last executing test programs: 14m48.220437502s ago: executing program 32 (id=276): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85e"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000200)={0x2, 0x2, 0x6}) lseek(r1, 0x80000, 0x3) r4 = epoll_create(0xbe1) syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cd0361086d040e0ab55f0102030109024b0001020000000904be0001030000200905030400"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000008}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0), 0x0, 0x111, 0x0) write$cgroup_type(r6, &(0x7f00000002c0), 0x9) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x1, {0x5, @pix={0x3, 0x6, 0x2036315a, 0x3, 0xc5a, 0x2, 0x6, 0x4, 0x1, 0x0, 0x1, 0x2}}}) 12m53.324073408s ago: executing program 33 (id=748): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x1, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000020000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12m52.537620483s ago: executing program 34 (id=742): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000803"], 0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x88, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x6319, 0x8, 0x2, 0x2d8}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x1}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 12m52.355453318s ago: executing program 35 (id=751): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0xeeee8000, 0x1000, &(0x7f0000f4f000/0x1000)=nil}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000680)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r5) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) 10m43.868450882s ago: executing program 36 (id=1063): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x90, [0x0, 0x200000000640, 0x200000000fce, 0x200000000ffe], 0x7fffffe, 0x0, &(0x7f0000000640)=[{0x8800, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 8m51.16074802s ago: executing program 9 (id=1549): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x4000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4, 0xbf5b, 0x101, 0xf9b1, 0x3, 0xff, 0x8, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x3ff, 0x3, 0x7, 0x3}}, &(0x7f0000000000)=0xb0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x5, 0x4) close(r3) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000080)={0xa, 0x4e20, 0x7fffd, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xe}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}}, 0xfff0, 0x6}, &(0x7f0000000040)=0x90) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000180)="c7e1", 0x2}], 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000400)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a24010000000201c0021324060400060200000000090000000000000009f0030000000000000924050000f8431cfd0924030004030604"], 0x0) r7 = syz_open_dev$loop(&(0x7f00000007c0), 0x8, 0x20400) ioctl$BLKRAGET(r7, 0x1263, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4815}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x4, 0x4) bind$alg(r8, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0001", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40810) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x102, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@broadcast, @remote, @multicast1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast2, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) 8m48.022653444s ago: executing program 7 (id=1564): socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x71, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, &(0x7f0000000080)=""/34, 0x22, &(0x7f0000000000)={&(0x7f0000000280)={'wp512-generic\x00'}}) mremap(&(0x7f0000923000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100feffffffb605000000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000080001040000000000001b0000000000"], 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/handlers\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000540)='\x00', 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x4, 0x0, 0x0, 0x4, 'syz0\x00', 0x1000}, 0x6, 0x100, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x280000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x9, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10002, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4001) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_setup(0x47a5, &(0x7f00000005c0)={0x0, 0x2ce4, 0x8, 0x1, 0x1bb}) 8m47.363482853s ago: executing program 9 (id=1565): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r5, 0x1}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4800) (async) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8m46.766919655s ago: executing program 9 (id=1569): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x8, 0x1, 0xfffffff7, &(0x7f0000000000)='k'}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000", 0x36}], 0x1) r7 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 8m45.489642792s ago: executing program 7 (id=1574): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x3) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r7, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000004e2000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r10, 0x3b71, &(0x7f0000000200)={0x20, 0x2, &(0x7f00000000c0)="63489d29c6e1f1289467cfed2e79f4a57dc0523527abd1c7df6e1011341a1d5ab5ea4b680a2fda378d7bda6cb2bd6b0f1e94bcb9be650fa2d5924beea841fe8432d1a43cb4206f71cfa0c0aaae96bb2ba8d9a35405d6d3b9e49cbd8261ffa36ca5b2fd4c686624dd4a9e3760546983dcdd738716305b11b2f613145e1a780354", 0x80, 0x7}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103257f379351ef73f8900000000e0001006e657464657673696d0000000f0002006e097464657673696d300000"], 0x34}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m45.099893399s ago: executing program 9 (id=1577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8m44.632690113s ago: executing program 6 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000a00400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 8m44.552292444s ago: executing program 7 (id=1580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000108000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m44.391800275s ago: executing program 6 (id=1581): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000000000001000", 0x58}], 0x1) 8m44.016468878s ago: executing program 6 (id=1583): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x8, 0x5365}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_IFNAME={0x0, 0x3, 'veth0_to_hsr\x00'}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x40000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x80) r6 = dup3(r5, r4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000c85000)={0xc0000013}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f00000000c0)={0x40002000}) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="601091393bb22b93594e6ae73f1963dcbeec3deb6ec740a93edbd3dfe04ddbbc575ed1fe5254dfefebeec328918952851c675da04c0a4c42c7bd546c4c781745486dc5ab0d13fde0d060c828e55dc2b08b0ffa772d5425199557a3539986331574808762", 0x64}, {&(0x7f0000000300)="f55c571fafcf86c206b740966c3cab8cabe998331c776beece46a4e218695ba0dbbb8cf46dc0d0a774707a2567b757df66243d030033b57ddef6d7c9", 0x3c}, {&(0x7f0000000340)="b01d250def9b75d8922aaf4ff45d0de9f6fafd01ceb3271098e68ffcae4752527fa2f8b0914a9c24b48a80e7702c11cb0d84731bc95b00c826ae97019cf354183b463299c705308f9ab42183748d67a33dbdc55b4ddfc7ea28dd26004e973aa7533280fad05123ffef5446f8d4a0f0e9875df95d8156f059b0540bf7646ca61f1f65c6ab2678be", 0x87}, {&(0x7f0000000400)="8163392b9a1c3c7b1f0b3a01f8b21418816520b47e59e63054fe573eb4bd05b07b677adfc2b44b340da27a7cf78b99d5cf3a65f32fa3", 0x36}], 0x4, &(0x7f0000002680)=[{0x100, 0x119, 0xbe5, "b3316005384c79dde9930c4d8b73038557787091baba7fb3ca023c780c858bc058e5a06995275c45e8a23901ae6fb0b37b1b846b93e63ccd24a954ac41335327d9268595d864b2bb9c45483eaccb966f3a688c250508b8a1e03767e5b4e38d6510790312feb4e5a185a0c52552db10999b6d1812788dc3b77afda86edaa500d9c9fc323a1f517ceed9b9424f5fb1920624ceef74391f412e26c4ea19a2f3f1cd59296ba0ea462973bd5f272b8cf802cae41261c418d78df4b49521213a2cd8a7efb7cc602b8d42eba751003be39dd8ffc227f0b59c0272ac9ac670304919ad3a6b80138a328b01a22266c1"}, {0x70, 0x84, 0x516, "6758c20d26d4ba6f4d78d6186ae8294a43d1997bd0a87687db9e1f242dcad6cb6206fa6aedd77d4fc81f35c4fe063296f9126f0223199989a1284668917a851ef673b23478dcc3d5cd107228bf2c6c6fe3992adc0f6d3d901d36"}, {0xf8, 0x113, 0x80000000, "76221a2400bf417c73a67026db4afd1d3e2d41cb06f77fbe848c16f51aea8c0a32f000bfab1c12ab43409671d471f44d2cb0f7ee0a21d595290f19880936ac6d9b880022d0bd276130da15b6c19960f445716f51dafcea876bdefe3d4797589ec40f4e582e2a20189fb4a34c97be148e4514ed215094665b1cdd9fc8d475c94a4015bc87823e9463ed9a89c1c6bfc884c0006deb7be4dc568af1f7685e95ad919f194b410204cd7a1446af734f2679ccf3dad51323fd9028ab5b81c534d3a66ac5b202faaa5a25267cebe3e36c1a1e6b31647f1d1e8d03b3c437477479eae1e6cee4beaecbc1e489"}, {0x90, 0x104, 0x6e1d, "042eb3e6aa8d6b80feb759f0c17e3bb6f1be85d408cea11152af6ece9b8ab6ba7ac0303da9ad9ee7d089de9713e1359b1fdc046c2f50f6c9593cbdad0b852b3e024f7967e9eb1d15a5487506d77d84e2868850c65462c7b60142dcd6f18d47d5c6e00210117c9b757dee5a56eb7264d8b1d029f07fc363997269"}, {0x30, 0x115, 0x1, "b14bba716314680e101f5b70e5e34af697e11734275c5065e4ab"}, {0x98, 0x198, 0xf, "2cac061adc5b6ec8dcd19489535273e392a1744f8bd31352ad820018707f6987d9f3b0465c98d217b15414b534cca69ce593a850180455e69d08811aa073d315894125557b7ae36d76b6d3d4ece217cd76a82a06632e78f7b744083b29743f348fe1a26880c889e7db03388ee8cffe37eed14fb4c1ac57294f18afc20169137fc05a49c7"}], 0x3c0}, 0x20000040) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x14480, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000240)={{@host, 0x91b1}, 0x1, 0x2, 0x7}) setsockopt$inet_buf(r6, 0x0, 0x2f, &(0x7f0000000100)="599bcae89b301f4b3ed0208bc5fc49b957de0ddce311369ae947718c99351f0c1917a637362cd119b4cea63b131faf56f8b776e5d62bf6b0381bedf407935dd59a45bea9f56aa8e12dc90d63d006954adc9749acebc4a82287623c5e136d3168a27356fd45c4ae0833ef8518fbc490344a49fb243b1e4655e33b9a6e2c76b66a6aceb351756870ca751745c4b21d8f5dd7386151729227043a057acf9e8155b7344513bef9601a4e239b0560eb3aa46a6be388cf60949f5cc367b7b2d6fad7d8080c85b0c0ec07868a77be4a1e8d2edc3d059f819132afded162", 0xda) syz_emit_ethernet(0x4f, &(0x7f0000001200)={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x1, 0x4, 0x41, 0x65, 0x0, 0x0, 0x21, 0x0, @multicast1, @multicast1, {[@end, @ssrr={0x89, 0xf, 0xcc, [@local, @rand_addr=0x64010101, @multicast1]}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x1, "62e04f", 0x7, "cceef1"}, "81d899074cf8e00b0ef2686565"}}}}}, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000000000)={@multicast, @random="2b90ed431bfb", @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0x3a, '8', "c009fa4a0019c8a38d15369f33b9202f8800bef94ee30d4c7a7a6d99f34e2a9835f948b3f389004b66f1856bbf7fd3a631e9dae9d256358e9675e6925452ea19f9f7a8d8ff841d32dbb0557f847dea70fc34516629331f098d026d25bec26a41ff1bfe896ccdd80144f96aaf1f627274f15b2900cab802e39e1e9a701f398c57781fda6f6fb62f0796199ab0ac6830af633beedd332a4bbdc230"}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x81a, 0xfc, 0x8fa, 0xb48]}) 8m43.549284737s ago: executing program 6 (id=1584): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030426bd70003f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000200012800b298c00697036674f650000100089620400120006000300a1000000"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c4660fbe7000fcdbdf250100000008000880040000800800070080000000"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESHEX=r8], 0x2e) 8m41.715634548s ago: executing program 7 (id=1587): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d20ff020000000000000000000000000001"], 0xfdef) 8m40.978212795s ago: executing program 7 (id=1591): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xb273, 0x0, 0x3, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010139ffffff000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 8m40.305850197s ago: executing program 9 (id=1592): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000006000340000100000800074000000000040006804a7810"], 0xa0}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') lseek(r6, 0x1, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) 8m40.173279322s ago: executing program 6 (id=1593): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x50000, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x2, 0x7fff7ffc}]}) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'cpuacct'}, {0x2b, 'devices'}]}, 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r2, 0x2a91, 0x7ff) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x99) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000600000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100090810000000000000040000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000380)={{0x6, 0x10}, 'port0\x00', 0x0, 0x6, 0x1, 0x1, 0x4, 0x7, 0x5, 0x0, 0x3, 0x9}) 8m39.88478158s ago: executing program 6 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 8m37.698780792s ago: executing program 7 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000210b000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00002010002d"], 0x40}}, 0x0) 8m29.876765189s ago: executing program 8 (id=1598): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x7, 0x4) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff50, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0x11}, 0x401}], 0x27, 0x40000102, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x101, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x400000001, 0x6b}) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}, @nested={0x4, 0x3a}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8m29.612039375s ago: executing program 0 (id=1599): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="852000000c00000018161800000000000000000000000b009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd85, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0x23) 8m28.822187928s ago: executing program 9 (id=1600): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x16c, 0x2, [@TCA_MATCHALL_ACT={0x168, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x110, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x0) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) 8m27.884687867s ago: executing program 8 (id=1601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000300)={{0x0, @private=0xa010102, 0x4e24, 0x2, 'ovf\x00', 0x28, 0xcc2, 0x25}, {@empty, 0x3, 0x1, 0x10fe, 0x0, 0xa3}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0xd, 0x0, 0x80, 0xffffffffffffffff, 0x88, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES64=r3], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) read(r3, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x406, r7) write$sndseq(r8, 0x0, 0x0) read$dsp(r8, 0x0, 0x0) close(r3) r9 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000397000/0x4000)=nil, 0x4000, 0x200000a, 0x36232f89f1a07958, r9, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x0, &(0x7f0000000080), 0x200000, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m27.414364761s ago: executing program 0 (id=1602): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x2, 0x4a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8m26.437086847s ago: executing program 8 (id=1603): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r4, 0x5602, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m25.436496415s ago: executing program 8 (id=1604): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x20002, '\x00', 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x5, 0xa, 0x2, 0x0, 0x81}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) r2 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001040)='ceph\x00', &(0x7f0000001080)=@keyring={'key_or_keyring:', r2, 0x30}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x20002, '\x00', 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x5, 0xa, 0x2, 0x0, 0x81}) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) (async) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001040)='ceph\x00', &(0x7f0000001080)=@keyring={'key_or_keyring:', r2, 0x30}) (async) 8m24.340219974s ago: executing program 37 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 8m24.307778938s ago: executing program 8 (id=1606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r4, 0x3, 0x1, 0x1, 0x2}, 0x50) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000d8113a20041da23c810b9fd7008d15b6cee8bf9c7ff56918171e5567b181a7db1dd4f6e3c24649c7b9cc0df33d13561dc8950a79fcf84d664a580ca588f7700c784effa89f9011a7049ae4cdc4879106"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xdc, r10, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000401c83a0d7f93238974"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 8m23.049266905s ago: executing program 0 (id=1607): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x78ddf9f6, 0x80, &(0x7f0000000200)={0xa1, 0x0, 0x8, 0x8}, 0x8, 0x1ff, 0x0, 0x0, 0x1, 0x4, 0x0}) 8m22.6688059s ago: executing program 0 (id=1608): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x1, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a3100f0000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m22.558845595s ago: executing program 38 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000210b000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00002010002d"], 0x40}}, 0x0) 8m20.918973488s ago: executing program 8 (id=1610): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000006000340000100000800074000000000040006804a7810"], 0xa0}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') lseek(r6, 0x1, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) 8m19.835216649s ago: executing program 0 (id=1611): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40000}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000002840)=""/4086, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1b}, 0x94) 8m19.464513867s ago: executing program 0 (id=1612): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a65637400001400028008010140000000010500"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 8m5.245771073s ago: executing program 39 (id=1600): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x16c, 0x2, [@TCA_MATCHALL_ACT={0x168, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x110, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x0) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) 8m4.550824468s ago: executing program 40 (id=1610): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000006000340000100000800074000000000040006804a7810"], 0xa0}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') lseek(r6, 0x1, 0x2) getdents64(r6, 0xffffffffffffffff, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) 8m4.30598753s ago: executing program 41 (id=1612): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a65637400001400028008010140000000010500"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1m32.379878644s ago: executing program 5 (id=2729): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000780)={0x7, 0x1000000, [{0x4, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xb, 0xe5f, 0x0, 0x7, 0x8001, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) clock_gettime(0x5, &(0x7f0000000140)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m30.41165679s ago: executing program 4 (id=2737): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x62, 0x7, 0x60000000, 0x0, 0x4, 0x100, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c2, 0x7) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000377a8840ba0d00109980010203010902120001000000000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$LOOP_CTL_REMOVE(r8, 0x541b, 0xb) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000000080)="ab", 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x3}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m29.937323482s ago: executing program 2 (id=2739): r0 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4, "465ce421"}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2, 0x0, 0x5, 0x0, 0x8, 0x3, 0x7, 0x7, 0xfd, 0xd5, 0x4, 0x4, 0x0, 0x3, 0xa, 0x82}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x208000035, 0xfff, 0x8000000000000, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x25000, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) 1m29.585690096s ago: executing program 5 (id=2740): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) pipe(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a31000000001400048008000240000000000800014000"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1m29.366622984s ago: executing program 2 (id=2741): r0 = socket(0xa, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0xb}, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000004c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) close(r4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xff000000, 0x0, 0x1fffffffe, 0xff000000], 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x83d, 0x0, 0x0, 0xef1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x2, 0x4, 0xd, 0x0, 0x2], 0x6, 0x1}, {0xffffffffffffffff, [0x5, 0x2, 0x6, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000040)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}], 0x18, 0x85}, 0x8050) socket(0xa, 0x5, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0xb}, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000004c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) (async) close(r4) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xff000000, 0x0, 0x1fffffffe, 0xff000000], 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x83d, 0x0, 0x0, 0xef1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x2, 0x4, 0xd, 0x0, 0x2], 0x6, 0x1}, {0xffffffffffffffff, [0x5, 0x2, 0x6, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000040)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}], 0x18, 0x85}, 0x8050) (async) 1m29.005140467s ago: executing program 2 (id=2742): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) sendfile(r0, r1, &(0x7f00000000c0)=0x64, 0x420) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x2d4, &(0x7f0000000100)={0x0, 0xb9d3, 0x42b5de52b7ed5ecf, 0x3, 0x97, 0x0, r0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x2, 0x0) io_uring_enter(r3, 0x203c, 0x920e, 0x28, &(0x7f0000000280)={[0x2]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x17, r5, 0x1, 0xb, 0x6, @broadcast}, 0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000036c0)={0x2, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/56, 0x38}, {&(0x7f0000002400)=""/85, 0x55}, {&(0x7f0000002480)=""/34, 0x22}, {&(0x7f00000024c0)=""/134, 0x86}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/60, 0x3c}], &(0x7f0000003680)=[0xc3a, 0x40, 0x80000001], 0x9}, 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003840)={0x2, 0x0, [{0xe000, 0x1a, &(0x7f0000003700)=""/26}, {0x70000, 0xfb, &(0x7f0000003740)=""/251}]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000038c0)={0x0, {{0xa, 0x4e23, 0x8, @local, 0xd9d8}}, {{0xa, 0x4e20, 0x7ff, @local, 0x6}}}, 0x108) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a00)='./binderfs/binder0\x00', 0x402, 0x0) mmap(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x2, 0x11, r6, 0x374ab000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000003a80)={0x4, &(0x7f0000003a40)=[{0xf7, 0x1f, 0x2, 0x1}, {0x800, 0x4, 0x4, 0x1}, {0x6, 0x1, 0x5, 0x7}, {0x100, 0xff, 0x8, 0xa1d}]}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000003ac0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000003b00)={r6, 0x5, 0x7, 0x6}) r7 = memfd_secret(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003b40)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000003c40)=0xe8) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, r8, &(0x7f0000003c80)={0x928f, 0x5e, 0x7, 0xe9a, 0x0, 0x253, 0x7, 0x8000000000000001, 0x664}) fchdir(r6) io_uring_enter(r0, 0x653e, 0xcbf, 0x5, &(0x7f0000003d00)={[0x9]}, 0x8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x38, r9, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc0) syz_io_uring_setup(0xd17, &(0x7f0000003e80)={0x0, 0xba19, 0x8000, 0x1, 0x368, 0x0, r3}, &(0x7f0000003f00), &(0x7f0000003f40)) 1m28.180496101s ago: executing program 1 (id=2743): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 1m27.940422s ago: executing program 1 (id=2744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'xfrm0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x2d, 0xa, 0xffffffffffffccb4, {0x8, @udp_ip4_spec={@rand_addr=0x3, @local, 0x4e22, 0x4e22, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4d8, 0x73d, [0x24, 0x9]}, @esp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x2, 0x6b}, {0x0, @remote, 0x80, 0x3, [0x6, 0xfffffffb]}, 0x4, 0x5}}}) 1m27.885283212s ago: executing program 2 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008120300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 1m27.885028052s ago: executing program 3 (id=2746): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, {}, 0xc00000}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x2}]}]}, 0x13c}}, 0x0) 1m27.703230987s ago: executing program 3 (id=2747): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x754, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x72c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x754}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 1m27.34236274s ago: executing program 5 (id=2748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x7ffc}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x103000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r6 = socket(0x1e, 0x1, 0x0) listen(r6, 0x8) shutdown(r6, 0x2) r7 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0xf400, 0x0, 0x0, 0x0) 1m27.209343525s ago: executing program 2 (id=2749): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000600000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) 1m27.193923617s ago: executing program 1 (id=2750): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, &(0x7f0000000780)={0x7, 0x1000000, [{0x4, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xb, 0xe5f, 0x0, 0x7, 0x8001, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) clock_gettime(0x5, &(0x7f0000000140)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m26.815897494s ago: executing program 2 (id=2751): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r3, 0x0, &(0x7f00000001c0), 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r4, 0xda90) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r6, 0x0, 0x0) (rerun: 32) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) 1m26.480724035s ago: executing program 4 (id=2752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xb273, 0x0, 0x3, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000030000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 1m26.061841806s ago: executing program 1 (id=2753): socket$netlink(0x10, 0x3, 0x10) unshare(0x66040080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xfffe, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1m24.870182656s ago: executing program 3 (id=2754): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x26, 0x14, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote}}}}) sendmsg$nl_xfrm(r3, 0x0, 0x20040000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) connect$tipc(r3, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m23.758234947s ago: executing program 1 (id=2755): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 1m23.436967099s ago: executing program 1 (id=2756): times(&(0x7f0000000000)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) unshare(0x6020400) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xe, 0xa, "fa4d9cf530996c87f23a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRES64=0x0], 0xe8}}, 0x20004004) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x30, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m23.100026281s ago: executing program 4 (id=2757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0xc00000}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x2}]}]}, 0x13c}}, 0x0) 1m23.086560514s ago: executing program 5 (id=2758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x144, 0x5, [{{@in=@local, 0xffffffff, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@remote, 0x3501, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0x1, 0xff}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 1m22.900911903s ago: executing program 4 (id=2759): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x1000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 1m22.90053035s ago: executing program 5 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008210300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 1m22.835810717s ago: executing program 3 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71105e00000000006e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x6, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8001, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m22.733478528s ago: executing program 4 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) recvfrom$rxrpc(r2, &(0x7f0000000100)=""/139, 0x8b, 0x12000, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m22.528976946s ago: executing program 3 (id=2763): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, &(0x7f0000000780)={0x7, 0x1000000, [{0x4, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xb, 0xe5f, 0x0, 0x7, 0x8001, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) fcntl$lock(0xffffffffffffffff, 0x403, &(0x7f0000000700)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) clock_gettime(0x5, &(0x7f0000000140)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m22.449291425s ago: executing program 4 (id=2764): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x754, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x72c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x754}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 1m22.369981119s ago: executing program 5 (id=2765): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000003010101000000000000000002000000f2ff188008007838276e375052a6fc350200050000001800028014000180080001007f00000108000200ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000006006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffff, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x2, 0x2c, 0x2, 0x6e, 0x20}) 1m21.16461989s ago: executing program 3 (id=2766): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) pipe(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a31000000001400048008000240000000000800014000"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 42 (id=2751): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r3, 0x0, &(0x7f00000001c0), 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r4, 0xda90) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r6, 0x0, 0x0) (rerun: 32) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 2-1: Manufacturer: syz [ 830.216407][ T9141] usb 2-1: config 0 descriptor?? [ 830.424714][ T9141] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 830.564745][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 830.586973][ T9141] usb 5-1: config 6 has an invalid interface number: 232 but max is 0 [ 830.613356][ T9141] usb 5-1: config 6 has no interface number 0 [ 830.637562][ T9141] usb 5-1: config 6 interface 232 altsetting 3 has an invalid endpoint descriptor of length 2, skipping [ 830.662871][ T9141] usb 5-1: config 6 interface 232 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 830.713631][ T9141] usb 5-1: config 6 interface 232 has no altsetting 0 [ 830.739503][ T9141] usb 5-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=dc.87 [ 830.763225][ T9141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.777704][ T10] usb 4-1: config 0 has no interfaces? [ 830.793547][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 830.807151][ T9141] usb 5-1: Product: syz [ 830.813992][ T9141] usb 5-1: Manufacturer: syz [ 830.819091][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.827891][ T9141] usb 5-1: SerialNumber: syz [ 830.835495][ T10] usb 4-1: Product: syz [ 830.841467][ T10] usb 4-1: Manufacturer: syz [ 830.856398][ T10] usb 4-1: SerialNumber: syz [ 830.869045][ T10] usb 4-1: config 0 descriptor?? [ 831.051315][ T9141] usb 5-1: can't set first interface for hiFace device. [ 831.065547][ T9141] snd-usb-hiface 5-1:6.232: probe with driver snd-usb-hiface failed with error -5 [ 831.086199][ T9141] usb 5-1: USB disconnect, device number 25 [ 831.124753][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 831.233281][T16708] syzkaller0: entered promiscuous mode [ 831.251410][T16708] syzkaller0: entered allmulticast mode [ 831.291919][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2210'. [ 831.326395][T16787] ip6gre3: entered promiscuous mode [ 831.332125][T16787] ip6gre3: entered allmulticast mode [ 831.347011][ T6083] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 831.358927][ T5911] usb 4-1: USB disconnect, device number 60 [ 831.376644][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 831.392264][ T6083] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 831.515203][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 832.126578][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 832.248266][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 832.287622][ T10] usb 3-1: USB disconnect, device number 56 [ 832.306145][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 832.338416][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 832.352352][ T8739] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 832.375026][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 832.388329][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 832.406983][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.421756][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 832.481946][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.519508][ T8739] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 832.555274][ T8739] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 832.572443][ T40] usb 2-1: USB disconnect, device number 48 [ 832.618874][ T8739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 832.670415][ T8739] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 832.710297][ T8739] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 832.721073][ T8739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.729495][ T8739] usb 4-1: Product: syz [ 832.734420][ T8739] usb 4-1: Manufacturer: syz [ 832.740100][ T8739] usb 4-1: SerialNumber: syz [ 832.750625][ T5911] usb 5-1: GET_CAPABILITIES returned 0 [ 832.757650][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 832.768903][ T8739] usb 4-1: config 0 descriptor?? [ 832.794430][T16817] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 832.893664][ T8739] usb 4-1: ucan: probing device on interface #0 [ 832.918320][ T8739] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 832.946384][ T8739] usb 4-1: ucan: probe failed; try to update the device firmware [ 833.344751][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'. [ 833.754051][T16881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2219'. [ 833.952603][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 833.965854][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 834.174480][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 834.222753][T16894] ip6gre3: entered promiscuous mode [ 834.236366][T16894] ip6gre3: entered allmulticast mode [ 834.943870][ T8739] usb 5-1: USB disconnect, device number 26 [ 835.133564][ T40] usb 4-1: USB disconnect, device number 61 [ 835.214917][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 835.275246][T16944] xt_HMARK: spi-set and port-set can't be combined [ 835.344328][T16942] vlan2: entered promiscuous mode [ 835.360460][T16942] vlan2: entered allmulticast mode [ 835.389328][T16942] hsr_slave_1: entered allmulticast mode [ 835.409513][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 835.438480][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 835.489766][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'. [ 835.749885][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2230'. [ 836.101580][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 836.136456][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 837.102186][T16985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.225345][ T9141] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 837.377829][T16999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.395014][ T9141] usb 2-1: Using ep0 maxpacket: 16 [ 837.428391][ T9141] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 837.455546][ T9141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 837.487283][ T9141] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 837.513064][ T9141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.538693][ T9141] usb 2-1: Product: syz [ 837.569021][ T9141] usb 2-1: Manufacturer: syz [ 837.578944][ T9141] usb 2-1: SerialNumber: syz [ 837.607159][ T9141] usb 2-1: config 0 descriptor?? [ 837.710275][ T9141] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 837.759406][ T9141] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 838.313168][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.371883][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.668803][ T9141] em28xx 2-1:0.0: chip ID is em2874 [ 839.225470][ T5904] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 839.416657][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 839.466154][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 839.499757][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 839.565116][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.608123][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.638735][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.677458][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.803550][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 839.840518][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2238'. [ 839.944831][ T5904] usb 3-1: GET_CAPABILITIES returned 0 [ 839.982798][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 840.118196][T17062] xt_HMARK: spi-set and port-set can't be combined [ 840.145003][ T5904] usb 2-1: USB disconnect, device number 49 [ 840.171739][ T5904] em28xx 2-1:0.0: Disconnecting em28xx [ 840.225466][ T5904] em28xx 2-1:0.0: Freeing device [ 840.390147][ T8739] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 840.427286][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 840.458320][T17088] ip6gre1: entered promiscuous mode [ 840.464090][T17088] ip6gre1: entered allmulticast mode [ 840.471414][ T6090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.498086][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.506410][ T6090] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.576194][ T8739] usb 4-1: Using ep0 maxpacket: 8 [ 840.600192][ T8739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.626991][ T8739] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 840.651529][ T8739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.677733][ T8739] usb 4-1: config 0 descriptor?? [ 840.703755][ T8739] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 840.902863][T17106] loop6: detected capacity change from 0 to 524288000 [ 840.944807][T17066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.003867][T17066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.014133][T17106] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2245'. [ 841.096954][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 841.156048][T17110] bond1: option ad_user_port_key: invalid value (62049) [ 841.173447][T17110] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 841.287616][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 841.380086][T17110] bond1 (unregistering): Released all slaves [ 842.020908][ T5911] usb 3-1: USB disconnect, device number 57 [ 842.118513][ T8739] gspca_vc032x: reg_w err -71 [ 842.142967][ T8739] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 842.199674][ T8739] usb 4-1: USB disconnect, device number 62 [ 842.387304][ T30] audit: type=1326 audit(1770412028.050:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.2.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f338939aeb9 code=0x0 [ 842.629675][T17217] No such timeout policy "syz0" [ 843.014706][ T5903] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 843.155105][ T5903] usb 6-1: device descriptor read/64, error -71 [ 843.284813][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 843.468181][ T5903] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 843.534792][ T8734] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 843.681729][ T5903] usb 6-1: device descriptor read/64, error -71 [ 843.722314][ T8734] usb 4-1: Using ep0 maxpacket: 16 [ 843.774774][ T8734] usb 4-1: config 0 has no interfaces? [ 843.805741][ T8734] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 843.846811][ T8734] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 843.855823][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 843.870712][ T5904] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 843.883470][ T5903] usb usb6-port1: attempt power cycle [ 843.907718][ T8734] usb 4-1: Manufacturer: syz [ 843.966685][ T8734] usb 4-1: config 0 descriptor?? [ 844.114577][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 844.134917][ T5911] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 844.171088][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 844.192088][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 844.225193][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 844.247455][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 844.284856][ T5903] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 844.312414][ T5904] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 844.315001][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 844.336257][ T5903] usb 6-1: device descriptor read/8, error -71 [ 844.367219][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 844.397472][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.412271][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 844.441225][ T5904] usb 2-1: Product: syz [ 844.453251][ T5904] usb 2-1: Manufacturer: syz [ 844.466302][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.486400][ T5904] usb 2-1: SerialNumber: syz [ 844.499574][ T5904] usb 2-1: config 0 descriptor?? [ 844.538535][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.569219][ T5904] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 844.582764][ T5903] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 844.621680][ T5904] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 844.644705][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.654020][ T5903] usb 6-1: device descriptor read/8, error -71 [ 844.673081][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.721275][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.792736][T17275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.827956][ T5903] usb usb6-port1: unable to enumerate USB device [ 844.868411][T17275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.002712][ T5911] usb 5-1: GET_CAPABILITIES returned a0 [ 845.011129][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 845.207457][ T5911] usb 5-1: USB disconnect, device number 27 [ 846.163689][T17362] netlink: 'syz.5.2258': attribute type 10 has an invalid length. [ 846.306065][T17362] team0: Port device dummy0 added [ 846.323659][T17365] netlink: 'syz.5.2258': attribute type 10 has an invalid length. [ 846.383865][T17365] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 846.481708][T17365] team0: Failed to send options change via netlink (err -105) [ 846.494774][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 846.503287][T17365] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 846.533552][T17365] team0: Port device dummy0 removed [ 846.546457][ T8739] usb 4-1: USB disconnect, device number 63 [ 846.601508][T17365] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 846.817600][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 846.950458][T17386] ip6gre2: entered promiscuous mode [ 846.992850][T17386] ip6gre2: entered allmulticast mode [ 847.293330][ T9141] usb 2-1: USB disconnect, device number 50 [ 847.377369][ T9141] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 847.437869][ T9141] omninet 2-1:0.0: device disconnected [ 847.563590][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 847.594942][T17432] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 847.624652][T17432] openvswitch: netlink: Message has 16 unknown bytes. [ 847.654077][ T30] audit: type=1326 audit(1770412033.310:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17431 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3158d9aeb9 code=0x7ffc0000 [ 847.726981][ T30] audit: type=1326 audit(1770412033.310:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17431 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3158d9aeb9 code=0x7ffc0000 [ 847.749960][ T5911] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 847.835009][ T9141] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 847.845209][ T6083] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.865876][ T6083] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.874859][ T5903] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.884675][ T5911] usb 4-1: device descriptor read/64, error -71 [ 847.934597][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 847.995755][ T9141] usb 2-1: Using ep0 maxpacket: 8 [ 848.003559][ T9141] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 848.026664][ T9141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 848.038552][ T9141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 848.050641][ T9141] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.087690][ T9141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.100410][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 848.114881][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 848.136805][ T9141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.152979][ T5904] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 848.166236][ T5911] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 848.192992][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.234947][ T5903] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.272782][ T5904] usb 5-1: Product: syz [ 848.296453][ T5904] usb 5-1: Manufacturer: syz [ 848.319475][ T5904] usb 5-1: SerialNumber: syz [ 848.365669][ T5904] usb 5-1: config 0 descriptor?? [ 848.374705][ T5911] usb 4-1: device descriptor read/64, error -71 [ 848.404180][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 848.423802][ T9141] usb 2-1: GET_CAPABILITIES returned a0 [ 848.429655][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 848.448101][ T9141] usbtmc 2-1:16.0: can't read capabilities [ 848.470618][ T5904] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.486723][ T5911] usb usb4-port1: attempt power cycle [ 848.649732][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2271'. [ 848.658763][ T8739] usb 2-1: USB disconnect, device number 51 [ 848.688715][ T30] audit: type=1326 audit(1770412034.350:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17431 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3158d9aeb9 code=0x7ffc0000 [ 848.717555][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2271'. [ 848.786466][ T8734] usb 5-1: USB disconnect, device number 28 [ 848.794226][ T30] audit: type=1326 audit(1770412034.450:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17431 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3158d9aeb9 code=0x7ffc0000 [ 848.816979][ T5904] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.907840][ T30] audit: type=1326 audit(1770412034.450:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17431 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3158d9aeb9 code=0x7ffc0000 [ 848.940490][ T5911] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 849.012821][ T5911] usb 4-1: device descriptor read/8, error -71 [ 849.032941][T12876] udevd[12876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.344646][ T5911] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 849.410357][ T5911] usb 4-1: device descriptor read/8, error -71 [ 849.535992][ T8734] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 849.635823][ T5911] usb usb4-port1: unable to enumerate USB device [ 849.663813][T17528] raw_sendmsg: syz.1.2273 forgot to set AF_INET. Fix it! [ 849.716751][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2274'. [ 849.782359][ T8734] usb 6-1: Using ep0 maxpacket: 16 [ 849.806095][ T8734] usb 6-1: config 0 has no interfaces? [ 849.836091][ T8734] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 849.867907][ T8734] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 849.914688][ T8734] usb 6-1: Manufacturer: syz [ 849.959666][ T8734] usb 6-1: config 0 descriptor?? [ 851.110416][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'. [ 851.264681][ T8739] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 851.474637][ T8739] usb 4-1: Using ep0 maxpacket: 16 [ 851.519905][ T8739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 851.569115][ T8739] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 851.645293][ T8739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 851.684718][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 851.706475][ T8739] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 851.788736][ T8739] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 851.842635][ T8739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.937777][ T8739] usb 4-1: Product: syz [ 851.977109][ T8739] usb 4-1: Manufacturer: syz [ 852.032461][ T8739] usb 4-1: SerialNumber: syz [ 852.087597][ T8739] usb 4-1: config 0 descriptor?? [ 852.246049][ T8739] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 852.311140][ T8739] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 852.339615][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.511055][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 852.558884][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.117623][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 853.201307][T17610] ip6gre4: entered promiscuous mode [ 853.235285][T17610] ip6gre4: entered allmulticast mode [ 853.499686][ T6094] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 853.524711][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 853.581590][ T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 853.601965][ T6094] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 853.764733][ T8739] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 853.804622][ T8734] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 853.810097][ T5904] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 853.894677][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 853.995492][ T8734] usb 5-1: Using ep0 maxpacket: 8 [ 854.003930][ T8739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 854.024195][ T8734] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 854.044692][ T8739] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 854.066577][ T5904] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 854.088791][ T8734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 854.101587][ T8739] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x3 is Bulk; changing to Interrupt [ 854.104759][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 854.140176][ T8734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.141998][ T10] usb 2-1: too many configurations: 101, using maximum allowed: 8 [ 854.172830][ T8739] usb 3-1: config 1 interface 0 has no altsetting 0 [ 854.205852][ T8739] usb 3-1: string descriptor 0 read error: -22 [ 854.206192][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 854.226753][ T8734] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.249565][ T8739] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.286411][ T8734] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.297137][ T8739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.315297][ T10] usb 2-1: can't read configurations, error -22 [ 854.332501][ T8734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.347717][T17648] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 854.381351][T17648] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 854.405899][ T8739] usb 3-1: bad CDC descriptors [ 854.554643][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 854.671130][ T8734] usb 5-1: GET_CAPABILITIES returned a0 [ 854.691161][ T8734] usbtmc 5-1:16.0: can't read capabilities [ 854.799120][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 854.867864][ T10] usb 2-1: too many configurations: 101, using maximum allowed: 8 [ 854.906914][ T5253] usb 5-1: USB disconnect, device number 29 [ 854.945338][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 854.975204][ T8734] usb 6-1: USB disconnect, device number 63 [ 855.037405][ T10] usb 2-1: can't read configurations, error -22 [ 855.097944][ T10] usb usb2-port1: attempt power cycle [ 855.225640][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.253793][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.528097][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 855.574661][ T8734] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 855.608339][ T5904] usb 4-1: USB disconnect, device number 68 [ 855.614997][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 855.625822][ T10] usb 2-1: too many configurations: 101, using maximum allowed: 8 [ 855.649182][ T5904] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 855.668661][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 855.682148][ T5904] omninet 4-1:0.0: device disconnected [ 855.690999][ T10] usb 2-1: can't read configurations, error -22 [ 855.753534][ T8734] usb 6-1: config 0 has no interfaces? [ 855.788948][ T8734] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 855.829323][ T8734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.844803][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 855.890826][ T8734] usb 6-1: Product: syz [ 855.891244][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 855.914317][ T10] usb 2-1: too many configurations: 101, using maximum allowed: 8 [ 855.923356][ T5253] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 855.936321][ T8734] usb 6-1: Manufacturer: syz [ 855.941071][ T8734] usb 6-1: SerialNumber: syz [ 855.942105][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 855.968025][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 169 [ 855.990711][ T10] usb 2-1: can't read configurations, error -22 [ 856.005687][ T10] usb usb2-port1: unable to enumerate USB device [ 856.017883][ T8734] usb 6-1: config 0 descriptor?? [ 856.107231][ T5253] usb 5-1: device descriptor read/64, error -32 [ 856.150982][T17765] veth3: entered promiscuous mode [ 856.305941][T17715] syzkaller0: entered promiscuous mode [ 856.311575][T17715] syzkaller0: entered allmulticast mode [ 856.335914][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2286'. [ 856.355851][ T5253] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 856.559488][ T8734] usb 6-1: USB disconnect, device number 64 [ 856.751783][ T5253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.807600][ T5253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.825554][T17823] netlink: 'syz.1.2292': attribute type 6 has an invalid length. [ 856.841970][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'. [ 856.842930][ T5253] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 856.901866][ T5253] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 856.919350][ T5253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.954822][ T5918] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 856.990138][ T5253] usb 5-1: config 0 descriptor?? [ 857.133421][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 857.169566][ T5918] usb 4-1: config 0 has no interfaces? [ 857.212724][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.234575][ T5918] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.276669][ T5918] usb 4-1: Manufacturer: syz [ 857.381372][ T5918] usb 4-1: config 0 descriptor?? [ 857.684766][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 857.750092][ T5253] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 857.802993][ T5253] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 858.111519][T17876] batman_adv: batadv0: Adding interface: dummy0 [ 858.123558][T17876] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.181913][T17876] batman_adv: batadv0: Interface activated: dummy0 [ 859.231551][T17898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.245821][T17898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.284714][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 859.292655][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 859.428747][ T5904] usb 5-1: USB disconnect, device number 31 [ 860.187143][ T8739] usb 4-1: USB disconnect, device number 69 [ 860.224954][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 860.474638][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 860.542341][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 860.596735][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 860.669003][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 860.778138][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 860.919181][ T5904] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 860.960177][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.024603][ T5904] usb 5-1: Product: syz [ 861.044642][ T5904] usb 5-1: Manufacturer: syz [ 861.075827][ T5904] usb 5-1: SerialNumber: syz [ 861.132843][ T5904] usb 5-1: config 0 descriptor?? [ 861.164265][ T5904] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 861.198509][ T5904] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 861.424046][T17926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.493390][T17926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.764813][ T5918] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 862.134414][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.255012][ T5904] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 862.279079][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'. [ 862.337577][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'. [ 862.384606][ T5918] usb 6-1: config 0 has no interfaces? [ 862.458632][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 862.548327][ T5904] usb 2-1: config 0 has no interfaces? [ 862.575029][ T5904] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 862.612252][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.642333][ T5904] usb 2-1: Product: syz [ 862.656325][ T5904] usb 2-1: Manufacturer: syz [ 862.666966][ T5904] usb 2-1: SerialNumber: syz [ 862.673268][ T5918] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 862.685985][ T5904] usb 2-1: config 0 descriptor?? [ 862.767035][ T5918] usb 6-1: Manufacturer: syz [ 862.804470][ T5918] usb 6-1: config 0 descriptor?? [ 862.972100][T17990] syzkaller0: entered promiscuous mode [ 863.000745][T17990] syzkaller0: entered allmulticast mode [ 863.027904][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 863.228946][ T5904] usb 2-1: USB disconnect, device number 56 [ 863.688642][T18052] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 865.021967][ T8739] usb 5-1: USB disconnect, device number 32 [ 865.049157][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 865.135078][ T8739] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 865.195614][ T8739] omninet 5-1:0.0: device disconnected [ 865.681025][ T5918] usb 6-1: USB disconnect, device number 65 [ 866.154706][ T5918] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 866.324794][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 866.374705][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 866.476456][ T5918] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 866.504820][ T5918] usb 6-1: config 1 has no interface number 0 [ 866.627235][ T5918] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 866.663576][ T5918] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 866.696665][ T5918] usb 6-1: config 1 interface 105 has no altsetting 0 [ 866.724232][ T5918] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 866.748111][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.827128][ T5918] usb 6-1: Product: syz [ 866.841959][ T5918] usb 6-1: Manufacturer: syz [ 866.863484][ T5918] usb 6-1: SerialNumber: syz [ 866.904928][T18097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 866.944758][T18097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 867.138926][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 867.200036][T18126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 867.224795][T18126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 867.485650][ T5918] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 867.630964][ T5918] aqc111 6-1:1.105: probe with driver aqc111 failed with error -61 [ 867.684769][ T5904] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 867.883382][ T5904] usb 4-1: config 0 has no interfaces? [ 867.897829][ T5904] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 867.914099][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.940495][ T5904] usb 4-1: Product: syz [ 867.957841][ T5904] usb 4-1: Manufacturer: syz [ 867.962717][ T5904] usb 4-1: SerialNumber: syz [ 867.980406][ T5904] usb 4-1: config 0 descriptor?? [ 868.231711][T18131] syzkaller0: entered promiscuous mode [ 868.237508][T18131] syzkaller0: entered allmulticast mode [ 868.251842][ T5918] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 868.289607][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 868.387743][ T8739] usb 4-1: USB disconnect, device number 70 [ 868.445850][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 868.461939][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.493372][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 868.519826][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.544603][ T5911] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 868.558825][ T5918] usb 2-1: config 0 descriptor?? [ 868.725067][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 868.765428][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 868.783333][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 868.799727][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 868.813726][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 868.881707][ T5904] usb 6-1: USB disconnect, device number 66 [ 869.003794][ T5918] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 869.040413][ T5911] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 869.075610][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.097683][ T5911] usb 5-1: Product: syz [ 869.101978][ T5911] usb 5-1: Manufacturer: syz [ 869.123517][ T5911] usb 5-1: SerialNumber: syz [ 869.157884][ T5911] usb 5-1: config 0 descriptor?? [ 869.217707][ T5911] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 869.268653][ T5911] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 869.429742][ T5918] usb 2-1: USB disconnect, device number 57 [ 869.505777][T18180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.594884][T18180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.627782][T18239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.824310][T18244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.858335][T18244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.136834][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 870.164757][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 870.190752][T18251] ip6gre2: entered promiscuous mode [ 870.220293][T18251] ip6gre2: entered allmulticast mode [ 870.281949][ T6680] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.312263][ T981] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.320672][ T6680] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.404845][ T981] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.558640][ T981] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 870.804712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 871.690691][ T5918] usb 5-1: USB disconnect, device number 33 [ 871.714811][ T5911] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 871.733452][ T5918] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 871.770250][ T5918] omninet 5-1:0.0: device disconnected [ 871.904657][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 871.949494][ T5911] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 871.966845][ T5911] usb 4-1: config 252 has no interface number 0 [ 871.977594][ T5911] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 871.992356][ T5911] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 872.002106][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.011075][ T5911] usb 4-1: Product: syz [ 872.015734][ T5911] usb 4-1: Manufacturer: syz [ 872.020601][ T5911] usb 4-1: SerialNumber: syz [ 872.042131][T18295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.082556][ T5911] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 872.214914][ T5918] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 872.269479][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'. [ 872.282036][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'. [ 872.303751][ T13] usb 4-1: Failed to submit usb control message: -71 [ 872.311423][ T5911] usb 4-1: USB disconnect, device number 71 [ 872.317714][ T13] usb 4-1: unable to send the bmi data to the device: -71 [ 872.326275][ T13] usb 4-1: unable to get target info from device [ 872.332784][ T13] usb 4-1: could not get target info (-71) [ 872.348358][ T13] usb 4-1: could not probe fw (-71) [ 872.384187][ T5918] usb 5-1: config 0 has no interfaces? [ 872.418845][ T5918] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 872.468709][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.512917][ T5918] usb 5-1: Product: syz [ 872.532721][ T5918] usb 5-1: Manufacturer: syz [ 872.547171][ T5918] usb 5-1: SerialNumber: syz [ 872.570212][ T5918] usb 5-1: config 0 descriptor?? [ 872.839490][T18301] syzkaller0: entered promiscuous mode [ 872.859080][T18301] syzkaller0: entered allmulticast mode [ 872.888214][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2333'. [ 872.897580][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.928665][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.006817][ T981] usb 5-1: USB disconnect, device number 34 [ 874.014946][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 874.104127][T18389] syzkaller0: entered promiscuous mode [ 874.135809][T18389] syzkaller0: entered allmulticast mode [ 874.344644][ T5904] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 874.404741][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 874.454607][ T5918] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 874.548711][ T5904] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 874.591045][ T5904] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 874.628250][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.661797][ T5918] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 874.672125][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.681045][ T5918] usb 2-1: Product: syz [ 874.699343][ T5904] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 874.737371][ T5918] usb 2-1: Manufacturer: syz [ 874.757788][ T5918] usb 2-1: SerialNumber: syz [ 874.815174][ T5918] usb 2-1: config 0 descriptor?? [ 875.050241][ T5918] usb 2-1: USB disconnect, device number 58 [ 875.238926][T18426] loop2: detected capacity change from 0 to 7 [ 875.256864][T18426] Dev loop2: unable to read RDB block 7 [ 875.266746][T18426] loop2: unable to read partition table [ 875.272683][T18426] loop2: partition table beyond EOD, truncated [ 875.284760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 875.301880][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.310313][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.329322][T18426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 875.488183][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 876.215113][ T5918] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 876.274791][ T5904] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 876.308460][ T5904] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 876.348979][ T5904] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 876.381076][ T5904] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 876.412423][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 876.481621][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 876.544193][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 876.601361][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 876.612639][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 876.626014][T18474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.660541][T18474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.684289][ T5918] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 876.715070][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.750013][ T5918] usb 5-1: Product: syz [ 876.762731][ T5918] usb 5-1: Manufacturer: syz [ 876.784321][ T5918] usb 5-1: SerialNumber: syz [ 876.815971][ T5918] usb 5-1: config 0 descriptor?? [ 876.856853][ T5918] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 876.895109][ T5918] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 877.126231][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.185165][ T5918] usb 6-1: USB disconnect, device number 67 [ 877.338992][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.164664][ T981] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 878.418446][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 878.482258][ T981] usb 6-1: config 0 has no interfaces? [ 878.531543][ T981] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 878.592292][ T981] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 878.624797][ T981] usb 6-1: Manufacturer: syz [ 878.686837][ T981] usb 6-1: config 0 descriptor?? [ 878.954643][ T981] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 879.189256][ T981] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 879.249127][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.275167][ T981] usb 2-1: Product: syz [ 879.291938][ T981] usb 2-1: Manufacturer: syz [ 879.304644][ T981] usb 2-1: SerialNumber: syz [ 879.383032][ T981] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 879.406551][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 879.899994][T18552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.966401][T18552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.066362][T18551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.142816][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 880.421859][ T981] usb 5-1: USB disconnect, device number 35 [ 880.501269][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 880.508899][ T981] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 880.559270][ T10] ath9k_htc: Failed to initialize the device [ 880.596306][ T981] omninet 5-1:0.0: device disconnected [ 880.722091][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 882.018421][ T5918] usb 6-1: USB disconnect, device number 68 [ 882.354098][T18594] x_tables: unsorted underflow at hook 4 [ 882.757960][T18601] fuse: Unknown parameter 'å¶0î]þQ>zo0/}Õbþ_i-m1…²@0:”´†ITˆ!aTxX½ Õ" {ƒ”zÌæUÖ$ïÌÌ4CêÕ\MY«÷Á1„vS*?\Šµ{Ô6äþ“;`‡¬²y 7N:0z€Tx¼líÿ“äeèå–3¼‘䗌̥äk' [ 882.974782][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 882.982636][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 883.016934][ T5904] usb 2-1: USB disconnect, device number 59 [ 883.106334][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 883.159782][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 883.245215][T18619] macvtap4: entered allmulticast mode [ 883.566555][T18638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.587178][T18638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.660744][T18638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.670563][T18638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.088235][T18653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2367'. [ 884.103846][T18651] xt_HMARK: spi-set and port-set can't be combined [ 884.504627][ T8734] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 884.679192][ T8734] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 884.702427][ T8734] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 884.742148][ T8734] usb 6-1: config 0 interface 0 has no altsetting 0 [ 884.762506][ T8734] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 884.806300][ T8734] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 884.832414][ T8734] usb 6-1: Product: syz [ 884.843589][ T8734] usb 6-1: Manufacturer: syz [ 884.857250][ T8734] usb 6-1: SerialNumber: syz [ 884.893013][ T8734] usb 6-1: config 0 descriptor?? [ 884.913798][ T8734] hub 6-1:0.0: bad descriptor, ignoring hub [ 884.927727][ T8734] hub 6-1:0.0: probe with driver hub failed with error -5 [ 884.977986][ T8734] usb 6-1: selecting invalid altsetting 0 [ 885.634022][T18659] usb 6-1: reset high-speed USB device number 69 using dummy_hcd [ 885.846822][T18659] usb 6-1: device firmware changed [ 885.900269][ T8734] usb 6-1: USB disconnect, device number 69 [ 886.134142][ T30] audit: type=1800 audit(1770412071.790:498): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2374" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=63644 res=0 errno=0 [ 886.494728][ T8734] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 886.654873][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 886.676647][ T8734] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 886.703502][ T8734] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 886.769568][ T8734] usb 6-1: config 0 interface 0 has no altsetting 0 [ 886.840815][ T8734] usb 6-1: string descriptor 0 read error: -22 [ 886.979087][ T8734] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 887.049163][ T8734] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 887.140292][ T8734] usb 6-1: config 0 descriptor?? [ 887.158174][T18742] xt_HMARK: spi-set and port-set can't be combined [ 887.178887][ T8734] hub 6-1:0.0: bad descriptor, ignoring hub [ 887.214263][ T8734] hub 6-1:0.0: probe with driver hub failed with error -5 [ 887.249482][ T8734] usb 6-1: selecting invalid altsetting 0 [ 887.324338][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 887.390479][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 887.473240][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.543587][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.543621][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.589145][ T10] usb 4-1: config 0 descriptor?? [ 887.625838][ T8734] usb 6-1: USB disconnect, device number 70 [ 887.708175][T18711] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 887.793915][ T5918] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 888.047296][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 888.095652][ T5918] usb 5-1: config 0 has no interfaces? [ 888.149404][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.168556][ T5918] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.188671][ T5918] usb 5-1: Manufacturer: syz [ 888.248797][ T5918] usb 5-1: config 0 descriptor?? [ 888.421107][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 889.829054][ T5918] usb 4-1: reset high-speed USB device number 72 using dummy_hcd [ 890.179801][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2387'. [ 890.299082][T18855] loop4: detected capacity change from 0 to 7 [ 890.324772][T18855] Dev loop4: unable to read RDB block 7 [ 890.338457][T18855] loop4: unable to read partition table [ 890.349664][T18855] loop4: partition table beyond EOD, truncated [ 890.366563][T18855] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 890.526867][T18866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.604291][T18866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.681914][T18866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.722778][T18866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.740124][ T10] usb 5-1: USB disconnect, device number 36 [ 890.793681][ T5195] Dev loop4: unable to read RDB block 7 [ 890.810518][ T5195] loop4: unable to read partition table [ 890.816809][ T5195] loop4: partition table beyond EOD, truncated [ 890.877110][T18881] xt_HMARK: spi-set and port-set can't be combined [ 890.928932][ T5911] usb 4-1: USB disconnect, device number 72 [ 891.284695][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 891.322913][T18904] syzkaller0: entered promiscuous mode [ 891.355662][T18904] syzkaller0: entered allmulticast mode [ 891.482749][T18915] ptrace attach of "./syz-executor exec"[18914] was attempted by "./syz-executor exec"[18915] [ 891.870391][T18931] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2399'. [ 892.092732][T18931] loop5: detected capacity change from 0 to 4096 [ 892.766712][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 892.959223][ T10] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 892.983175][ T10] usb 4-1: config 0 has no interface number 0 [ 893.016007][ T10] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 893.066644][ T10] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 893.101052][ T10] usb 4-1: config 0 interface 255 has no altsetting 0 [ 893.121644][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 893.163729][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.197949][ T10] usb 4-1: config 0 descriptor?? [ 893.216704][ T10] cp210x 4-1:0.255: cp210x converter detected [ 893.422614][T18939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.494441][T18939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.525723][ T10] cp210x 4-1:0.255: failed to get vendor val 0x370b size 1: -121 [ 893.546108][ T10] cp210x 4-1:0.255: querying part number failed [ 893.599664][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 894.013709][T18966] geneve2: entered promiscuous mode [ 894.093638][T18977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2404'. [ 894.188277][T18987] xt_HMARK: spi-set and port-set can't be combined [ 894.334804][ T5911] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 894.450296][T18998] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 894.466507][ T5911] usb 2-1: device descriptor read/64, error -71 [ 894.509025][T18998] netlink: 'syz.2.2407': attribute type 4 has an invalid length. [ 894.537095][T18998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.593288][T18994] block device autoloading is deprecated and will be removed. [ 894.724605][ T5911] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 894.794664][ T5918] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 894.865054][ T5911] usb 2-1: device descriptor read/64, error -71 [ 894.934667][ T5918] usb 6-1: device descriptor read/64, error -71 [ 894.975305][ T5911] usb usb2-port1: attempt power cycle [ 895.187018][ T5918] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 895.324675][ T5911] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 895.333887][ T5918] usb 6-1: device descriptor read/64, error -71 [ 895.355568][ T5911] usb 2-1: device descriptor read/8, error -71 [ 895.445420][ T5918] usb usb6-port1: attempt power cycle [ 895.518941][ T981] usb 4-1: USB disconnect, device number 73 [ 895.566451][ T981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 895.598715][ T5911] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 895.610085][ T981] cp210x 4-1:0.255: device disconnected [ 895.646011][ T5911] usb 2-1: device descriptor read/8, error -71 [ 895.764717][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 895.781912][ T5911] usb usb2-port1: unable to enumerate USB device [ 895.815561][ T5918] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 895.866495][ T5918] usb 6-1: device descriptor read/8, error -71 [ 896.124899][ T5918] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 896.169743][ T5918] usb 6-1: device descriptor read/8, error -71 [ 896.194810][ T5911] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 896.295181][ T5918] usb usb6-port1: unable to enumerate USB device [ 896.364656][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 896.377135][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 896.393194][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 896.421968][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 896.459267][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 896.505582][ T5911] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 896.522262][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.564467][ T5911] usb 4-1: Product: syz [ 896.573067][ T5911] usb 4-1: Manufacturer: syz [ 896.580254][ T5911] usb 4-1: SerialNumber: syz [ 896.637171][ T5911] usb 4-1: config 0 descriptor?? [ 896.676625][ T5911] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 896.699432][ T5911] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 896.936082][T19036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.976385][T19036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.197805][T19061] x_tables: unsorted underflow at hook 4 [ 897.391726][T19067] xt_HMARK: spi-set and port-set can't be combined [ 898.132401][T19086] netlink: 'syz.2.2420': attribute type 5 has an invalid length. [ 898.668123][ T8739] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 898.813459][T19115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.835651][T19115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.863040][T19115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.874899][ T8739] usb 5-1: Using ep0 maxpacket: 16 [ 898.907167][T19115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.917845][ T8739] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 898.960240][ T8739] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.007700][ T8739] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.035586][ T8739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.061845][ T8739] usb 5-1: Product: syz [ 899.082956][ T8739] usb 5-1: Manufacturer: syz [ 899.103273][ T8739] usb 5-1: SerialNumber: syz [ 899.157886][T19115] netlink: 'syz.2.2424': attribute type 5 has an invalid length. [ 899.184583][T19115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2424'. [ 899.474485][ T5904] usb 4-1: USB disconnect, device number 74 [ 899.539938][ T8739] usb 5-1: 0:2 : does not exist [ 899.553458][ T5904] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 899.576301][ T8739] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 899.627929][ T5904] omninet 4-1:0.0: device disconnected [ 899.721992][ T8739] usb 5-1: USB disconnect, device number 37 [ 899.889431][T13308] udevd[13308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.932431][T19164] x_tables: unsorted underflow at hook 4 [ 899.994674][ T5904] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 900.050125][T19169] xt_HMARK: spi-set and port-set can't be combined [ 900.176773][ T5904] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 900.195117][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.213469][ T5904] usb 4-1: config 0 descriptor?? [ 900.234864][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 900.254924][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 900.405641][ T981] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 900.419337][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 900.438434][T19193] netlink: 'syz.4.2434': attribute type 3 has an invalid length. [ 900.460851][T19140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.478029][T19193] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2434' resets device [ 900.488447][T19140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.574639][ T981] usb 6-1: device descriptor read/64, error -71 [ 900.780105][ T5904] gspca_sunplus: reg_w_riv err -110 [ 900.794662][ T5904] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 900.863088][ T5904] usb 4-1: USB disconnect, device number 75 [ 900.869959][ T981] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 900.887469][ T8739] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 900.962895][T19221] netlink: 'syz.4.2435': attribute type 12 has an invalid length. [ 900.984094][T19221] netlink: 'syz.4.2435': attribute type 29 has an invalid length. [ 901.009845][T19221] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2435'. [ 901.020118][T19221] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2435'. [ 901.035687][ T981] usb 6-1: device descriptor read/64, error -71 [ 901.048868][ T8739] usb 2-1: config 0 has no interfaces? [ 901.062283][ T8739] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 901.086571][ T8739] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 901.098508][ T8739] usb 2-1: Manufacturer: syz [ 901.127867][ T8739] usb 2-1: config 0 descriptor?? [ 901.227850][ T981] usb usb6-port1: attempt power cycle [ 901.574730][ T981] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 901.618489][ T981] usb 6-1: device descriptor read/8, error -71 [ 901.884620][ T981] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 901.925320][ T981] usb 6-1: device descriptor read/8, error -71 [ 902.060010][ T981] usb usb6-port1: unable to enumerate USB device [ 902.220065][T19241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 902.373863][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 902.959253][ T30] audit: type=1326 audit(1770412088.620:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 902.998737][ T30] audit: type=1326 audit(1770412088.620:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.114256][ T30] audit: type=1326 audit(1770412088.660:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.210345][ T30] audit: type=1326 audit(1770412088.660:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.359976][ T30] audit: type=1326 audit(1770412088.660:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.442395][ T8739] usb 2-1: USB disconnect, device number 64 [ 903.450688][T19271] x_tables: unsorted underflow at hook 4 [ 903.492914][ T30] audit: type=1326 audit(1770412088.740:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.644710][ T30] audit: type=1326 audit(1770412088.750:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.768611][ T30] audit: type=1326 audit(1770412088.750:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.885890][ T30] audit: type=1326 audit(1770412088.770:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 903.974610][ T30] audit: type=1326 audit(1770412088.770:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19252 comm="syz.3.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72e159aeb9 code=0x7ffc0000 [ 904.084775][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 904.598591][ T5904] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 904.914648][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 905.038340][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 905.120019][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.150748][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.190010][T19316] binder: 19313:19316 ioctl c0306201 0 returned -14 [ 905.199857][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 905.231283][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 905.296678][ T5911] usb 2-1: config 4 has an invalid interface number: 225 but max is 0 [ 905.321170][ T5904] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 905.349723][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.370460][ T5911] usb 2-1: config 4 has no interface number 0 [ 905.377375][ T5904] usb 4-1: config 0 has no interface number 0 [ 905.449703][ T5911] usb 2-1: config 4 interface 225 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 905.472105][ T5911] usb 2-1: config 4 interface 225 altsetting 129 endpoint 0x9 has an invalid bInterval 198, changing to 7 [ 905.507526][ T5911] usb 2-1: config 4 interface 225 altsetting 129 endpoint 0x9 has invalid maxpacket 1739, setting to 1024 [ 905.539974][ T5911] usb 2-1: config 4 interface 225 has no altsetting 0 [ 905.606883][ T5911] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=c1.60 [ 905.648110][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.659736][ T5911] usb 2-1: Product: syz [ 905.754719][ T5911] usb 2-1: Manufacturer: syz [ 905.772909][ T5911] usb 2-1: SerialNumber: syz [ 906.026451][T19306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.060263][T19306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.122236][ T5911] kvaser_usb 2-1:4.225: error -ENODEV: Cannot get usb endpoint(s) [ 906.193712][ T5911] usb 2-1: USB disconnect, device number 65 [ 906.258157][T19349] xt_HMARK: spi-set and port-set can't be combined [ 906.493633][T19356] x_tables: unsorted underflow at hook 4 [ 906.644863][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.669677][ T5904] usb 4-1: string descriptor 0 read error: -71 [ 906.689611][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 906.713976][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.766771][ T5904] usb 4-1: config 0 descriptor?? [ 906.789556][ T5904] usb 4-1: can't set config #0, error -71 [ 906.850414][ T5904] usb 4-1: USB disconnect, device number 76 [ 907.705116][ T5911] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 907.769367][ T5918] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 907.894912][ T5911] usb 6-1: config 0 has no interfaces? [ 907.920730][ T5911] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 907.955564][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 907.965076][ T5911] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 908.021269][ T5911] usb 6-1: Manufacturer: syz [ 908.046703][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.061710][ T5911] usb 6-1: config 0 descriptor?? [ 908.068872][ T5918] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 908.129751][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.162155][ T5918] usb 2-1: config 0 descriptor?? [ 908.191115][ T5918] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 908.359324][ T5904] usb 6-1: USB disconnect, device number 79 [ 908.406574][ T5918] usb 2-1: USB disconnect, device number 66 [ 908.655997][T19423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2465'. [ 909.245698][T19430] xt_HMARK: spi-set and port-set can't be combined [ 909.353570][T19433] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.2468'. [ 909.467608][T19439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.515360][T19439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.719350][ C0] hrtimer: interrupt took 31647 ns [ 911.092991][T19453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.131441][T19455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.737410][T19481] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2477'. [ 913.668496][T19507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2482'. [ 913.955394][ T8739] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 914.143084][ T8739] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 914.160186][ T8739] usb 4-1: can't read configurations, error -61 [ 914.314663][ T8739] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 914.508125][ T8739] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 914.530379][ T8739] usb 4-1: can't read configurations, error -61 [ 914.544563][ T8739] usb usb4-port1: attempt power cycle [ 914.918742][ T8739] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 914.926622][ T5918] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 914.959291][ T8739] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 914.981207][ T8739] usb 4-1: can't read configurations, error -61 [ 915.084583][ T981] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 915.096838][ T5918] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 915.108559][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.117078][ T5918] usb 2-1: Product: syz [ 915.121710][ T5918] usb 2-1: Manufacturer: syz [ 915.126836][ T5918] usb 2-1: SerialNumber: syz [ 915.134639][ T8739] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 915.142828][ T5918] usb 2-1: config 0 descriptor?? [ 915.194931][ T8739] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 915.202613][ T8739] usb 4-1: can't read configurations, error -61 [ 915.238391][ T8739] usb usb4-port1: unable to enumerate USB device [ 915.294969][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 915.332242][ T981] usb 5-1: config 0 has no interfaces? [ 915.362014][ T5918] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 915.382522][ T981] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 915.406160][ T981] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 915.424455][ T981] usb 5-1: Manufacturer: syz [ 915.440947][ T981] usb 5-1: config 0 descriptor?? [ 915.605011][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 915.722701][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2488'. [ 915.727928][T19573] netlink: 'syz.5.2488': attribute type 11 has an invalid length. [ 915.780285][T19576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.786292][T19576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.878015][T19576] syzkaller0: entered promiscuous mode [ 915.878052][T19576] syzkaller0: entered allmulticast mode [ 915.881025][ T8739] usb 5-1: USB disconnect, device number 38 [ 916.165553][T19622] overlayfs: missing 'lowerdir' [ 916.172547][ T5918] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 916.205933][ T5918] usb 2-1: USB disconnect, device number 67 [ 916.240429][T19622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 916.249453][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 916.519657][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2492'. [ 916.607327][T19639] xt_HMARK: spi-set and port-set can't be combined [ 917.684699][ T5918] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 917.872065][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 917.882237][ T5911] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 917.907249][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 917.934749][ T5918] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 917.934779][ T5918] usb 6-1: config 7 has no interface number 0 [ 917.942960][ T5918] usb 6-1: string descriptor 0 read error: -22 [ 917.943096][ T5918] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 917.943123][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.055166][ T5911] usb 2-1: device descriptor read/64, error -71 [ 918.294640][ T5911] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 918.444597][ T5911] usb 2-1: device descriptor read/64, error -71 [ 918.565214][ T5911] usb usb2-port1: attempt power cycle [ 918.893983][ T8739] usb 6-1: USB disconnect, device number 80 [ 918.910772][T19695] syzkaller0: entered promiscuous mode [ 918.915893][ T5911] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 918.942760][T19695] syzkaller0: entered allmulticast mode [ 918.956053][ T5911] usb 2-1: device descriptor read/8, error -71 [ 919.007705][T19711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2503'. [ 919.038278][T19695] binder: 19694:19695 ioctl c0306201 200000000040 returned -14 [ 919.058424][T19695] loop8: detected capacity change from 0 to 524287999 [ 919.189365][T19722] xt_HMARK: spi-set and port-set can't be combined [ 919.201729][ T5911] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 919.251364][ T5911] usb 2-1: device descriptor read/8, error -71 [ 919.382056][ T5911] usb usb2-port1: unable to enumerate USB device [ 919.382084][T19725] netlink: 'syz.2.2506': attribute type 11 has an invalid length. [ 920.068893][T19748] x_tables: unsorted underflow at hook 4 [ 920.252179][T19744] ipip0: entered promiscuous mode [ 920.311835][T19744] ipip0: entered allmulticast mode [ 922.352297][T19800] xt_HMARK: spi-set and port-set can't be combined [ 922.910593][T19813] loop2: detected capacity change from 0 to 7 [ 922.987440][T12748] Dev loop2: unable to read RDB block 7 [ 922.993106][T12748] loop2: unable to read partition table [ 923.015134][T12748] loop2: partition table beyond EOD, truncated [ 923.059011][T19813] Dev loop2: unable to read RDB block 7 [ 923.094626][T19813] loop2: unable to read partition table [ 923.100510][T19813] loop2: partition table beyond EOD, truncated [ 923.138962][T19813] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 923.174723][ T5195] Dev loop2: unable to read RDB block 7 [ 923.182388][ T5195] loop2: unable to read partition table [ 923.195594][ T5195] loop2: partition table beyond EOD, truncated [ 923.214784][ T5904] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 923.418572][ T5904] usb 2-1: config 0 has no interfaces? [ 923.461325][ T5904] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 923.498892][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.534990][ T5904] usb 2-1: Product: syz [ 923.552585][ T5904] usb 2-1: Manufacturer: syz [ 923.573534][ T5904] usb 2-1: SerialNumber: syz [ 923.621312][ T5904] usb 2-1: config 0 descriptor?? [ 923.907289][T19810] syzkaller0: entered promiscuous mode [ 923.934073][T19810] syzkaller0: entered allmulticast mode [ 923.956433][T19815] FAULT_INJECTION: forcing a failure. [ 923.956433][T19815] name failslab, interval 1, probability 0, space 0, times 0 [ 923.969189][T19815] CPU: 0 UID: 0 PID: 19815 Comm: syz.1.2524 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.969243][T19815] Tainted: [L]=SOFTLOCKUP [ 923.969252][T19815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 923.969266][T19815] Call Trace: [ 923.969275][T19815] [ 923.969285][T19815] dump_stack_lvl+0xe8/0x150 [ 923.969319][T19815] should_fail_ex+0x412/0x560 [ 923.969352][T19815] should_failslab+0xa8/0x100 [ 923.969379][T19815] kmem_cache_alloc_noprof+0x87/0x6e0 [ 923.969413][T19815] ? skb_clone+0x212/0x3a0 [ 923.969441][T19815] ? run_filter+0x23/0x270 [ 923.969471][T19815] skb_clone+0x212/0x3a0 [ 923.969498][T19815] ? packet_rcv+0x567/0x1720 [ 923.969526][T19815] packet_rcv+0x65b/0x1720 [ 923.969560][T19815] dev_queue_xmit_nit+0x5d5/0xad0 [ 923.969596][T19815] ? dev_queue_xmit_nit+0x2d/0xad0 [ 923.969633][T19815] dev_hard_start_xmit+0x1c1/0x7f0 [ 923.969682][T19815] __dev_queue_xmit+0x168f/0x3850 [ 923.969711][T19815] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 923.969753][T19815] ? __dev_queue_xmit+0x274/0x3850 [ 923.969796][T19815] ? __pfx___dev_queue_xmit+0x10/0x10 [ 923.969835][T19815] ? __copy_skb_header+0xa3/0x4a0 [ 923.969866][T19815] ? __asan_memcpy+0x40/0x70 [ 923.969894][T19815] ? __skb_clone+0x63/0x7a0 [ 923.969928][T19815] ? __skb_clone+0x483/0x7a0 [ 923.969964][T19815] ? skb_clone+0x246/0x3a0 [ 923.969998][T19815] __netlink_deliver_tap+0x5ad/0x850 [ 923.970034][T19815] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.970059][T19815] netlink_deliver_tap+0x19c/0x1b0 [ 923.970083][T19815] netlink_unicast+0x7e3/0x9b0 [ 923.970125][T19815] ? __pfx_netlink_unicast+0x10/0x10 [ 923.970156][T19815] ? __alloc_skb+0x193/0x390 [ 923.970182][T19815] ? netlink_sendmsg+0x650/0xb40 [ 923.970203][T19815] ? skb_put+0x11b/0x210 [ 923.970233][T19815] netlink_sendmsg+0x813/0xb40 [ 923.970267][T19815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.970294][T19815] ? aa_sock_msg_perm+0xf1/0x1b0 [ 923.970324][T19815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.970349][T19815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.970372][T19815] ____sys_sendmsg+0xa68/0xad0 [ 923.970401][T19815] ? __might_fault+0xaf/0x130 [ 923.970450][T19815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.970487][T19815] ? import_iovec+0x73/0xa0 [ 923.970521][T19815] ___sys_sendmsg+0x2a5/0x360 [ 923.970548][T19815] ? __lock_acquire+0x6b5/0x2cf0 [ 923.970586][T19815] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.970652][T19815] ? __fget_files+0x2a/0x420 [ 923.970673][T19815] ? __fget_files+0x3a0/0x420 [ 923.970707][T19815] __x64_sys_sendmsg+0x1bd/0x2a0 [ 923.970738][T19815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.970777][T19815] ? __pfx_ksys_write+0x10/0x10 [ 923.970829][T19815] do_syscall_64+0xe2/0xf80 [ 923.970851][T19815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.970887][T19815] ? trace_irq_disable+0x37/0x100 [ 923.970907][T19815] ? clear_bhb_loop+0x60/0xb0 [ 923.970932][T19815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.970953][T19815] RIP: 0033:0x7fc79259aeb9 [ 923.970973][T19815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.970991][T19815] RSP: 002b:00007fc7907f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.971014][T19815] RAX: ffffffffffffffda RBX: 00007fc792816090 RCX: 00007fc79259aeb9 [ 923.971029][T19815] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 923.971043][T19815] RBP: 00007fc7907f6090 R08: 0000000000000000 R09: 0000000000000000 [ 923.971056][T19815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.971068][T19815] R13: 00007fc792816128 R14: 00007fc792816090 R15: 00007fc79293fa48 [ 923.971101][T19815] [ 924.696422][T19815] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.749756][T19815] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 924.908240][ T8739] usb 2-1: USB disconnect, device number 72 [ 925.082950][T19909] xt_HMARK: spi-set and port-set can't be combined [ 925.564991][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 925.668625][T19938] ip6gre3: entered promiscuous mode [ 925.674226][T19938] ip6gre3: entered allmulticast mode [ 925.721954][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.775876][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.785076][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.835072][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.924827][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 926.724112][T19983] netlink: 'syz.2.2543': attribute type 10 has an invalid length. [ 926.776822][T19983] team0: Port device dummy0 added [ 926.796454][T19980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'. [ 927.086751][ T5911] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 927.271476][ T5911] usb 2-1: config 0 has no interfaces? [ 927.301142][ T5911] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 927.334231][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.359064][ T5911] usb 2-1: Product: syz [ 927.374710][ T5911] usb 2-1: Manufacturer: syz [ 927.389623][ T5911] usb 2-1: SerialNumber: syz [ 927.403010][ T5911] usb 2-1: config 0 descriptor?? [ 927.563806][T20027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.582833][T20027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.720940][T19985] syzkaller0: entered promiscuous mode [ 927.744304][T19985] syzkaller0: entered allmulticast mode [ 927.917088][ T8739] usb 2-1: USB disconnect, device number 73 [ 927.962925][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 927.981469][T20042] ip6gre4: entered promiscuous mode [ 927.988122][T20042] ip6gre4: entered allmulticast mode [ 928.016240][ T6680] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 928.024032][ T6680] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 928.044754][ T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 928.706014][T20065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2552'. [ 928.762513][T20069] netlink: 'syz.2.2552': attribute type 13 has an invalid length. [ 928.783371][T20072] loop2: detected capacity change from 0 to 7 [ 928.841416][T20072] Dev loop2: unable to read RDB block 7 [ 928.867191][T20072] loop2: unable to read partition table [ 928.899661][T20072] loop2: partition table beyond EOD, truncated [ 928.930409][T20072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 928.965240][ T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 929.024684][ T5904] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 929.125652][ T10] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 929.223485][ T5904] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 929.244401][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.253070][ T5904] usb 5-1: Product: syz [ 929.257722][ T5904] usb 5-1: Manufacturer: syz [ 929.262412][ T5904] usb 5-1: SerialNumber: syz [ 929.277137][ T5904] usb 5-1: config 0 descriptor?? [ 929.298811][ T5904] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 929.650817][ T981] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 929.704456][ T5904] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 929.856932][ T981] usb 2-1: config 0 has no interfaces? [ 929.895537][ T981] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 929.940754][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.961200][ T5904] usb 5-1: USB disconnect, device number 39 [ 930.000717][ T981] usb 2-1: Product: syz [ 930.045637][ T981] usb 2-1: Manufacturer: syz [ 930.050279][ T981] usb 2-1: SerialNumber: syz [ 930.114735][ T981] usb 2-1: config 0 descriptor?? [ 930.508911][T20093] syzkaller0: entered promiscuous mode [ 930.514458][T20093] syzkaller0: entered allmulticast mode [ 930.627957][T20153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.659540][T20153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.733198][ T5911] usb 2-1: USB disconnect, device number 74 [ 931.827729][T20191] loop2: detected capacity change from 0 to 7 [ 931.856585][T20191] Dev loop2: unable to read RDB block 7 [ 931.874122][T20191] loop2: unable to read partition table [ 931.894118][T20191] loop2: partition table beyond EOD, truncated [ 931.924238][T20191] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 932.244683][ C0] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 932.244722][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 932.498357][T20204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.518487][T20204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.225031][ T8739] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 934.396340][ T8739] usb 6-1: Using ep0 maxpacket: 16 [ 934.417170][ T8739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.430802][ T8739] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 934.446403][ T8739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.490257][ T8739] usb 6-1: config 0 descriptor?? [ 934.938323][ T8739] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 935.328429][ T981] usb 6-1: USB disconnect, device number 81 [ 936.084851][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.095398][T20281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.142431][T20281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.718987][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 936.719020][ T30] audit: type=1326 audit(1770412122.380:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20305 comm="syz.5.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359079aeb9 code=0x0 [ 936.748514][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 936.765118][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.771901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.084600][ T5904] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 937.289361][ T5904] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 937.323326][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.352410][ T5904] usb 6-1: Product: syz [ 937.364898][ T5904] usb 6-1: Manufacturer: syz [ 937.379698][ T5904] usb 6-1: SerialNumber: syz [ 937.409687][ T5904] usb 6-1: config 0 descriptor?? [ 937.434265][ T5904] f81232 6-1:0.0: f81232 converter detected [ 937.469078][ T5904] usb 6-1: f81232 converter now attached to ttyUSB0 [ 938.004819][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 939.801204][ T5904] usb 6-1: USB disconnect, device number 82 [ 939.859506][T20361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.869136][ T5904] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 939.936595][ T5904] f81232 6-1:0.0: device disconnected [ 940.064233][T20361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.178341][T20361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.305495][T20361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.565984][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 943.599287][T20429] xt_HMARK: spi-set and port-set can't be combined [ 943.652550][T20423] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 943.755417][T20430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.047244][T20521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.396288][ T981] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 950.544668][ T5911] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 950.617642][ T981] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 950.657457][ T981] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 950.726029][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 950.732660][ T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 950.763517][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.794915][ T5911] usb 4-1: config 0 has no interfaces? [ 950.804078][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 950.820301][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 950.829392][ T5911] usb 4-1: Manufacturer: syz [ 950.852517][ T5911] usb 4-1: config 0 descriptor?? [ 950.853063][ T981] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 950.926000][ T981] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.962858][ T981] usb 2-1: Product: syz [ 950.982002][ T981] usb 2-1: Manufacturer: syz [ 951.013008][ T981] cdc_wdm 2-1:1.0: skipping garbage [ 951.031990][ T981] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 951.236645][ T981] usb 2-1: USB disconnect, device number 75 [ 951.739441][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 951.820727][T20576] ip6gre3: entered promiscuous mode [ 951.859636][T20576] ip6gre3: entered allmulticast mode [ 951.911604][ T6083] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 951.964846][ T6083] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 951.972636][ T981] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 952.467803][T20589] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 952.502766][T20589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.780401][T20594] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 952.804775][ T5911] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 952.816238][T20594] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 952.894882][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 952.927942][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 953.043391][ T5911] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 953.071928][ T5911] usb 5-1: config 0 has no interface number 0 [ 953.101998][ T5911] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.160613][ T5911] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.224998][ T5911] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 953.255068][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.325784][ T5911] usb 5-1: config 0 descriptor?? [ 953.481605][ T10] usb 4-1: USB disconnect, device number 81 [ 953.797384][ T5911] uclogic 0003:5543:0522.0015: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input1 [ 953.824981][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 953.874715][T20626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.004989][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 954.116773][T20639] loop2: detected capacity change from 0 to 7 [ 954.126272][T20639] Dev loop2: unable to read RDB block 7 [ 954.132717][T20639] loop2: unable to read partition table [ 954.134789][ T5911] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 954.143086][T20639] loop2: partition table beyond EOD, truncated [ 954.182403][T20639] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 954.329271][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 954.342294][T20645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2633'. [ 954.397821][ T5911] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 954.422882][ T5911] usb 4-1: config 0 has an invalid interface number: 3 but max is 1 [ 954.472336][ T5911] usb 4-1: config 0 has no interface number 0 [ 954.543421][T20647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.552946][ T5911] usb 4-1: config 0 has no interface number 1 [ 954.589203][ T5911] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 954.599370][T20647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.608653][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.624609][ T5911] usb 4-1: Product: syz [ 954.628933][ T5911] usb 4-1: Manufacturer: syz [ 954.633629][ T5911] usb 4-1: SerialNumber: syz [ 954.696360][ T5911] usb 4-1: config 0 descriptor?? [ 955.008147][ T981] usb 4-1: USB disconnect, device number 82 [ 955.388974][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 955.409923][T20664] ip6gre4: entered promiscuous mode [ 955.420682][T20664] ip6gre4: entered allmulticast mode [ 955.437486][ T6083] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 955.461617][ T6083] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 955.469695][ T981] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 955.634833][ T981] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 955.917410][T20682] loop2: detected capacity change from 0 to 7 [ 955.938447][T20685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2644'. [ 955.947880][T20682] Dev loop2: unable to read RDB block 7 [ 955.953495][T20682] loop2: unable to read partition table [ 955.960495][T20682] loop2: partition table beyond EOD, truncated [ 955.974679][T20682] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 956.235450][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 956.269718][T20698] ip6gre5: entered promiscuous mode [ 956.285594][T20698] ip6gre5: entered allmulticast mode [ 956.687930][ T5911] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 956.856876][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 956.877990][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 956.914934][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 956.939177][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 956.959644][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 957.015901][ T5911] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 957.056360][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.073346][ T5911] usb 2-1: Product: syz [ 957.080923][ T5911] usb 2-1: Manufacturer: syz [ 957.099334][ T5911] usb 2-1: SerialNumber: syz [ 957.127602][ T5918] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 957.127618][ T5918] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 957.159902][ T5911] usb 2-1: config 0 descriptor?? [ 957.186084][ T5911] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 957.204778][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 957.213172][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 957.234697][ T8734] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 957.244374][ T5911] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 957.959663][ T8734] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.984699][ T5911] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 958.182554][T20740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.237686][ T5911] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 958.264975][ T5911] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 958.365279][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 958.420644][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 958.485345][ T5911] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 958.510888][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 958.584586][ T5911] usb 6-1: Product: syz [ 958.620328][ T5911] usb 6-1: Manufacturer: syz [ 958.671303][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 958.688666][ T8734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 958.707648][ T5911] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 958.728402][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 958.765520][ T8734] usb 4-1: Product: syz [ 958.775611][ T8734] usb 4-1: Manufacturer: syz [ 958.789924][ T8734] usb 4-1: SerialNumber: syz [ 958.941122][ T981] usb 6-1: USB disconnect, device number 83 [ 959.030844][ T8734] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 959.500235][ T5911] usb 2-1: USB disconnect, device number 76 [ 959.603786][ T5911] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 959.614750][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 959.634974][ T5911] omninet 2-1:0.0: device disconnected [ 959.746798][T20770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 959.769902][T20770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'. [ 959.987748][T20785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2658'. [ 960.112422][T20791] loop2: detected capacity change from 0 to 7 [ 960.121250][T20791] Dev loop2: unable to read RDB block 7 [ 960.139163][T20791] loop2: unable to read partition table [ 960.146643][T20791] loop2: partition table beyond EOD, truncated [ 960.152648][T20792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.153799][T20791] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 960.187650][T20792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.293380][ T5911] usb 5-1: USB disconnect, device number 40 [ 960.394613][ T981] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 960.484775][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 960.558971][ T981] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 960.575638][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.593682][ T981] usb 6-1: Product: syz [ 960.618727][ T981] usb 6-1: Manufacturer: syz [ 960.639084][ T981] usb 6-1: SerialNumber: syz [ 960.663401][ T981] usb 6-1: config 0 descriptor?? [ 960.735579][ T981] hub 6-1:0.0: bad descriptor, ignoring hub [ 960.743784][ T10] usb 4-1: USB disconnect, device number 83 [ 960.776828][ T10] usblp0: removed [ 960.781051][ T981] hub 6-1:0.0: probe with driver hub failed with error -5 [ 960.893111][ T981] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 961.055314][ T981] usb 6-1: USB disconnect, device number 84 [ 961.089043][ T981] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 962.014773][ T981] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 962.228711][ T981] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 962.285213][ T981] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 962.319678][ T981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 962.340112][T20844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.379910][ T981] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.452508][ T981] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.495933][ T981] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.515303][T20873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2671'. [ 962.524397][ T981] usb 6-1: Product: syz [ 962.539543][ T981] usb 6-1: Manufacturer: syz [ 962.547445][T20873] unsupported nlmsg_type 40 [ 962.575939][ T981] cdc_wdm 6-1:1.0: skipping garbage [ 962.587829][ T981] cdc_wdm 6-1:1.0: skipping garbage [ 962.601987][ T30] audit: type=1326 audit(1770412148.250:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338939aeb9 code=0x7ffc0000 [ 962.677262][ T30] audit: type=1326 audit(1770412148.260:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338939aeb9 code=0x7ffc0000 [ 962.677279][ T981] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 962.736696][T20882] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 962.747472][ T30] audit: type=1326 audit(1770412148.260:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 962.772344][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.798512][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.826867][ T30] audit: type=1326 audit(1770412148.260:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 962.879492][ T30] audit: type=1326 audit(1770412148.260:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 962.914397][T20889] x_tables: unsorted underflow at hook 4 [ 962.935987][ T30] audit: type=1326 audit(1770412148.260:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 962.994319][ T30] audit: type=1326 audit(1770412148.260:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 963.005356][ T981] usb 6-1: USB disconnect, device number 85 [ 963.030528][ T30] audit: type=1326 audit(1770412148.260:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 963.075141][ T30] audit: type=1326 audit(1770412148.260:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 963.103297][ T30] audit: type=1326 audit(1770412148.260:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20872 comm="syz.2.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f338939ab4b code=0x7ffc0000 [ 963.368064][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 963.395478][T20908] ip6gre4: entered promiscuous mode [ 963.401216][T20908] ip6gre4: entered allmulticast mode [ 963.410794][ T6094] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 963.425759][ T6094] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 963.436123][ T8734] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 963.689114][T20923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.994975][ T5911] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 964.119300][T20940] x_tables: unsorted underflow at hook 4 [ 964.132245][T20938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.254825][ T5911] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 965.320247][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 965.399989][T20952] ip6gre6: entered promiscuous mode [ 965.437293][T20952] ip6gre6: entered allmulticast mode [ 965.515735][ T13] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 965.524693][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 965.542760][ T13] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 965.550531][ T8734] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 965.624704][ T8734] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 965.904673][ T5911] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 966.044647][ T8734] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 966.079841][ T5911] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 966.088898][ T5911] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 966.099892][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 966.109284][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 966.128008][ T5911] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 966.138852][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 966.148987][ T5911] usb 6-1: Product: syz [ 966.153332][ T5911] usb 6-1: Manufacturer: syz [ 966.192459][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 966.198967][ T5911] cdc_wdm 6-1:1.0: skipping garbage [ 966.205693][ T5911] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 966.214615][ T8734] usb 2-1: Using ep0 maxpacket: 32 [ 966.234012][ T8734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.253845][ T8734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 966.265813][ T8734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 966.279915][ T8734] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 966.290999][ T8734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.313873][ T8734] usb 2-1: config 0 descriptor?? [ 966.321697][T20969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 966.349180][ T8734] hub 2-1:0.0: USB hub found [ 966.419249][ T5911] usb 6-1: USB disconnect, device number 86 [ 966.609287][ T8734] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 966.847913][T20969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.869585][T21023] xt_HMARK: spi-set and port-set can't be combined [ 966.885879][T20969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.961612][ T8734] usbhid 2-1:0.0: can't add hid device: -71 [ 967.004435][ T8734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 967.139225][ T8734] usb 2-1: USB disconnect, device number 77 [ 967.904641][ T5911] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 968.120157][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 968.154030][T21064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2703'. [ 968.166329][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 968.219236][ T5911] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 968.257902][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 968.296813][ T5911] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 968.361843][ T5911] usb 6-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 968.390225][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.421704][ T5911] usb 6-1: Product: syz [ 968.443464][ T5911] usb 6-1: Manufacturer: syz [ 968.467518][ T5911] usb 6-1: SerialNumber: syz [ 968.506223][ T5911] usb 6-1: config 0 descriptor?? [ 968.532208][ T5911] omninet 6-1:0.0: ZyXEL - omni.net usb converter detected [ 968.568584][ T5911] usb 6-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 968.724699][ T5904] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 968.724852][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 968.724901][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 968.867758][T21053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.906770][T21053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.524749][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 970.263979][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2707'. [ 970.273577][T21090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.290169][T21090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.356028][T21097] loop5: detected capacity change from 0 to 7 [ 970.376609][T13308] Dev loop5: unable to read RDB block 7 [ 970.392292][T13308] loop5: AHDI p1 p2 [ 970.416528][T13308] loop5: partition table partially beyond EOD, truncated [ 970.447104][T13308] loop5: p1 start 50331648 is beyond EOD, truncated [ 970.472318][T21097] Dev loop5: unable to read RDB block 7 [ 970.485950][T21097] loop5: AHDI p1 p2 [ 970.502336][T21097] loop5: partition table partially beyond EOD, truncated [ 970.520108][T21097] loop5: p1 start 50331648 is beyond EOD, truncated [ 970.758881][T21104] xt_HMARK: spi-set and port-set can't be combined [ 971.039620][T21109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.100614][T21109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.601713][ T5911] usb 6-1: USB disconnect, device number 87 [ 971.621258][ T5911] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 971.636837][ T5911] omninet 6-1:0.0: device disconnected [ 972.259350][ T8734] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 972.444902][ T8734] usb 2-1: Using ep0 maxpacket: 16 [ 972.463541][ T8734] usb 2-1: config 0 has no interfaces? [ 972.496910][ T8734] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.553844][ T8734] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.592523][ T8734] usb 2-1: Manufacturer: syz [ 972.617971][ T8734] usb 2-1: config 0 descriptor?? [ 975.458254][T21231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.707094][ T5911] usb 2-1: USB disconnect, device number 78 [ 975.764747][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 975.814610][ T8734] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 976.014575][ T8734] usb 4-1: Using ep0 maxpacket: 32 [ 976.074710][ T8734] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 976.120750][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.159734][ T8734] usb 4-1: Product: syz [ 976.164059][ T8734] usb 4-1: Manufacturer: syz [ 976.210941][ T8734] usb 4-1: SerialNumber: syz [ 976.283566][ T8734] usb 4-1: config 0 descriptor?? [ 976.312559][ T8734] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 976.534618][ T5911] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 976.836940][ T5911] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 976.945602][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.983387][ T5911] usb 6-1: config 0 descriptor?? [ 977.280288][ T5911] ath6kl: Failed to read usb control message: -71 [ 977.307737][ T5911] ath6kl: Unable to read the bmi data from the device: -71 [ 977.330356][ T5911] ath6kl: Unable to recv target info: -71 [ 977.345676][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 977.362470][ T5911] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 977.394781][ T5911] usb 6-1: USB disconnect, device number 88 [ 977.526585][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.565125][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.594760][T21235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.615728][T21235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.638648][T21235] binder: 21234:21235 ioctl c00c620f 200000000140 returned -22 [ 977.663987][T21282] loop2: detected capacity change from 0 to 7 [ 977.676962][T21282] Dev loop2: unable to read RDB block 7 [ 977.684681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 977.694852][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 977.712632][T21282] loop2: unable to read partition table [ 977.726654][T21282] loop2: partition table beyond EOD, truncated [ 977.740474][T21282] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 978.264790][ T8734] gspca_ov534_9: reg_r err -110 [ 978.554715][ T8734] gspca_ov534_9: Unknown sensor 0000 [ 978.554790][ T8734] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 979.023701][ T5904] usb 4-1: USB disconnect, device number 84 [ 979.414972][ T5904] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 979.564987][ T40] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 979.594545][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 979.654532][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 979.706487][ T5904] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 979.746448][ T5904] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 979.789971][ T5904] usb 4-1: Product: syz [ 979.794815][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 979.819207][ T5904] usb 4-1: Manufacturer: syz [ 979.826684][ T40] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 979.870089][ T5904] usb 4-1: SerialNumber: syz [ 979.897855][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 979.991029][ T5904] usb 4-1: config 0 descriptor?? [ 980.001816][ T40] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 980.040838][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.094804][ T40] usb 5-1: Product: syz [ 980.099111][ T40] usb 5-1: Manufacturer: syz [ 980.154568][ T40] usb 5-1: SerialNumber: syz [ 980.192972][ T40] usb 5-1: config 0 descriptor?? [ 980.212322][ T40] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 980.275126][ T40] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 980.394426][ T5904] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 980.438256][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2740'. [ 980.467431][T21358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.486206][T21358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.527875][T21358] xt_HMARK: spi-set and port-set can't be combined [ 980.573234][T13308] udevd[13308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.739806][T21363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.800354][T21363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.847099][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 980.847126][ T30] audit: type=1326 audit(1770412166.490:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21370 comm="syz.2.2742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f338939aeb9 code=0x0 [ 981.056228][T21373] binder: binder_mmap: 21370 200000ff0000-200000ffd000 bad vm_flags failed -1 [ 981.133625][ T30] audit: type=1326 audit(1770412166.780:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21370 comm="syz.2.2742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f338939aeb9 code=0x0 [ 981.408424][T21376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.425235][ T40] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 981.440189][ T40] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 981.455882][ T40] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 981.474741][T21376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.506720][ T40] em28xx 5-1:0.0: No AC97 audio processor [ 981.551460][T21376] fuse: Bad value for 'user_id' [ 981.565790][T21376] fuse: Bad value for 'user_id' [ 981.662260][ T10] usb 4-1: USB disconnect, device number 85 [ 981.906776][T21394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2745'. [ 981.972719][T21399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2745'. [ 982.068076][T21398] IPv6: sit1: Disabled Multicast RS [ 982.114413][T21398] sit1: entered allmulticast mode [ 982.481954][T21416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.567791][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 982.647447][T21420] ip6gre5: entered promiscuous mode [ 982.699983][T21420] ip6gre5: entered allmulticast mode [ 982.731435][ T5904] usb 5-1: USB disconnect, device number 42 [ 982.815440][ T5904] em28xx 5-1:0.0: Disconnecting em28xx [ 982.827448][ T5904] em28xx 5-1:0.0: Freeing device [ 983.444639][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 984.024682][ T5904] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 984.131007][ T5911] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 984.264748][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 984.292796][ T5904] usb 5-1: config 0 has no interfaces? [ 984.337371][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.362617][ T5904] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.395279][ T5911] usb 2-1: config 0 has no interfaces? [ 984.401801][ T5904] usb 5-1: Manufacturer: syz [ 984.413482][ T5911] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 984.436540][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.468290][ T5904] usb 5-1: config 0 descriptor?? [ 984.504418][ T5911] usb 2-1: Product: syz [ 984.524895][ T5911] usb 2-1: Manufacturer: syz [ 984.556568][ T5911] usb 2-1: SerialNumber: syz [ 984.589803][ T5911] usb 2-1: config 0 descriptor?? [ 984.724805][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 984.724808][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 984.935330][T21449] syzkaller0: entered promiscuous mode [ 984.941113][T21449] syzkaller0: entered allmulticast mode [ 985.336753][ T5904] usb 2-1: USB disconnect, device number 79 [ 985.364754][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 986.554639][ T5904] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 986.591193][ T981] usb 5-1: USB disconnect, device number 43 [ 986.744829][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 986.756401][ T5904] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 986.789833][ T5904] usb 2-1: config 1 has no interface number 0 [ 986.817398][ T5904] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 986.854541][ T5904] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 986.873907][T21540] x_tables: unsorted underflow at hook 4 [ 986.894699][ T5904] usb 2-1: config 1 interface 105 has no altsetting 0 [ 986.915873][T21542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2760'. [ 986.934884][ T5904] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 986.961113][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.982081][ T5904] usb 2-1: Product: syz [ 986.987162][ T5904] usb 2-1: Manufacturer: syz [ 986.991817][ T5904] usb 2-1: SerialNumber: syz [ 986.995240][T21542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2760'. [ 987.013874][T21522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.031475][T21522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.449427][T21522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.476775][T21522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.592451][T21563] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2765'. [ 987.924708][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 988.305959][ T5904] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 988.730638][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 989.214856][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 993.053278][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 993.061072][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 993.210373][ C0] sched: DL replenish lagged too much [ 993.710799][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 998.514977][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.536545][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.414543][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1016.088247][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1018.654925][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1019.933769][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1026.966807][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 1027.608002][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1049.372109][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1054.496646][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1054.504487][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1059.781488][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.801657][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.853554][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1080.086174][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1080.102231][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1090.328875][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1092.264428][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1092.271426][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21438/1:b..l [ 1092.280072][ C1] rcu: (detected by 1, t=10503 jiffies, g=124049, q=876096 ncpus=2) [ 1092.288171][ C1] task:syz.2.2751 state:R running task stack:27000 pid:21438 tgid:21436 ppid:12748 task_flags:0x40054c flags:0x00080001 [ 1092.303027][ C1] Call Trace: [ 1092.306353][ C1] [ 1092.309326][ C1] __schedule+0x14ea/0x5050 [ 1092.313911][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.318894][ C1] ? __pfx___schedule+0x10/0x10 [ 1092.323772][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.328756][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1092.333819][ C1] irqentry_exit+0x597/0x620 [ 1092.338456][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.344474][ C1] RIP: 0010:lock_release+0x2d7/0x3a0 [ 1092.349792][ C1] Code: 75 52 11 00 00 00 00 eb b5 e8 c5 8e f6 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 2f 52 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 da 72 f9 09 cc 48 8d 3d 52 e7 51 [ 1092.369423][ C1] RSP: 0018:ffffc90004ca7280 EFLAGS: 00000282 [ 1092.375508][ C1] RAX: 757d99fe00b38700 RBX: 0000000000000202 RCX: 0000000000000046 [ 1092.383477][ C1] RDX: 0000000000000000 RSI: ffffffff8df34b56 RDI: ffffffff8c073a00 [ 1092.391443][ C1] RBP: ffff888084b1a9b0 R08: 0000000000000022 R09: ffffffff8e55a360 [ 1092.399428][ C1] R10: ffffc90004ca73d8 R11: ffffffff81afb170 R12: 0000000000000000 [ 1092.407427][ C1] R13: 0000000000000000 R14: ffffffff8e55a360 R15: ffff888084b19e80 [ 1092.415398][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1092.421575][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1092.426690][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 1092.431802][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1092.436909][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.442974][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1092.449127][ C1] arch_stack_walk+0x11b/0x150 [ 1092.453903][ C1] stack_trace_save+0xa9/0x100 [ 1092.458672][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1092.464079][ C1] ? truncate_inode_pages_range+0xcf0/0xe30 [ 1092.469969][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1092.475174][ C1] kasan_save_stack+0x3e/0x60 [ 1092.479841][ C1] ? kasan_save_stack+0x3e/0x60 [ 1092.484680][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1092.490050][ C1] ? call_rcu+0xee/0x890 [ 1092.494291][ C1] ? __destroy_inode+0x2da/0x670 [ 1092.499225][ C1] ? evict+0x8a7/0xb10 [ 1092.503305][ C1] ? __dentry_kill+0x1a2/0x5e0 [ 1092.508065][ C1] ? finish_dput+0xc9/0x480 [ 1092.512560][ C1] ? __fput+0x691/0xa70 [ 1092.516714][ C1] ? task_work_run+0x1d9/0x270 [ 1092.521474][ C1] ? do_exit+0x69b/0x2310 [ 1092.525836][ C1] ? do_group_exit+0x21b/0x2d0 [ 1092.530601][ C1] ? get_signal+0x1284/0x1330 [ 1092.535304][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1092.541020][ C1] ? exit_to_user_mode_loop+0x86/0x480 [ 1092.546475][ C1] ? do_syscall_64+0x2b7/0xf80 [ 1092.551232][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.557319][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1092.562516][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 1092.567976][ C1] call_rcu+0xee/0x890 [ 1092.572057][ C1] ? preempt_count_add+0x91/0x190 [ 1092.577080][ C1] ? bpf_inode_storage_free+0x3f3/0x5b0 [ 1092.582622][ C1] __destroy_inode+0x2da/0x670 [ 1092.587382][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1092.592581][ C1] evict+0x8a7/0xb10 [ 1092.596510][ C1] ? __pfx_evict+0x10/0x10 [ 1092.600921][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1092.606116][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1092.610956][ C1] ? iput+0xcc2/0x1020 [ 1092.615089][ C1] __dentry_kill+0x1a2/0x5e0 [ 1092.619686][ C1] ? finish_dput+0xad/0x480 [ 1092.624200][ C1] finish_dput+0xc9/0x480 [ 1092.628527][ C1] __fput+0x691/0xa70 [ 1092.632517][ C1] task_work_run+0x1d9/0x270 [ 1092.637102][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1092.642211][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1092.647320][ C1] do_exit+0x69b/0x2310 [ 1092.651487][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1092.656412][ C1] ? kmem_cache_free+0x195/0x610 [ 1092.661347][ C1] ? __pfx_do_exit+0x10/0x10 [ 1092.665949][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1092.670977][ C1] do_group_exit+0x21b/0x2d0 [ 1092.675568][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.680763][ C1] get_signal+0x1284/0x1330 [ 1092.685299][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1092.690848][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1092.697003][ C1] ? do_sys_openat2+0x168/0x220 [ 1092.701858][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 1092.707059][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1092.712340][ C1] ? rcu_is_watching+0x15/0xb0 [ 1092.717098][ C1] do_syscall_64+0x2b7/0xf80 [ 1092.721681][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.727737][ C1] ? trace_irq_disable+0x37/0x100 [ 1092.732753][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1092.737450][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.743334][ C1] RIP: 0033:0x7f338939aeb9 [ 1092.747747][ C1] RSP: 002b:00007f338a195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1092.756163][ C1] RAX: 0000000000000008 RBX: 00007f3389616090 RCX: 00007f338939aeb9 [ 1092.764127][ C1] RDX: 0000000000004043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1092.772125][ C1] RBP: 00007f3389408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1092.780115][ C1] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 1092.788078][ C1] R13: 00007f3389616128 R14: 00007f3389616090 R15: 00007f338973fa48 [ 1092.796091][ C1] [ 1095.450981][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1095.458780][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1095.458863][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 1100.588804][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!