8, 0x6, 0x6, 0x1, 0x80000001, 0x5, 0x4bda2bbc, 0x8, 0x8, 0x8, 0x8, 0x7, 0x80000001, 0x6, 0x50, 0x6, 0x7, 0x2, 0x1, 0xffffff81, 0x80000001, 0x2, 0x4, 0x852b, 0x3, 0x9, 0x8, 0xfff, 0x2, 0x9, 0x4, 0x9, 0x0, 0x1, 0x0, 0x6, 0x8, 0xd, 0x9, 0x6, 0x5, 0x4, 0x4, 0x200, 0x10000, 0x4, 0x3, 0x4, 0x295, 0x4, 0x6, 0x1, 0x773, 0xc, 0x9, 0xffff0001, 0x5, 0x6, 0xd, 0x5, 0x4, 0x9, 0x1, 0x0, 0xd, 0x7, 0x8, 0x4, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800000, 0xfffffff7, 0x48, 0xfff, 0x4, 0x9, 0x4, 0xfffffffe, 0x5, 0x8, 0x0, 0x9, 0x3, 0x3, 0x5, 0x3, 0x4, 0x4, 0x255, 0x80000000, 0x6, 0xffffff01, 0x10000, 0x3, 0x6, 0x81, 0x7fffffff, 0x8, 0x0, 0xff, 0x7, 0x101, 0x4, 0xf80, 0x432, 0xa, 0x0, 0xd, 0xffff, 0x6, 0x2292, 0xffff8000, 0x3796, 0x5da907f7, 0x1, 0x9, 0x9, 0x2, 0x0, 0x75b23e88, 0x80000000, 0x5, 0x3, 0x0, 0x3, 0x1, 0xffff8952, 0xfff, 0xffff, 0x1, 0x9, 0x7, 0xf, 0x9, 0x7, 0x80, 0x6, 0x6, 0x4, 0x6e, 0x4, 0x2, 0xffffffc0, 0xc135, 0x8, 0x1000, 0x40, 0xffffffff, 0x1, 0xe, 0x3, 0x40, 0x5, 0x8, 0x3, 0x0, 0x3, 0x7, 0x4, 0x9, 0x80000000, 0x0, 0xf0, 0x8, 0xec, 0x2, 0xff, 0x9, 0xfffffff8, 0x401, 0x3, 0x211, 0x0, 0x80000000, 0x73, 0x6, 0x100, 0x727c, 0x8, 0x5, 0xffffffff, 0x6, 0x4a0, 0xfffffffc, 0x7, 0x64ed257d, 0x400, 0x1, 0x3, 0x7f, 0x400, 0x4000, 0x7838, 0x8, 0x3, 0xff, 0x8, 0x1, 0x9, 0x0, 0x0, 0x3, 0x49, 0xffff, 0x86f6, 0x7, 0x3, 0x800, 0x6, 0x631, 0x401, 0x3, 0x1c0, 0x5, 0x200, 0x2, 0xfffffffc, 0x1ff, 0x3, 0x70, 0x8001, 0x3e, 0xc178, 0x5, 0x71b, 0x4, 0xc, 0xdfb, 0x10, 0x4, 0x7, 0x10, 0x4, 0x23d783ff, 0xffffffd9, 0x7f, 0x3, 0x2, 0x5, 0x1c49, 0x4, 0x1, 0x1, 0x9, 0x4, 0x1, 0x4, 0xc, 0x0, 0x4, 0x4, 0x1, 0x3, 0x8, 0x10001, 0x3, 0x1, 0x9, 0x5, 0x1, 0x8, 0xfffff800, 0x3, 0xc86b, 0x9, 0x3, 0x9ac, 0x1a, 0xffff, 0x0, 0x3, 0x2, 0xe1f9, 0x401, 0x9, 0x1, 0x10001, 0x4b8a, 0x4, 0x2, 0x6, 0x4, 0x1, 0x5, 0xc, 0x1, 0x200000, 0xe, 0x1, 0xcdb0, 0xdaa, 0x2, 0x7, 0x7, 0x8, 0x5, 0x9, 0x100, 0x7, 0x7, 0x7, 0x7, 0x7, 0x800, 0x6, 0xa000000, 0x3, 0x3, 0x7ff, 0x2, 0xfff6, 0x0, 0x9, 0x83f, 0xff, 0x5, 0x9, 0x0, 0x3ff, 0x9, 0xc, 0x3, 0xa, 0x8, 0x2, 0xebc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0xac9, 0xfffffffe, 0xad7, 0xc78, 0x8, 0x4, 0x1, 0x9, 0x0, 0x80000000, 0x6, 0x81, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, 0xff, 0xfffffbff, 0x3, 0x8, 0x4, 0x65e7, 0x1, 0x1ff, 0x2, 0x662a, 0xffffffff, 0x8, 0x6, 0x5, 0x3000, 0x5, 0x26e, 0x1, 0x5, 0x9, 0x7, 0x6, 0x6, 0x8, 0x1, 0xa22, 0x73, 0xff, 0x8, 0x6, 0x0, 0x89, 0x3, 0x5, 0x4, 0x7, 0x7, 0x3ff, 0x2, 0x9, 0x3, 0x1, 0x9, 0x2, 0xc95, 0x9, 0x3, 0xfd, 0x6, 0x0, 0x0, 0x4206a513, 0x401, 0x9, 0x4, 0xa1820e1, 0x3, 0x78f, 0x2986, 0x3, 0xc4, 0x1ff, 0xea, 0xb, 0x6, 0x7f, 0x2, 0x400, 0x48de8d85, 0x6, 0x80000000, 0x8, 0x8, 0x9, 0x9, 0x7ff, 0x3c41797f, 0x5, 0x1737, 0x5, 0x8, 0x4, 0x1000, 0x2ae8, 0x3ff, 0x7fffffff, 0x4, 0x7fffffff, 0x8, 0xd1ca, 0x7d, 0x4e, 0x7, 0x5, 0x7f, 0x3ff, 0x7, 0xaf0, 0x5, 0x1, 0x8000, 0x9, 0x400, 0x3, 0x5, 0x8, 0x3, 0x5, 0x4, 0xa61, 0x2, 0x2, 0x9, 0x9, 0x8a, 0x4, 0x100, 0x100, 0x9, 0x0, 0x1000, 0x7bf1cea7, 0xf96, 0xff, 0x100, 0x5, 0x4051, 0xc, 0x7fff, 0xfffffffe, 0x0, 0xffff, 0x6, 0x6, 0x6, 0xf4, 0x2, 0x8, 0x0, 0xffff5383, 0x3, 0x5, 0xf, 0x10000, 0xfffffff8, 0x5, 0x0, 0x1, 0x6, 0x1, 0x45f8, 0x1, 0x961, 0x622e, 0x4, 0x0, 0x800, 0x3, 0x4, 0x0, 0x1, 0x3, 0x394, 0x7, 0x40, 0xca4, 0x4b6, 0x2, 0x1, 0x8, 0x2, 0x6, 0x3, 0x8001, 0x1, 0x4, 0x101, 0x8, 0x9, 0xb, 0xc803, 0x36, 0x1, 0x0, 0x1d9, 0x9, 0x3ff, 0x0, 0x4314d486, 0x6, 0xfff, 0x40, 0x3400000, 0x401, 0x9, 0x85, 0x2, 0x8, 0x4000000, 0x7, 0x3, 0x2, 0x4, 0xf31, 0x40cf, 0x800, 0xe28, 0xc, 0x27, 0x9, 0x3, 0x4, 0x0, 0x5, 0x6, 0x10001, 0x7, 0x43a3, 0xbe4b, 0x7f3, 0x6, 0xffffffff, 0x0, 0x3, 0x8, 0x80, 0xf, 0x3823b441, 0x6, 0x8, 0xb, 0x2, 0x2, 0x1, 0x7, 0x9]}]}, @TCA_FW_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9c2a, 0x2, 0x2, 0x5, 0xeec1, 0x2, 0x10000, 0x3, 0x12, 0x8, 0xffffffff, 0x1, 0xfffffffe, 0xfffffff8, 0x0, 0x8, 0x6a, 0x29f9, 0x400, 0x2, 0x2, 0xfffffff7, 0x2, 0x6, 0x6, 0xe8, 0x2, 0xfffffffc, 0x8, 0x1, 0x2, 0xfffffffe, 0x5, 0x4, 0x7, 0x9, 0x0, 0xd, 0xfffffff7, 0x5, 0x9, 0x40, 0x2, 0x0, 0x7, 0x40, 0xc, 0x7, 0xf, 0x9c6, 0x4a3c6cad, 0x7, 0x7fffffff, 0x6, 0x7, 0x7, 0x6, 0x2, 0xfffffffb, 0x200, 0x7, 0xe, 0x2, 0xb, 0x0, 0x0, 0x0, 0xf, 0x8, 0x1, 0x200, 0x10001, 0xc0, 0x1, 0x9, 0x5, 0xfffffffd, 0x7f, 0x9, 0x5c6ec6f2, 0x5cb, 0x204604e7, 0x101, 0x3, 0xfff, 0x4d, 0x3c97, 0xf57, 0x4, 0xc, 0x6, 0x6, 0x8f, 0x3, 0x1, 0x1ff, 0x80000000, 0x0, 0x94, 0x1, 0x3, 0x5, 0x9, 0x1, 0x8, 0x8001, 0x4, 0xffffffff, 0x5, 0x8, 0xfffffffc, 0xffffffff, 0x3, 0x9, 0x7, 0xf, 0x7, 0x7, 0x18000000, 0x0, 0x8, 0x3, 0x3, 0xf5, 0x7, 0x3, 0x24ca, 0xff, 0x5, 0x80000000, 0x22f6, 0x2, 0xfff, 0x4, 0xff, 0x3, 0x5, 0x9, 0xfff, 0xb8, 0xc, 0x523, 0x9, 0x5, 0x0, 0x1ff, 0x3, 0x8, 0x9ad, 0x7fff, 0x0, 0x7, 0x1, 0x1, 0x1ff, 0x7, 0x1000, 0x0, 0x2, 0x7, 0x4, 0x9, 0x98b, 0x90000000, 0xffffffff, 0x100, 0x3, 0x0, 0x8, 0x4, 0x4, 0xfffffff9, 0xffffffff, 0x3, 0x1, 0x2, 0xd6, 0xfffffff1, 0x0, 0x80f, 0x1, 0x7da, 0x0, 0x7aa1, 0x6, 0x1, 0x277, 0x4, 0x5, 0x20000, 0x8, 0xa9, 0xe, 0x5, 0x2, 0x6, 0xe48f, 0x81, 0x2, 0xb8, 0xfffffffc, 0x7, 0x73, 0x7, 0x5, 0x800, 0x6, 0x8, 0x9, 0x5, 0x6e9ef5fb, 0x10001, 0xfffffff5, 0x14132000, 0x80000000, 0xb8bb, 0x7ff, 0x6, 0x0, 0xfffffffb, 0x2d, 0x8001, 0x1, 0x4, 0x8000, 0x3, 0x9fb, 0x4, 0xff, 0xfff, 0x65a, 0x7f, 0x0, 0xff, 0x0, 0x28, 0x1, 0x9, 0x86, 0x7, 0x7, 0x8, 0xa52, 0xea71, 0x8, 0x8, 0x1, 0x4, 0x6, 0x0, 0xffffffff, 0x3, 0x6, 0x3778, 0xfffffffe, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x11}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x25c, 0x2, [@TCA_CGROUP_ACT={0x258, 0x1, [@m_ife={0xe0, 0x20, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80000000, 0x0, 0x6, 0x0, 0xa712}, 0x1}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_PRIO={0x8, 0x3, @val=0xf}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @random="88ca975775e7"}]}, {0x45, 0x6, "73d488fc0abba14c0d143ad2102e2230915f8596c3c491cda01a63f510549241999ef9c7dbce5ece506bd78f1aa4289ab7823cd79a4217b18e9fb28e0475c213ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x174, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x145, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002800048095487aa90abff3ead5f842cccd140001800c000100636f756e746572000400028010000180080001006f73660004000280140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 10.353880365s ago: executing program 5 (id=3036): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xe, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x7f) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x13d, 0x70bd2a, 0x25dfdbfd}, 0x18}}, 0x24048000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x800, 0xe) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffff7, r2}, 0x38) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 9.390974173s ago: executing program 2 (id=3040): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4b635f689ca094b2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x40840c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e33, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r4, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x41ef, 0x48a03) pread64(r5, &(0x7f0000000280)=""/180, 0xb4, 0x9015) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x3, 0xd, 0x80, "6a4528d4fbb6fd0c308187d85b0ed7d04da9b600", 0x50313134}) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 9.18053157s ago: executing program 2 (id=3041): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r3 = openat$proc_mixer(0xffffff9c, &(0x7f00000003c0)='/proc/asound/card3/oss_mixer\x00', 0x8000, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="8b1fb3fbe42ba201000000001500ff7eff0f00fff000d700", @ANYRES32=r0, @ANYBLOB="00000000ef00"/28, @ANYRES32=r1, @ANYBLOB="000000000500"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000000000300"/28]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e24, 0x40000007, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e24, @loopback}}}, 0x118) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x4180, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10, 0x80800) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0xaf4, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$inet6_tcp_int(r7, 0x6, 0x2d, &(0x7f00000000c0)=0x101, 0x4) 7.902862324s ago: executing program 2 (id=3044): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b80110001800b0001006f626a72656600000c00044000000000000007"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="2a925108fb01b587c762ba0f2d74446be293025e5e61a48b6b4c1e99645a663dc1def025305e1f2cfdd802f628a5b42a4b2495e92f8baf44387b401f3f9d52bfd0e954f438e998ba48f0b6798d98080231bc29a13c88aa4d89215ab0b8a20bc7553778034acdc24fe42dac356c7cfa1c5c311bb189b1824dc67039be277e9d43e4b205671b32b02133ab8e4bdc1424e0b853a7be9ca386dd09bff573b638016c", @ANYRES32=r4], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086deff0018130000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r9, 0x0, 0x20000023896) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xfeff, 0x9, 0x1, {0x22, 0x492}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xd2}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_usb_control_io$hid(r0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003"], 0x0) 7.785666289s ago: executing program 4 (id=3045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) readv(r2, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/33, 0x21}], 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f00000002c0)={0x0, {0x0, 0x0, @ofdm}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.494287362s ago: executing program 1 (id=3046): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x0, 0x1}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x70) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0xffffffff, 0x418, 0x0, 0x60}}) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000a00)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000040012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x3081bf0b056d2e46) (async, rerun: 32) unshare(0x64000600) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x1, 0x102, "ae714c3018acb164053e5f0b46a57c27539a4cfe509466bca98af70735dd2b23", 0x3, 0xb, 0x9, 0x7fff, 0x100}) (async) syz_usbip_server_init(0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) signalfd(r2, &(0x7f0000000080)={[0x7, 0x5]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x2}, {0x1}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x4040800) 7.223859304s ago: executing program 5 (id=3047): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r1, 0x0, &(0x7f000009de80), 0x0) r2 = socket$inet(0x2, 0x800, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmmsg$sock(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="010000000100000064000000000000000000000000000000580f020000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3208004500002800640011009078e00000020001000100000000000bd7ec11dac9878c00000000000000005336c17654d55c0deb53ae8729635195b89d6310521375204be95e715ff0471b06ffa09a6d709cdb3f11c956c75a6f58fa9a113b06f64dc8c9aeeb2c273a4d0c5bca23ea38f6e5374088de27070d4d1210f168621db563db63fdaf"], 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xfe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xfffffffdffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r9, 0x29, 0x4, 0x2, 0x9, 0x424d55d0e51f9bd0, @local, @rand_addr=' \x01\x00', 0x8000, 0x700, 0x1, 0x76}}) r10 = openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0xffffffff, 0x0, {0xa}, [@typed={0x4, 0x1}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$addseals(r10, 0x409, 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r10, 0x80585414, &(0x7f0000000740)) syz_usb_control_io$uac3(r0, &(0x7f0000000380)={0xc, &(0x7f0000000280)={0x20, 0x21, 0x87, {0x87, 0x23, "93f367e439928cedeb4e9ed7ea578a41387e73f1710b18e455c4834087099661164a6ae75e2da9c7155a0875cde167a26126ff80e82475c4dde7f25b4ab4e536bdc01ea69a727d03f3ef2c77ecebcef7873987e2bf265afb3f2771535cb4cb1960107e88729233ce3cc664a9c13ee96d5d3a59a2aea3762fcab2fc249a66357f86fb72d2cc"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="010100000000043d2ee1"]}, &(0x7f00000006c0)={0x24, &(0x7f00000003c0), &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000140)={0x20, 0x81, 0x3, "134c6c"}, &(0x7f00000001c0)={0x20, 0x82, 0x1, "d9"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "1514"}, &(0x7f0000000640)=ANY=[@ANYBLOB="0884de0000"], &(0x7f0000000680)={0x20, 0x85, 0x3, "3b7db7"}}) io_setup(0x8, &(0x7f0000000600)) 5.664513525s ago: executing program 7 (id=3050): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f0000000300)="e3ef7f670000ec6789b4241544940000000000000000000000040032a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73080000707468327b5b138dac3264c4d5dd00800000000000005e4cd4", 0x0, 0x5, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, 0x4c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0xe000}, 0x40000881) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}, 0x1c) listen(r2, 0xfffffffc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000140600fe0c00000000000000000000000000aaff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0x9909cb, 0xfffffffd}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c0}, 0x8880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6c0f43, 0x0) r4 = socket$inet(0x2, 0x5, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x11, 0x484, 0x0, &(0x7f0000000080)=0xfffffdc9) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x100000b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x10, @private2, 0x4}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x8}, @in6={0xa, 0x4e24, 0xa4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}], 0x84) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xdfe, 0x4, 0x4, 0xa}) fcntl$notify(r0, 0x402, 0x2) 5.438415437s ago: executing program 2 (id=3051): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) r3 = accept4$unix(r1, &(0x7f0000000480), &(0x7f00000005c0)=0x6e, 0x0) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000680)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000002100085060d745e0022314a00983107d0b1891d8e75d6322ef92bc3c2a12142e8d318d0ab5c00d4380fb1599beef0bb93efdf5bf307d18851f377eaf7253824b65ee4fd3b4d4cfaf7f72d34428dc0c29e8b1863474a61571311463fa0f0387de78167ae75c09a5bd02ac2b4b6dff04166f306dc8063fc1a13759ead2e0c6577bcc9c7f405fade76f2b35573d9bb74ff96e0fedfd280eb32386108f70bf50959a16ae3b363a886b316b82235a8acd26546ff8d1142abc05ae5fc29361cedf7d5c0b7ca8ba7757c199058bbd4ac18795f978be2fcb446af9823f198795edd9cd3ddae7ab7b2213d94ccc77e8f6c8260a66d0d60fbd4d728f8b3017b1520e868c6bc43c3b49084fa3558379fc146964f5da39b5a6a4cadce14130eadb16bbf8647f2c643d7d57d247cfb64c3aa5b7d9c382782da22825c59438aff276e3a39e1db81e80692ed3567f34df85f794c86a7b5", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x480c1) r5 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r8, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@ll={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @random="31d861384527"}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x27) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 5.343569542s ago: executing program 7 (id=3052): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) flistxattr(r1, &(0x7f0000000300)=""/154, 0x9a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1816f354", @ANYRES16=r0, @ANYBLOB="89ce00b7bf000004000000dc1b9ffdd9808113d00000180004801300010062726f61dee2cec9ab3e014341737464fb276c87ca90540c47283530860fae347cff9845197fba6e176c0e37fa717bddb2f67a6b1a5bc56417576f9d1c8fb61bbfcbb4c826620f6ee2a45f641800ced0f4da47d55442ca842bc88f5c4ed16ec8404cff5b028d2dd1e34942f3c7f05bb5230530e3e1253735c35f2dbca2f2e25baac739533f92465facba2ce41ea528e7a449052c8eead59d1c6a7c"], 0x2c}}, 0x4004090) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524edff0005240000000d240f11fe000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524edff0005240000000d240f11fe000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0) 3.994700387s ago: executing program 5 (id=3053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10, 0x20000041}}], 0x1, 0xc004) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) 3.887872194s ago: executing program 5 (id=3054): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040000) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000140)={0x3, 0x1}) r5 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) 3.784887334s ago: executing program 2 (id=3055): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendto$inet(r0, &(0x7f0000000040)="73414cb2dbb5ac8165060dc592b02a8e0612810c497dd45ede474832a48f70959aaa5d4581df1c66d22b79b6bcfe40c39ce8d31ffca85c07a821a83da5c6796f90925862d5b044b61663914b5b80f3f338539ff455d918e54dec0cae5b84f51dda589582bd646763ba7a92c278a5913cf6759b64fa199751b4edb4698677c94a7e1e4cd2868dbbf77428a180eab22aa9a2bbc5643b49cd28a29a87b46d5d20c2b253653746222a460886acbb0c3b85076b66f2a25397770c132f830a1f4f647280b85360ee952f7904835231d3ed9b64140a1db2ee793ecd6a85eae8fd245f86c200"/236, 0xec, 0x54, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8a, 0x8d, 0x1c, 0x40, 0x57c, 0x2200, 0x34b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'sh\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a00000001090224000100", @ANYBLOB="031c"], 0x0) fchdir(r3) 3.772638851s ago: executing program 4 (id=3056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000008, 0x11, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000637000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.701948285s ago: executing program 7 (id=3057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0xfffffffffffffce0, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f55437"], 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x200000) ioctl$TUNDETACHFILTER(r1, 0x400854d6, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0xa08e, 0x4) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 2.352682769s ago: executing program 7 (id=3058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c7000/0x3000)=nil, 0x3000, 0x3, 0x4000010, r0, 0x5e86d000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4001024, &(0x7f0000000340)=ANY=[], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @remote, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}], 0x10}}], 0x1, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x0, 0xfffffffffffffffc, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$proc_mixer(r0, &(0x7f0000000180)=[{'VIDEO', @void}, {'DIGITAL3', @val={' \'', 'Mic Capture'}}, {'MONITOR', @val={' \'', 'Master Playback Volume'}}, {'VOLUME', @val={' \'', 'Master Playback'}}, {'MONITOR', @void}, {'PCM', @void}, {'PHONEIN', @val={' \'', 'Synth'}}, {'ALTPCM', @val={' \'', 'Master Playback'}}, {'LINE1', @void}], 0xf5) 1.838703946s ago: executing program 4 (id=3059): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f0000000300)="e3ef7f670000ec6789b4241544940000000000000000000000040032a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73080000707468327b5b138dac3264c4d5dd00800000000000005e4cd4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x4c) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) (fail_nth: 2) 1.605187304s ago: executing program 5 (id=3060): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x40200, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x4, 0x3, 0xae}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0xb03, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x656e2001}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7db7eef0}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x124}, 0x1, 0x0, 0x0, 0x240460d5}, 0x20000000) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000002c0)={0x1, 0x6}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000300)={0x0, 0xffffffff, 0x4, 0x1}) (async) r1 = openat$nci(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) read$nci(r1, &(0x7f0000000740)=""/219, 0xdb) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x4, 0x3, {{0x4e, 0x4, 0x2, 0x1a, 0x138, 0x65, 0x0, 0xfb, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x52, 0x3, 0x0, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xb}, {@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7fffffff}, {@local, 0x8}, {@loopback, 0xd}]}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x2, [{@empty, 0x5}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x5}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @rr={0x7, 0xb, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x23, 0xb, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @rand_addr=0x64010102, @broadcast, @private=0xa010102, @private=0xa010100, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x34, 0xfb, 0x1, 0x7, [{@broadcast, 0x2}, {@private=0xa010100, 0x401}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@empty, 0x2}, {@remote, 0x1000}]}, @rr={0x7, 0x1f, 0x9a, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @multicast1, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x12, 0x3, [{0x6, 0xc, "b41a5b52a89c476a0c35"}]}, @cipso={0x86, 0x14, 0x1, [{0x2, 0xe, "662fe25197fffac5e3a94d6f"}]}, @lsrr={0x83, 0x13, 0x3d, [@empty, @empty, @rand_addr=0x64010102, @multicast2]}, @end]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000a80)={0x1, 0x4, 0x1, 0x3, @vifc_lcl_ifindex=r2, @loopback}, 0x10) (async) ioctl$FIOCLEX(r1, 0x5451) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000ac0)={0x33, @multicast1, 0x4e21, 0x2, 'nq\x00', 0x2d, 0x80000000, 0x1b}, 0x2c) (async) set_mempolicy(0x2, &(0x7f0000000b00)=0x6, 0xcbe) (async) syz_usb_connect(0x0, 0x28b, &(0x7f0000000b40)={{0x12, 0x1, 0x110, 0x19, 0x35, 0x4d, 0x20, 0x3f0, 0xa31d, 0x5815, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x279, 0x1, 0x3, 0x7, 0x20, 0xd, "", [{{0x9, 0x4, 0x87, 0x1, 0x4, 0xff, 0x6, 0x13, 0xfd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x7, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0x9}, @acm={0x4}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0xff, 0xa}}, {{0x9, 0x5, 0x5, 0x10, 0x1ff, 0x1, 0x40, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @generic={0x13, 0x6, "c854147a81a5c386ce34629c334e3d112f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb4, 0x1, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x35, 0x9}, @generic={0x86, 0x5, "ccafe854a5ed6ece412a73a65516cece0891682350a4573e41839bbe2a5ee7cf53b9040ba9384da5ead5a4170f5df4c6a0b9fefe2f01a13a54e12676248c7c88bf5a934b9e8a6d9c288bc29101d261541f036e5dedfecccc0bca7015e0e16af1626900f9e0387b77e132e667e2b418674caea4b27abc6d7510fad68afc9bea8fe7f0cc4b"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x1, 0x99, 0x7, [@generic={0xfa, 0x21, "966686dd4d745dc9c03aadcc97af5a6386819e594ef3f2dd142aac0511a29bd30dde21bf2b7e41159bed1902f675010e83f88f503c06509bed0651d35c0680b744d5cdab1e30c22cc7716901c278429b3028e74c42834d3a096d394bca93c9e72e2a82461c73e5bbfbb8d7f2934318fa3371b2f9b2f47e18b4771448d2bc20bf23c6f98dabc754a4b168b3531508a86a1126ca6b775aeef00fdb195448b200e9b1540424cee2278c3f5330299f0e819bfde2f04c6abd80d27e0693be10f88893a5c5017cf472688b5d630761059a05f29410deb03803f4bee939126033367066b11bdc96fbf2447f14653fbe10f5f9d0164c9f8a8e7167c1"}, @generic={0x64, 0x21, "fc12f104bc2a8668998322909e0ee863c1b36e402d6c823954ed9124dac39f0976594685376a609895ef3793d3260512aed9a5c81217766c0a3908df9cd61e2f80969b8ec407bfb55f526fbbd9fa4b503e275d5e5e9a81f395922a1f9020a11ad1ee"}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x40, 0x48, 0x3, 0xf7, 0x2}, 0x10c, &(0x7f0000000e40)={0x5, 0xf, 0x10c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x10, 0x8001}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x3ff, 0xf00, 0x7, [0x3f00, 0x30, 0xff000f, 0xff3fcf, 0x0]}, @generic={0x3, 0x10, 0x3}, @generic={0x46, 0x10, 0xb, "5261eebd1e4e5e7cf2fe9c6302df7ab508f880c200cb0e6112f2a729efae65e868afd65e8a995e4913d054a5ebc9119c4669735f479c528c41121a1ec8e9a7726b0e42"}, @generic={0x91, 0x10, 0xa, "f06c361e42bd8b0f7be2b7c405abd2bc64422e425ec1cfeb84289c6f47910d282b9b3f3a23f95c8c6127763d50f233d66f2102288ee0edc0b819ee332fca0de338811d9d8bb578f0d3692676fbd29caba3a8eebe5279fac3b55efd7d708885a3709f7204bb1faa94cf8e24bbc41f605d2fcb4e327311e7e8ef59c21cff264eeed3164f24075deb9dfa7a375d862a"}]}, 0x1, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x40c}}]}) (async) sendto(r0, &(0x7f0000001000)="1471129262ebd7427441f39544520a26bb054c669010d1acc43d1582bbcb674dee3a225b064aea8263e34fdb70646728c066e7dcbaa2fd725711a9bf9a16e6651329c0c61c9f203c0fa676f4450514d3ba5009d0ac3b624375", 0x59, 0x40804, &(0x7f0000001080)=@caif=@dgm={0x25, 0x6, 0x21}, 0x80) (async) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000001100)={'veth1\x00', @ifru_addrs=@phonet={0x23, 0x5, 0x57, 0xf7}}) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001140)='team_slave_0\x00', 0x10) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0xdb, 0x6}}}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0xfb, 0x0, 0x5, 0x0, 0xdf}, 0x5, &(0x7f0000001200)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x820}}, {0xef, &(0x7f0000001300)=@string={0xef, 0x3, "55cf9af82b8ddc876e021b7d5e5143f99d74620d2b801ce6d7df81c7eef7400a20bd03bd68abe44ac49623ad694eea1d556e05e0ed47c1a8496897d21a04a461a7618d743e4af738f7da4145a31e1828160fe3f88d58cbf6c5d2a1598ad228bd376a7fa93b628d5e187c28722d21cd76156ca33fb47fbd940ac6c13aceb6164ae4752aa7f7d6972fa716d160cc7a9ad9adce1ec47af694d2a4cd00a8f939e0541c390deca4286fdea530e9077466e61998f27495cbc767193074fc6323bd5a5d0f674d7a1418c5bd641a44574656004f60df1f41f3929cef099be86e16293fe5d4f21adaf538b864406be8edee"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x17}}, {0xc5, &(0x7f0000001440)=@string={0xc5, 0x3, "b5223c763b1c9243e28d233f506b3d3ea3ef48774fa318ae2e1ebf0d5b2fee71e4a6e474b7d74e1e156038e2053dcc3b5ed11af16ac8fb7e2e9f152ce311e78baaf16840f068c43d22320db090583802e15f04a5d3e586e809914ede40546e64e435c7364cf39f034d11fbdaa65ca993a2d5f99aaef53d773fa8119258d967f8154dbdd80c8b846aca89c8d9004b292766f61658e8673c1cdbca47fd0c8a908ce1d35e1bc219455deb13ce128ec1337008d7747fd71dedc02ed2e84f7363627f6e11d0"}}]}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000015c0), 0x4) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x5, &(0x7f0000003640)={0x2, 0x3, 0x7, 0x6, r3}) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003680)={0x0, 0x80}, &(0x7f00000036c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003700)={r4, 0x1, 0x40}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd2d, 0x25dfdbfb, {0x7, r2}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x20005010}, 0x800) (async) setxattr$incfs_metadata(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880), &(0x7f00000038c0)="1450721153b0e6706b18945c2e3f41f428137f7b1f464f11c1a1842ff5847d73e3972c02ea9421ad37dc4b4efbfb35377a9f36a3c79536fce285f82d38e2b109c0", 0x41, 0x1) (async) syz_open_dev$video(&(0x7f0000003940), 0xfffffffb, 0x0) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000003980)={0x1, 0x0, [{0x40000000, 0xfffffff8, 0x2, 0x5, 0x3, 0x9, 0x702}]}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000039c0)=""/1, &(0x7f0000003a00)=0x1) 1.38537539s ago: executing program 4 (id=3061): socket$igmp(0x2, 0x3, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0xdfb, 0x4, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x234, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x204, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1002}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x100}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x188, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x51}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x85}]}, {0xffffffffffffff60, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd0}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff5f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10003}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2d4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x0, 0x9, 0x777}]}}]}, 0x234}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x7, "4611a1299139"}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x503b, 0x264e80) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f00000000c0)={0x1, 0x1, 0xd607, 0xc293, 0x28d7, 0xc6}) 1.074398266s ago: executing program 4 (id=3062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\00000000 l\\calhost\n', 0x24) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8800, &(0x7f0000000000)={0x0, 0x0, 0x100000, {r4}}, 0x20) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') (async) openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) (async) write(r2, &(0x7f0000000d00)='nf ::7.0.0.1 2\\00000000 l\\calhost\n', 0x24) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x3000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8800, &(0x7f0000000000)={0x0, 0x0, 0x100000, {r4}}, 0x20) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) (async) 982.682175ms ago: executing program 7 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10, 0x20000041}}], 0x1, 0xc004) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) 690.904016ms ago: executing program 7 (id=3064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r2 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffeff, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) (async) write$binfmt_register(r2, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffeff, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) (async) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0xd8, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xa8, 0x2, [@TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x7}, {0x7, 0x6, 0x4, 0xe17}}}, @TCF_EM_CANID={0x14, 0x4, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xe}, {{0xe, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x87b}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x7}, {0xffff, 0x5, 0x2, "152317305a"}}}]}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) fcntl$dupfd(r0, 0x0, r0) (async) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000001680)="b9ef8212ba17f604599f3722f428456aab0fb0d3c5b3d018585ea897898ca1e79823c19094fc06b997daacddd3d180c019eb6f161f9958d8d6fbf584389ead2c68b39d0b300b59d32b55a6e30d28c23883a5788366553ae9e2c1eb5203f2517b51e78014fd48a0e52748b1eae38841cac670d250b53474927b66c0ab92bcd654d1441dac91524adb3166ca60cf14a60f2797c9c176c1315d9a97f4a511da42387c8fd86f6adfddc6012da81e87837eade167f991b8fa67352a62d0baca8be64087360badd566cd1bc5e45f40571f3d44b1fac4fc5bbcc806cd05b42a39894aff60a3c3f84f105585b191110d51be1604cf9b5ec068c5e278222c31326b40f904b4644fd85c67b0ebe612f95a091b4b579df9cdbca6721aa73eb2f26cf2ab5f3eaefbfa13bcbd926a0bc499a0a7385795cd6ec661bb0e017a8371e131e7017ea391cc47b251b27973973076b7388d142449e980d7ece71fc7b1dfd85af078f4f227b8e7d0e455097381c346c43b32c415ec394a5bc5813b40e3a1f127443f0bf225225152a0f3ee9de0346daacccfec4168d6b75a6ae512465047d745d8e8596d6fc87cbddd81da947054645d89daadceca24b681a875c41a1a3888f64dd46198ce87b57b8819bcd23a5e5c05d62bf9b3f039276db26ec29f202921ed175d0c7cfac7315bc743eff2656881a4020e91b7aed33ff20f0a57ae782f0bb104edbe7400e7cab3d5da4b02b63f0be4fc1ffb71381905b68eeb7d2c7c6863235ab85797316818746bf96cea69980bb53bb5de6072d57a10e28123e015e5f1cbc469446b93f21099e9bea9d4b957396852fe868b1e43bc98ff92d6ce711532e5cb5fb5ce14cbfc3aeee2ec7866e902cd8236e3a002d78cac84b56e61d2295acf51dd1a5c39adcade57cb3ad31b907ec5f9c50024de943970ebf9ccc598d5b8a64879fc55f506e2e766c3b93e9bf72be46d9b20dd13e84be312176abd565ba6674fda55feb64a39b4ca495aec63cb236c7e8f9e2808a0d76ab0fdac3738fb09eec2ac80cbf70de6b8c0fd49f405eb8af001be6d3414c388a71cf8a18989590e927f44470d468643a9d1edd158db214d9334829b9fdbf97983ad3d10766487fad570e25f82a744c7db1c5c074310dca8bb4298fc0991f565733033ff39f01dc3443e86b43e0335cec9203706d47226f24289da6d1306f1b3785fcb37cb00ea8aa4a84c023bf06d1c18ffb07ebde06a6f3c0116b652c7e187a2ac098a2a2b5855f478e274919bfdeb486a161f7a266cca0208a872e7cb000f85ec5945bd44fcc166c7776992f125478a22656d63f50f8df0335c9e453f75ddcece858b6a1e73511c5d628e4896fbb830391b8beb809c1fe19913f0423700a6fe3505893d8d55f267ac8981c44a59f3785e9f9a8c6ba5a5d6beafeee8a2af68519dd3439a3cdd3062d85a2cddfc91806529f78d11deeeb7976c2c131232fd08eb1e9607eb9064179b67961b6a269175019c690f4ad4c18dd00169954fbcceb27a49dffc286d32c9c0194e14f6d0c3512cb71f2564a271c2c553d03d62124327ddd477e67f037dd7f730474f6dfbd1a48953aacded0b0ccf86c3a4bd3b54f624ab047dddfa25448ecaf458aee7bae055f39b19f3f3c3360e91a95642e667160dcdca8df7345f18378e6b4c1306dadb99f944962dff157d6514644e0387d6adbe461df933de7928f5584fe82ab2103bb0ccb0bafef1542041d3524002901f22a73ce5a87d5d15da6b71beb37029f002dffeca6fd8a4cd0c1beb2dadad605884c9df712a643362244bed50bb04e3ef8496ce145712df9167c29dfdf9373fc54874927d94b5e36d84550772c22ac95c6cb2d23579826bb6b3d1952a06be230bfefc25ff48a14745deb04f7d81348d5da287737793d30213f723ca7f868328b9596b6d2459a9afbeb103410a9ade84e955ecf9cba5cfc2a051110c7acce72b67745452c66321327405e23f692226657f1cd140070cc1eed7ceffd062f0623fdd205486279b52e310867b4c175e95451c35df2d05d061695b525ac069d85f19f78d54f8c47b612ee99f210d606689f3f5f2c6bdf79cb61449e865f66f053af29498dd5cd63be52949aa15b9b5c6d29d8d0b6a12520522a4c9e0dc7419319b3b290087cc57102d1ca18f72e263973f9e869f0fec44de8e5a42ef147f4aee004359cc5265549fc23053e28320ff8b41cd3a7d79aeae087f357f8d66ef1b620561ca036be7d8beb710c1a91b7d1eacca097cfe765ac499d50dedeab46ffe6c6ad63cc5f42546bb2d0fe04359fc24ab6380b93abf9465b16a879e7648706d1eac1182f2410b90d2915f26b8ec79a295360ebcdc76f1bbd5aef5f401d6e3a8fe72e33331961b2004342e20a08e181f76e632022e4c0ba64c00f555d24cce1d54c1a7884413b4a5eb5065e7324a8b08b8465aeb9c16a8a392696d3ab826e5b11da2dde9199dcb3bd597db58d7b2594e1dedf5d3ea8c7975ca2ea860583bbe10f8ad39b39ad9349f493a82bc016e48c02c377517c3f9cc62850f429a06a3d630661e154b44e62ce577bd07833748646875a1117f099903205291165194b6d560011c61f0e2ba5e562c669510ebfe25a38b8cf563a9013557b163841cdc95482acc0d238d46dee78429cc383139d8042a0350595bd394087c599abf77a2e057f55ceb28c82ecd3c281a95d80cf37dbb3397e7097d34c57684133e4813f74d177f61b9410cb902753a5d1df4d4a4515465dd8ccf86bba50eaff3064725446b0e9fa29fa08c6e9c706550fcbea658145769fbd9aafd753ede5a74adf0b6f93ec457efe4adcf3feedd0cc4c5de721cf88f07d88321fabb5aa5d7fcc36ea957a81449b05ccb152770b315c8ae3f2fdba5531da63eca6f93c8de0500b395d417c1d72120452f026cbcbe48c4b4f8e2bb14033db95914071102dec99c8b06efe82db76aa36735a95d666f3e057cdbc0664d6c9c339eaa6d5af40d6379d03075ed5f17573ec7b6f5eb75584584cd04148ebff8df6a6a93c39c3323c612830e2746b822f32a47a926ad38e9a83e8aeea1fac3e0e3372a26a642dd7c44a850146673e3981e38f9b20ce91c9d353b23fff12e756cc44a6a36408213c70e0f6a0ade881450c1d0b4c9957ae0ebc9dd03e78b7f4090b9022359db4b020222d0d89b34efc98175160c5b9d3e81cfb1ebd4d4a9a372e15a8efda18a4530aab2babab9e04900a18d7abcb65390d77aa90c2ae40f3870c88b30e35ffa6233170015be03127caac2a8de4dc70e83476dca55659bc81fa2ca90677b31cc19146050b131efb108a0c521df97432da5dc3db46077e4dea1417cd458993b1f35d6dc396daedd33fc255e64496d5244468f94579dfb8c31e4351f448fb4df7aeeb7d8de54c7680ab765ef5efe7fb5d7aac9199b8419064670ab2197943cc6b2bfb1583c3a55db8258d023e100981a0860a034a8ab3e600065998724aa2d5d5b0e1f734e98c040db8777a038d16ef87c1e6a97f0db479c43b68d3e541129109d2a835c44649c7a8a6bd736eca52bec88a8872b1db7a8e48fb2abfc185c1f8a8f62b506e2ef34e8ccf6bbf14213d0095a8cba6b08d0ae8e5e319d667e1a4a4272f89e866db05350287a460f6b2bd170cd97d39867fdd4655b26d313be81894b3c4d61a1e177461c9406e4fab974154a70bbf62025158fa40ba997a89ea40192ff874ab43a77ce213c86b68b2d3124af6390e9eca5e7acdeb8d8504204a213dce50c2595940a33d0a4f3bb57408abfb74b36ac009c924daa231fbaa3a9b81287c7da8992b5268b08ef732715c4ffc9e523182fef5eb8151641d0c56c5780aa0675fd6d04ad79dbb34e5f7cf0c5eb612248d16664f81c9dd4cf9a7f570aa3643195b04130aa73ea6fe2fcd980699bba50bdd6132c9bcf523e754d4bbb6d17cbd12e6525ccd36dcc0f58724ac935120e2c74ab00ea4106ef261641637f3cac4a108b6d54c87a73da8d1772825e3633e4dfbc52e468647098dfd0690a00128e84acbbd09af5683f98095525a74829cbdd268abd1c138db64cefbf06e83e89b716a08fa166a9dadfcf70ed0c4a25225a5b5422d601f4c0655cdd59ac4e42bc11911e1196a7e90163eabe5a639bf8205269225f2d79efeafaa5fbf047bd4cbebbbb8bd05f97fdb1cd81ffb3c4e4db8241fb3f2ca4173df32d0b69aa30effb6e5d3ae91bfaf5695d0d954912662f2ab6c4d2ee4c0591c4a2a9060c97847fc07f7acbdb1100a945b9c084a88c348add558a593cdb5ec9dcb5c37a30e08e1d7014a5616d106f2e4f66f0aad59745712dbb0632d432ce99cd7711cecc74f1f96e74636f6a3a931f4e830246caad8ee19c50aaa4c72ff60544a4c20f1e44a4b1d6706043810a40ae29cc01eb224ba8a0f7a53d7a0c5543fbb7ad112427bb0022c0a549566c883fc4fe03c19e18e67bf82a5259c0702d4a0c6e79896e2da28b72c9406c9dcd4dc15d6fa514b68558a0bbb96d8d815eb6e42f0fe6d5c946e42d77597aa99da66fc1cf5b6731163a01d44177c1d4062b46c780bc1241728da94b6c838084d3fac7775952b5c14e47ef61bc1d2d920d9d7904e69a5109eb4e2162a933cccaa0b8fb729a26cfd57aaa0053dbc04a3e311611bd0046d7076ba8c746d834956811201664f17f0340cc69a407a3e26fdd8b84863f5f8d087c06eca65cb2c8ad650ca8d2a0d3474753c51c2cf1e2bf5ad585b83ca1f8176b20d715652ce5ec3fb5dc3a777126afb88e32f21b1d241b712bb001571d6c4af81f3f606f96630d0f700fa8727a0fcf257a207d9905c957d2b476ca18882a0505f2e8b5594afa34d79c694cde811387e15416869f24eaa9fd244c5a1f3129c1e03df386ef62a1ce47f13a3c2f50da984e7ede1e6c8c76a12457cf27648bd55c12b321d640ea13cb2ed77495cdad715a9ce1b15f9af4708fdedbd8f6d1c96c19b7119fa8f33ea3782ebeb11e3420ede7fd3bc745b2bd5bc98536ec00e57562852175d06af1bda0997b05ca0276a8bbb21459071e6dab225a7691a83ec52ea2e4ac0fa9779a94031140a9c7a77e7ba8bc9a9ec51953d586698c805459", 0xe10, 0x800, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x4bfb, 0x0) r9 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0xce8e0b004e016d14, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000400)=0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000000080)=0x9) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$uac2(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac3(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 346.562711ms ago: executing program 2 (id=3065): unshare(0x68040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1e, 0x3, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 0s ago: executing program 4 (id=3066): read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080003"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0x0, r0, {0x7, 0x2d, 0x100, 0x7fffffffc0080000, 0x1, 0xa, 0x9, 0x2, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) kernel console output (not intermixed with test programs): ] usb 3-1: device descriptor read/8, error -71 [ 810.219365][ T971] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 810.239810][ T971] usb 6-1: device descriptor read/8, error -71 [ 810.320101][ T9918] usb usb3-port1: unable to enumerate USB device [ 810.499095][ T971] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 810.520992][ T971] usb 6-1: device descriptor read/8, error -71 [ 810.629488][ T971] usb usb6-port1: unable to enumerate USB device [ 810.963403][T17034] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 811.764300][ T971] logitech-hidpp-device 0005:046D:B012.003A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 811.930945][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 811.969431][ T5684] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 812.005840][T17046] fido_id[17046]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 812.123688][ T5684] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 812.124921][ T5684] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 812.124970][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.124998][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.125020][ T5684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 812.137816][T17058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2753'. [ 812.162600][ T5684] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 812.162636][ T5684] usb 2-1: Manufacturer: syz [ 812.222515][ T5684] usb 2-1: config 0 descriptor?? [ 812.497906][T17050] macvlan0: entered promiscuous mode [ 812.497925][T17050] macvlan0: entered allmulticast mode [ 812.498691][T17050] bond5: entered promiscuous mode [ 812.522180][T17050] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 812.571597][T17050] bond5: left promiscuous mode [ 812.776362][T17075] syzkaller1: entered promiscuous mode [ 812.776390][T17075] syzkaller1: entered allmulticast mode [ 812.896283][ T5684] usbhid 2-1:0.0: can't add hid device: -71 [ 812.896403][ T5684] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 812.906355][ T5684] usb 2-1: USB disconnect, device number 61 [ 812.922527][ T971] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 812.999152][T14608] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 813.018030][T17078] loop9: detected capacity change from 0 to 524287999 [ 813.105529][ T971] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 813.127808][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.127835][ T971] usb 5-1: Product: syz [ 813.127845][ T971] usb 5-1: Manufacturer: syz [ 813.127854][ T971] usb 5-1: SerialNumber: syz [ 813.146661][ T971] usb 5-1: config 0 descriptor?? [ 813.160417][T14608] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 813.161928][T14608] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 813.161978][T14608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.169701][T14608] usb 8-1: config 0 descriptor?? [ 813.205071][T17076] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 813.638531][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2759'. [ 813.704274][T17076] veth1_to_team: entered promiscuous mode [ 813.735358][T17076] veth1_to_team: left promiscuous mode [ 813.737453][T14608] hid_parser_main: 5 callbacks suppressed [ 813.737479][T14608] hid-corsair-void 0003:1B1C:0A31.003B: unknown main item tag 0x4 [ 813.737510][T14608] hid-corsair-void 0003:1B1C:0A31.003B: unknown main item tag 0x0 [ 813.737538][T14608] hid-corsair-void 0003:1B1C:0A31.003B: reserved main item tag 0xd [ 813.737671][T14608] hid-corsair-void 0003:1B1C:0A31.003B: ignoring exceeding usage max [ 813.818423][T14608] hid-corsair-void 0003:1B1C:0A31.003B: hidraw0: USB HID v9.62 Device [HID 1b1c:0a31] on usb-dummy_hcd.7-1/input0 [ 813.838170][T17088] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2763'. [ 814.203869][ T5715] hid-corsair-void 0003:1B1C:0A31.003B: failed to request battery (reason: -71) [ 814.204179][ T9918] usb 8-1: USB disconnect, device number 18 [ 814.205616][T14608] hid-corsair-void 0003:1B1C:0A31.003B: failed to request firmware (reason: -71) [ 814.439824][ T971] usb 5-1: Firmware version (0.0) predates our first public release. [ 814.439848][ T971] usb 5-1: Please update to version 0.2 or newer [ 814.993945][T12965] IPVS: starting estimator thread 0... [ 814.996522][T17102] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:5376 [ 815.079101][T17105] IPVS: using max 24 ests per chain, 57600 per kthread [ 815.410197][ T5715] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 815.562863][ T5715] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.564962][ T5715] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.564991][ T5715] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.565012][ T5715] usb 8-1: config 1 has no interface number 0 [ 815.565056][ T5715] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.565085][ T5715] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 815.565118][ T5715] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.568822][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.568851][ T5715] usb 8-1: Product: syz [ 815.569241][ T5715] usb 8-1: Manufacturer: syz [ 815.569260][ T5715] usb 8-1: SerialNumber: syz [ 815.694473][ T5684] usb 5-1: USB disconnect, device number 89 [ 815.740004][ T9918] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 815.766309][T17121] trusted_key: encrypted_key: insufficient parameters specified [ 815.829989][T17107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.831156][T17107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.898973][ T9918] usb 6-1: Using ep0 maxpacket: 8 [ 815.904452][ T9918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 815.904507][ T9918] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 815.905683][ T9918] usb 6-1: config 6 has an invalid interface number: 54 but max is 0 [ 815.905707][ T9918] usb 6-1: config 6 has no interface number 0 [ 815.905755][ T9918] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 815.905782][ T9918] usb 6-1: config 6 interface 54 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 815.905816][ T9918] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 815.905842][ T9918] usb 6-1: config 6 interface 54 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 815.905865][ T9918] usb 6-1: config 6 interface 54 has no altsetting 0 [ 815.972724][ T9918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.972754][ T9918] usb 6-1: Product: syz [ 815.972768][ T9918] usb 6-1: Manufacturer: syz [ 815.972783][ T9918] usb 6-1: SerialNumber: syz [ 816.036580][T17115] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 816.052861][T17127] autofs4:pid:17127:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 816.073560][ T5715] cdc_ncm 8-1:1.1: bind() failure [ 816.087467][ T5715] usb 8-1: USB disconnect, device number 19 [ 816.346934][ T9918] comedi comedi5: Endpoint has wrong direction [ 816.346961][ T9918] dt9812 6-1:6.54: driver 'dt9812' failed to auto-configure device. [ 816.359062][ T5684] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 816.381780][ T9918] usb 6-1: USB disconnect, device number 17 [ 816.509584][ T5684] usb 5-1: Using ep0 maxpacket: 32 [ 816.517139][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 816.517198][ T5684] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 816.525121][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.525175][ T5684] usb 5-1: Product: syz [ 816.525190][ T5684] usb 5-1: Manufacturer: syz [ 816.525203][ T5684] usb 5-1: SerialNumber: syz [ 816.621479][ T5715] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 816.712189][T17138] netlink: 79 bytes leftover after parsing attributes in process `syz.7.2777'. [ 816.717785][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2777'. [ 816.720190][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.769168][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 816.769847][ T5715] usb 3-1: New USB device found, idVendor=19d2, idProduct=0065, bcdDevice=d4.64 [ 816.772370][ T5715] usb 3-1: config 100 has an invalid interface number: 173 but max is 2 [ 816.772388][ T5715] usb 3-1: config 100 has an invalid interface number: 52 but max is 2 [ 816.772401][ T5715] usb 3-1: config 100 has an invalid descriptor of length 212, skipping remainder of the config [ 816.772413][ T5715] usb 3-1: config 100 has 2 interfaces, different from the descriptor's value: 3 [ 816.772426][ T5715] usb 3-1: config 100 has no interface number 0 [ 816.772436][ T5715] usb 3-1: config 100 has no interface number 1 [ 816.772512][ T5715] usb 3-1: config 100 interface 52 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 816.772530][ T5715] usb 3-1: config 100 interface 173 has no altsetting 0 [ 816.772541][ T5715] usb 3-1: config 100 interface 52 has no altsetting 0 [ 816.774834][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.774851][ T5715] usb 3-1: Product: syz [ 816.774859][ T5715] usb 3-1: Manufacturer: syz [ 816.774868][ T5715] usb 3-1: SerialNumber: syz [ 816.793761][ T5684] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 816.975937][ T5684] usb 5-1: USB disconnect, device number 90 [ 817.067429][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.115534][T17136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2776'. [ 817.162161][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 817.272306][ T9918] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 817.377309][T17156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.390398][T17156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.419003][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 817.420948][ T9918] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 817.422224][T17149] deleting an unspecified loop device is not supported. [ 817.422376][ T9918] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 817.425192][ T9918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.425218][ T9918] usb 2-1: Product: syz [ 817.425233][ T9918] usb 2-1: Manufacturer: syz [ 817.425247][ T9918] usb 2-1: SerialNumber: syz [ 817.428655][ T9918] usb 2-1: config 0 descriptor?? [ 817.488424][ T9918] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 817.503701][ T9918] dvb-usb: bulk message failed: -22 (2/0) [ 817.529936][ T9918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.530705][ T9918] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 817.530774][ T9918] usb 2-1: media controller created [ 817.563371][T17153] syzkaller0: entered promiscuous mode [ 817.563398][T17153] syzkaller0: entered allmulticast mode [ 817.568132][ T9918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.606507][ T9918] usb 2-1: selecting invalid altsetting 7 [ 817.606531][ T9918] cxusb: set interface failed [ 817.606544][ T9918] dvb-usb: bulk message failed: -22 (1/0) [ 817.642885][ T971] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 817.670004][ T9918] DVB: Unable to find symbol lgdt330x_attach() [ 817.670022][ T9918] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 817.758959][ T9918] rc_core: IR keymap rc-dvico-portable not found [ 817.758984][ T9918] Registered IR keymap rc-empty [ 817.760775][ T9918] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 817.763820][ T9918] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input101 [ 817.805132][ T9918] dvb-usb: schedule remote query interval to 100 msecs. [ 817.805159][ T9918] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 817.808979][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 817.825536][ T971] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 817.854552][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.854584][ T971] usb 5-1: Product: syz [ 817.854600][ T971] usb 5-1: Manufacturer: syz [ 817.854615][ T971] usb 5-1: SerialNumber: syz [ 817.872882][ T971] usb 5-1: config 0 descriptor?? [ 817.901638][ T971] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 817.910233][ T9918] dvb-usb: bulk message failed: -22 (1/0) [ 818.019636][ T9918] dvb-usb: bulk message failed: -22 (1/0) [ 818.129271][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 818.239587][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 818.349974][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 818.401352][ T971] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 818.459008][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 818.584752][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 818.704827][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 818.814244][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 818.927527][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.039101][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.177646][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.308962][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 819.448999][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 819.562094][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.623974][ T5715] option 3-1:100.173: GSM modem (1-port) converter detected [ 819.636058][ T5715] usb 3-1: No union descriptors [ 819.669198][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.674379][ T5715] usb 3-1: USB disconnect, device number 67 [ 819.679837][ T5715] option 3-1:100.173: device disconnected [ 819.780313][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.899374][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 819.984772][T17186] binder: 17185:17186 ioctl c018620c 80000000 returned -1 [ 820.014479][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.139162][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.249420][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.370321][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.390583][ T5708] usb 5-1: USB disconnect, device number 91 [ 820.489477][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.599182][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.719243][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.839615][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 820.906256][ T5708] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 820.949320][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 821.059192][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 821.110437][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 821.148719][ T5708] usb 3-1: not running at top speed; connect to a high speed hub [ 821.148746][ T5708] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 821.156440][ T5708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.158382][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 821.158404][ T5708] usb 3-1: Product: syz [ 821.158419][ T5708] usb 3-1: Manufacturer: syz [ 821.158432][ T5708] usb 3-1: SerialNumber: syz [ 821.161409][ T5708] usb 3-1: config 0 descriptor?? [ 821.185578][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 821.299092][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.419208][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.540289][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.645478][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.759354][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.869257][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 821.990932][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.099205][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.219202][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.330742][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.442240][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.549285][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.659081][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.769134][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.888127][ T971] dvb-usb: bulk message failed: -22 (1/0) [ 822.999784][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 823.098320][ T5684] usb 2-1: USB disconnect, device number 62 [ 823.099163][T15864] dvb-usb: bulk message failed: -22 (1/0) [ 823.161331][ T5708] usb 3-1: USB disconnect, device number 68 [ 823.333588][ T5684] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 823.407453][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.407972][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.441465][T17203] loop9: detected capacity change from 0 to 7 [ 823.451073][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.451152][ C1] buffer_io_error: 11 callbacks suppressed [ 823.451181][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.451414][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.451493][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.451646][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.451708][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.453456][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.453517][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.453676][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.453766][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.453920][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.453979][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.454107][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.454166][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.454205][T17203] ldm_validate_partition_table(): Disk read failed. [ 823.454311][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.454370][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.454522][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.454581][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.454676][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 823.454735][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 823.454928][T17203] Dev loop9: unable to read RDB block 0 [ 823.455572][T17203] loop9: unable to read partition table [ 823.455801][T17203] loop9: partition table beyond EOD, truncated [ 823.460561][T17203] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 823.568169][T17210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.570938][T17210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.622086][T17207] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 823.653320][T15864] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 823.710416][T17197] bond8: (slave dummy0): Releasing backup interface [ 823.729743][T17203] loop9: detected capacity change from 7 to 0 [ 823.812608][T17197] bond0: (slave bond_slave_0): Releasing backup interface [ 823.864287][T17197] bond0: (slave bond_slave_1): Releasing backup interface [ 823.909418][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'. [ 823.932083][T12965] IPVS: starting estimator thread 0... [ 823.933296][T17197] team0: Port device team_slave_0 removed [ 823.955416][T17197] team0: Port device team_slave_1 removed [ 823.956216][T17197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.956251][T17197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.980795][T17197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 824.020634][T17221] IPVS: using max 27 ests per chain, 64800 per kthread [ 824.021935][T17207] team0: Port device dummy0 added [ 824.150065][T17223] IPVS: Unknown mcast interface: dvmrp0 [ 824.449089][ T5684] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 824.601769][ T5684] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.613235][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.613262][ T5684] usb 2-1: Product: syz [ 824.613276][ T5684] usb 2-1: Manufacturer: syz [ 824.613289][ T5684] usb 2-1: SerialNumber: syz [ 825.019076][T15864] usb 8-1: device descriptor read/64, error -71 [ 825.038695][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 825.038766][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 825.139101][ T5708] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 825.269219][T15864] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 825.291301][ T5708] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 825.292906][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 825.292952][ T5708] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 825.292978][ T5708] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 825.293029][ T5708] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.293050][ T5708] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.293090][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.305628][T17235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 825.317923][ T5708] ims_pcu 5-1:1.0: Max IN packet size is too small (0) [ 825.319629][ T5708] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -22 [ 825.460947][T15864] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 825.467318][T15864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.467351][T15864] usb 8-1: Product: syz [ 825.467367][T15864] usb 8-1: Manufacturer: syz [ 825.467381][T15864] usb 8-1: SerialNumber: syz [ 825.524110][T15864] usb 8-1: config 0 descriptor?? [ 825.526911][ T5708] usb 5-1: USB disconnect, device number 92 [ 825.700800][T17239] binder: 17238:17239 ioctl c0306201 80000180 returned -14 [ 825.738438][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 825.738506][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 825.739482][ T5684] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 825.753298][ T5684] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 825.762290][ T5684] usb 2-1: USB disconnect, device number 63 [ 825.869129][ T5715] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 826.020856][ T5715] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 826.021418][ T5715] usb 6-1: config 0 has no interfaces? [ 826.023813][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.023839][ T5715] usb 6-1: Product: syz [ 826.023855][ T5715] usb 6-1: Manufacturer: syz [ 826.023868][ T5715] usb 6-1: SerialNumber: syz [ 826.045957][ T5715] usb 6-1: config 0 descriptor?? [ 826.473824][T17259] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2803'. [ 826.527889][T17243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.528828][T17260] bridge0: port 4(erspan0) entered blocking state [ 826.529775][T17260] bridge0: port 4(erspan0) entered disabled state [ 826.529972][T17260] erspan0: entered allmulticast mode [ 826.540885][T17260] erspan0: entered promiscuous mode [ 826.543306][ T971] usb 6-1: USB disconnect, device number 18 [ 826.581812][T15864] usb 8-1: Firmware version (0.0) predates our first public release. [ 826.581843][T15864] usb 8-1: Please update to version 0.2 or newer [ 826.721298][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 826.783677][T17266] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2806'. [ 826.837063][T15864] usb 8-1: USB disconnect, device number 21 [ 826.881728][T17269] netlink: 'syz.2.2806': attribute type 3 has an invalid length. [ 827.176215][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'. [ 827.838642][T17289] fuse: Invalid rootmode [ 828.279916][ T5670] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 828.437055][ T5670] usb 2-1: Using ep0 maxpacket: 16 [ 828.438127][ T5670] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 828.467240][ T5670] usb 2-1: config 3 has too many interfaces: 137, using maximum allowed: 32 [ 828.467275][ T5670] usb 2-1: config 3 has an invalid descriptor of length 166, skipping remainder of the config [ 828.467297][ T5670] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 137 [ 828.467340][ T5670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.660347][T17314] loop2: detected capacity change from 0 to 7 [ 828.661099][T17314] Dev loop2: unable to read RDB block 7 [ 828.661127][T17314] loop2: unable to read partition table [ 828.661312][T17314] loop2: partition table beyond EOD, truncated [ 828.661324][T17314] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 828.771997][ T5670] usb 2-1: string descriptor 0 read error: -71 [ 828.780645][ T5670] usb 2-1: USB disconnect, device number 64 [ 829.169067][ T5715] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 829.303760][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 829.327599][ T5715] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 829.328835][ T5715] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 829.347805][ T5715] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 829.362131][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.362162][ T5715] usb 8-1: Product: syz [ 829.362178][ T5715] usb 8-1: Manufacturer: syz [ 829.362193][ T5715] usb 8-1: SerialNumber: syz [ 829.396233][ T5715] etas_es58x 8-1:1.0: Starting syz syz (Serial Number syz) [ 829.434042][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 829.613544][ T5715] etas_es58x 8-1:1.0: could not retrieve the product info string [ 829.680029][ T5715] usb 8-1: USB disconnect, device number 22 [ 829.684379][ T5715] etas_es58x 8-1:1.0: Disconnecting syz syz [ 830.160548][ T5670] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 830.331940][ T5670] usb 2-1: Using ep0 maxpacket: 16 [ 830.340805][ T5670] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 830.373984][ T5670] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 830.374018][ T5670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.374038][ T5670] usb 2-1: config 0 has no interface number 0 [ 830.389056][T15864] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 830.413421][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.413452][ T5670] usb 2-1: Product: syz [ 830.413468][ T5670] usb 2-1: Manufacturer: syz [ 830.413483][ T5670] usb 2-1: SerialNumber: syz [ 830.445322][ T5670] usb 2-1: config 0 descriptor?? [ 830.543473][T15864] usb 5-1: not running at top speed; connect to a high speed hub [ 830.543522][T15864] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 830.545564][T15864] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 830.572219][T15864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.572275][T15864] usb 5-1: Product: syz [ 830.572289][T15864] usb 5-1: Manufacturer: syz [ 830.572302][T15864] usb 5-1: SerialNumber: syz [ 830.704987][ T5670] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 830.705038][ T5670] uvcvideo 2-1:0.105: No valid video chain found. [ 830.866322][T17368] loop2: detected capacity change from 0 to 7 [ 830.866998][T17368] Dev loop2: unable to read RDB block 7 [ 830.867027][T17368] loop2: unable to read partition table [ 830.867157][T17368] loop2: partition table beyond EOD, truncated [ 830.867176][T17368] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 830.885825][T15864] usb 5-1: USB disconnect, device number 93 [ 831.378737][T17374] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2832'. [ 831.530210][ T5670] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 831.680371][ T5670] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 831.690065][ T5670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.690092][ T5670] usb 6-1: Product: syz [ 831.690107][ T5670] usb 6-1: Manufacturer: syz [ 831.690120][ T5670] usb 6-1: SerialNumber: syz [ 831.716723][ T5670] usb 6-1: config 0 descriptor?? [ 831.732628][ T5670] upd78f0730 6-1:0.0: upd78f0730 converter detected [ 831.743451][ T5670] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 831.931667][T17372] netlink: 90 bytes leftover after parsing attributes in process `syz.5.2831'. [ 831.933698][ T5708] usb 6-1: USB disconnect, device number 19 [ 831.960638][ T5708] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 831.968601][ T5708] upd78f0730 6-1:0.0: device disconnected [ 832.110088][T17383] vivid-004: ================= START STATUS ================= [ 832.110164][T17383] vivid-004: Radio HW Seek Mode: Bounded [ 832.110190][T17383] vivid-004: Radio Programmable HW Seek: false [ 832.110210][T17383] vivid-004: RDS Rx I/O Mode: Block I/O [ 832.110230][T17383] vivid-004: Generate RBDS Instead of RDS: false [ 832.110250][T17383] vivid-004: RDS Reception: true [ 832.110269][T17383] vivid-004: RDS Program Type: 0 inactive [ 832.110295][T17383] vivid-004: RDS PS Name: inactive [ 832.110319][T17383] vivid-004: RDS Radio Text: inactive [ 832.110343][T17383] vivid-004: RDS Traffic Announcement: false inactive [ 832.110368][T17383] vivid-004: RDS Traffic Program: false inactive [ 832.110393][T17383] vivid-004: RDS Music: false inactive [ 832.110417][T17383] vivid-004: ================== END STATUS ================== [ 832.305218][T17385] netlink: 'syz.7.2835': attribute type 1 has an invalid length. [ 832.529142][T15864] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 832.680930][T15864] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 832.694473][T15864] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 832.694519][T15864] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 832.694544][T15864] usb 3-1: config 1 interface 0 has no altsetting 0 [ 832.707781][T15864] usb 3-1: string descriptor 0 read error: -22 [ 832.707923][T15864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.916558][ T5670] usb 2-1: USB disconnect, device number 65 [ 832.949037][ T5708] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 833.119888][ T5708] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 833.120958][ T5708] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.120987][ T5708] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.121011][ T5708] usb 6-1: config 0 interface 0 has no altsetting 0 [ 833.121042][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.152144][ T5715] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 833.183115][ T5708] usb 6-1: config 0 descriptor?? [ 833.299056][ T5715] usb 5-1: device descriptor read/64, error -71 [ 833.392449][T17398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2840'. [ 833.539262][ T5715] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 833.679063][ T5715] usb 5-1: device descriptor read/64, error -71 [ 833.792380][ T5715] usb usb5-port1: attempt power cycle [ 833.861035][ T5708] hid (null): invalid report_size 1221535620 [ 833.880036][ T5708] hid-multitouch 0003:0EEF:72C4.003C: collection stack underflow [ 833.880073][ T5708] hid-multitouch 0003:0EEF:72C4.003C: item 0 4 0 12 parsing failed [ 833.881129][ T5708] hid-multitouch 0003:0EEF:72C4.003C: probe with driver hid-multitouch failed with error -22 [ 833.935109][T15864] usbhid 3-1:1.0: can't add hid device: -71 [ 833.935225][T15864] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 833.960429][T15864] usb 3-1: USB disconnect, device number 69 [ 834.051035][T17404] loop2: detected capacity change from 0 to 7 [ 834.052336][T17404] Dev loop2: unable to read RDB block 7 [ 834.052365][T17404] loop2: unable to read partition table [ 834.052515][T17404] loop2: partition table beyond EOD, truncated [ 834.052527][T17404] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 834.149034][ T5715] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 834.169950][ T5715] usb 5-1: device descriptor read/8, error -71 [ 834.420756][ T5715] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 834.440027][ T5715] usb 5-1: device descriptor read/8, error -71 [ 834.443747][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 834.443770][T17408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.550977][ T5715] usb usb5-port1: unable to enumerate USB device [ 835.088188][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2848'. [ 835.716222][ T9918] usb 6-1: USB disconnect, device number 20 [ 836.204341][T17438] loop2: detected capacity change from 0 to 7 [ 836.205535][T17438] Dev loop2: unable to read RDB block 7 [ 836.205581][T17438] loop2: unable to read partition table [ 836.207021][T17438] loop2: partition table beyond EOD, truncated [ 836.207038][T17438] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 836.210654][ T9918] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 836.360569][ T9918] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 836.361761][ T9918] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 836.361794][ T9918] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 836.361821][ T9918] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.361847][ T9918] usb 6-1: config 0 interface 0 has no altsetting 0 [ 836.361882][ T9918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.363995][ T9918] usb 6-1: config 0 descriptor?? [ 836.364555][T17434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 837.998254][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.199895][ T31] audit: type=1326 audit(1789922277.281:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.202706][ T31] audit: type=1326 audit(1789922277.281:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.202763][ T31] audit: type=1326 audit(1789922277.281:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.202838][ T31] audit: type=1326 audit(1789922277.281:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.202884][ T31] audit: type=1326 audit(1789922277.281:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.202960][ T31] audit: type=1326 audit(1789922277.281:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.203019][ T31] audit: type=1326 audit(1789922277.281:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.207698][ T31] audit: type=1326 audit(1789922277.281:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.207775][ T31] audit: type=1326 audit(1789922277.281:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.207803][ T31] audit: type=1326 audit(1789922277.281:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17451 comm="syz.2.2856" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 838.920379][ T9918] usbhid 6-1:0.0: can't add hid device: -71 [ 838.920466][ T9918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 838.923296][ T9918] usb 6-1: USB disconnect, device number 21 [ 839.661058][T17478] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2863'. [ 839.900844][T17480] kAFS: unable to lookup cell '' [ 839.905958][T17480] kAFS: unable to lookup cell '(,c' [ 840.060336][T17480] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2862'. [ 840.104334][T17483] loop2: detected capacity change from 0 to 7 [ 840.122661][T17483] Dev loop2: unable to read RDB block 7 [ 840.122693][T17483] loop2: unable to read partition table [ 840.122830][T17483] loop2: partition table beyond EOD, truncated [ 840.122843][T17483] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 840.450400][T17488] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 840.524650][T17487] netlink: 'syz.7.2865': attribute type 2 has an invalid length. [ 840.846900][T17493] syzkaller1: entered promiscuous mode [ 840.846927][T17493] syzkaller1: entered allmulticast mode [ 841.059728][ T5670] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 841.120721][ T9918] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 841.168694][T17503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2867'. [ 841.168714][T17503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2867'. [ 841.210264][ T5670] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 841.211525][ T5670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.211542][ T5670] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 841.211573][ T5670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.222773][ T5670] usb 5-1: config 0 descriptor?? [ 841.253254][ T5670] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 841.253302][ T5670] dvb-usb: bulk message failed: -22 (3/0) [ 841.281555][ T5670] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 841.284937][ T5670] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 841.284973][ T5670] usb 5-1: media controller created [ 841.286589][ T9918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 841.287048][ T9918] usb 2-1: not running at top speed; connect to a high speed hub [ 841.287069][ T9918] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a34, bcdDevice=48.37 [ 841.290535][ T5670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.292366][ T9918] usb 2-1: config 5 has an invalid interface number: 83 but max is 0 [ 841.292390][ T9918] usb 2-1: config 5 has an invalid descriptor of length 185, skipping remainder of the config [ 841.292408][ T9918] usb 2-1: config 5 has no interface number 0 [ 841.292436][ T9918] usb 2-1: config 5 interface 83 has no altsetting 0 [ 841.328549][ T9918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.328574][ T9918] usb 2-1: Product: syz [ 841.328588][ T9918] usb 2-1: Manufacturer: syz [ 841.328601][ T9918] usb 2-1: SerialNumber: syz [ 841.453657][ T5670] dvb-usb: bulk message failed: -22 (6/0) [ 841.453721][ T5670] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 841.501873][ T5670] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input102 [ 841.530870][ T5670] dvb-usb: schedule remote query interval to 150 msecs. [ 841.530908][ T5670] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 841.691329][ T5670] dvb-usb: bulk message failed: -22 (1/0) [ 841.691364][ T5670] dvb-usb: error while querying for an remote control event. [ 841.717008][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2874'. [ 841.747450][ T9918] rndis_host 2-1:5.83: skipping garbage [ 841.747476][ T9918] rndis_host 2-1:5.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 841.797196][ T9918] usb 2-1: USB disconnect, device number 66 [ 841.849273][ T5670] dvb-usb: bulk message failed: -22 (1/0) [ 841.849310][ T5670] dvb-usb: error while querying for an remote control event. [ 841.877761][ T5670] usb 5-1: USB disconnect, device number 98 [ 842.000608][ T5670] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 842.030041][T11617] wlan0: Trigger new scan to find an IBSS to join [ 842.033520][T17517] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2875'. [ 842.033936][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 842.079932][T17517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 842.079954][T17517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 842.080032][T17517] vhci_hcd vhci_hcd.0: Device attached [ 842.175161][T17521] loop2: detected capacity change from 0 to 7 [ 842.180693][T17521] Dev loop2: unable to read RDB block 7 [ 842.180737][T17521] loop2: unable to read partition table [ 842.180964][T17521] loop2: partition table beyond EOD, truncated [ 842.180981][T17521] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 842.220357][T17518] vhci_hcd: connection closed [ 842.221131][T11617] vhci_hcd vhci_hcd.2: stop threads [ 842.221159][T11617] vhci_hcd vhci_hcd.2: release socket [ 842.221198][T11617] vhci_hcd vhci_hcd.2: disconnect device [ 842.259119][ T9918] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 842.356886][T17523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.809016][ T5715] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 842.961308][ T5715] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 842.962045][ T5715] usb 8-1: config 0 has no interfaces? [ 842.967844][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.967874][ T5715] usb 8-1: Product: syz [ 842.967889][ T5715] usb 8-1: Manufacturer: syz [ 842.967904][ T5715] usb 8-1: SerialNumber: syz [ 843.015584][ T5715] usb 8-1: config 0 descriptor?? [ 843.234034][T17547] usb usb8: usbfs: process 17547 (syz.5.2885) did not claim interface 0 before use [ 843.359432][ T9918] usb 8-1: USB disconnect, device number 23 [ 843.455645][T17554] loop2: detected capacity change from 0 to 7 [ 843.473632][T17554] Dev loop2: unable to read RDB block 7 [ 843.473664][T17554] loop2: unable to read partition table [ 843.473824][T17554] loop2: partition table beyond EOD, truncated [ 843.473851][T17554] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 843.931416][ T5670] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 844.048189][T17571] program syz.7.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.087927][ T5670] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 844.093932][ T5670] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.093980][ T5670] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.094000][ T5670] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 844.094021][ T5670] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.094061][ T5670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.565689][T17565] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 844.566536][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2895'. [ 845.071816][ T101] wlan0: Trigger new scan to find an IBSS to join [ 845.177307][T17601] loop2: detected capacity change from 0 to 7 [ 845.181770][T17601] Dev loop2: unable to read RDB block 7 [ 845.181814][T17601] loop2: unable to read partition table [ 845.182087][T17601] loop2: partition table beyond EOD, truncated [ 845.182121][T17601] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 845.393404][T17610] netlink: 'syz.7.2902': attribute type 1 has an invalid length. [ 845.452249][T17610] bond1: entered promiscuous mode [ 845.452735][T17610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.482457][T17611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.482790][T17611] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 845.482805][T17611] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 845.486956][T17611] bond1: (slave ip6gre1): making interface the new active one [ 845.486977][T17611] ip6gre1: entered promiscuous mode [ 845.488488][T17611] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 846.023067][T17631] program syz.5.2904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.412500][T17649] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 846.495292][T17655] netlink: 'syz.1.2911': attribute type 2 has an invalid length. [ 846.646258][T17658] loop2: detected capacity change from 0 to 7 [ 846.648196][T17658] Dev loop2: unable to read RDB block 7 [ 846.648225][T17658] loop2: unable to read partition table [ 846.648406][T17658] loop2: partition table beyond EOD, truncated [ 846.648437][T17658] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 846.896824][ T5670] usb 5-1: USB disconnect, device number 99 [ 847.088016][T17672] program syz.5.2917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.327281][T17682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.345251][T17682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.399582][ T5670] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 847.489013][ T9918] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 847.523335][T17690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.528515][T17690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.543912][T17690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.551714][T17690] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.565359][ T5670] usb 2-1: Using ep0 maxpacket: 8 [ 847.566334][T17690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 847.566649][ T5670] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 847.569929][ T5715] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 847.608199][ T5670] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 847.623300][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.623331][ T5670] usb 2-1: Product: syz [ 847.623347][ T5670] usb 2-1: Manufacturer: syz [ 847.623362][ T5670] usb 2-1: SerialNumber: syz [ 847.629782][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.661193][ T5670] usb 2-1: config 0 descriptor?? [ 847.663031][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.663515][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.667149][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.688813][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 847.702668][ T9918] usb 5-1: Using ep0 maxpacket: 32 [ 847.704554][ T5670] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 847.724881][ T5715] usb 6-1: device descriptor read/64, error -71 [ 847.736592][ T9918] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 847.752330][ T9918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.752430][ T9918] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 847.752458][ T9918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 847.797287][ T9918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.797348][ T9918] usb 5-1: Product: syz [ 847.797364][ T9918] usb 5-1: Manufacturer: syz [ 847.797380][ T9918] usb 5-1: SerialNumber: syz [ 847.829906][ T9918] usb 5-1: config 0 descriptor?? [ 847.852064][ T9918] gs_usb 5-1:0.0: Required endpoints not found [ 847.959680][ T5715] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 848.032212][ T6547] wlan0: Trigger new scan to find an IBSS to join [ 848.089407][ T5715] usb 6-1: device descriptor read/64, error -71 [ 848.202757][ T5715] usb usb6-port1: attempt power cycle [ 848.292296][T17694] loop2: detected capacity change from 0 to 7 [ 848.293415][T17694] Dev loop2: unable to read RDB block 7 [ 848.293463][T17694] loop2: unable to read partition table [ 848.293760][T17694] loop2: partition table beyond EOD, truncated [ 848.293818][T17694] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 848.444061][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.445605][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.447842][ T6547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.539479][ T5715] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 848.581338][ T5715] usb 6-1: device descriptor read/8, error -71 [ 848.584293][ T6547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.663064][ T6547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.759017][T15864] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 848.819730][ T5715] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 848.842673][ T5715] usb 6-1: device descriptor read/8, error -71 [ 848.882959][T17692] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.883156][T17692] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.883303][T17692] bridge_slave_0: entered allmulticast mode [ 848.885863][T17692] bridge_slave_0: entered promiscuous mode [ 848.889589][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.889756][T17692] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.890163][T17692] bridge_slave_1: entered allmulticast mode [ 848.892025][T17692] bridge_slave_1: entered promiscuous mode [ 848.942289][T17692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.946061][T17692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.959514][ T5715] usb usb6-port1: unable to enumerate USB device [ 848.969707][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.977353][T15864] usb 8-1: unable to get BOS descriptor or descriptor too short [ 848.986032][T15864] usb 8-1: not running at top speed; connect to a high speed hub [ 848.986072][T15864] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 848.988104][T15864] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 849.004114][T17692] team0: Port device team_slave_0 added [ 849.012703][T17692] team0: Port device team_slave_1 added [ 849.034066][T15864] usb 8-1: string descriptor 0 read error: -22 [ 849.034260][T15864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.068310][T15864] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 849.068338][T15864] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 849.068523][T15864] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 849.068544][T15864] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 849.126903][T17692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.126924][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.126952][T17692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.131279][T17692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.131296][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.131319][T17692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.292197][T15864] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 849.292230][T15864] usb 8-1: found format II with max.bitrate = 0, frame size=7 [ 849.292513][T15864] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 849.292561][T15864] usb 8-1: found format II with max.bitrate = 0, frame size=7 [ 849.435461][T17692] hsr_slave_0: entered promiscuous mode [ 849.445615][T17692] hsr_slave_1: entered promiscuous mode [ 849.447501][T17692] debugfs: 'hsr0' already exists in 'hsr' [ 849.447525][T17692] Cannot create hsr debugfs directory [ 849.467570][ T6547] erspan0: left allmulticast mode [ 849.467598][ T6547] erspan0: left promiscuous mode [ 849.467880][ T6547] bridge0: port 4(erspan0) entered disabled state [ 849.487153][ T6547] dummy0: left allmulticast mode [ 849.487385][ T6547] bridge0: port 3(dummy0) entered disabled state [ 849.514297][ T6547] bridge_slave_1: left allmulticast mode [ 849.514327][ T6547] bridge_slave_1: left promiscuous mode [ 849.514552][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.543829][ T6547] bridge_slave_0: left allmulticast mode [ 849.543859][ T6547] bridge_slave_0: left promiscuous mode [ 849.544082][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.547269][T15864] usb 8-1: USB disconnect, device number 24 [ 849.628242][ T6547] pim6reg: left allmulticast mode [ 849.792679][ T5618] Bluetooth: hci5: command tx timeout [ 850.019883][ T6547] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 850.198308][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2926'. [ 850.198346][T17723] netlink: 'syz.7.2926': attribute type 10 has an invalid length. [ 850.198366][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2926'. [ 850.232181][ T6547] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 850.283381][ T6547] bond3 (unregistering): (slave bridge1): Releasing active interface [ 850.283408][ T6547] bond3 (unregistering): (slave bridge1): the permanent HWaddr of slave - 8a:5c:ba:62:e6:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 850.283441][ T6547] bond0 (unregistering): entered promiscuous mode [ 850.283456][ T6547] bond_slave_0: entered promiscuous mode [ 850.283706][ T6547] bond_slave_1: entered promiscuous mode [ 850.368478][ T9918] usb 5-1: USB disconnect, device number 100 [ 850.487220][ T6547] bond3 (unregistering): (slave bond0): Releasing active interface [ 850.487253][ T6547] bond0 (unregistering): left promiscuous mode [ 850.487298][ T6547] bond_slave_0: left promiscuous mode [ 850.487590][ T6547] bond_slave_1: left promiscuous mode [ 850.498382][T15864] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 850.541318][ T6547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.565128][ T6547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.580791][ T6547] bond0 (unregistering): Released all slaves [ 850.618425][ T6547] bond1 (unregistering): Released all slaves [ 850.655700][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 850.655728][ T31] audit: type=1326 audit(1789922289.731:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.656285][ T31] audit: type=1326 audit(1789922289.731:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 850.658299][ T31] audit: type=1326 audit(1789922289.731:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.658562][ T31] audit: type=1326 audit(1789922289.731:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.689731][ T31] audit: type=1326 audit(1789922289.741:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.689839][ T31] audit: type=1326 audit(1789922289.741:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.690686][T15864] usb 8-1: Using ep0 maxpacket: 16 [ 850.716175][ T6547] bond2 (unregistering): Released all slaves [ 850.717168][T15864] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 850.768030][T15864] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 850.768065][T15864] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.768086][T15864] usb 8-1: config 0 has no interface number 0 [ 850.768248][T15864] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 850.768275][T15864] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 850.768299][T15864] usb 8-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.821419][ T31] audit: type=1326 audit(1789922289.871:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.879879][ T31] audit: type=1326 audit(1789922289.941:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.891014][ T6547] bond3 (unregistering): Released all slaves [ 850.936793][ T6547] bond4 (unregistering): Released all slaves [ 850.944747][T14608] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 850.953750][ T9918] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 850.954111][T15864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.954134][T15864] usb 8-1: Product: syz [ 850.954149][T15864] usb 8-1: Manufacturer: syz [ 850.954164][T15864] usb 8-1: SerialNumber: syz [ 850.954330][ T31] audit: type=1326 audit(1789922290.031:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 850.960619][ T31] audit: type=1326 audit(1789922290.031:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17728 comm="syz.5.2928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 851.058642][T15864] usb 8-1: config 0 descriptor?? [ 851.070948][T15864] cypress_m8 8-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 851.099113][T15864] nokiaca42v2 ttyUSB0: required endpoint is missing [ 851.107216][ T6547] bond5 (unregistering): Released all slaves [ 851.109378][T14608] usb 6-1: Using ep0 maxpacket: 8 [ 851.113034][T14608] usb 6-1: unable to get BOS descriptor or descriptor too short [ 851.113082][T14608] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 851.116030][T14608] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 203, changing to 7 [ 851.125290][T14608] usb 6-1: string descriptor 0 read error: -22 [ 851.125438][T14608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.164267][ T5670] gspca_zc3xx: reg_r err -110 [ 851.178969][ T9918] usb 5-1: Using ep0 maxpacket: 16 [ 851.179762][ T9918] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 851.181130][ T9918] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 851.181157][ T9918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.181177][ T9918] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 851.181198][ T9918] usb 5-1: config 1 has no interface number 1 [ 851.181285][ T9918] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.181315][ T9918] usb 5-1: config 1 interface 105 has no altsetting 0 [ 851.185963][ T9918] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 851.185990][ T9918] usb 5-1: Product: syz [ 851.186006][ T9918] usb 5-1: Manufacturer: syz [ 851.186021][ T9918] usb 5-1: SerialNumber: syz [ 851.353114][T17723] geneve2: entered promiscuous mode [ 851.353302][T17723] geneve2: entered allmulticast mode [ 851.413880][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 851.462748][T15864] usb 8-1: USB disconnect, device number 25 [ 851.478018][T15864] cypress_m8 8-1:0.35: device disconnected [ 851.535007][T17729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2928'. [ 851.672621][ T6547] tipc: Disabling bearer [ 851.672796][ T6547] tipc: Disabling bearer [ 851.672961][ T6547] tipc: Left network mode [ 851.749040][ T5670] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 851.749137][ T5670] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 851.755514][ T5670] usb 2-1: USB disconnect, device number 67 [ 851.872905][ T5618] Bluetooth: hci5: command tx timeout [ 852.492287][T15864] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 852.675777][T15864] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 852.697222][T15864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 852.697255][T15864] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 852.736409][T15864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.736441][T15864] usb 2-1: Product: syz [ 852.736481][T15864] usb 2-1: Manufacturer: syz [ 852.736496][T15864] usb 2-1: SerialNumber: syz [ 852.776045][T17726] vivid-000: ================= START STATUS ================= [ 852.776068][T17726] vivid-000: Generate PTS: true [ 852.776092][T17726] vivid-000: Generate SCR: true [ 852.776114][T17726] tpg source WxH: 720x576 (Y'CbCr) [ 852.776127][T17726] tpg field: 2 [ 852.776165][T17726] tpg crop: (0,0)/720x64 [ 852.776179][T17726] tpg compose: (0,0)/720x8 [ 852.776191][T17726] tpg colorspace: 2 [ 852.776200][T17726] tpg transfer function: 3/0 [ 852.776210][T17726] tpg Y'CbCr encoding: 0/0 [ 852.776220][T17726] tpg quantization: 2/0 [ 852.776230][T17726] tpg RGB range: 0/1 [ 852.776240][T17726] vivid-000: ================== END STATUS ================== [ 852.941453][ T5715] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 852.994412][T15864] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 853.089229][ T5715] usb 8-1: Using ep0 maxpacket: 32 [ 853.092314][ T5715] usb 8-1: unable to get BOS descriptor or descriptor too short [ 853.092370][ T5715] usb 8-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 853.115709][ T5715] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.115826][ T5715] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.125716][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.125741][ T5715] usb 8-1: Product: syz [ 853.125755][ T5715] usb 8-1: Manufacturer: syz [ 853.125807][ T5715] usb 8-1: SerialNumber: syz [ 853.358400][ T5684] usb 2-1: USB disconnect, device number 68 [ 853.437986][ T5684] usblp0: removed [ 853.474792][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 853.479150][ T9918] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 853.520729][ T9918] usb 5-1: USB disconnect, device number 101 [ 853.589810][T17760] program syz.4.2932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.712335][ T6547] hsr_slave_0: left promiscuous mode [ 853.713282][ T6547] hsr_slave_1: left promiscuous mode [ 853.824527][T14608] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 853.824957][T14608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 853.826493][T14608] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 853.949093][ T5618] Bluetooth: hci5: command tx timeout [ 854.004570][T17765] loop2: detected capacity change from 0 to 7 [ 854.007467][T17765] Dev loop2: unable to read RDB block 7 [ 854.007512][T17765] loop2: unable to read partition table [ 854.007745][T17765] loop2: partition table beyond EOD, truncated [ 854.007766][T17765] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 854.107091][T14608] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 854.107672][T14608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.108408][T14608] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 854.164702][ T6547] team0 (unregistering): Port device team_slave_1 removed [ 854.166893][T14608] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 854.167930][ T5715] usb 8-1: USB disconnect, device number 26 [ 854.168326][T14608] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.258546][ T6547] team0 (unregistering): Port device team_slave_0 removed [ 854.382232][T14608] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 854.390013][T11206] udevd[11206]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 854.421071][T14608] usb 6-1: USB disconnect, device number 26 [ 854.765184][ T8691] udevd[8691]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.606361][T17802] program syz.1.2942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.882691][ T6552] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.882795][ T6552] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.882861][ T6552] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.931131][ T6547] IPVS: stop unused estimator thread 0... [ 856.030687][ T5618] Bluetooth: hci5: command tx timeout [ 856.226313][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 856.409284][ T5715] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 856.439375][ T5684] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 856.590206][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 856.592428][ T5684] usb 5-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 856.593735][ T5715] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 856.593967][ T5684] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 856.593990][ T5684] usb 5-1: config 0 has no interface number 0 [ 856.594028][ T5684] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 856.594053][ T5684] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 856.594089][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.596504][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.688589][ T5715] usb 6-1: config 0 descriptor?? [ 856.689281][ T5684] usb 5-1: config 0 descriptor?? [ 856.851993][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 856.924955][ T5684] usb 5-1: USB disconnect, device number 102 [ 856.935509][ T5715] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 856.939720][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.984470][T17692] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 856.999539][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 857.003638][T17692] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 857.027464][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 857.028598][T17692] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 857.054193][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 857.055629][T17692] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 857.080808][T17692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 857.206760][ T5715] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 857.206789][ T5715] [drm] Initialized udl on minor 1 [ 857.346576][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.357638][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.361651][T17692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.436921][T17692] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.463972][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.464104][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.494868][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.494992][T11617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.669843][T17841] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2947'. [ 857.669872][T17841] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2947'. [ 857.809399][T17692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.048699][T17692] veth0_vlan: entered promiscuous mode [ 858.127973][T17692] veth1_vlan: entered promiscuous mode [ 858.163542][T17853] binder: 17851:17853 ioctl c0306201 800003c0 returned -14 [ 858.359995][T17692] veth0_macvtap: entered promiscuous mode [ 858.402925][T17692] veth1_macvtap: entered promiscuous mode [ 858.496294][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2951'. [ 858.585123][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2951'. [ 858.982614][T17884] program syz.7.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.008786][T17692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.306601][T17692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.519050][T15864] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 859.689246][T15864] usb 8-1: Using ep0 maxpacket: 32 [ 859.705002][T15864] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 859.721900][T15864] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 859.721932][T15864] usb 8-1: config 0 has no interface number 0 [ 859.721960][T15864] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 859.721976][T15864] usb 8-1: config 0 interface 196 has no altsetting 0 [ 859.784006][T15864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.784036][T15864] usb 8-1: Product: syz [ 859.784052][T15864] usb 8-1: Manufacturer: syz [ 859.784067][T15864] usb 8-1: SerialNumber: syz [ 859.807627][T15864] usb 8-1: config 0 descriptor?? [ 859.816235][T17900] syz_tun: entered allmulticast mode [ 859.826048][T17887] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 860.152309][ T6547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.152356][ T6547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.152388][ T6547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.152442][ T6547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.315377][T12965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.315401][T12965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.437955][ T6547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.437980][ T6547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.592867][T17916] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2923'. [ 860.919377][T15864] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 860.919691][T15864] ipheth 8-1:0.196: probe with driver ipheth failed with error -110 [ 861.013662][ T5684] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 861.159028][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 861.161144][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 861.161197][ T5684] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 861.162295][ T5684] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 861.162312][ T5684] usb 3-1: config 9 has no interface number 0 [ 861.162331][ T5684] usb 3-1: config 9 interface 57 has no altsetting 0 [ 861.164453][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.164470][ T5684] usb 3-1: Product: syz [ 861.164479][ T5684] usb 3-1: Manufacturer: syz [ 861.164488][ T5684] usb 3-1: SerialNumber: syz [ 861.444851][T17928] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2958'. [ 861.467873][ T5684] usbhid 3-1:9.57: couldn't find an input interrupt endpoint [ 861.480920][T17928] fuse: Unknown parameter '184467440737095516150x0000000000000006' [ 861.486008][ T5684] usb 3-1: USB disconnect, device number 70 [ 861.503905][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 861.505471][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 861.919174][T15864] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 862.072167][T15864] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 862.072916][T15864] usb 5-1: config 0 has no interfaces? [ 862.075566][T15864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.075593][T15864] usb 5-1: Product: syz [ 862.075608][T15864] usb 5-1: Manufacturer: syz [ 862.075623][T15864] usb 5-1: SerialNumber: syz [ 862.091977][T15864] usb 5-1: config 0 descriptor?? [ 862.151568][T17936] fuse: Unknown parameter 'al' [ 862.177592][T14608] usb 8-1: USB disconnect, device number 27 [ 862.189989][T17936] syzkaller0: entered promiscuous mode [ 862.190014][T17936] syzkaller0: entered allmulticast mode [ 862.207521][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 862.269764][ T5715] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 862.270246][ T5715] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 862.275462][ T5715] usb 6-1: USB disconnect, device number 27 [ 862.435859][T17938] program syz.7.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.463281][T15864] usb 5-1: USB disconnect, device number 103 [ 862.569084][T17943] sg_write: data in/out 635269/136 bytes for SCSI command 0x0-- guessing data in; [ 862.569084][T17943] program syz.1.2963 not setting count and/or reply_len properly [ 862.569245][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2963'. [ 862.683279][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2966'. [ 862.850036][ T5715] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 862.868971][ T5684] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 862.898639][T17961] wireguard: wg2: Could not create IPv4 socket [ 862.898672][T17961] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 862.999175][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 863.002345][ T5715] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 863.004864][ T5715] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 863.004891][ T5715] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 863.004917][ T5715] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 863.004933][ T5715] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 863.004948][ T5715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 863.025101][ T5684] usb 8-1: Invalid ep0 maxpacket: 64 [ 863.025489][ T5715] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 863.025506][ T5715] usb 6-1: Product: syz [ 863.025516][ T5715] usb 6-1: Manufacturer: syz [ 863.025532][ T5715] usb 6-1: SerialNumber: syz [ 863.115381][ T5715] usb 6-1: config 0 descriptor?? [ 863.132902][ T5715] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 863.149678][ T5715] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 863.239212][ T5684] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 863.368707][T17971] netlink: 'syz.5.2964': attribute type 21 has an invalid length. [ 863.368726][T17971] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2964'. [ 863.408014][T17971] netlink: 'syz.5.2964': attribute type 5 has an invalid length. [ 863.408032][T17971] netlink: 'syz.5.2964': attribute type 6 has an invalid length. [ 863.408060][T17971] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2964'. [ 863.424860][ T5684] usb 8-1: Invalid ep0 maxpacket: 64 [ 863.434749][T14608] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 863.441459][ T5684] usb usb8-port1: attempt power cycle [ 863.559537][T15864] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 863.591597][T14608] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 863.595815][T14608] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 863.595865][T14608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.710267][T15864] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 863.711076][T15864] usb 5-1: config 0 has no interfaces? [ 863.713916][T15864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.713943][T15864] usb 5-1: Product: syz [ 863.713959][T15864] usb 5-1: Manufacturer: syz [ 863.713974][T15864] usb 5-1: SerialNumber: syz [ 863.732454][T15864] usb 5-1: config 0 descriptor?? [ 863.746233][T17970] bridge3: entered promiscuous mode [ 863.819178][ T5684] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 863.840651][ T5684] usb 8-1: Invalid ep0 maxpacket: 64 [ 863.970208][ T5684] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 863.990245][ T5684] usb 8-1: Invalid ep0 maxpacket: 64 [ 863.990843][T14608] qmi_wwan 3-1:1.0: cdc-wdm1: USB WDM device [ 863.991542][ T5684] usb usb8-port1: unable to enumerate USB device [ 864.048471][T14608] wwan wwan0: port wwan0qmi0 attached [ 864.127944][T15864] usb 6-1: USB disconnect, device number 28 [ 864.138513][T15864] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 864.217972][ T5670] usb 5-1: USB disconnect, device number 104 [ 864.239862][T14608] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 12:63:f2:57:cd:a2 [ 864.437763][T15864] usb 3-1: USB disconnect, device number 71 [ 864.449667][T15864] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 864.524829][T17966] fuse: Bad value for 'group_id' [ 864.524845][T17966] fuse: Bad value for 'group_id' [ 864.583202][T15864] wwan wwan0: port wwan0qmi0 disconnected [ 865.034751][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2970'. [ 865.368224][T18001] netlink: 'syz.2.2973': attribute type 7 has an invalid length. [ 865.368241][T18001] netlink: 'syz.2.2973': attribute type 8 has an invalid length. [ 865.482865][T18001] batadv_slave_0: entered promiscuous mode [ 865.482882][T18001] batadv_slave_0: entered allmulticast mode [ 865.486090][T18001] fuse: Bad value for 'rootmode' [ 865.551175][T17998] netdevsim netdevsim4: Direct firmware load for * [ 865.551175][T17998] failed with error -2 [ 865.551197][T17998] netdevsim netdevsim4: Falling back to sysfs fallback for: * [ 865.551197][T17998] [ 865.997636][T18013] program syz.7.2975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.899211][ T5684] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 867.081596][ T5684] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 867.088585][ T5684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.088623][ T5684] usb 8-1: Product: syz [ 867.088638][ T5684] usb 8-1: Manufacturer: syz [ 867.088653][ T5684] usb 8-1: SerialNumber: syz [ 867.228431][ T5684] usb 8-1: config 0 descriptor?? [ 867.445945][ T5684] usb 8-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 867.445967][ T5684] f81604 8-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 867.445986][ T5684] f81604 8-1:0.0: probe with driver f81604 failed with error -121 [ 867.573504][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2979'. [ 867.890380][ T5684] usb 8-1: USB disconnect, device number 32 [ 867.890542][T18049] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 867.890814][T18049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2980'. [ 868.349280][ T5670] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 868.501219][ T5670] usb 5-1: Using ep0 maxpacket: 16 [ 868.501982][ T5670] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 868.503098][ T5670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.503130][ T5670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 868.503144][ T5670] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.507262][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.507290][ T5670] usb 5-1: Product: syz [ 868.507306][ T5670] usb 5-1: Manufacturer: syz [ 868.507321][ T5670] usb 5-1: SerialNumber: syz [ 868.516925][ T5670] usb 5-1: config 0 descriptor?? [ 868.522219][ T5670] mcba_usb 5-1:0.0: Can't find endpoints [ 869.249025][T14608] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 869.339034][ T5684] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 869.400780][T14608] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.401965][T14608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.401998][T14608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.402020][T14608] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 869.402050][T14608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.404254][T14608] usb 6-1: config 0 descriptor?? [ 869.528983][ T5684] usb 3-1: device descriptor read/64, error -71 [ 869.780197][ T5684] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 869.864200][T14608] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd [ 869.888210][T14608] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 869.908967][ T5684] usb 3-1: device descriptor read/64, error -71 [ 870.019496][ T5684] usb usb3-port1: attempt power cycle [ 870.135083][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.141488][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.275172][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.275250][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.369057][ T5684] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 870.400059][ T5684] usb 3-1: device descriptor read/8, error -71 [ 870.649012][ T5684] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 870.680092][ T5684] usb 3-1: device descriptor read/8, error -71 [ 870.780262][T14608] usb 5-1: USB disconnect, device number 105 [ 870.796925][ T5684] usb usb3-port1: unable to enumerate USB device [ 871.251321][T14608] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 871.358996][ T5684] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 871.409253][T14608] usb 5-1: Using ep0 maxpacket: 8 [ 871.410041][T14608] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 871.411714][T14608] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 871.411770][T14608] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.411794][T14608] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.411818][T14608] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 871.411841][T14608] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.411886][T14608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.718787][T14608] usb 5-1: usb_control_msg returned -32 [ 871.718913][T14608] usbtmc 5-1:16.0: can't read capabilities [ 872.198172][T15864] usb 6-1: USB disconnect, device number 29 [ 872.688593][T18123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.827918][T18148] netlink: zone id is out of range [ 872.827938][T18148] netlink: zone id is out of range [ 873.079392][ T971] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 873.229153][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 873.231928][ T971] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 873.234959][ T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.234981][ T971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.273072][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.273103][ T971] usb 3-1: Product: syz [ 873.273117][ T971] usb 3-1: Manufacturer: syz [ 873.273158][ T971] usb 3-1: SerialNumber: syz [ 874.209152][T15864] usb 5-1: USB disconnect, device number 106 [ 874.607905][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.679303][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.679956][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.680544][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.681905][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.682459][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.683058][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.683580][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.684179][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.684999][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 874.692667][T18159] bridge0: port 3(syz_tun) entered blocking state [ 874.692896][T18159] bridge0: port 3(syz_tun) entered disabled state [ 874.693170][T18159] syz_tun: entered allmulticast mode [ 874.697433][T18159] syz_tun: entered promiscuous mode [ 875.384238][ T971] usb 3-1: unit 6 not found! [ 875.429278][T15864] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 875.540848][ T971] usb 3-1: USB disconnect, device number 76 [ 875.578975][T15864] usb 5-1: Using ep0 maxpacket: 16 [ 875.582957][T15864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 875.583012][T15864] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 875.584127][T15864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.584217][T15864] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 875.592510][T15864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.592541][T15864] usb 5-1: Product: syz [ 875.592557][T15864] usb 5-1: Manufacturer: syz [ 875.592572][T15864] usb 5-1: SerialNumber: syz [ 875.709713][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.711833][T15864] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 876.712316][T15864] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 876.783943][T15864] usb 5-1: USB disconnect, device number 107 [ 876.838017][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.456798][T18217] loop6: detected capacity change from 0 to 2640 [ 878.471631][ T5988] buffer_io_error: 6 callbacks suppressed [ 878.471646][ T5988] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.471992][ T5988] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.472287][ T5988] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.472598][ T5988] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.472946][ T5988] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.733965][ T5670] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 878.890555][ T5670] usb 5-1: not running at top speed; connect to a high speed hub [ 878.890608][ T5670] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.40 [ 878.891603][ T5670] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 878.891635][ T5670] usb 5-1: config 1 interface 0 has no altsetting 0 [ 878.921116][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.921144][ T5670] usb 5-1: Product: ␣볦憢畹뱝㎥ꄏ墇냹닱짬㨘ꌙ歼푗ൊℝ뚦뼇쥢㯪⑺텟譐춾↔琟➬य㑬굷 [ 878.921191][ T5670] usb 5-1: Manufacturer: Ў [ 878.921205][ T5670] usb 5-1: SerialNumber: Ⰺ [ 878.957479][T18220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 881.385418][T18176] syzkaller0: entered promiscuous mode [ 881.385445][T18176] syzkaller0: entered allmulticast mode [ 881.578576][T18220] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 881.648511][ T5670] usbhid 5-1:1.0: can't add hid device: -71 [ 881.648625][ T5670] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 881.675260][ T5670] usb 5-1: USB disconnect, device number 108 [ 881.744975][T18228] loop2: detected capacity change from 0 to 7 [ 881.750464][T18228] Dev loop2: unable to read RDB block 7 [ 881.750508][T18228] loop2: unable to read partition table [ 881.750730][T18228] loop2: partition table beyond EOD, truncated [ 881.750747][T18228] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 881.788222][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 881.788244][ T31] audit: type=1326 audit(1789922320.861:12505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.790655][ T31] audit: type=1326 audit(1789922320.871:12506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.848534][ T31] audit: type=1326 audit(1789922320.921:12507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.848790][ T31] audit: type=1326 audit(1789922320.921:12508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.856376][ T31] audit: type=1326 audit(1789922320.931:12509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.856425][ T31] audit: type=1326 audit(1789922320.931:12510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.856464][ T31] audit: type=1326 audit(1789922320.931:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.868646][ T31] audit: type=1326 audit(1789922320.941:12512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.868695][ T31] audit: type=1326 audit(1789922320.941:12513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 881.888333][ T31] audit: type=1326 audit(1789922320.961:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18223 comm="syz.5.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 882.271531][ T971] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 882.301184][ T5670] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 882.335221][T18238] bond9: entered allmulticast mode [ 882.347016][T18242] macvlan3: entered promiscuous mode [ 882.347040][T18242] macvlan3: entered allmulticast mode [ 882.347775][T18242] bond9: entered promiscuous mode [ 882.348454][T18242] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 882.365761][T18242] bond9: left promiscuous mode [ 882.419743][ T971] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 882.419775][ T971] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 882.420514][ T971] usb 2-1: config 0 has no interfaces? [ 882.420990][ T971] usb 2-1: config 0 has no interfaces? [ 882.421492][ T971] usb 2-1: config 0 has no interfaces? [ 882.421992][ T971] usb 2-1: config 0 has no interfaces? [ 882.422478][ T971] usb 2-1: config 0 has no interfaces? [ 882.422978][ T971] usb 2-1: config 0 has no interfaces? [ 882.423489][ T971] usb 2-1: config 0 has no interfaces? [ 882.424015][ T971] usb 2-1: config 0 has no interfaces? [ 882.425808][ T971] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 882.425823][ T971] usb 2-1: Product: syz [ 882.425833][ T971] usb 2-1: Manufacturer: syz [ 882.425847][ T971] usb 2-1: SerialNumber: syz [ 882.428361][ T971] usb 2-1: config 0 descriptor?? [ 882.460168][ T5670] usb 3-1: Using ep0 maxpacket: 16 [ 882.463612][ T5670] usb 3-1: unable to get BOS descriptor or descriptor too short [ 882.463660][ T5670] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 882.466177][ T5670] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 882.466201][ T5670] usb 3-1: config 9 has no interface number 0 [ 882.466842][ T5670] usb 3-1: config 9 interface 57 has no altsetting 0 [ 882.472034][ T5670] usb 3-1: string descriptor 0 read error: -22 [ 882.472175][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.534893][T15864] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 882.554276][ T5684] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 882.631360][T18247] __nla_validate_parse: 6 callbacks suppressed [ 882.631384][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 882.667352][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 882.679027][T15864] usb 6-1: Using ep0 maxpacket: 16 [ 882.685827][T15864] usb 6-1: unable to get BOS descriptor or descriptor too short [ 882.685879][T15864] usb 6-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice=2e.2c [ 882.699631][T15864] usb 6-1: config 1 has an invalid interface number: 232 but max is 0 [ 882.699659][T15864] usb 6-1: config 1 has no interface number 0 [ 882.699699][T15864] usb 6-1: config 1 interface 232 has no altsetting 0 [ 882.710250][T15864] usb 6-1: New USB device strings: Mfr=139, Product=20, SerialNumber=3 [ 882.710277][T15864] usb 6-1: Product: syz [ 882.710290][T15864] usb 6-1: Manufacturer: syz [ 882.710304][T15864] usb 6-1: SerialNumber: syz [ 882.725995][T18248] netlink: 'syz.1.3025': attribute type 10 has an invalid length. [ 882.756729][ T5684] usb 8-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 882.768080][ T5684] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.768139][ T5684] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 882.768160][ T5684] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 882.768179][ T5684] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.815942][ T5684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.815972][ T5684] usb 8-1: Product: syz [ 882.815989][ T5684] usb 8-1: Manufacturer: syz [ 882.816004][ T5684] usb 8-1: SerialNumber: syz [ 882.826522][T18248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.857582][ T5684] ums-onetouch 8-1:1.0: USB Mass Storage device detected [ 882.869593][T18248] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 882.983495][ T5684] usb 2-1: USB disconnect, device number 69 [ 883.076845][T18260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.077404][T18260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.080567][ T971] usb 8-1: USB disconnect, device number 33 [ 883.192089][T15864] hub 6-1:1.232: bad descriptor, ignoring hub [ 883.192126][T15864] hub 6-1:1.232: probe with driver hub failed with error -5 [ 883.193991][T15864] option 6-1:1.232: GSM modem (1-port) converter detected [ 883.251643][T15864] usb 6-1: USB disconnect, device number 30 [ 883.260390][T15864] option 6-1:1.232: device disconnected [ 883.527122][ T5670] video4linux radio48: keene_cmd_set failed (-71) [ 883.527167][ T5670] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 883.532322][ T5670] usb 3-1: USB disconnect, device number 77 [ 883.816571][T18269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3033'. [ 883.816819][T18269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3033'. [ 883.930074][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3033'. [ 884.352781][T18275] loop2: detected capacity change from 0 to 7 [ 884.372789][ T5670] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 884.375807][T18275] Dev loop2: unable to read RDB block 7 [ 884.375854][T18275] loop2: unable to read partition table [ 884.376730][T18275] loop2: partition table beyond EOD, truncated [ 884.376815][T18275] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 884.521604][T14608] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 884.650530][T14608] usb 6-1: device descriptor read/64, error -71 [ 884.899048][T14608] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 885.030286][T14608] usb 6-1: device descriptor read/64, error -71 [ 885.139781][T14608] usb usb6-port1: attempt power cycle [ 885.479288][T14608] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 885.501290][T14608] usb 6-1: device descriptor read/8, error -71 [ 885.749392][T14608] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 885.769934][T14608] usb 6-1: device descriptor read/8, error -71 [ 885.879763][T14608] usb usb6-port1: unable to enumerate USB device [ 886.028191][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3042'. [ 886.569206][ T971] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 886.731706][ T971] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.736947][ T971] usb 8-1: config 0 has no interfaces? [ 886.736976][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.766988][ T971] usb 8-1: config 0 descriptor?? [ 886.869168][T15864] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 886.932749][ T5670] usb 2-1: unable to get BOS descriptor or descriptor too short [ 886.933484][ T5670] usb 2-1: New USB device found, idVendor=006a, idProduct=0000, bcdDevice= 0.00 [ 886.933510][ T5670] usb 2-1: no configurations [ 886.933518][ T5670] usb 2-1: can't read configurations, error -22 [ 886.998671][T18300] dlm: Unknown command passed to DLM device : 0 [ 886.998671][T18300] [ 887.022431][T18301] netlink: 'syz.1.3046': attribute type 7 has an invalid length. [ 887.022456][T18301] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3046'. [ 887.039722][T18294] kvm: pic: level sensitive irq not supported [ 887.061959][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.062476][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.084816][ T971] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 887.093201][T15864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.112735][T15864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.112773][T15864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.112796][T15864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.112841][T15864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.116127][T15864] usb 3-1: config 0 descriptor?? [ 887.270646][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 887.274331][ T971] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 887.276727][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.306218][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.306859][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.318766][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.326656][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.326685][ T971] usb 5-1: config 0 descriptor?? [ 887.361375][ T971] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 887.420235][ T5684] usb 8-1: USB disconnect, device number 34 [ 887.490151][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.491426][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.618992][T14608] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 887.722514][T18307] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 887.722543][T18307] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 887.722680][T18307] vhci_hcd vhci_hcd.0: Device attached [ 887.724849][T18308] vhci_hcd: connection closed [ 887.725176][T10046] vhci_hcd vhci_hcd.1: stop threads [ 887.725203][T10046] vhci_hcd vhci_hcd.1: release socket [ 887.725223][T10046] vhci_hcd vhci_hcd.1: disconnect device [ 887.789149][T14608] usb 6-1: Using ep0 maxpacket: 8 [ 887.789909][T14608] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 887.790854][T14608] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 887.790907][T14608] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 887.790923][T14608] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 887.790937][T14608] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.790951][T14608] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.790999][T14608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.890670][T15864] input: HID 047f:ffff as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.003E/input/input108 [ 887.916505][T18298] netlink: 'syz.4.3045': attribute type 39 has an invalid length. [ 887.953868][T18298] syz_tun (unregistering): left allmulticast mode [ 888.002423][T15864] plantronics 0003:047F:FFFF.003E: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 888.197996][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.210111][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.229560][T14608] usb 6-1: GET_CAPABILITIES returned 0 [ 888.229614][T14608] usbtmc 6-1:16.0: can't read capabilities [ 888.288020][T15864] usb 3-1: USB disconnect, device number 78 [ 888.799816][T17690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.826668][T17690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.837697][T17690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.868099][T17690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.878624][T17690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.297050][T18335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.318156][T18335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.522595][ T971] gspca_vc032x: reg_r err -32 [ 889.522616][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522628][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522637][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522646][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522652][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522658][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522663][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522669][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522675][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522680][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522686][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522691][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522697][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522703][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522708][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522714][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522719][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522725][ T971] gspca_vc032x: I2c Bus Busy Wait 00 [ 889.522731][ T971] gspca_vc032x: Unknown sensor... [ 889.522779][ T971] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 889.538993][T14608] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 889.690413][T14608] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.693610][T14608] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.693670][T14608] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.697511][ T9049] syz_tun (unregistering): left allmulticast mode [ 889.698178][T14608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.698195][T14608] usb 8-1: Product: syz [ 889.698204][T14608] usb 8-1: Manufacturer: syz [ 889.698213][T14608] usb 8-1: SerialNumber: syz [ 889.721674][ T9049] syz_tun (unregistering): left promiscuous mode [ 889.878158][ T5708] usb 5-1: USB disconnect, device number 109 [ 890.103769][ T6547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.103797][ T6547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 890.292857][ T6547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.292897][ T6547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 890.313051][T18329] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.313187][T18329] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.313408][T18329] bridge_slave_0: entered allmulticast mode [ 890.324553][T18329] bridge_slave_0: entered promiscuous mode [ 890.328411][T18329] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.328581][T18329] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.328736][T18329] bridge_slave_1: entered allmulticast mode [ 890.341640][T18329] bridge_slave_1: entered promiscuous mode [ 890.442925][T17909] usb 6-1: USB disconnect, device number 35 [ 890.445038][T14608] cdc_ncm 8-1:1.0: bind() failure [ 890.515133][T14608] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 890.515165][T14608] cdc_ncm 8-1:1.1: bind() failure [ 890.534494][T14608] usb 8-1: USB disconnect, device number 35 [ 890.711485][T18329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.803948][T18356] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3057'. [ 890.866662][ T6547] bond0: (slave netdevsim1): Releasing backup interface [ 890.872757][ T6547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.872791][ T6547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 890.910531][T18329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.960447][ T5708] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 890.999005][ T5618] Bluetooth: hci2: command tx timeout [ 891.059015][T17909] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 891.059089][T14608] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 891.106022][ T6547] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 891.106074][ T6547] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 891.108372][ T6547] bridge0: port 3(netdevsim0) entered disabled state [ 891.115794][ T5708] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 891.116614][ T5708] usb 6-1: config 0 has no interfaces? [ 891.118817][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.119011][ T5708] usb 6-1: Product: syz [ 891.119025][ T5708] usb 6-1: Manufacturer: syz [ 891.119039][ T5708] usb 6-1: SerialNumber: syz [ 891.122096][ T5708] usb 6-1: config 0 descriptor?? [ 891.212288][T14608] usb 8-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 891.217732][T14608] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.217766][T14608] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.223242][T14608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.223267][T14608] usb 8-1: Product: syz [ 891.223281][T14608] usb 8-1: Manufacturer: syz [ 891.223293][T14608] usb 8-1: SerialNumber: syz [ 891.251670][T14608] usb 8-1: unsupported MDLM descriptors [ 891.252976][T17909] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 891.285635][T17909] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 891.285669][T17909] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 891.285689][T17909] usb 3-1: config 0 has no interface number 0 [ 891.285721][T17909] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 891.303230][T17909] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 891.303267][T17909] usb 3-1: config 0 interface 143 has no altsetting 0 [ 891.360226][T17909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.360257][T17909] usb 3-1: Product: syz [ 891.360271][T17909] usb 3-1: Manufacturer: syz [ 891.360286][T17909] usb 3-1: SerialNumber: syz [ 891.372787][T18329] team0: Port device team_slave_0 added [ 891.391188][T18329] team0: Port device team_slave_1 added [ 891.404910][T17909] usb 3-1: config 0 descriptor?? [ 891.485238][ T5708] usb 8-1: USB disconnect, device number 36 [ 891.535003][T18329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.535018][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.535036][T18329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.557638][T18329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.557657][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.557682][T18329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.640880][T17909] usb 3-1: USB disconnect, device number 79 [ 891.658383][ T5988] udevd[5988]: setting mode of /dev/bus/usb/003/079 to 020664 failed: No such file or directory [ 891.658485][ T5988] udevd[5988]: setting owner of /dev/bus/usb/003/079 to uid=0, gid=0 failed: No such file or directory [ 891.908298][T18329] hsr_slave_0: entered promiscuous mode [ 891.915818][T18329] hsr_slave_1: entered promiscuous mode [ 891.916571][T18329] debugfs: 'hsr0' already exists in 'hsr' [ 891.916591][T18329] Cannot create hsr debugfs directory [ 892.014690][T14545] usb 6-1: USB disconnect, device number 36 [ 892.159386][ T5708] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 892.309668][ T5708] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 892.310716][ T5708] usb 3-1: config index 0 descriptor too short (expected 36, got 27) [ 892.310736][ T5708] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 892.310748][ T5708] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 892.310761][ T5708] usb 3-1: config 0 has no interface number 0 [ 892.310778][ T5708] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 892.310800][ T5708] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 892.310817][ T5708] usb 3-1: config 0 interface 143 has no altsetting 0 [ 892.312791][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.312807][ T5708] usb 3-1: Product: syz [ 892.312816][ T5708] usb 3-1: Manufacturer: syz [ 892.312825][ T5708] usb 3-1: SerialNumber: syz [ 892.326978][ T5708] usb 3-1: config 0 descriptor?? [ 892.480280][ T6547] bridge_slave_1: left allmulticast mode [ 892.480335][ T6547] bridge_slave_1: left promiscuous mode [ 892.482710][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.504820][ T6547] bridge_slave_0: left allmulticast mode [ 892.504847][ T6547] bridge_slave_0: left promiscuous mode [ 892.514263][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.554097][T12956] IPVS: starting estimator thread 0... [ 892.584730][ T6547] pim6reg: left allmulticast mode [ 892.584850][ T6547] dvmrp8: left allmulticast mode [ 892.721536][T18367] IPVS: using max 48 ests per chain, 115200 per kthread [ 892.901058][T18378] FAULT_INJECTION: forcing a failure. [ 892.901058][T18378] name failslab, interval 1, probability 0, space 0, times 0 [ 892.901095][T18378] CPU: 0 UID: 0 PID: 18378 Comm: syz.4.3059 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.901123][T18378] Tainted: [L]=SOFTLOCKUP [ 892.901131][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.901144][T18378] Call Trace: [ 892.901152][T18378] [ 892.901163][T18378] dump_stack_lvl+0xe8/0x150 [ 892.901204][T18378] should_fail_ex+0x410/0x560 [ 892.901237][T18378] should_failslab+0xa8/0x100 [ 892.901267][T18378] __kmalloc_noprof+0xfe/0x720 [ 892.901291][T18378] ? tomoyo_encode+0x2ad/0x570 [ 892.901389][T18378] ? tomoyo_encode+0x2ad/0x570 [ 892.901423][T18378] tomoyo_encode+0x2ad/0x570 [ 892.901454][T18378] tomoyo_realpath_from_path+0x5fa/0x640 [ 892.901492][T18378] ? tomoyo_path_number_perm+0x219/0x5f0 [ 892.901516][T18378] tomoyo_path_number_perm+0x246/0x5f0 [ 892.901542][T18378] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 892.901566][T18378] ? __lock_acquire+0x747/0x2de0 [ 892.901604][T18378] ? hook_file_ioctl_compat+0x1f2/0x600 [ 892.901685][T18378] ? __fget_files+0x2a/0x420 [ 892.901721][T18378] ? __fget_files+0x3a2/0x420 [ 892.901747][T18378] ? __fget_files+0x2a/0x420 [ 892.901780][T18378] security_file_ioctl_compat+0xc3/0x2a0 [ 892.901830][T18378] __ia32_compat_sys_ioctl+0x139/0x950 [ 892.901859][T18378] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 892.901883][T18378] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 892.901912][T18378] ? __fget_files+0x3a2/0x420 [ 892.901955][T18378] ? fput+0xa0/0xd0 [ 892.901983][T18378] ? ksys_write+0x242/0x270 [ 892.902027][T18378] __do_fast_syscall_32+0x27a/0x6a0 [ 892.902053][T18378] ? do_fast_syscall_32+0x33/0x70 [ 892.902076][T18378] ? asm_int80_emulation+0x1a/0x20 [ 892.902098][T18378] ? do_int80_emulation+0x299/0x500 [ 892.902122][T18378] ? trace_irq_disable+0x3b/0x140 [ 892.902150][T18378] do_fast_syscall_32+0x33/0x70 [ 892.902174][T18378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.902199][T18378] RIP: 0023:0xf70cf0ec [ 892.902219][T18378] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 892.902237][T18378] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 892.902261][T18378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 892.902275][T18378] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.902289][T18378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.902301][T18378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.902313][T18378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.902344][T18378] [ 892.943469][T18378] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.943492][T18378] program syz.4.3059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.082470][ T5618] Bluetooth: hci2: command tx timeout [ 893.366734][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.387044][T18394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.387542][T18394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.387679][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.420949][ T5708] bfusb 3-1:0.143: probe with driver bfusb failed with error -5 [ 893.515980][ T5708] usb 3-1: USB disconnect, device number 80 [ 893.629877][T17909] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 893.799213][T17909] usb 6-1: Using ep0 maxpacket: 32 [ 893.800103][T17909] usb 6-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice=58.15 [ 893.801325][T17909] usb 6-1: config 3 has an invalid interface number: 135 but max is 0 [ 893.801353][T17909] usb 6-1: config 3 has no interface number 0 [ 893.801399][T17909] usb 6-1: config 3 interface 135 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 893.801427][T17909] usb 6-1: config 3 interface 135 altsetting 1 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 893.801454][T17909] usb 6-1: config 3 interface 135 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 893.801481][T17909] usb 6-1: config 3 interface 135 altsetting 1 endpoint 0x8C has an invalid bInterval 165, changing to 11 [ 893.801506][T17909] usb 6-1: config 3 interface 135 altsetting 1 endpoint 0x8C has invalid maxpacket 17640, setting to 1024 [ 893.801532][T17909] usb 6-1: config 3 interface 135 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 893.801553][T17909] usb 6-1: config 3 interface 135 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 893.801579][T17909] usb 6-1: config 3 interface 135 has no altsetting 0 [ 893.804552][T17909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.804578][T17909] usb 6-1: Product: syz [ 893.804593][T17909] usb 6-1: Manufacturer: syz [ 893.804608][T17909] usb 6-1: SerialNumber: syz [ 893.956299][T18391] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 893.956456][T18391] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 894.167159][T17909] option 6-1:3.135: GSM modem (1-port) converter detected [ 894.214509][T17909] usb 6-1: USB disconnect, device number 37 [ 894.296248][ T5670] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 894.314128][T17909] option 6-1:3.135: device disconnected [ 894.450976][ T5670] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 894.455910][ T5670] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.455941][ T5670] usb 8-1: Product: syz [ 894.455957][ T5670] usb 8-1: Manufacturer: syz [ 894.455971][ T5670] usb 8-1: SerialNumber: syz [ 894.508306][ T5670] usb 8-1: config 0 descriptor?? [ 894.528617][ T5670] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 894.530093][ T6547] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 894.589276][ T32] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 8 ** replaying previous printk message ** [ 894.589306][ T32] Tainted: G L syzkaller #0 [ 894.589319][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.589330][ T32] task:kworker/1:0 state:D stack:15656 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 894.589394][ T32] Workqueue: usb_hub_wq hub_event [ 894.589509][ T32] Call Trace: [ 894.589518][ T32] [ 894.589532][ T32] __schedule+0x17db/0x58f0 [ 894.589588][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 894.589625][ T32] ? __pfx___schedule+0x10/0x10 [ 894.589666][ T32] ? schedule+0x90/0x2b0 [ 894.589699][ T32] schedule+0x164/0x2b0 [ 894.589733][ T32] schedule_preempt_disabled+0x13/0x30 [ 894.589754][ T32] __mutex_lock+0x7c1/0x1550 [ 894.589783][ T32] ? __mutex_lock+0x5d4/0x1550 [ 894.589809][ T32] ? hub_event+0x20c9/0x4d30 [ 894.589835][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 894.589878][ T32] hub_event+0x20c9/0x4d30 [ 894.589902][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 894.589945][ T32] ? register_lock_class+0x31/0x2e0 [ 894.590002][ T32] ? __pfx_hub_event+0x10/0x10 [ 894.590036][ T32] ? rcu_is_watching+0x16/0xb0 [ 894.590063][ T32] ? process_scheduled_works+0x97a/0x1630 [ 894.590092][ T32] process_scheduled_works+0xc3d/0x1630 [ 894.590155][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 894.590190][ T32] ? assign_work+0x3cf/0x5d0 [ 894.590223][ T32] worker_thread+0xa47/0xfb0 [ 894.590280][ T32] kthread+0x38b/0x480 [ 894.590303][ T32] ? __pfx_worker_thread+0x10/0x10 [ 894.590328][ T32] ? __pfx_kthread+0x10/0x10 [ 894.590359][ T32] ret_from_fork+0x514/0xb70 [ 894.590386][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 894.590434][ T32] ? __switch_to+0xc89/0x1420 [ 894.590465][ T32] ? __pfx_kthread+0x10/0x10 [ 894.590488][ T32] ret_from_fork_asm+0x1a/0x30 [ 894.590538][ T32] [ 894.593131][ T6547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.593550][ T32] [ 894.593550][ T32] Showing all locks held in the system: [ 894.593564][ T32] locks held by kworker/1:0/25: 5, on CPU#1: [ 894.593705][ T32] #0: ffff88801feccd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.594429][ T32] #1: ffffc900001f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.594493][ T32] #2: ffff88802b8031d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 894.594550][ T32] #3: ffff88802b807568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 894.594610][ T32] #4: ffff88802b7b7960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 894.594662][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 894.594713][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 894.594784][ T32] locks held by dhcpcd/5276: 1, on CPU#0: [ 894.594800][ T32] #0: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 894.595507][ T32] locks held by kworker/1:3/5347: 5, on CPU#1: [ 894.595526][ T32] #0: ffff88801feccd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.595583][ T32] #1: ffffc900037afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.595623][ T32] #2: ffff88802b86a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 894.595672][ T32] #3: ffff88802b86e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 894.595721][ T32] #4: ffff88802b7b7960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 894.595758][ T32] locks held by getty/5371: 2, on CPU#1: [ 894.595767][ T32] #0: ffff8880369ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 894.595867][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 894.595912][ T32] locks held by kworker/0:4/5670: 5, on CPU#0: [ 894.595921][ T32] #0: ffff88801feccd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.595963][ T32] #1: ffffc90004adfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.596017][ T32] #2: ffff88802a3e41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 894.596059][ T32] #3: ffff88802ba8a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 894.596132][ T32] #4: ffff88802acf51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 894.596184][ T32] locks held by kworker/0:6/5698: 5, on CPU#0: [ 894.596199][ T32] #0: ffff88801feccd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.596233][ T32] #1: ffffc90004d8fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.596268][ T32] #2: ffff88802b75d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 894.596318][ T32] #3: ffff88802b779568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 894.596369][ T32] #4: ffff88802b596b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 894.596400][ T32] locks held by kworker/u8:10/6547: 5, on CPU#0: [ 894.596409][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.596457][ T32] #1: ffffc90004fe7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.596509][ T32] #2: ffffffff90243928 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 894.598138][ T32] #3: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 894.598176][ T32] #4: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 894.598236][ T32] locks held by udevd/11205: 4, on CPU#1: [ 894.598250][ T32] #0: ffff888031a40cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 894.598287][ T32] #1: ffff888059e88480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 894.598362][ T32] #2: ffff88805dd3dc38 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 894.598418][ T32] #3: ffff88802ba8a1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 894.598470][ T32] locks held by kworker/u8:27/12954: 3, on CPU#1: [ 894.598483][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.598537][ T32] #1: ffffc900044afc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.598584][ T32] #2: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 894.598677][ T32] locks held by kworker/1:2/14545: 3, on CPU#1: [ 894.598692][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.598739][ T32] #1: ffffc9000369fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.598770][ T32] #2: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 894.600582][ T32] locks held by kworker/1:7/14608: 3, on CPU#1: [ 894.600599][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.600651][ T32] #1: ffffc9000384fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.600700][ T32] #2: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 894.600793][ T32] locks held by kworker/0:1/17909: 3, on CPU#0: [ 894.600822][ T32] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.600873][ T32] #1: ffffc90005037c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 894.600921][ T32] #2: ffff88802a2a11d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 894.600966][ T32] locks held by syz-executor/18329: 2, on CPU#1: [ 894.600979][ T32] #0: ffffffff8f9b96a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 894.601031][ T32] #1: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 894.601078][ T32] locks held by syz.7.3064/18409: 1, on CPU#1: [ 894.601091][ T32] #0: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 894.601209][ T32] locks held by syz.7.3064/18410: 1, on CPU#1: [ 894.601223][ T32] #0: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 894.601268][ T32] locks held by syz.7.3064/18411: 1, on CPU#1: [ 894.601281][ T32] #0: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 894.601326][ T32] locks held by syz.2.3065/18414: 1, on CPU#1: [ 894.601339][ T32] #0: ffff88807a0a03b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 894.601393][ T32] locks held by syz.2.3065/18415: 2, on CPU#0: [ 894.601406][ T32] #0: ffffffff90243928 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 894.601449][ T32] #1: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 894.601517][ T32] locks held by syz.2.3065/18417: 1, last CPU#1: [ 894.601530][ T32] #0: ffff88807a0a03b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 894.601578][ T32] locks held by syz.4.3066/18419: 1, on CPU#0: [ 894.601591][ T32] #0: ffffffff90252180 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 894.601668][ T32] [ 894.601674][ T32] ============================================= [ 894.601674][ T32] [ 894.601683][ T32] NMI backtrace for cpu 1 [ 894.601698][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 894.601722][ T32] Tainted: [L]=SOFTLOCKUP [ 894.601729][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.601740][ T32] Call Trace: [ 894.601748][ T32] [ 894.601757][ T32] dump_stack_lvl+0xe8/0x150 [ 894.601785][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 894.601811][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 894.601840][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 894.601868][ T32] sys_info+0x135/0x170 [ 894.601912][ T32] watchdog+0xfd7/0x1030 [ 894.601937][ T32] ? watchdog+0x1c7/0x1030 [ 894.601962][ T32] kthread+0x38b/0x480 [ 894.601980][ T32] ? __pfx_watchdog+0x10/0x10 [ 894.601997][ T32] ? __pfx_kthread+0x10/0x10 [ 894.602016][ T32] ret_from_fork+0x514/0xb70 [ 894.602036][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 894.602063][ T32] ? __switch_to+0xc89/0x1420 [ 894.602090][ T32] ? __pfx_kthread+0x10/0x10 [ 894.602109][ T32] ret_from_fork_asm+0x1a/0x30 [ 894.602149][ T32] [ 894.602157][ T32] Sending NMI from CPU 1 to CPUs 0: [ 894.602181][ C0] NMI backtrace for cpu 0 [ 894.602198][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.602223][ C0] Tainted: [L]=SOFTLOCKUP [ 894.602230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.602241][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 894.602321][ C0] Code: 34 55 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3c 34 c5 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 894.602338][ C0] RSP: 0000:ffffc90000157900 EFLAGS: 00000002 [ 894.602356][ C0] RAX: 0000000000000061 RBX: 0000000000000061 RCX: 0000000000000000 [ 894.602368][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 894.602381][ C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 894.602392][ C0] R10: dffffc0000000000 R11: ffffffff857295f0 R12: dffffc0000000000 [ 894.602406][ C0] R13: 0000000000000061 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 894.602419][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 894.602435][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 894.602448][ C0] CR2: 00000000f7228c10 CR3: 000000006feba000 CR4: 00000000003526f0 [ 894.602466][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 894.602477][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 894.602489][ C0] Call Trace: [ 894.602497][ C0] [ 894.602506][ C0] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 894.602535][ C0] serial8250_console_write+0xaa1/0x1200 [ 894.602560][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 894.602579][ C0] ? rcu_is_watching+0x16/0xb0 [ 894.602606][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 894.602633][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 894.602655][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 894.602682][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 894.602712][ C0] nbcon_kthread_func+0x679/0x880 [ 894.602733][ C0] ? nbcon_kthread_func+0x163/0x880 [ 894.602752][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 894.602774][ C0] ? __kthread_parkme+0x71/0x1f0 [ 894.602799][ C0] ? __kthread_parkme+0x199/0x1f0 [ 894.602825][ C0] kthread+0x38b/0x480 [ 894.602843][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 894.602868][ C0] ? __pfx_kthread+0x10/0x10 [ 894.602886][ C0] ret_from_fork+0x514/0xb70 [ 894.602904][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 894.602931][ C0] ? __switch_to+0xc89/0x1420 [ 894.602955][ C0] ? __pfx_kthread+0x10/0x10 [ 894.602973][ C0] ret_from_fork_asm+0x1a/0x30 [ 894.603006][ C0] [ 894.608294][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 895.874485][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 895.885179][ T32] Tainted: [L]=SOFTLOCKUP [ 895.889515][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.899575][ T32] Call Trace: [ 895.902861][ T32] [ 895.905796][ T32] vpanic+0x56d/0xa60 [ 895.909800][ T32] ? __pfx___schedule+0x10/0x10 [ 895.914665][ T32] ? __pfx_vpanic+0x10/0x10 [ 895.919197][ T32] panic+0xc5/0xd0 [ 895.922944][ T32] ? __pfx_panic+0x10/0x10 [ 895.927374][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 895.932846][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 895.938224][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 895.944392][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 895.950567][ T32] watchdog+0x1030/0x1030 [ 895.954912][ T32] ? watchdog+0x1c7/0x1030 [ 895.959337][ T32] kthread+0x38b/0x480 [ 895.963419][ T32] ? __pfx_watchdog+0x10/0x10 [ 895.968103][ T32] ? __pfx_kthread+0x10/0x10 [ 895.972699][ T32] ret_from_fork+0x514/0xb70 [ 895.977302][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 895.982428][ T32] ? __switch_to+0xc89/0x1420 [ 895.987118][ T32] ? __pfx_kthread+0x10/0x10 [ 895.991715][ T32] ret_from_fork_asm+0x1a/0x30 [ 895.996509][ T32] [ 895.999803][ T32] Kernel Offset: disabled [ 896.004134][ T32] Rebooting in 86400 seconds..