last executing test programs: 17m1.143546093s ago: executing program 1 (id=23): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0xfffffffffffffffe) 17m0.918477587s ago: executing program 1 (id=24): r0 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003020000402505a1a4400000000101091b3b000101000000090400001202060000052406000005240000000d240f01000000000010000000090582020002fd0000090503020002000000"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = socket(0x2b, 0x1, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x20000000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) timer_gettime(r3, &(0x7f0000001040)) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00bb0f006f00"/16], 0x0, 0x0, 0x0}, 0x0) 16m57.631430264s ago: executing program 1 (id=38): mlockall(0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000200025a726bd7000050000000a0000cdff000001020001000800060000000000050016001d"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) close_range(0xffffffffffffffff, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x660cc1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) socket$inet6(0x10, 0x3, 0x9) r7 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r7], 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x7, 0x6, 0x66d, 0x6, 0xfffffffffffffff3, 0xc, 0x6}, &(0x7f0000000380)={0x4, 0xfde, 0x5, 0x100, 0x3, 0x7fff, 0x7fffffff, 0x1}, &(0x7f0000000440)={0x6, 0x1000000000000, 0x5, 0x0, 0x9, 0xd4e, 0x935, 0xffffffffffffff56}, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) socket(0x11, 0x2, 0x10000) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) capset(&(0x7f0000000100)={0x20080522, r8}, &(0x7f00000001c0)={0xe82b, 0x9, 0x0, 0x40, 0x4, 0x101}) io_setup(0x0, &(0x7f0000000000)) 16m54.923489727s ago: executing program 1 (id=52): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, {0x1, 0xddccb000, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x0, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd, 0xfd}, {0x1000, 0x0, 0x8, 0x0, 0x70, 0x80, 0xfc, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x3000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0x8, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0x4, 0x6, 0x0, 0x0, 0x4}, {0x100000}, {0xeeee0000, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1000000000000001, 0x1801, 0x10000, [0x0, 0x0, 0x10000, 0x100000005]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) move_mount(r1, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 16m53.623810405s ago: executing program 1 (id=56): socket$kcm(0xa, 0x3, 0x87) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4004004) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f00000006c0)=""/128, 0x80}, {0x0}], 0x3}, 0x102) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000200), 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m53.330806837s ago: executing program 1 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16m52.234588702s ago: executing program 32 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m36.212136031s ago: executing program 0 (id=813): madvise(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)={0x4, 0x0, [{0xad2, 0x0, 0x3}, {0x561, 0x0, 0x9}, {0xc0011882, 0x0, 0x4}, {0xa24, 0x0, 0xfffffffffffffff8}]}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r3, &(0x7f00000001c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000061c0), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000006300)={0x0, 0x0, &(0x7f00000062c0)={&(0x7f0000006240)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x44490) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x80000000}) 13m35.713379639s ago: executing program 0 (id=815): syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002e977f508c70b02007c9e01020b0109022400010f01e0100904"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fca"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 13m33.789125647s ago: executing program 0 (id=820): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x40}}, 0x20000000) 13m33.616317321s ago: executing program 0 (id=822): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x100000001, 0x2, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, r3, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0x10001}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x3000) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) 13m33.132366048s ago: executing program 0 (id=826): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x400, 0xf9, 0x0, 0x2}, {0x9, 0x5, 0x9, 0x2, 0x10, 0x8, 0x9, 0x3}, {0x9, 0x5, 0x1, 0x3, 0x200, 0x6, 0x1, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x10, 0x22, {0x22, 0x23, "34e712c1210019308871011519d852313e6681de8b75f15e54936788ef449873"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000100)={0x20, 0x17, 0x9a, "17840894b78a2e77611e6dc5ff170567d779dc5cd3a2ead1047af2afef538bb784fc9b805769e9b0406f3a22e2e965e29a973998f5930f571fd60286559b5a62199d7ff5940c39f7dc1f4da7de69b6fc9b7105ef4af7337b5fecb3616961ecc6b2badd1d8f70ce1b9690086de524283647022d3a034da20d5be20f52402cf7e59ad6d795c69f5c40e1cdad1b17c5104bb66cdc4ee9e8aab24dba"}, &(0x7f00000001c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000600)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 13m30.728341762s ago: executing program 0 (id=835): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x361040, 0x0) fadvise64(r0, 0x85f5, 0x5, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x34, 0x0, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x8, 0x85, 0x0, 0x102, 0x401, 0x3, 0x5, 0x8, [0x80000005, 0x9]}}) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4080) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x201f00) capget(&(0x7f0000005a80)={0x19980330}, 0x0) fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) 13m29.998151361s ago: executing program 33 (id=835): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x361040, 0x0) fadvise64(r0, 0x85f5, 0x5, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x34, 0x0, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x8, 0x85, 0x0, 0x102, 0x401, 0x3, 0x5, 0x8, [0x80000005, 0x9]}}) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4080) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x201f00) capget(&(0x7f0000005a80)={0x19980330}, 0x0) fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) 12m37.216100247s ago: executing program 2 (id=1035): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000280)={0x70, 0x100003}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 12m36.911935227s ago: executing program 2 (id=1037): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}}) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r2, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r7, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000157040000000000000000010000e252be5748c8caecf2620e6eca15106fcb45059063f8f64e5fde628fd8d2b44731872d0fc2af8d083d199dac49f922722f996f5fa2", @ANYRES32=0x0, @ANYBLOB="0000000000020000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0xd}, 0x44050) 12m35.857720015s ago: executing program 2 (id=1045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000700000000000019078ac1e0001ac1414aa0c0090780000000045800000000000000089000000000000ac141400443c0001ac1e0001000000000000000000000000ac1414aa000000000000200000000000ac14140000000000ffffffff00000000ac1414010000000000000000"], 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000005c0)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001980)=""/124, 0x7c}, {&(0x7f00000016c0)=""/60, 0x3c}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/26, 0x1a}, 0x800}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x80, 0x0, 0x0, &(0x7f0000001ec0)}, 0x3}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/113, 0x71}, {&(0x7f0000002000)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/125, 0x7d}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001a00)=""/171, 0xab}], 0x7, &(0x7f0000001b80)=""/191, 0xbf}}], 0x4, 0x40000000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40800c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/112, 0x70}], 0x6}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x0, 0x0, 0x0, 0x2, 0x9b, &(0x7f0000001c40)=""/155, 0x41000, 0x80, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) socket$kcm(0x10, 0x2, 0x4) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 12m33.646436667s ago: executing program 2 (id=1057): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x401}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xac, 0xc, 0x89, {0xa, 0x25, 0x25, 0xffffffff, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x15, 0x1, 0x4, {0xa, 0x25, 0x25, 0x1, 0xb3, 0x2}}}}}}}}]}}, 0x0) (async) r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x401}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xac, 0xc, 0x89, {0xa, 0x25, 0x25, 0xffffffff, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x15, 0x1, 0x4, {0xa, 0x25, 0x25, 0x1, 0xb3, 0x2}}}}}}}}]}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0xe7e, 0x2) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0xe7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/vmstat\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) close(r3) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_connect$midi(0x4, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0xcc}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12m32.980682366s ago: executing program 2 (id=1061): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000806900000426bd7000ffdbdf250000290f2f0000000000000800010001"], 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="5613a1bc4d1e4743f378d98d64787db1c8f2c26cb12355", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect(0x1, 0x45e, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x6c, 0x6f, 0x47, 0x40, 0x7b8, 0x9271, 0xa7a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44c, 0x1, 0x8, 0xe, 0x40, 0x3, "", [{{0x9, 0x4, 0xe0, 0x2b, 0x10, 0xe8, 0x73, 0x57, 0x8, [@hid_hid={0x9, 0x21, 0x5243, 0x1, 0x1, {0x22, 0x5}}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x6, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xac}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x0, 0x77, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3a, 0x4}, @generic={0x22, 0x22, "17941834492aee535b49538ff530db05eacf2ae5e92bc62220316fcffc62374b"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x9, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0xb4}]}}, {{0x9, 0x5, 0x5, 0x19, 0x0, 0x80, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xd4, 0x44, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3df, 0x1, 0x3d, 0x6, [@generic={0x4e, 0x6, "eab944ecc10bd9bb387b0878a4bf8cfaafa54494d2925a8c5464a0a9a0fc8626a3591ab4f305145b1ca42547c930bc5803c4eff00f9c69ba8cd59e1d5e6dbd406ee6a59417f734a0789eb619"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x8, 0x5, 0xb5, [@generic={0x2, 0x30}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x80, 0x2, 0x6, [@generic={0xe7, 0x22, "ee442e3d55f28688dad0b17528e4ffd9fac34daf7ad759c5ee8fb889fdf33a27734a608930f5a44a65648c7e14c5e3785ed71d3188cacefda23a6638f8751b4725cff9cff36aa9467cc4a43f79d03d371d3af745c8846b08d502e6d084141f06471805cacfebc20ec5799488f611151aaf57beedf83e80cff19e37024d1609ee46bcb649a1944160419f9b7835cab1d8ffa906d630eaec31d41f34c975ebcffa25eb462e0fbe9ffb4a6df8991372ddb69de6f5286a3531d1320c76aa851018f505e8583eb102fbfd4059581ae990fff27673ef59a1fb4ae6edfe5da64b9aa50cce26191ae5"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x27, 0x1, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc6, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc6, 0xe}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0xc0, 0x3, 0x9, [@generic={0xe5, 0x7, "2be17d73d18f031a26cd104e0638a6e727b7bb486199df77b95a3d01b0dcbc1a48036c8c1e34d789ae1ba3311d952b0e85ae67d773caaad229bf63e48f1cff532567d67d603ee37c4f0d8f4b8526128a05a2b43d3dcf191497b5c6eaee4ff5c1d575669d0fd5e0ac9910e2f07a04f69246c3395b262604713fd1b096f0153b053d81ba2aa613df7e919082e1a3a18a6e31cd54a30851e90f6a678f62ebb7ef9b847aa6693334796d31902597160b1b69238efafca2e642a170369ee157b5ebd8fd92bdc1680f137ac1487c6fc898bc0d6d2406b07a648af8f67dfa86183ea1ee157c5f"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x81, 0xe, 0x1a, [@generic={0x31, 0x11, "6c709f5d42fee1175b69d3e163a1bac6551b36ea853b8ac7157aa00e192378330466b022a4b5aff079957abeeccd29"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xce, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xfeff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8303a457a92e041a, 0x8, 0x2, 0x5, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x23a8}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x79, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xf42186c9a60771e1, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7, 0xe4, 0x5, [@generic={0xd0, 0xd, "5f1acc710e77fa7102360e5f8981e116fcefb2e8c279b4771a96b6cac74eee145766c4322d3f6b6b86be888b77a3e6935ad955cdf1b6961d83449265f5933ba10fbbf6d1d7e1ae5315d93a52a9cb1fe3b991a450165c57f194d96ad215e7d9c5e446a3102ef8136c9a1fa05a2d3ab75f4c3bbd531ae5ed3129f23f7fd293c45c18023cd3b64e999995f3188b57430de7dc00a351b133860028a5752650d850531eb105a64e92227cf2bdcf272b4b6bf1178c06f82a3d24c2ef272c3ff9f5418cf21ec320593372a2d2aa4835ad77"}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x9, 0xb, 0x3, 0x8, 0xab}, 0x19, &(0x7f0000000b40)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x47, 0xf00, 0x15, [0xc0, 0xff3f00]}]}, 0x2, [{0x78, &(0x7f0000000b80)=@string={0x78, 0x3, "9a7059bdd2e6e0c9a1dabbcdf002732d8de032bdf941d6651f46747ea84f2a300192153d6f4dfeac4c35b6a19f1b007d8e956983da8114bfae7451b3eb63b2ebe0f7cf94ddabbe6cfd6ba0bd2181bdf8a10e39d46eb8c1cfd35c34c4f8a4055f4461422e80f440601eff65e0dadce6db912c9df76993"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xe2, 0x3, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x90, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x20, 0x9, 0xd, 0x8}, 0x124, &(0x7f0000000240)={0x5, 0xf, 0x124, 0x4, [@generic={0x42, 0x10, 0x4, "6a1957666bfad0d7045bfd0384445c09c26c2705bb87fbee872a6ea5b3e6286dbeb48c21bc8dcecbc058885eb36ad30e56b99e78f20375eb7a2c3bd98963bf"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xda, 0x3, 0x9, 0x9}, @generic={0xc8, 0x10, 0x2, "ce873f79e492c787392e9c81b469d4d31ba096349b214c4771090f5ea556b0313432c2c7dfc3219e8d043176d9fc04b51c76f339a308527a71dccbaf68d3375a3d71b42820a410e8e1a84b5a6e33bcec20c61317f7b70a37e950ade7950029422f4ab7ef4f004b2319ffdb845e6417746858ef916d091ef9343c5f8c65d62f44355cf729a839c0580c6e0b8b3ba6f123d9e0e991b73288e3cf045df519cbd755567c70afd142d62d246c38f7ce313cddf4e34bea831cd899dc0ae3a356c1f7bc46cd47fd5a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xba, 0x6, 0x2}]}, 0x8, [{0x82, &(0x7f0000000440)=@string={0x82, 0x3, "42e98265b429caae2e280a19cf96433eaf40a51c78842a17ac2d674bf62f6fb89b501e860239919a49ac4afd94cfafd1d3c3b96189003e132b02498f2cbdd0541e8d07091c10fbb5e49e33e6d93d01c0efe99bf941aad821aab94d3afdd9c6bd18ae32910b768701a6a329b13fe3e60f45e2332911ba18ded401d39ed3247f50"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x280a}}, {0xe1, &(0x7f0000001140)=@string={0xe1, 0x3, "5f6bd324dd8a10bd45e538a9209e6579690592ef7cbfb0c2091bc741a53d69850844fa071ec24833b020d3da41087fa39976f677a1b03a8266a3ef39efb18ddc00515549a48c08587836c962346ea7ab141f8ad1f7b922d1709cbc39e9435e62aeb34d0631e467b068e43eea1978e0200c0378e0a2448833394c357b3a1d8f8b8b18178352df12c087c0b22c4ff38a31cd86f69cfec5ab2e2c47e72adefdd59b26ff82512b45691bdede8b9844051dbba0b63348a2d548ae338ec5d9c777eb68f09f7e15b9bfe6ce6495b7e287dc003fcf77cab5c3b8a6f7ae850161b0f896"}}, {0x14, &(0x7f0000001240)=@string={0x14, 0x3, "de15e636710bf0084e88dfd1c533f34cbbe3"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0xc0c}}, {0xad, &(0x7f00000012c0)=@string={0xad, 0x3, "fc787a30829f17b3be5894481b12d8ced645cf2992a686b07e8940fb9b104144186d6627d6fd2277323c6c528d1e11d062b22dc30be20f47c8178ae579f2cf50800bf6a1e4e0853a55f2f08412cb8cb884afb96018f460470aa3d2802da3e30aa18461013bee7fc89a45f5f94250cc6d3aeff3f754be489afa9c7073fc48e47d021c43b8f89b05a3e81e78516741fcc382e748c02fd3f50c7143ce05e9cf951570dcb894bb0c797629a189"}}, {0x2, &(0x7f0000001380)=@string={0x2}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000e40)={0x24, &(0x7f0000000c80)={0x0, 0x9, 0xe0, {0xe0, 0x2, "76a06d3b3b918b833f0ef4fcf80f2c5586bb5766bd1a3a3443e53bd38aaad1e4633f885b9c0e448861d842930208f37b33cb459ca04244ee62f41d3713cf55dca94539c52e6a92f16be77c1c8dcbd67cff98a5b33e6f19de28906aa2ca103bc88ce8c35f0a71383226749225515b535978ed81b0e54e0c4266e22c0aeb8ac19db6a3a294ffa88c097f2e9954f1977a2d0acee43b04dba4bf304f35efa1288a7a970212f37b468c580503c8739a23cbf906df33aacd01d50998099f37525be50ec5b980dc968eed18223d246290a741cddd778fd083bd8cea47f313789e7b"}}, &(0x7f0000000d80)={0x0, 0x3, 0x35, @string={0x35, 0x3, "76a1b834c2595e137505d92bc52180f60a8a4009928933f9fca065cb4eb75d39136afc1ac55d6dc40df0e3230a47b274248ad4"}}, &(0x7f0000000dc0)={0x0, 0x22, 0x20, {[@global=@item_4={0x3, 0x1, 0xa, "290c0999"}, @local=@item_4={0x3, 0x2, 0x2, "fdef9568"}, @main=@item_4={0x3, 0x0, 0x8, "6dde6efa"}, @main=@item_012={0x1, 0x0, 0x4, 'e'}, @local=@item_4={0x3, 0x2, 0x0, "93f43846"}, @global=@item_4={0x3, 0x1, 0x9, "eab4afa4"}, @local=@item_4={0x3, 0x2, 0x4, "b1835950"}]}}, &(0x7f0000000e00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xf92}}}}, &(0x7f0000001100)={0x2c, &(0x7f0000000e80)={0x20, 0x17, 0xcb, "4acf69a6369b5cb11dd14931087a502b507a4c5f531272a922df1876ca781501b0abe970087ab8306d056335f67caa5c16bf3ac8dc954c799ea0d44354f0355461d4f9ecdeff1e5e9743400a046f0240b6cdc1ad135aec1d2367a7ba4ae78bdf2881c005ab482ca77946c59e0e8b730d1a8ba648e26d4d54512f00a23d31e2ffdac584ca6b2fadae05a4c74054835d5e42e3e2472bf68004fe9b0db66e6e4bc7c40fa339d70bf18cb4dad671f91374e5281ed51497aedae0ea9af101bfd2597630337950eb53de1f9ad2e8"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001000)={0x20, 0x1, 0x84, "1b4dc917cf1a9454babe3f5976d692e900179c72cc3f135c9be3fd2dfab24d377dad656a719e57f456915e2fd9c1206938c7b77bfa17b6b7e5c2c466322e1c69eee546e9690a780ab6021e22ae71afc7dcd5d4e94d33d6207c9559d50b8ae6f2e5e6dccbb69f7da167d2c8200d17554477d75399c25ee0029240d097988ba1122546084a"}, &(0x7f00000010c0)={0x20, 0x3, 0x1, 0x4}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB='\b'], 0x90}}, 0x0) 12m30.159984267s ago: executing program 2 (id=1071): syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000600)={0x0, 0x7, 0x180, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x142, 0x104) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000240)=0x27) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x10, 0x32314d48, 0x8, 0xc, [{0x0, 0x8}, {0x7, 0xd}, {0x8, 0x6}, {0x1, 0x8001}, {0x2802, 0x4}, {0x3ff, 0xffff}, {0x10000, 0xffffffff}, {0x7, 0x401}], 0xf9, 0x2, 0x1}}) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000500)="eb107706a5c083407f18eb883c67dd793b20f24c3be64759d164b8289e03000000000000000e085ea3415b6b88ee8096b59fe5", 0x33, 0x0, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x3d, r0, &(0x7f00000003c0)="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", 0xfc, 0x0, 0x0, 0x3, r9}]) 12m14.825923127s ago: executing program 34 (id=1071): syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000600)={0x0, 0x7, 0x180, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x142, 0x104) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000240)=0x27) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x10, 0x32314d48, 0x8, 0xc, [{0x0, 0x8}, {0x7, 0xd}, {0x8, 0x6}, {0x1, 0x8001}, {0x2802, 0x4}, {0x3ff, 0xffff}, {0x10000, 0xffffffff}, {0x7, 0x401}], 0xf9, 0x2, 0x1}}) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000500)="eb107706a5c083407f18eb883c67dd793b20f24c3be64759d164b8289e03000000000000000e085ea3415b6b88ee8096b59fe5", 0x33, 0x0, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x3d, r0, &(0x7f00000003c0)="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", 0xfc, 0x0, 0x0, 0x3, r9}]) 9m5.980954139s ago: executing program 6 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x4810) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x80000000, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7ff, @mcast1, 0x400}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x2}, @sadb_address={0x5, 0x5, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}]}, 0x70}, 0x1, 0x7}, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r3 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010070080904000001020d0000052406000105240000000d240f0100000000000000000006241a00000808241cff010100000905810700000000000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564dff}]}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x90000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000540)="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", &(0x7f00000000c0)=""/172, &(0x7f0000000180)="7500fdeae13d62597d4dca072e95a4daa68386d097cee74c230e5cd24501445e0a4f79d52ad3a1e8a52c54788e107ee4f0802b2ca5262aa55e566845", &(0x7f0000000240)="66322824e5709be3ddf897d006240a98030000000000000008baf85ad256f37c22808b217b1d95214f24864845b64a949e06e04e421be0a31ed76404cbed925c8daa4a47b74e0b6f7f8c2199a6a92b40c35b47c33cbbcae3dc4309a9b094454edc0da84234edb97e65545d336169ce90f6290abc6b7443dc575147e61c3b15fac80b88f812491302fe7c09008fe885567129f7c6852cde56d738712a00f6831419abdc5e175ab53c8c38037826", 0x7f, r7, 0x4}, 0x38) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x11, 0x10, 0x9, 0x10, 0x5d, 0xfff9, 0x10, 0x80, 0x10, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 9m2.754704469s ago: executing program 6 (id=1910): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRESDEC=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "f29bb5e32f88697c0dfb1007ec2de9f43a9f1aee"}]}, @NFT_MSG_NEWRULE={0x1d8, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x12c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2a}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x98, 0x7, 0x1, 0x0, "ee42e3b760f66043bcc13b4d5dab2d6b49c7502af0f0a4142238df23a1c9f16f42a56b39305990f44851669788f24c415956db2b37ba1949b986bfd3d593ac7dca9f89fcdd583b46b449af846f0362759c8b58a206d57314e1895a295e23a250325957eea5d7873e8405f8af9f69d7ecc7bb87c19d8ff9178ed5cc1b2f01d54c437a170100e27efe314f86e42c60c111eed20cea"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x24c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) getsockopt$bt_hci(r8, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 8m59.487381533s ago: executing program 6 (id=1921): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec77a000) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 8m59.270766737s ago: executing program 6 (id=1922): write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x80}}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c80)="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", 0x6e3}], 0x1}}], 0x1, 0x4000000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 8m58.132428578s ago: executing program 6 (id=1929): mmap$xdp(&(0x7f0000f91000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf090}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x3, 0xa4fffffc, @rand_addr=' \x01\x00'}}}, 0x108) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r2, 0x0, &(0x7f0000f92000/0x6000)=nil, 0x6000, 0xb}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c000280080006400000000308000340000000000800024000000002080004400000000008000540000000001400000011000100000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x48046}, 0x0) r7 = signalfd4(r1, &(0x7f0000000080)={[0x2]}, 0x8, 0x80800) write$P9_ROPEN(r7, &(0x7f0000000480)={0x18, 0x71, 0x1, {{0x80, 0x4, 0x7}, 0x6}}, 0x18) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r3, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) 8m57.750756246s ago: executing program 6 (id=1931): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRESDEC=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "f29bb5e32f88697c0dfb1007ec2de9f43a9f1aee"}]}, @NFT_MSG_NEWRULE={0x1d8, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x12c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2a}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x98, 0x7, 0x1, 0x0, "ee42e3b760f66043bcc13b4d5dab2d6b49c7502af0f0a4142238df23a1c9f16f42a56b39305990f44851669788f24c415956db2b37ba1949b986bfd3d593ac7dca9f89fcdd583b46b449af846f0362759c8b58a206d57314e1895a295e23a250325957eea5d7873e8405f8af9f69d7ecc7bb87c19d8ff9178ed5cc1b2f01d54c437a170100e27efe314f86e42c60c111eed20cea"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x24c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) getsockopt$bt_hci(r8, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 8m56.801856838s ago: executing program 35 (id=1931): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRESDEC=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "f29bb5e32f88697c0dfb1007ec2de9f43a9f1aee"}]}, @NFT_MSG_NEWRULE={0x1d8, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x12c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2a}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x98, 0x7, 0x1, 0x0, "ee42e3b760f66043bcc13b4d5dab2d6b49c7502af0f0a4142238df23a1c9f16f42a56b39305990f44851669788f24c415956db2b37ba1949b986bfd3d593ac7dca9f89fcdd583b46b449af846f0362759c8b58a206d57314e1895a295e23a250325957eea5d7873e8405f8af9f69d7ecc7bb87c19d8ff9178ed5cc1b2f01d54c437a170100e27efe314f86e42c60c111eed20cea"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x24c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) getsockopt$bt_hci(r8, 0x84, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 34.372574499s ago: executing program 8 (id=4149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x48, 0x2, 0x400, 0x9, 0x4, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r4, 0x400, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x80}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) r6 = getpgrp(0x0) ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f00000001c0), 0x1004) dup3(r5, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(r7, &(0x7f0000000240)=' ', 0x1) close(r7) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)="32146209b9216800a5b68b8cba88d59a9cb21cb9482886ab8b501b12d3d805d4de3c0d192acc206ffa2c15de1b1692b2c3e9966e58a486257402452b6d6d27583f18d13cb2886042432379a729391fa0736dbc35976739f8968dbf8d82a5d49e4a2b18baaffd34aceb9a17455952c7af14278b86bc15c5cee0dae016", 0x7c}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001005010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000208000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003aedf28516143783aac28415d7e1c13ae4000000002080004400000002205"], 0x108}}, 0x0) 31.663164534s ago: executing program 8 (id=4160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8081, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140)) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 31.282299508s ago: executing program 8 (id=4162): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000080000000d", @ANYRESHEX], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_vif\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_vif\x00') socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) getdents64(r4, &(0x7f0000002f40)=""/4097, 0x1001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) (async) recvmsg$can_bcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000166d6271763c8ebf000000000000000000"], 0x48) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000f3000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000f3000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 30.600853117s ago: executing program 8 (id=4164): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x115) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) 30.470927153s ago: executing program 8 (id=4166): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56741, 0x70b92b, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) (async) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0xf9, 0x6, @multicast}, 0x14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0x5, 0xa, 0x2, 0x0, 0x81}) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) (async, rerun: 64) mlockall(0x6) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x54) (async, rerun: 64) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000bc0)="27050200590200000600002fb96dbcf706e1050007008100", 0x18}], 0x1}, 0x200048c4) (rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2882, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x80000000000000) ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000000)={0x7ff, 0x6}) (async) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 29.836468861s ago: executing program 8 (id=4167): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) brk(0x800) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) copy_file_range(r3, 0x0, r3, 0x0, 0x7, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x400000002000) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 29.059075719s ago: executing program 36 (id=4167): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) brk(0x800) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) copy_file_range(r3, 0x0, r3, 0x0, 0x7, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x400000002000) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 12.056978054s ago: executing program 4 (id=4221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xb}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, "9d"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, '3'}]}}, 0x0}, 0x0) 10.15802988s ago: executing program 4 (id=4225): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000200)=0xffff, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @loopback}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x8911, &(0x7f00000003c0)={0xffffffffffffffff}) getpgid(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c"], 0x14) getpid() getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000a00)={0x0, 0x1000, "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"}, &(0x7f0000001a40)=0x1008) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000001a80)={r2, @in6={{0xa, 0x4e23, 0x6, @private1, 0x3}}}, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r4, 0x2c93a000) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc4c85512, &(0x7f0000000b80)={{0x5, 0x3, 0x10, 0xfffffffc, 'syz1\x00', 0x1}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r6) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r1, &(0x7f0000002180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002140)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x134, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x455b8eab}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x702e048f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ef5aba2}]}, @NFTA_CHAIN_USERDATA={0xc5, 0xc, "79cc22b35f44d2f3a1038f424eb786508293e4d6bb861a0fa45ee302ae62b78d60f62324e4dde3ee908974d1130c169e63288faf3d64e58f23541936579c3a53a473d86cd88b06e26882422fad80f6b07ff515206ffc92884ad8140974863802f340dbaef61f5a8a89e63ca5dd2b868648a877d537090368b03adf7fbbbaa4723e2aa9ed47416b41dee6bd8f8d56b46d92744ea7f3b39d6155dda1d15be6a8a9c6d7183f17cc269158e77190ebe4faa04b1491d32ba04198069f27ae62712b02ea"}]}, @NFT_MSG_DELCHAIN={0xa0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56568ded}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x754c0345}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32355224}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2bb29003c50185e, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3fdc863e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5efb39f3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWTABLE={0x2fc, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xc6, 0x6, "ba39f4ebc2cab387f7ef9fd8e9af085790ea72dab70e88011d9c148bc8a64b07f3e3b2cdd548f7ff1313680f136c456955b125554108b1f477e6623494635b0f19767804c2c976b70c80c1d4549ec758b722a9f058e236a357e7baf5ccee7424d3d3214acf48ae337b9c65a24ddbe2a5b573c4179c0a2418303986b307aedc57a3fd2760675ea1c4b0e909a5fb92f7a7aa2ed572ad163e27891cc1fb66d821df5b8d1ad7f02d7cea875d1ef16c4135c462eebe35fdc7defea16978a8eb17722efe37"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "4f6cb6ad6be8b357e10e09e166168d5b0c6b0df010d222ee36a1d7f1641090667b3f08094af9ca1f1bec33d06ed11eaa35b990a16ec18082300672cad2790cb7e85b0c6f68808bbce450536b21bd9d7af9a78ea0454b77fcf3a83667ed5f62c77be29353f1895cdf4164d864dc86f021d9babce0e8bd3c10907064f00f4c51313cfce2b5f51bf47b47011500f2294a113a1118044ecb0dd7cd1aa2d202cf1be0d9bb166dc8446a592aed5bd0df5203aaf1e5404fe5a838d5822c8ab75d6e27b3523fd6efc97947e649e4e3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "1b83c5f9367d7abdc8267171aa8745d493982a86d51b47f56674f4874306b9a034c0278b7fa31897cdd52b8e0a4240fefc13d13ddb60f3ac09944f14a695c5ab36d3140d757bf15e79223faff589e0d9040d26b8294fd6d18bfc9a655105b51a8cce240e659d27191f63a84cabc0b4a7b0b8c24e3c8caf6eeee3ae8a4f4495da137e1d3f94c173c6a1d8aed8e10779dda795ba6359b0126f60f19f70fd90"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "8fd21e495c9d87ac0583459abd832a9ee5fa0e1be4c3f3d155cd05a4839e910073cde0599a3c2eb419da93b422d50d8685cfa564d8d8cf2ad5d857d69f93420df634940c5ce65d26b2193d9b31914600306130f1290a4b57b09dcee5aea29b05ce32f4aeb1bf73e61d69cf698f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5dc}}, 0x20044010) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 9.632377369s ago: executing program 4 (id=4229): close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KDMKTONE(r1, 0x4b30, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r1, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x0, 0x7, 0x4}, {{0x77359400}, 0x2, 0x9, 0x8001}, {{0x0, 0xea60}, 0x1f, 0xe0, 0x1}, {{r2, r3/1000+10000}, 0x1, 0x65c5, 0x400}, {{0x0, 0xea60}, 0x17, 0x0, 0x80000001}, {{}, 0x16, 0x0, 0xf}], 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) 8.26604999s ago: executing program 7 (id=4237): r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @sco, @generic={0x1, "03e8d2cb0869fd83708b3534b450"}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='batadv_slave_1\x00', 0x1, 0xffff, 0x6}) syz_emit_ethernet(0x56, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @empty, @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0x38, 0x1, 0x0, 0x0, "8574c0914b7df6478378e698061bcd16c5dcba06ff7e2a0dd2b63623af9d5f19045b54d1c6c900e1330a62b7e1d4d852cf5e5c89e09ccfb9b99f9d9ed882352c"}}}}, &(0x7f00000008c0)={0x1, 0x1, [0xe77, 0xa12, 0x9fd, 0x3c7]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x5, 0x40, 0x95, 0x4}, {0x0, 0x6, 0xc, 0x7}, {0x3, 0xd, 0x3, 0xcbd}, {0x0, 0x4, 0x7, 0x7}, {0x40, 0x0, 0xec, 0x6}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000007c0)=""/146, 0x92}], 0x3) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x94}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r4, 0x200000004, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'macvtap0\x00', &(0x7f0000000300)=@ethtool_eee={0x45, 0x80000001, 0x6, 0x9, 0x2dc, 0xa, 0x1, 0x1, [0x1000, 0x7]}}) unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x1, @time={0x80000001}, 0x3, {0x80, 0x6}, 0x4, 0x0, 0x7}) 8.164279714s ago: executing program 4 (id=4238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 8.115684964s ago: executing program 7 (id=4240): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x3, 0x6000, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc8c4049c, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd", @ANYRES32, @ANYBLOB="0810040064010102080001007f00000108000200ac14143d080002007f00000108fe0100e00000020800090003010000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000801) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x108}}], 0x2, 0xc040) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000100)={0x1, 0x7c, 0xfffffffffffffffd, 0x1, 0xffffffff}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) 7.956842956s ago: executing program 4 (id=4241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x14f600, 0x40) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/198, 0xc6}], 0x1, 0x1, 0x2, 0x5) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0x41e}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f0000902000/0x2000)=nil, 0x2000, 0x0, 0x40, 0x1) 7.475500936s ago: executing program 9 (id=4244): keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) socket(0x26, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000380)="0ff55e6212122385f23f6e2953608c7efdaf0682030cb28772ef745339ba25290edc158dfcadde2d056f2bc5e98ca5d5e40774420a26580e4d918d088572bc6d0f07b2e36e478edee8312f5f8256a0142775a285", 0x54, 0xfffffffffffffffe, 0x0, 0x2}]) r3 = socket(0x400000000010, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x70, 0x0, &(0x7f0000001040)) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0x5}, {0x2, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0xfe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4000800) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018888) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0300f3ffffff00000000000000000001000000001d03129d9ff9558a73740251dbd8a5def76158196f60dbb718749129d1ec68b290d5299c8876b723add6b78f5c5cc9117a16f7d474b133e08f32", @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000020000000200"/28], 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xd7fd, 0x8}, 0xc) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) fanotify_mark(0xffffffffffffffff, 0x90, 0x40102000, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x4b7, 0x2, 0x0, "bc57499e007105bf0000000100100000e403000000000000000040002100", 0x31435750}) move_mount(r10, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f00000000000000000000000000000000000000c60b632ed7175f543ae966a025487d3000049779de325c38ac76251b470860251e9f", @ANYRES32=r7, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004823f1a8c47b66b9b8a964c0936e7062d000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x6e) 7.080477577s ago: executing program 9 (id=4245): rseq(&(0x7f0000000280), 0x20, 0x5, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x108) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x121a82, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, &(0x7f0000000300)) sendfile(r1, r0, &(0x7f0000002700)=0x21, 0x5) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000007400000000608000640000000090500030006000000850b3706fe46598baa6e95a653f22e77b8947409dd0c88f9350e2d9fa95152da5cb78120f7ca69a1e162e206f3787e767c3388ce039eca2e4dfc52b352b5c00f6795fa66ca6753ac48da517092ac4cc624f1b750404435719c1e2ac210e66328bf2e4865116acc8646188df5a9f3b407e314bceb728ff5abb61e0221877f129bb19e641221806ea989ea71503afec4777ba23f48a0fb0e40c2e77ea4b4b4d7fbaaa5d0848435cc987eb53de565f75f4e92f287fef1445a753aa3e93b4e6afe0ac21ea920019155523696827ebeb2e2870b5cde4124fbd6d0bb7d"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$mixer_OSS_GETVERSION(r7, 0x80086303, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getpriority(0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newchain={0x74, 0x64, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {0xfff2, 0xfff1}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x81, 0x22}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8d4e}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xeb, 0xcc}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8000000}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004845) timer_gettime(0x0, &(0x7f00000000c0)) 6.116725681s ago: executing program 9 (id=4247): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x34da6f4d84227d26) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001300)={0x100000000, 0x3, 0x4, 0x4, 0x2, 0x0, [{0x0, 0x1, 0x10000, '\x00', 0x168c}, {0x4424, 0x4, 0x66323650, '\x00', 0x8}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x9, 0x101, 0x7fff, 0x8, 0x2, 0x357322d9}, 0x0, &(0x7f0000000240)={0x9, 0x8, 0x1, 0x80000000, 0xffffffff, 0x3, 0x8, 0x7fff}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000013c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r4], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) select(0x40, &(0x7f0000001400)={0x3, 0x5, 0x0, 0x8, 0x7fffffffffffffff, 0x2, 0x6, 0xfffffffffffffff7}, &(0x7f0000001440)={0x0, 0x6, 0x9, 0x7, 0x5, 0x13e, 0x0, 0x9}, &(0x7f0000001480)={0x4, 0x8eaa, 0x1, 0x0, 0x0, 0x2, 0x7, 0x7}, &(0x7f00000014c0)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001340)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000001500), 0x10) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f00000010c0)=ANY=[@ANYBLOB="12011007000000876b1d01014000010203010902bb000301eee0050904000000010100000a24012d0c5c000201020924030202030203080c240206040404080400010911240601050508000900050005000700090d24080503000a42664e67d5a10c2408040200005ec22d24aa1324060605060600010004000a00080005000409040100000102000009040101010102000009240201081b03710409050109100002030b0725010403040009040200000102000009040201010102000009058209200002100707250100f59303"], &(0x7f0000001280)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0x3, 0x4d, 0x9, 0x20, 0x1}, 0x2e, &(0x7f0000001200)={0x5, 0xf, 0x2e, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0x2, 0x9, 0x3ab, 0x8e}]}, 0x1, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x65}}]}) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x48200) ioctl$VIDIOC_QUERYMENU(r10, 0xc02c5625, &(0x7f0000000080)={0x7, 0x7ff, @value=0xe230}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, 0x0, 0xd}, 0x94) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.684030919s ago: executing program 7 (id=4248): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0xa, 0x300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x145400, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x30040, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={0x0, 0x6, 0x10, 0x10, 0x1, [0x0, 0x0], [0x7, 0x1000, 0xa, 0x4], [0x3, 0x7, 0x8, 0x300000], [0x1000, 0xc17, 0x7354]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={r5}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000400), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x0, r9, 0x3c}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f2", 0x1}, {&(0x7f0000000000)="a00870c64ef8363a61296088fb", 0xd}], 0x2}, 0x4011) 5.411017858s ago: executing program 7 (id=4250): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000100)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) inotify_init() renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESDEC=r1, @ANYBLOB="f5ff0f0b000020b21c0012000c00010700005dfcf02783805820000000080100013090cc0f6c4c437ba667ee74e8d229035b326f04290ac47e81ad97e7ef256dd1a8a810f26623dc365c73324f420732c3d88022f2e1575488d82a2e4d6452f70267ea230060bee3a199fe816e0fd219458d0c377b09b2f2f23abf87ebe3b443e385738ad48c78b94d56180a34cb334c6c5597d961f52bf8efe8cac47d827a1801f53292e6aa374bd65e193004cb037722e6812c5b5047aa"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000340)={@mcast2, 0x32}) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0xfffffffffffffc8c, &(0x7f0000000040)="005ecd066795a5cc346b28") 5.022412325s ago: executing program 5 (id=4252): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, '.\x00'}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x200, 0x70bd2c, 0x4, {{}, {@void, @val={0xc, 0x99, {0x40, 0x67}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x28000}, 0x40) 4.664002323s ago: executing program 5 (id=4254): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10056, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a002, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0xb56e2e3f2d9728b3, 0x48, 0x8001, 0x0, 0x9, 0x100000003, 0x6, 0xfa11, 0x65aa}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r6, 0x80047437, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x84d40, 0x0) 3.909434435s ago: executing program 3 (id=4255): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={r7, r7}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000004340)={0x18, 0x0, 0x0, {0x200}}, 0x18) sendmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)="b4", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc020) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x90020, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 2.923986265s ago: executing program 3 (id=4256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3f, 0x517, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400fac8715cb84ceb2b0604687927f41575f7b1005347c61d20f2d168294f2a03b37df1bceec2a0d38ab209db19888481e3e13fa50f0df30d7ba806014cc0a8fc8c1452a316818759ed159453808131b7319e0b0d8b917614a40c8acda7c3ebce8474f7aea1f105000000bc155fb51c32c59d65b6691063ea34f71d47e2ef5ff147a150f9590b50622a74e9dafe77390cc8a7624d671b62b9020299c911eee5811e47f7ea1df67790f900a914782dd4723ebeb129fa4e53d6d39a72b89584d350352dbc7297cee2f5ba7cfd0ef2830d03a3a20d880532dc97ffbb5cae548addd0aec05927f6217341f3ce", @ANYRES16=r2, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x4, 0x8, 0xfffffff8, 0x3}) 2.75997132s ago: executing program 9 (id=4257): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f00000002c0)=""/174, 0xae, 0xe0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000090a010401000000000000000a0000040900010073797a3100000000080005400000002b140000001136010000000000000000000100000a"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd27, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.588262391s ago: executing program 3 (id=4258): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xb, 0x1}, {0xffe8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x24, 0x4, 0x9, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2040806}, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'vlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) 2.138541666s ago: executing program 9 (id=4259): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x153a08600, &(0x7f0000000040), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x6, &(0x7f00000027c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x8, 0xff7f, r1, &(0x7f0000001340)="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", 0x1000, 0x2, 0x0, 0x7, r1}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000023c0)="f870b5860509018b9563cce47dcb1000000000000000fe0400b4f7a85e4691b4cd", 0x21, 0xff, 0x0, 0x3, r1}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000002440)="d0ffe98a0d2141b6ab68cee32366135c087b7841a6013434ffe54021bdf6d21376c33eda07537ba0f0600c588428ca321426b2110f46c6d965af3c4d7ef843b311463b3e331b2b5170c5f2f6ef1d67ad52408994e306b867123f1749364a6a32af466f6b5cd9bee16b3650b44b8c6da739d6a24ce56e88d53008c7fbcbc44b59e09a26a779fe554765e62a8641d464ec3c5a96d510969944fdde0671db59b5405d1b73cd7fabc70a0cf7b927725bded42e945c85db817bae98de2555f7a234e01968882ac6fcda4b", 0xc8, 0x7, 0x0, 0x0, r1}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000002580)="5e72f54648d844cd772597c1c5ccd6f375197441d1c662b1343bf318408e9776ec8d3bfaa06a14b7f41c3c0799818177954fd755ac2aa050c2ee903ddca7539b080bd3aa62888bcb3bb79b8c31bf7457e4b718152f466ae0239ba3f0aa036304914ebca7efc291a31153921cab39046fa3b4db9a2aca3625ad6a8444436d7ce9f52e7866fad6a82175bee3d5fd96fd4efe5cdf09ed60262cc77a634680d8412d948e17a0df385652f0f44f5d3eb0192c5404bd64897a9cdc6730828ebb8970145db4f7c90415c79e63b77f6569c852eca84fd0493f1697b245d321f49c84892d4ebcd6c5bfb8b8e0429d6eac600baff9f91592b649bf45eb8c06f5a9c4c0", 0xfe, 0x3, 0x0, 0x1, r0}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f00000026c0)="8184cc0e4c7730982e22fab5687935a303d1bd50eeb6d3059fb488ae0abbcafe899fe41764ae9a6865be82495ef9930bb684163fe0b50d8f35e7f953ac7d3c2c171c31510498399134fdc9acb964b68716d0f6b28d80109415e7f3aff20157c191365652b343c35bddb4b478cfebd486051f1331b2289f6f21d100dc7e8eda1abaedda64defa95a6cd2ee91583c0859f3abe", 0x92, 0x2, 0x0, 0x3, r1}]) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r2}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpgrp(r9) r11 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r11, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r11, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r11, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000540)={0x40, 0x31, 0x1, 'U'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r11, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x82, 0x1, '!'}, 0x0, 0x0, 0x0}) (async) kcmp(r10, r9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) splice(r0, 0x0, r8, 0x0, 0x80, 0xe) (async) write$cgroup_devices(r8, 0x0, 0x9) write(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRES32], 0x0) 1.989615095s ago: executing program 4 (id=4260): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x7, 0x6, "1110633c0bd0"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000340)={0x20, 0x81, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) 1.759330336s ago: executing program 9 (id=4261): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x0, 0xe}, 0x1b) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) 1.476751361s ago: executing program 3 (id=4262): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000300), 0x80) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r1, &(0x7f0000000d80)=0x9, r2, 0x0, 0x101, 0x1) (async) splice(r1, &(0x7f0000000d80)=0x9, r2, 0x0, 0x101, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="40170300000069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.337562989s ago: executing program 5 (id=4263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x3, 0x2, {0x0, 0x1, 0x2}, {0x2, 0x100}, 0xff, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.146635462s ago: executing program 7 (id=4264): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x80, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x4a, 0x2c, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x84, 0x0, 0x2, 0x1}], "7ec92c960ed37b071c755eccfdd21b70f5d8844c0ec5baa730ad66f997c3370943f4a715571720f822eda7597b9302f13022945df77ad24834232611054a069f2ad3"}}}}}, 0x0) 1.031667744s ago: executing program 5 (id=4265): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="66b9320b00000f328e9155730fc7340fc7aed029eaa14613000fee03660f383bd281911e00b6a766b9810b000066b80c00000066ba000000000f302ed8f5", 0x3e}], 0x1, 0x40, &(0x7f0000000140)=[@dstype0={0x6, 0xc}], 0x1) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0xd, 0x0, 0x140, 0x800, 0xffffffffffffffff}) (async) r4 = geteuid() quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, r4, &(0x7f00000001c0)) (async) pselect6(0x40, &(0x7f0000000240)={0x8000000000000001, 0x2, 0x0, 0xfffffffffffffe01, 0x100000001, 0xd, 0x2, 0xd716}, &(0x7f0000000280)={0x7, 0x2, 0xfffffffffffffffc, 0x3, 0x8000000000000001, 0x8000, 0x3, 0x100}, &(0x7f00000002c0)={0x7fff, 0x7, 0x10, 0x2, 0xffffffffffffffff, 0x9, 0xc9d1, 0x2e4}, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000003c0)={0xe, 0x2, 0x4, {0x2, 0x8001, 0x6, 0x4}}) (async) pselect6(0x40, &(0x7f0000000400)={0xffffffff, 0x0, 0x6, 0x100, 0x1, 0x2, 0x8, 0x4}, &(0x7f0000000440)={0x8, 0x5, 0x3, 0x0, 0x80, 0x4, 0x2, 0x7f}, &(0x7f0000000480)={0x9, 0x7, 0x4, 0x5, 0x1, 0x81, 0x2, 0x8}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) (async) pwritev2(r0, &(0x7f0000003740)=[{&(0x7f0000000580)="d4c75dc1847b9887daa7c72a659ddcbf3e5a3430162ea310dc8113e2f2b9954c96e2dbfd5679fed505c6337457f2e887d37965096324c701183ad937d83a0eeff260", 0x42}, {&(0x7f0000000600)="bdfd09a56b92a4606b", 0x9}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="b928fa2f9a3bcee97d382204a25768ce02edcf0176cdeda2f5d8b92633a2c8a955c8bec8478ad9dbb101ea08cc1f74e8907071e851d4eee7422e9d5370375ca4015eadf31ba0e6305499b522ff11c60d56cf37ce38c00d565a1932ddfe17975ccca50d1af5d96316a071a8f83cf007d76f52947a5752", 0x76}, {&(0x7f00000016c0)="742b81415c7137bfa18623d11224c4ca06a0086ea595ea7f9b33822606aa6de5944044321593dc4d99762d1b3d881bd89e69149399e1e2175bc42ccef6727f13b4a54655b6acafdd826db2d25402", 0x4e}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="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", 0x1000}], 0x7, 0xa, 0x7, 0x1d) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000037c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) mq_getsetattr(r5, &(0x7f0000003800)={0x5, 0x6f5, 0x9, 0x80}, &(0x7f0000003840)) write$binfmt_script(r2, &(0x7f0000003880)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '/dev/v4l-subdev#\x00'}, {0x20, '.v'}, {}, {}], 0xa, "bcbbf6bf87d766"}, 0x2b) (async) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000038c0)={0x3f6, 0x10, 0x400, 0x40, 0x81, 0xddf, 0x4, 0x2, {0xffffffff, 0x2f}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0xc, 0x1}, 0x2, 0x40, 0xcf, 0x11, 0x1, 0xf, 0x0, 0x7, 0x1ff00000, 0x7, 0x946ed1c4, 0x100, 0x2, 0x1, 0x1, 0x1}) execve(&(0x7f0000003980)='./file0\x00', &(0x7f0000003c40)={[&(0x7f00000039c0)='/dev/v4l-subdev#\x00', &(0x7f0000003a00)='\x00', &(0x7f0000003a40)='\x00', &(0x7f0000003a80)='\x00', &(0x7f0000003ac0)='(\x00', &(0x7f0000003b00)='%$)\')&\x00', &(0x7f0000003b40)='[]\x00', &(0x7f0000003b80)='/dev/autofs\x00', &(0x7f0000003bc0)='\xf9\'\'+-\x00', &(0x7f0000003c00)='\x00']}, &(0x7f0000003f00)={[&(0x7f0000003cc0)='.v', &(0x7f0000003d00)='#! ', &(0x7f0000003d40)='\x00', &(0x7f0000003d80)='.\x1f/\x00', &(0x7f0000003dc0)='#! ', &(0x7f0000003e00)='\x00', &(0x7f0000003e40)='\xd5^\\}.{,\x00', &(0x7f0000003e80)='^\x00', &(0x7f0000003ec0)='{.#!*,\x00']}) (async) io_setup(0xa99c, &(0x7f0000003f80)=0x0) io_destroy(r6) (async) pselect6(0x40, &(0x7f0000003fc0)={0x8, 0x7a5b, 0x9, 0x5, 0x2, 0x4, 0xfff, 0x1}, &(0x7f0000004000)={0xc, 0x9, 0x8, 0x7fffffff, 0x3ff, 0x9, 0x0, 0xa5}, &(0x7f0000004040)={0x5, 0x1, 0x6, 0x8110000000000000, 0xb, 0x0, 0xffffffff, 0x3ff}, &(0x7f0000004080), &(0x7f0000004100)={&(0x7f00000040c0)={[0x6]}, 0x8}) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000004140)={0x2, @vbi={0x9, 0x3, 0x5, 0x39565559, [0x80000000, 0x7], [0xb, 0xfffffff7], 0x13a}}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, &(0x7f0000004240)) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004280), 0x400480, 0x0) (async) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000004300)) mount_setattr(r5, &(0x7f00000042c0)='./file0\x00', 0x1900, &(0x7f0000004340)={0x9, 0x100084, 0x60000, {r8}}, 0x20) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000004380)=0xffffffffffffffff) close_range(r9, r8, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004400), r5) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x20, r10, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000008840)={0x338, 0xfffffffffffffff5, 0x0, [{{0x0, 0x2, 0x7ff, 0x401, 0x8, 0xc9e, {0x4, 0x255e, 0x3b6096b0, 0x8, 0x51e306d, 0x10000, 0x6, 0x742, 0x7fff, 0x4000, 0x6, 0x0, 0x0, 0x7, 0x205}}, {0x3, 0x2, 0x2, 0x10001, '-@'}}, {{0x4, 0x3, 0x6, 0x7f, 0xc2, 0xb6, {0x6, 0xfffffffffffffffb, 0xff, 0xf, 0x1, 0x6, 0x9a, 0xcc, 0x27ab, 0xc000, 0x4, r4, 0x0, 0x8, 0xb10}}, {0x2, 0xfffffffffffff800, 0xc, 0x40e, '/dev/autofs\x00'}}, {{0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x8, {0x1, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x6, 0x1, 0x705, 0x5, 0x8000, 0x2797f738, 0xffffffffffffffff, 0x0, 0x2, 0x6}}, {0x2, 0x3, 0x2, 0xf665a6f, '^\x00'}}, {{0x4, 0x0, 0x4, 0x5, 0x7, 0xdca9, {0x1, 0x80400000000000, 0x7fff, 0x9d5, 0x100000001, 0x5e24, 0x7, 0x8, 0x3, 0x4000, 0x5, r4, 0x0, 0x3e, 0x9}}, {0x1, 0xb65, 0x7, 0x4, '{.#!*,\x00'}}, {{0x6, 0x3, 0x9, 0x7, 0x10, 0x7f, {0x1, 0x4, 0x6, 0x2, 0xb, 0x0, 0x9, 0x9, 0xfffffff8, 0x8000, 0x6, r4, 0x0, 0x265b, 0x1}}, {0x2, 0x4, 0x2, 0x3, '^\x00'}}]}, 0x338) 887.994396ms ago: executing program 7 (id=4266): io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={{r3}, 0x0, 0x4d966584, 0xfffffffffffffe01}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x12}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x553}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0xfffffffffffffd2b, 0x5, 0xd}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000400)={0x31, 0x2, 0x10, "0a564b68096302007f750080000000000013016dab00653a6f431e9f08ec00", 0x38415261}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r9 = add_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0x0) keyctl$update(0x2, r9, &(0x7f0000000140)="c4", 0x1) 579.996216ms ago: executing program 5 (id=4267): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000001140)=[@increfs={0x400c6314, 0x1}], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x0, 0x8000359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close(0x3) 273.278489ms ago: executing program 5 (id=4268): sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 215.221316ms ago: executing program 3 (id=4269): sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) 0s ago: executing program 3 (id=4270): syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x6, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee47, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0xff3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7c, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x82, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcf, 0xf, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x15, &(0x7f00000005c0), 0x2, 0x3}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0x4166}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x3}}, 0x20) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): 78516854.023:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.4.3733" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 988.532426][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 988.542022][ T29] audit: type=1326 audit(1778516854.023:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.4.3733" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 988.542086][ T29] audit: type=1326 audit(1778516854.023:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.4.3733" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 988.709583][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3740'. [ 989.258060][T20055] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3742'. [ 989.392076][T20055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.452549][T20055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.620735][ T6373] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 990.823132][ T6373] usb 5-1: unable to get BOS descriptor or descriptor too short [ 990.849959][ T6373] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 990.868028][ T6373] usb 5-1: config 114 has no interface number 0 [ 990.886667][ T6373] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 990.933098][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3751'. [ 990.945311][ T6373] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 990.978978][ T6373] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 991.019034][ T6373] usb 5-1: config 114 interface 240 has no altsetting 0 [ 991.043129][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3750'. [ 991.062829][ T6373] usb 5-1: string descriptor 0 read error: -22 [ 991.070560][ T6373] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 991.090657][ T6373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.100313][T20080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.129129][T20063] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 991.147033][T20080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.159477][T20063] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 991.200736][ T6373] ir_usb 5-1:114.240: IR Dongle converter detected [ 991.389107][ T6373] usb 5-1: IRDA class descriptor not found, device not bound [ 991.533345][T20086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.593780][T19314] usb 5-1: USB disconnect, device number 6 [ 991.612988][T20086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.223836][ T6373] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 992.274730][T20090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3755'. [ 992.390640][ T6373] usb 9-1: Using ep0 maxpacket: 16 [ 992.413223][ T6373] usb 9-1: unable to get BOS descriptor or descriptor too short [ 992.452374][ T6373] usb 9-1: config index 0 descriptor too short (expected 4329, got 233) [ 992.480431][ T6373] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.528193][ T6373] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.564355][ T6373] usb 9-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 992.580049][ T6373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.589237][ T6373] usb 9-1: Product: syz [ 992.595779][ T6373] usb 9-1: Manufacturer: syz [ 992.601059][ T6373] usb 9-1: SerialNumber: syz [ 992.827284][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.877734][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.020348][ T6373] usb 9-1: USB disconnect, device number 124 [ 993.059807][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.152702][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.159449][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.220699][ T42] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 993.382855][ T42] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 993.392098][ T42] usb 4-1: config 0 has no interface number 0 [ 993.398625][ T42] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 993.428155][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 993.448558][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.468219][ T42] usb 4-1: Product: syz [ 993.479374][ T42] usb 4-1: Manufacturer: syz [ 993.495160][ T42] usb 4-1: SerialNumber: syz [ 993.534448][ T42] usb 4-1: config 0 descriptor?? [ 993.567039][ T42] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 993.990726][ T6373] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 994.105847][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.116915][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.154968][ T6373] usb 5-1: unable to get BOS descriptor or descriptor too short [ 994.164457][ T6373] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 994.175334][ T6373] usb 5-1: config 176 has 0 interfaces, different from the descriptor's value: 1 [ 994.192650][ T6373] usb 5-1: language id specifier not provided by device, defaulting to English [ 994.208069][ T6373] usb 5-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 994.217822][ T6373] usb 5-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3 [ 994.226003][ T6373] usb 5-1: Product: syz [ 994.230885][ T6373] usb 5-1: Manufacturer: 搾笌킽䄱䷩悎磭񵿙 [ 994.240254][ T6373] usb 5-1: SerialNumber: syz [ 994.505541][T20115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.521339][T20115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.791028][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 995.804786][ T5746] usb 4-1: USB disconnect, device number 75 [ 995.862678][ T5746] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 996.052609][ T6373] usb 5-1: USB disconnect, device number 7 [ 996.524068][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3770'. [ 996.543517][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3770'. [ 996.700361][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'. [ 997.530257][T20163] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 997.563808][T20163] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 997.585936][T20163] tipc: Resetting bearer [ 997.602461][T20159] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 20159 comm: syz.4.3774) [ 997.630835][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 997.630853][ T29] audit: type=1800 audit(1778516863.773:1547): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3774" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=106794 res=0 errno=0 [ 998.099946][T20177] sock: sock_set_timeout: `syz.3.3780' (pid 20177) tries to set negative timeout [ 998.210945][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3782'. [ 998.951602][T20190] input: syz1 as /devices/virtual/input/input116 [ 999.309325][T20201] FAULT_INJECTION: forcing a failure. [ 999.309325][T20201] name failslab, interval 1, probability 0, space 0, times 0 [ 999.353002][T20201] CPU: 1 UID: 0 PID: 20201 Comm: syz.4.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.353038][T20201] Tainted: [L]=SOFTLOCKUP [ 999.353047][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.353060][T20201] Call Trace: [ 999.353078][T20201] [ 999.353088][T20201] dump_stack_lvl+0xe8/0x150 [ 999.353117][T20201] should_fail_ex+0x412/0x560 [ 999.353150][T20201] should_failslab+0xa8/0x100 [ 999.353184][T20201] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 999.353214][T20201] ? __alloc_skb+0x186/0x7d0 [ 999.353240][T20201] ? __alloc_skb+0x1d0/0x7d0 [ 999.353264][T20201] ? __local_bh_enable_ip+0xd0/0x130 [ 999.353291][T20201] __alloc_skb+0x1d0/0x7d0 [ 999.353323][T20201] netlink_sendmsg+0x5d4/0xb40 [ 999.353363][T20201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.353395][T20201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 999.353426][T20201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 999.353460][T20201] ____sys_sendmsg+0x972/0x9f0 [ 999.353489][T20201] ? __might_fault+0xaf/0x130 [ 999.353522][T20201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.353561][T20201] ? import_iovec+0x73/0xa0 [ 999.353596][T20201] ___sys_sendmsg+0x2a5/0x360 [ 999.353625][T20201] ? __lock_acquire+0x6b5/0x2cf0 [ 999.353652][T20201] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.353718][T20201] ? __fget_files+0x2a/0x420 [ 999.353743][T20201] ? __fget_files+0x3a0/0x420 [ 999.353778][T20201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 999.353811][T20201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.353851][T20201] ? __pfx_ksys_write+0x10/0x10 [ 999.353889][T20201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.353913][T20201] do_syscall_64+0x15f/0xf80 [ 999.353942][T20201] ? trace_irq_disable+0x3b/0x140 [ 999.353973][T20201] ? clear_bhb_loop+0x40/0x90 [ 999.353999][T20201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.354020][T20201] RIP: 0033:0x7f0dd9f9cdd9 [ 999.354040][T20201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.354059][T20201] RSP: 002b:00007f0dd81ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.354106][T20201] RAX: ffffffffffffffda RBX: 00007f0dda215fa0 RCX: 00007f0dd9f9cdd9 [ 999.354122][T20201] RDX: 0000000000048030 RSI: 0000200000000180 RDI: 0000000000000006 [ 999.354135][T20201] RBP: 00007f0dd81ee090 R08: 0000000000000000 R09: 0000000000000000 [ 999.354149][T20201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.354162][T20201] R13: 00007f0dda216038 R14: 00007f0dda215fa0 R15: 00007f0dda33fa48 [ 999.354194][T20201] [ 1000.240611][ T5746] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1000.400630][ T5746] usb 9-1: Using ep0 maxpacket: 32 [ 1000.407972][T20213] syzkaller1: entered allmulticast mode [ 1000.427581][ T5746] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1000.474392][ T5746] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 1000.496384][ T5746] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.529398][ T5746] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1000.562726][ T5746] usb 9-1: config 128 has no interface number 0 [ 1000.582086][ T5746] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1000.619106][ T5746] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.676432][ T5746] usb 9-1: config 128 interface 127 has no altsetting 0 [ 1000.709059][ T5746] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1000.734870][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.770046][ T5746] usb 9-1: Product: syz [ 1000.782661][ T5746] usb 9-1: Manufacturer: syz [ 1000.813762][ T5746] usb 9-1: SerialNumber: syz [ 1001.052626][T20205] tipc: Enabled bearer , priority 0 [ 1001.108586][T20205] syzkaller0: entered promiscuous mode [ 1001.128542][T20205] syzkaller0: entered allmulticast mode [ 1001.204887][T20205] tipc: Resetting bearer [ 1001.241535][T20204] tipc: Resetting bearer [ 1001.287963][T20204] tipc: Disabling bearer [ 1001.319535][T20224] fuse: Bad value for 'fd' [ 1001.402828][T20208] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1001.431522][ T5746] usb 9-1: USB disconnect, device number 125 [ 1001.544368][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.379910][T20251] fuse: Bad value for 'fd' [ 1003.710636][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 1003.710647][T20233] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1004.573856][T20233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1004.580690][T20233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1004.587634][T20233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1004.795756][T20266] fuse: Bad value for 'fd' [ 1004.870739][ T6373] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1004.993716][T20269] syzkaller0: entered promiscuous mode [ 1005.010581][T20269] syzkaller0: entered allmulticast mode [ 1005.011077][ T6373] usb 9-1: device descriptor read/64, error -71 [ 1005.036941][T20269] tipc: Started in network mode [ 1005.044389][T20269] tipc: Node identity c2219b0bc765, cluster identity 4711 [ 1005.054070][T20269] tipc: Enabled bearer , priority 0 [ 1005.123577][T20268] tipc: Resetting bearer [ 1005.156732][T20268] tipc: Disabling bearer [ 1005.277575][T20265] program syz.4.3809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.290893][ T6373] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1005.300801][T20265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1005.369682][T20280] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 1005.450657][ T6373] usb 9-1: device descriptor read/64, error -71 [ 1005.571823][ T6373] usb usb9-port1: attempt power cycle [ 1005.790610][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 1005.801457][T20286] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3816'. [ 1005.886257][T20290] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1005.921903][ T6373] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1005.962399][ T6373] usb 9-1: device descriptor read/8, error -71 [ 1005.976526][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.009856][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.030594][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.038000][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.051166][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.058162][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.069003][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.077674][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.085664][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.093588][T20297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.220833][ T6373] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1006.247504][ T29] audit: type=1326 audit(1778516872.393:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.336601][ T29] audit: type=1326 audit(1778516872.393:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.362493][ T29] audit: type=1326 audit(1778516872.393:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.391767][ T29] audit: type=1326 audit(1778516872.423:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.419098][ T29] audit: type=1326 audit(1778516872.423:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.444637][ T6373] usb 9-1: device not accepting address 3, error -71 [ 1006.451953][ T6373] usb usb9-port1: unable to enumerate USB device [ 1006.461596][ T29] audit: type=1326 audit(1778516872.423:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.487660][ T29] audit: type=1326 audit(1778516872.423:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.515178][ T29] audit: type=1326 audit(1778516872.423:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.541922][ T29] audit: type=1326 audit(1778516872.423:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.570824][T20306] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1006.587074][ T29] audit: type=1326 audit(1778516872.423:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.4.3820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd9f9cdd9 code=0x7ffc0000 [ 1006.615659][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 1006.619668][ T5645] Bluetooth: hci2: command 0x0c1a tx timeout [ 1007.030233][T20318] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 1007.103499][T20324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.143251][T20324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.163109][T20318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1007.293018][T20318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.303679][T20328] random: crng reseeded on system resumption [ 1007.947191][T20339] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1007.967295][T20339] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1008.228991][T20342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.273908][T20342] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1008.593245][ T6373] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1008.649657][T20354] loop9: detected capacity change from 0 to 2640 [ 1008.774119][ T6373] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1008.816996][ T6373] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1008.866426][ T6373] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.914862][ T6373] usb 4-1: config 220 has no interface number 2 [ 1008.933993][ T6373] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1008.970247][ T6373] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1008.989143][ T6373] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1009.010507][ T6373] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1009.030026][ T6373] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1009.045783][ T6373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.067397][ T6373] usb 4-1: Product: syz [ 1009.093132][ T6373] usb 4-1: Manufacturer: syz [ 1009.106539][ T6373] usb 4-1: SerialNumber: syz [ 1009.939375][ T6373] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1009.954547][ T6373] uvcvideo 4-1:220.0: No valid video chain found. [ 1009.989188][ T6373] usb 4-1: selecting invalid altsetting 0 [ 1010.082203][ T6373] usb 4-1: selecting invalid altsetting 0 [ 1010.104170][ T6373] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1010.142689][ T6373] usb 4-1: USB disconnect, device number 76 [ 1010.291703][ T5746] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1010.641843][ T5746] usb 5-1: device descriptor read/64, error -71 [ 1010.890587][ T5746] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1011.040991][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 1011.054367][ T5746] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1011.076143][ T5746] usb 5-1: config 0 has no interface number 0 [ 1011.089314][ T5746] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1011.106791][ T5746] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1011.116369][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.125822][ T5746] usb 5-1: Product: syz [ 1011.147836][ T5746] usb 5-1: Manufacturer: syz [ 1011.173234][ T5746] usb 5-1: SerialNumber: syz [ 1011.201466][ T5746] usb 5-1: config 0 descriptor?? [ 1011.500990][ T6373] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1011.660553][ T6373] usb 4-1: Using ep0 maxpacket: 16 [ 1011.668762][ T6373] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1011.682969][ T6373] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1011.698004][ T6373] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.714223][ T6373] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1011.722397][T19314] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1011.726167][ T6373] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1011.739684][ T6373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.748107][ T6373] usb 4-1: Product: syz [ 1011.753292][ T6373] usb 4-1: Manufacturer: syz [ 1011.758032][ T6373] usb 4-1: SerialNumber: syz [ 1011.780644][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.792482][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.814512][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.827318][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.890912][T19314] usb 9-1: Using ep0 maxpacket: 8 [ 1011.898381][T19314] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.912342][T19314] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1011.923032][T19314] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1011.935497][T19314] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1011.947489][T19314] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1011.956920][T19314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.983821][ T6373] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1011.985141][T19314] hub 9-1:1.0: bad descriptor, ignoring hub [ 1012.002284][T19314] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1012.012070][T19314] cdc_wdm 9-1:1.0: skipping garbage [ 1012.017560][T19314] cdc_wdm 9-1:1.0: skipping garbage [ 1012.037238][T19314] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 1012.045983][T19314] cdc_wdm 9-1:1.0: Unknown control protocol [ 1012.184262][T20397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.193683][T20397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.211534][ T6373] usb 4-1: USB disconnect, device number 77 [ 1012.223203][ T6373] usblp0: removed [ 1012.447416][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1012.463852][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1012.484987][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1012.516630][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1012.543906][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1012.569948][ T5746] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1012.598829][ T5746] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1012.636997][ T5746] usb 5-1: USB disconnect, device number 9 [ 1012.972550][T20419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3333159381 (13332637524 ns) > initial count (1750453420 ns). Using initial count to start timer. [ 1013.110333][T20422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1013.498390][ T6373] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1013.612482][T20430] syzkaller0: entered promiscuous mode [ 1013.618170][T20430] syzkaller0: entered allmulticast mode [ 1013.703817][ T6373] usb 5-1: Using ep0 maxpacket: 8 [ 1013.723938][ T6373] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1013.747828][ T6373] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1013.776268][ T6373] usb 5-1: Product: syz [ 1013.781449][ T6373] usb 5-1: Manufacturer: syz [ 1013.786276][ T6373] usb 5-1: SerialNumber: syz [ 1013.800286][ T6373] usb 5-1: config 0 descriptor?? [ 1013.810045][ T6373] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1014.317041][ T6373] gspca_zc3xx: reg_r err -71 [ 1014.322061][ T6373] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1014.342433][ T6373] usb 5-1: USB disconnect, device number 10 [ 1014.678352][T20445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.701219][T20445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.729853][T20445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.743225][T20445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.809881][T20448] input: syz1 as /devices/virtual/input/input117 [ 1014.890930][T19308] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 1014.928867][T19308] usb 9-1: device reset changed ep0 maxpacket size! [ 1014.968444][T19308] usb 9-1: USB disconnect, device number 4 [ 1015.033225][T20450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1015.128887][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 1015.310870][T19308] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1015.483525][T19308] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1015.499398][T19308] usb 9-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.510872][T19308] usb 9-1: config 176 has 0 interfaces, different from the descriptor's value: 1 [ 1015.527337][T19308] usb 9-1: language id specifier not provided by device, defaulting to English [ 1015.538627][T19308] usb 9-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00 [ 1015.548313][T19308] usb 9-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3 [ 1015.565933][T19308] usb 9-1: Product: syz [ 1015.570167][T19308] usb 9-1: Manufacturer: 搾笌킽䄱䷩悎磭񵿙 [ 1015.577195][T19308] usb 9-1: SerialNumber: syz [ 1015.582258][ T6362] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1015.674948][T20469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.685469][T20469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.758211][ T6362] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1015.768271][ T6362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.778446][ T6362] usb 4-1: Product: syz [ 1015.783083][ T6362] usb 4-1: Manufacturer: syz [ 1015.787757][ T6362] usb 4-1: SerialNumber: syz [ 1015.799180][ T6362] usb 4-1: config 0 descriptor?? [ 1015.846954][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.856447][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.159103][T19308] usb 9-1: USB disconnect, device number 5 [ 1016.264217][T20479] input: syz1 as /devices/virtual/input/input118 [ 1016.407216][T20481] QAT: Invalid ioctl 35123 [ 1016.765559][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 1016.765580][ T29] audit: type=1326 audit(1778516882.913:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.798605][ T29] audit: type=1326 audit(1778516882.913:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.823828][ T29] audit: type=1326 audit(1778516882.953:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.829335][ T6362] usb 4-1: non-Atmel transceiver xxxx0000 [ 1016.849838][ T29] audit: type=1326 audit(1778516882.953:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.883484][ T29] audit: type=1326 audit(1778516882.953:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.909695][ T29] audit: type=1326 audit(1778516882.953:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1016.935827][ T29] audit: type=1326 audit(1778516882.953:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1017.034534][ T29] audit: type=1326 audit(1778516882.953:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1017.083315][ T6362] usb 4-1: Firmware version (0.0) predates our first public release. [ 1017.091767][ T6362] usb 4-1: Please update to version 0.2 or newer [ 1017.107128][ T6362] usb 4-1: atusb_probe: initialization failed, error = -19 [ 1017.115254][ T29] audit: type=1326 audit(1778516882.953:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506039cdd9 code=0x7ffc0000 [ 1017.141304][ T29] audit: type=1326 audit(1778516882.953:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20492 comm="syz.8.3879" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f506035d60e code=0x7ffc0000 [ 1017.172766][ T6362] usb 4-1: USB disconnect, device number 78 [ 1017.440615][ T6373] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1017.517345][T20509] input: syz1 as /devices/virtual/input/input119 [ 1017.610599][ T6373] usb 9-1: Using ep0 maxpacket: 8 [ 1017.617810][ T6373] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1017.639037][ T6373] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1017.655408][ T6373] usb 9-1: config 0 has no interface number 0 [ 1017.667651][ T6373] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.689981][ T6373] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1017.701400][ T6373] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1017.713948][ T6373] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1017.741635][ T6373] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1017.759975][ T6373] usb 9-1: Product: syz [ 1017.765840][ T6373] usb 9-1: Manufacturer: syz [ 1017.771012][ T6362] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1017.784943][ T6373] usb 9-1: config 0 descriptor?? [ 1017.960006][ T6362] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1017.980834][ T6362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.001224][ T6362] usb 5-1: Product: syz [ 1018.005507][ T6362] usb 5-1: Manufacturer: syz [ 1018.010169][ T6362] usb 5-1: SerialNumber: syz [ 1018.033014][T20500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.054409][T20500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.078792][ T6373] usb 9-1: USB disconnect, device number 6 [ 1018.263977][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1018.434053][ T6362] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1018.446411][ T6362] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1018.540719][ T6373] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1018.720999][ T6373] usb 9-1: Using ep0 maxpacket: 8 [ 1018.732794][ T6373] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1018.752179][ T6373] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1018.771021][ T6373] usb 9-1: config 0 has no interface number 0 [ 1018.781922][ T6373] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1018.802678][ T6373] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1018.814492][ T6373] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1018.828915][ T6373] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1018.839061][ T6373] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1018.847599][ T6373] usb 9-1: Product: syz [ 1018.852552][ T6373] usb 9-1: Manufacturer: syz [ 1018.862547][ T6373] usb 9-1: config 0 descriptor?? [ 1019.088040][ T6373] usb 9-1: USB disconnect, device number 7 [ 1019.162819][T19314] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1019.331455][T19314] usb 4-1: Using ep0 maxpacket: 8 [ 1019.347806][T19314] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1019.358428][T20539] ipt_REJECT: ECHOREPLY no longer supported. [ 1019.367195][T19314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.376021][T19314] usb 4-1: Product: syz [ 1019.380259][T19314] usb 4-1: Manufacturer: syz [ 1019.386193][T19314] usb 4-1: SerialNumber: syz [ 1019.397001][T19314] usb 4-1: config 0 descriptor?? [ 1019.613614][T19314] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1019.675122][T20505] program syz.4.3884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.747889][T20543] pim6reg: entered allmulticast mode [ 1019.772187][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3898'. [ 1019.800192][T20543] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1019.814858][T20543] pim6reg: left allmulticast mode [ 1019.917073][T20550] input: syz1 as /devices/virtual/input/input122 [ 1020.056040][T19314] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1020.108711][T19314] usb 4-1: USB disconnect, device number 79 [ 1020.125441][ T6362] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1020.162969][ T6362] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1020.203238][ T6362] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1020.247683][ T6362] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1020.262702][T20558] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1020.285056][T20558] netlink: 'syz.5.3901': attribute type 1 has an invalid length. [ 1020.296488][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3901'. [ 1020.844443][T20567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.884011][T20567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.053244][T20567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.089158][T20567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.113405][T20567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1021.124580][T20567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.162348][T20567] veth1_vlan: left promiscuous mode [ 1021.170757][ T6373] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1021.185438][T20567] veth0_vlan: left promiscuous mode [ 1021.202942][T20567] veth0_vlan: entered promiscuous mode [ 1021.226367][ T6362] usb 5-1: USB disconnect, device number 11 [ 1021.236817][T20567] veth1_vlan: entered promiscuous mode [ 1021.291934][T20567] veth1_macvtap: left promiscuous mode [ 1021.325310][T20567] veth0_macvtap: left promiscuous mode [ 1021.343595][T20567] veth0_macvtap: entered promiscuous mode [ 1021.360856][ T6373] usb 9-1: Using ep0 maxpacket: 8 [ 1021.369713][T20567] veth1_macvtap: entered promiscuous mode [ 1021.376388][ T6373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.397465][ T6373] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1021.408854][ T6373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.425849][ T6373] usb 9-1: config 0 descriptor?? [ 1021.433410][T20567] bridge0: port 3(vlan2) entered blocking state [ 1021.439878][T20567] bridge0: port 3(vlan2) entered forwarding state [ 1021.447418][T19313] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1021.462886][T20567] bridge0: port 4(vlan3) entered blocking state [ 1021.469374][T20567] bridge0: port 4(vlan3) entered forwarding state [ 1021.529361][T20567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.557423][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.600412][T20567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.608504][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.620938][T19313] usb 4-1: Using ep0 maxpacket: 32 [ 1021.628579][T19313] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1021.638204][T19313] usb 4-1: config 0 has no interface number 0 [ 1021.645408][T19313] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1021.658394][T19313] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1021.673069][T19313] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1021.686132][T19313] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1021.692596][T20567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1021.703011][T19313] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1021.710294][ T6373] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1021.723579][T19313] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1021.737420][T19313] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1021.749828][T19313] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 1021.764191][T20567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1021.775654][T20567] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1021.793525][T19313] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1021.804304][T19298] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1021.813832][T19313] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.818022][T19821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.831334][T19821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.867176][T19313] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1021.878801][T19313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.900290][T19313] usb 4-1: Product: syz [ 1021.906814][T19313] usb 4-1: Manufacturer: syz [ 1021.914315][T19313] usb 4-1: SerialNumber: syz [ 1021.935366][T19313] usb 4-1: config 0 descriptor?? [ 1021.949003][T20579] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1021.968178][T19298] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1021.978925][T19298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.988158][T20579] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1021.996865][T19298] usb 5-1: Product: syz [ 1022.001925][T19298] usb 5-1: Manufacturer: syz [ 1022.009849][T19313] usb 4-1: will this work? Response EP is not usually 3 [ 1022.019229][T19298] usb 5-1: SerialNumber: syz [ 1022.024675][T19313] usb 4-1: will this work? Image data EP is not usually 2 [ 1022.053662][T20588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.083239][T19313] scsi host1: microtekX6 [ 1022.109872][T20588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.229249][T20592] input: syz1 as /devices/virtual/input/input123 [ 1022.277529][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.292825][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.457862][T20593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.486674][T20593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.507853][T20593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.533582][T20593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.571669][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.598049][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.649219][T19314] usb 9-1: USB disconnect, device number 8 [ 1022.684320][T20595] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3913'. [ 1022.726894][T20595] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3913'. [ 1022.981871][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3915'. [ 1023.145661][T19298] rtl8150 5-1:1.0: couldn't reset the device [ 1023.172887][T19298] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1023.255027][T19298] usb 5-1: USB disconnect, device number 12 [ 1024.041974][T19313] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1024.128358][ T6373] usb 4-1: USB disconnect, device number 80 [ 1024.205036][T19313] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1024.226459][T19313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.253249][T19313] usb 9-1: Product: syz [ 1024.273893][T19313] usb 9-1: Manufacturer: syz [ 1024.288239][T19313] usb 9-1: SerialNumber: syz [ 1024.497550][T20628] input: syz1 as /devices/virtual/input/input124 [ 1024.724885][T19313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1024.770962][T19313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1024.859014][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3924'. [ 1024.989878][T20638] loop9: detected capacity change from 0 to 2640 [ 1025.346008][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1026.021539][T20614] program syz.8.3919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1026.074501][T20663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.102863][T20663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.257089][T20666] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3932'. [ 1026.482530][T19313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1026.511862][T19313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1026.553488][T19313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1026.641656][T19313] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1027.058342][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1027.059282][T20687] input: syz1 as /devices/virtual/input/input125 [ 1027.520787][T19314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1027.539588][T19313] usb 9-1: USB disconnect, device number 9 [ 1027.560591][ T6373] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1027.701058][T19314] usb 5-1: Using ep0 maxpacket: 16 [ 1027.730303][T19314] usb 5-1: config 0 has no interfaces? [ 1027.742539][ T6373] usb 4-1: Using ep0 maxpacket: 32 [ 1027.774056][ T6373] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1027.798949][T19314] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1027.815232][ T6373] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1027.849292][T19314] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1027.865458][ T6373] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1027.895268][T19314] usb 5-1: Manufacturer: syz [ 1027.910197][ T6373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.945171][ T6373] usb 4-1: Product: syz [ 1027.957944][T19314] usb 5-1: config 0 descriptor?? [ 1027.971430][ T6373] usb 4-1: Manufacturer: syz [ 1027.987570][ T6373] usb 4-1: SerialNumber: syz [ 1028.076434][T20695] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1028.240053][T20713] openvswitch: netlink: Flow key attr not present in new flow. [ 1028.282776][T20713] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1028.294808][T20696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.323942][T20713] netlink: Conntrack attr has 4 unknown bytes [ 1028.353587][T20696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.388075][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.404240][T20696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.428152][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.440683][T20696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.468964][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.489412][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.523873][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.548825][T20717] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1028.588214][T20717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1028.608496][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.639289][ T6373] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.647508][ T6373] usb 4-1: MIDIStreaming interface descriptor not found [ 1028.745885][ T6373] usb 4-1: USB disconnect, device number 81 [ 1028.857251][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.900998][T19308] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1028.926305][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.945344][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.975154][T20725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.018106][T20725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.082179][ T7392] wlan0: Trigger new scan to find an IBSS to join [ 1029.088854][T19308] usb 9-1: Using ep0 maxpacket: 32 [ 1029.104287][T19308] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1029.142234][T19308] usb 9-1: config 0 has no interface number 0 [ 1029.172256][T19308] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1029.211852][T19308] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1029.231173][T19308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.278638][T19308] usb 9-1: Product: syz [ 1029.315052][T19308] usb 9-1: Manufacturer: syz [ 1029.329609][T19308] usb 9-1: SerialNumber: syz [ 1029.353788][T19308] usb 9-1: config 0 descriptor?? [ 1029.407963][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3946'. [ 1029.728474][T20736] input: syz1 as /devices/virtual/input/input126 [ 1030.050666][T19313] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1030.222501][T19313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.263341][T19313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.296495][T19308] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1030.307379][T19313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1030.342932][T19308] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1030.358888][T19308] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1030.358890][T19313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1030.358918][T19313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.420565][T19308] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1030.470858][T19308] usb 9-1: USB disconnect, device number 10 [ 1030.514255][T19313] usb 4-1: config 0 descriptor?? [ 1031.582962][ T42] usb 5-1: USB disconnect, device number 13 [ 1032.032185][T19823] wlan0: Trigger new scan to find an IBSS to join [ 1032.114329][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1032.253568][T20756] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1032.301032][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1032.307276][T20756] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1032.333624][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.371587][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.412623][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1032.429941][T20756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.446518][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.461445][T20756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.469498][T20762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.483996][ T42] usb 5-1: config 0 descriptor?? [ 1032.536349][T20756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.569904][T20762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.700575][T19308] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1032.908346][T19308] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1032.927086][T19308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.946339][T19308] usb 9-1: Product: syz [ 1032.950216][ T42] hid_parser_main: 3 callbacks suppressed [ 1032.950332][ T42] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1032.969324][ T42] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1032.979694][ T42] HID 045e:07da: Invalid code 65791 type 1 [ 1032.988103][T19308] usb 9-1: Manufacturer: syz [ 1032.998910][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.007502][T19308] usb 9-1: SerialNumber: syz [ 1033.018048][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003B/input/input127 [ 1033.049529][ T42] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1033.226956][T20762] misc userio: Invalid payload size [ 1033.367278][T20770] input: syz1 as /devices/virtual/input/input128 [ 1033.449510][T19308] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1033.500191][T19308] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1033.556131][T20748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.588567][T20748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.620222][T19314] usb 5-1: USB disconnect, device number 14 [ 1034.660658][ T6373] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1034.746854][T20744] program syz.8.3951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.825615][ T6373] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.845236][ T6373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.865162][ T6373] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1034.883696][ T6373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1034.897995][ T6373] usb 5-1: SerialNumber: syz [ 1035.139730][ T6373] usb 5-1: 0:2 : does not exist [ 1035.174594][T19308] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1035.202317][T19308] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1035.237184][T19308] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1035.250551][ T6373] usb 5-1: USB disconnect, device number 15 [ 1035.274389][T19308] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1035.349977][ T5707] udevd[5707]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.649052][T20789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.666009][T20789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.881392][T20789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.891320][T20789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.951663][T19313] usbhid 4-1:0.0: can't add hid device: -32 [ 1035.957887][T19313] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1035.980850][T19314] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1036.133154][T19314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.146900][T19314] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1036.156893][T19314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.165600][T19314] usb 5-1: Product: syz [ 1036.170049][T19314] usb 5-1: Manufacturer: syz [ 1036.174894][T19314] usb 5-1: SerialNumber: syz [ 1036.183928][T19314] usb 5-1: config 0 descriptor?? [ 1036.199069][T19314] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1036.235545][T19308] usb 9-1: USB disconnect, device number 11 [ 1036.397607][T19291] usb 5-1: USB disconnect, device number 16 [ 1036.534085][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.563000][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.966473][T20805] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3971'. [ 1036.976772][T20805] netlink: Unknown conntrack attr (type=16383, max=9) [ 1037.175681][T20812] fuse: Unknown parameter '000000000000000000070x000000000000000418446744073709551615' [ 1037.235427][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3974'. [ 1037.986776][T20829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.002738][T20829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.052544][T19314] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1038.222344][T19314] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1038.240858][T19314] usb 5-1: config 0 has no interface number 0 [ 1038.258440][T19314] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1038.274184][T19314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.285476][T19314] usb 5-1: Product: syz [ 1038.290819][T19314] usb 5-1: Manufacturer: syz [ 1038.295660][T19314] usb 5-1: SerialNumber: syz [ 1038.307926][T19314] usb 5-1: config 0 descriptor?? [ 1038.523936][T20831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.553815][T20831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.579545][T19314] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1038.619148][T19314] gspca_m5602: Failed to find a sensor [ 1038.637479][T19314] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 1038.662162][T19314] usb 5-1: USB disconnect, device number 17 [ 1038.684583][T20833] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1038.873048][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1038.887905][T20838] netlink: 'syz.7.3981': attribute type 1 has an invalid length. [ 1039.333795][T20854] netlink: 'syz.4.3987': attribute type 4 has an invalid length. [ 1039.370787][ T6373] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1039.483271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.537702][T20854] usb usb1: usbfs: process 20854 (syz.4.3987) did not claim interface 63 before use [ 1039.550615][ T6373] usb 9-1: Using ep0 maxpacket: 32 [ 1039.604513][ T6373] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1039.620879][ T6373] usb 9-1: config 230 has an invalid descriptor of length 1, skipping remainder of the config [ 1039.640015][ T6373] usb 9-1: config 230 has 2 interfaces, different from the descriptor's value: 3 [ 1039.663666][ T6373] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1039.678045][ T6373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.691850][ T6373] usb 9-1: Product: syz [ 1039.699243][ T6373] usb 9-1: Manufacturer: syz [ 1039.708827][ T6373] usb 9-1: SerialNumber: syz [ 1039.939543][ T6373] usb 9-1: unit 4 not found! [ 1039.948180][ T6373] usb 9-1: unit 0 not found! [ 1040.141208][ T6373] snd-usb-audio 9-1:230.0: probe with driver snd-usb-audio failed with error -22 [ 1040.167440][ T6373] usb 9-1: unit 4 not found! [ 1040.181029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.191277][ T6373] usb 9-1: unit 0 not found! [ 1040.349672][T20844] fuse: Bad value for 'fd' [ 1040.596145][ T6373] snd-usb-audio 9-1:230.1: probe with driver snd-usb-audio failed with error -22 [ 1040.630162][ T6373] usb 9-1: USB disconnect, device number 12 [ 1040.631417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.696047][ T5740] udevd[5740]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:230.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.914988][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1040.915005][ T29] audit: type=1326 audit(1778516907.053:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.023325][ T29] audit: type=1326 audit(1778516907.063:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.116539][ T29] audit: type=1326 audit(1778516907.063:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2ca95d60e code=0x7ffc0000 [ 1041.366998][ T29] audit: type=1326 audit(1778516907.063:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.501109][T20868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.529217][T20868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.545667][ T29] audit: type=1326 audit(1778516907.063:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.595017][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.641467][ T29] audit: type=1326 audit(1778516907.063:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.669384][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3994'. [ 1041.682446][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.724563][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.736831][ T29] audit: type=1326 audit(1778516907.063:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.787655][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.821035][ T29] audit: type=1326 audit(1778516907.063:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.880978][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.920359][ T29] audit: type=1326 audit(1778516907.063:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1041.984538][T20879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.011448][ T29] audit: type=1326 audit(1778516907.063:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ca99cdd9 code=0x7ffc0000 [ 1042.048565][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.106649][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.122724][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.136761][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.156739][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.172223][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.185159][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.405837][T20913] xt_socket: unknown flags 0xc [ 1043.616553][T20912] process '/newroot/478/file0' started with executable stack [ 1043.765242][T20915] Cannot find set identified by id 1 to match [ 1044.292390][T20924] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4007'. [ 1044.334558][T20924] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4007'. [ 1044.403314][T20924] veth0_to_bridge: entered promiscuous mode [ 1044.427500][T20924] macvtap1: entered allmulticast mode [ 1044.449653][T20924] veth0_to_bridge: entered allmulticast mode [ 1044.499165][T20932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.529199][T20924] veth0_to_bridge: left allmulticast mode [ 1044.538697][T20924] veth0_to_bridge: left promiscuous mode [ 1044.790904][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1044.945618][T20941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.984802][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.009656][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.035289][ T42] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1045.053494][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1045.069550][ T42] usb 5-1: SerialNumber: syz [ 1045.103443][T20941] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4010'. [ 1045.130652][T20936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.296357][ T42] usb 5-1: 0:2 : does not exist [ 1045.421186][ T42] usb 5-1: USB disconnect, device number 18 [ 1045.437849][T20947] IPv6: NLM_F_CREATE should be specified when creating new route [ 1045.464173][T20947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1045.471560][T20947] IPv6: NLM_F_CREATE should be set when creating new route [ 1045.478864][T20947] IPv6: NLM_F_CREATE should be set when creating new route [ 1045.486155][T20947] IPv6: NLM_F_CREATE should be set when creating new route [ 1045.536847][T20948] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4013'. [ 1045.844333][T20950] netlink: 27 bytes leftover after parsing attributes in process `syz.7.4014'. [ 1045.911658][T20954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.922946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.175874][T20959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.199384][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1046.199434][ T29] audit: type=1326 audit(1778516912.343:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20955 comm="syz.4.4016" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dd9f9cdd9 code=0x0 [ 1046.254476][T20959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.366258][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4016'. [ 1047.063439][T20968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.197323][T20968] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4018'. [ 1047.219675][T20966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.540634][ T6373] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1048.744891][ T6373] usb 9-1: config 8 has an invalid interface number: 193 but max is 0 [ 1048.804468][ T6373] usb 9-1: config 8 has no interface number 0 [ 1048.833615][ T6373] usb 9-1: config 8 interface 193 has no altsetting 0 [ 1048.859359][ T6373] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1048.877486][ T6373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.907849][ T6373] usb 9-1: Product: syz [ 1048.930161][ T6373] usb 9-1: Manufacturer: syz [ 1048.948685][ T6373] usb 9-1: SerialNumber: syz [ 1049.246741][T20989] input: syz0 as /devices/virtual/input/input131 [ 1049.257282][T20991] syzkaller0: entered promiscuous mode [ 1049.279790][T20991] syzkaller0: entered allmulticast mode [ 1049.567258][ T29] audit: type=1800 audit(1778516915.703:1751): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4022" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1049.699864][ T6373] usb 9-1: USB disconnect, device number 13 [ 1050.216347][T21011] binder: 20995:21011 ioctl c0306201 2000000003c0 returned -14 [ 1050.630302][T21000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1050.645143][T21000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1050.658797][T21000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1050.671744][T21000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1050.690786][T21004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.717119][T21004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.276128][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4035'. [ 1051.310180][T21023] veth3: entered promiscuous mode [ 1051.344146][T21027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4035'. [ 1051.930241][T21049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.940782][T21049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.950849][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 1052.111218][T19314] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1052.271068][T19314] usb 5-1: Using ep0 maxpacket: 32 [ 1052.279944][T19314] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1052.289316][T19314] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1052.298276][T19314] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1052.309225][T19314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1052.320895][T19314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1052.331605][T19314] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1052.346036][T19314] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1052.358253][T19314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.372356][T19314] usb 5-1: config 0 descriptor?? [ 1052.602881][T19314] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1052.628080][T19314] usb 5-1: USB disconnect, device number 19 [ 1052.639858][T19314] usblp0: removed [ 1052.671443][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 1052.671952][ T5645] Bluetooth: hci0: command 0x0c1a tx timeout [ 1052.751324][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout [ 1053.100845][T19314] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1053.250692][T19314] usb 5-1: Using ep0 maxpacket: 32 [ 1053.263916][T19314] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1053.273123][T19314] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1053.284121][T19314] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1053.294293][T19314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1053.307573][T19314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1053.323736][T19314] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1053.338430][T19314] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1053.354473][T19314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.404994][T19314] usb 5-1: config 0 descriptor?? [ 1053.596962][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1053.626938][T19314] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1054.317008][T19314] usb 5-1: USB disconnect, device number 20 [ 1054.361975][T19314] usblp0: removed [ 1054.599465][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.608599][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.184097][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4053'. [ 1055.548773][T21096] loop9: detected capacity change from 0 to 2640 [ 1055.603245][T21096] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1055.638265][T21096] buffer_io_error: 320 callbacks suppressed [ 1055.638284][T21096] Buffer I/O error on dev loop9, logical block 1, async page read [ 1055.797359][T21097] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 1055.799113][T21105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.840572][T21097] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1055.860702][T21097] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1055.871253][T21105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.881414][T21097] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1055.907095][T21097] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1055.932363][T21097] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1055.950795][T21097] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1055.970808][T21097] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 1055.990804][T21097] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 1056.000860][T21097] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 1056.045605][T21097] I/O error, dev loop9, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 1056.090818][T21097] I/O error, dev loop9, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 74 prio class 2 [ 1056.112917][T21110] usb usb7: usbfs: process 21110 (syz.8.4062) did not claim interface 0 before use [ 1056.149968][T21092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.169343][T21092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.191352][T21092] program syz.5.4056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.293014][T21114] input: syz1 as /devices/virtual/input/input132 [ 1056.617467][T21121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.629917][T21121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.744765][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4066'. [ 1056.968264][T21134] trusted_key: encrypted_key: master key parameter '00000000000000004093' is invalid [ 1057.012911][T21132] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4069'. [ 1057.219381][T21141] QAT: failed to copy from user. [ 1057.487274][T21149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.514088][T21149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.548219][T21146] syzkaller0: entered promiscuous mode [ 1057.554202][T21146] syzkaller0: entered allmulticast mode [ 1057.750740][T19313] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1057.939512][T19313] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1057.953900][T19313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1057.987100][T19313] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1057.997489][T19313] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1058.038250][T19313] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1058.059992][T19313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.104657][T19313] usb 9-1: config 0 descriptor?? [ 1058.131703][T21152] xt_CT: No such helper "netbios-ns" [ 1058.401209][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4077'. [ 1058.583245][T19313] usbhid 9-1:0.0: can't add hid device: -71 [ 1058.596368][T19313] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1058.647769][T19313] usb 9-1: USB disconnect, device number 14 [ 1059.620651][ T6362] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1059.780748][ T6362] usb 9-1: Using ep0 maxpacket: 16 [ 1059.789786][ T6362] usb 9-1: config 139 has too many interfaces: 71, using maximum allowed: 32 [ 1059.819523][ T6362] usb 9-1: config 139 has an invalid descriptor of length 212, skipping remainder of the config [ 1059.857172][ T6362] usb 9-1: config 139 has 0 interfaces, different from the descriptor's value: 71 [ 1059.895843][ T6362] usb 9-1: New USB device found, idVendor=061d, idProduct=a720, bcdDevice=9c.15 [ 1059.930529][ T6362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.959226][ T6362] usb 9-1: Product: syz [ 1059.983444][ T6362] usb 9-1: Manufacturer: syz [ 1059.996017][ T6362] usb 9-1: SerialNumber: syz [ 1060.289689][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1060.310251][ T6362] usb 9-1: USB disconnect, device number 15 [ 1060.996257][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4081'. [ 1063.247337][T21168] geneve2: entered promiscuous mode [ 1063.262297][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4081'. [ 1063.273332][T19815] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.290877][T19815] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.308619][T19815] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.317619][T19815] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.352773][T19815] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.397344][T19815] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.452140][T19815] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.485041][T19815] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.700585][T19291] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1063.900813][T19291] usb 5-1: Using ep0 maxpacket: 16 [ 1063.910335][T19291] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 1063.955256][T19291] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 1063.990637][T19291] usb 5-1: config 166 has no interface number 0 [ 1064.014863][T19291] usb 5-1: config 166 has no interface number 1 [ 1064.055807][T19291] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1064.096174][T19291] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1064.127434][T19291] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1064.197578][T19291] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1064.267365][T19291] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1064.298101][T19291] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1064.355344][T19291] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1064.386420][T19291] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1064.408146][T19291] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1064.436062][T19291] usb 5-1: config 166 interface 177 has no altsetting 0 [ 1064.468642][T19291] usb 5-1: config 166 interface 34 has no altsetting 0 [ 1064.526412][T21189] xfrm1: entered allmulticast mode [ 1064.548920][T19291] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1064.564773][T19291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.575130][T19291] usb 5-1: Product: syz [ 1064.605586][T19291] usb 5-1: Manufacturer: syz [ 1064.626967][T19291] usb 5-1: SerialNumber: syz [ 1064.888552][T19291] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 1065.086541][T19291] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 1065.154546][T21193] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4088'. [ 1065.196945][T19291] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 1065.222121][T19291] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1065.244393][T19291] uvcvideo 5-1:166.34: No valid video chain found. [ 1065.258248][T21199] sit0: entered promiscuous mode [ 1065.279884][T19291] usb 5-1: USB disconnect, device number 21 [ 1065.289340][T21199] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 1065.354795][T21199] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1065.481554][T19815] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1065.887888][T21206] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4090'. [ 1065.971056][ T6362] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1066.187720][ T6362] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1066.229996][ T6362] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1066.293192][ T6362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1066.319903][ T6362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1066.365939][ T6362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1066.394758][ T6362] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1066.414030][ T6362] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1066.450686][ T6362] usb 5-1: Product: syz [ 1066.477643][ T6362] usb 5-1: Manufacturer: syz [ 1066.496786][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 1066.529796][ T6362] cdc_wdm 5-1:1.0: skipping garbage [ 1066.543940][ T6362] cdc_wdm 5-1:1.0: skipping garbage [ 1066.583310][ T6362] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1066.619970][ T6362] cdc_wdm 5-1:1.0: Unknown control protocol [ 1066.749488][T21204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.805746][T21204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.851178][T21204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.903003][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.940774][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.993365][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.032460][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.069004][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.083230][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.102322][T21221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.493760][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4098'. [ 1067.797890][T21204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.844120][T21204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.149224][T21204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.232220][T21204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.265894][T21204] netlink: 'syz.4.4091': attribute type 3 has an invalid length. [ 1069.579830][T21245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.600755][T19313] usb 5-1: USB disconnect, device number 22 [ 1069.617162][T21245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.848038][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4103'. [ 1070.089543][T21248] bond1: Invalid ad_actor_system MAC address. [ 1070.103861][T21248] bond1: option ad_actor_system: invalid value (3303287) [ 1070.191961][T21248] bond1 (unregistering): Released all slaves [ 1070.218558][T21253] netlink: 'syz.5.4102': attribute type 3 has an invalid length. [ 1070.424806][T21257] program syz.3.4104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.675265][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1070.881673][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4108'. [ 1071.352609][T19313] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1071.510918][T19313] usb 9-1: Using ep0 maxpacket: 16 [ 1071.519621][T19313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.531577][T19313] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.541790][T19313] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1071.548573][T19313] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1071.558432][T19313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.577070][T19313] usb 9-1: config 0 descriptor?? [ 1071.662017][T21281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1071.680367][T21281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.712246][T21281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.736623][T21281] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1072.630027][T21287] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1073.216144][T21293] x_tables: duplicate underflow at hook 1 [ 1073.413797][T21297] dlm: non-version read from control device 36 [ 1073.431702][T21296] netlink: 4356 bytes leftover after parsing attributes in process `syz.7.4115'. [ 1073.465206][T21296] net_ratelimit: 234 callbacks suppressed [ 1073.465225][T21296] openvswitch: netlink: Flow key attr not present in new flow. [ 1073.556451][T19313] usbhid 9-1:0.0: can't add hid device: -71 [ 1073.580961][T19313] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1073.631124][T19313] usb 9-1: USB disconnect, device number 16 [ 1073.816447][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1074.209322][T21307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.247074][T21307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.325853][T21307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.388670][T21307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.623520][T21310] fuse: Unknown parameter 'nootm' [ 1074.901604][T21315] input: syz1 as /devices/virtual/input/input134 [ 1075.047320][T21313] syzkaller0: entered promiscuous mode [ 1075.072189][T21313] syzkaller0: entered allmulticast mode [ 1075.737484][T21329] Invalid argument reading file caps for ./file0 [ 1076.130876][T19314] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1076.318789][T19314] usb 5-1: Using ep0 maxpacket: 32 [ 1076.332585][T19314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1076.347017][T19314] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.371776][T19314] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1076.400616][T19314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.420560][T19314] usb 5-1: Product: syz [ 1076.450282][T19314] usb 5-1: Manufacturer: syz [ 1076.463469][T19314] usb 5-1: SerialNumber: syz [ 1076.808604][T19314] usb 5-1: Cannot retrieve CPort count: -71 [ 1076.827545][T19314] usb 5-1: Cannot retrieve CPort count: -71 [ 1076.849084][T19314] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1076.915712][T19314] usb 5-1: USB disconnect, device number 23 [ 1076.942920][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1078.300594][ T5746] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1078.465833][ T5746] usb 9-1: config 160 has an invalid interface number: 200 but max is 0 [ 1078.475847][ T5746] usb 9-1: config 160 has no interface number 0 [ 1078.483000][ T5746] usb 9-1: config 160 interface 200 has no altsetting 0 [ 1078.515795][ T5746] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1078.525764][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.535833][ T5746] usb 9-1: Product: syz [ 1078.540089][ T5746] usb 9-1: Manufacturer: syz [ 1078.566853][ T5746] usb 9-1: SerialNumber: syz [ 1078.879073][ T5746] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1078.887092][ T5746] usb 9-1: MIDIStreaming interface descriptor not found [ 1079.000153][ T5746] usb 9-1: USB disconnect, device number 17 [ 1079.987212][T21355] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4131'. [ 1081.936414][T21360] fuse: Bad value for 'fd' [ 1082.151681][T21367] fuse: Bad value for 'fd' [ 1082.680685][ T5746] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1082.850948][ T5746] usb 9-1: Using ep0 maxpacket: 16 [ 1082.871265][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.909008][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.931060][ T5746] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1082.945567][ T5746] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1082.957595][ T5746] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.973728][ T5746] usb 9-1: config 0 descriptor?? [ 1083.063565][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.074149][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.088563][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.121888][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.139812][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1083.149307][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.164355][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.182891][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.190943][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.218612][T21394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.232679][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.256408][T21401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.266831][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.286511][T21401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.316973][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.344651][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.355151][T21394] vlan2: entered promiscuous mode [ 1083.360598][T21394] bridge0: entered promiscuous mode [ 1083.387383][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.399710][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.414564][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.428284][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.447397][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.544799][ T5746] usbhid 9-1:0.0: can't add hid device: -71 [ 1083.562356][ T5746] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1083.607514][ T5746] usb 9-1: USB disconnect, device number 18 [ 1083.735995][T21413] bond0: (slave syz_tun): Releasing backup interface [ 1083.948028][T21413] bridge_slave_0: left allmulticast mode [ 1083.956509][T21413] bridge_slave_0: left promiscuous mode [ 1083.962831][T21413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.973162][T21413] bridge_slave_1: left allmulticast mode [ 1083.978934][T21413] bridge_slave_1: left promiscuous mode [ 1083.989104][T21413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.004213][T21413] bond0: (slave bond_slave_0): Releasing backup interface [ 1084.014454][T21413] bond0: (slave bond_slave_1): Releasing backup interface [ 1084.025417][T21413] team0: Port device team_slave_0 removed [ 1084.034964][T21413] team0: Port device team_slave_1 removed [ 1084.043899][T21413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.298401][T21423] binder: 21418:21423 ioctl 4018620d 0 returned -22 [ 1084.490660][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4149'. [ 1084.802895][T21427] loop9: detected capacity change from 0 to 2640 [ 1086.580601][T21459] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4159'. [ 1086.620653][T21459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4159'. [ 1086.940591][ T6362] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1087.412473][T21468] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4162'. [ 1087.456887][T21470] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4162'. [ 1088.091862][T21478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.114952][T21478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.407792][T21480] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1088.769881][ T7392] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.790683][ T7392] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.335292][ T7392] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.376175][ T7392] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.747850][ T7392] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.765569][ T7392] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.783479][T21488] usb usb7: usbfs: process 21488 (syz.4.4170) did not claim interface 0 before use [ 1089.808735][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1089.831489][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1089.843474][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1089.852788][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1089.864291][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.048430][ T7392] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.059243][ T7392] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.589488][ T7392] bridge_slave_1: left allmulticast mode [ 1090.609670][ T7392] bridge_slave_1: left promiscuous mode [ 1090.630876][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.724289][ T7392] bridge_slave_0: left allmulticast mode [ 1090.738812][ T7392] bridge_slave_0: left promiscuous mode [ 1090.756215][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.951266][ T5645] Bluetooth: hci0: command tx timeout [ 1092.086736][ T7392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.108574][ T7392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.132751][ T7392] bond0 (unregistering): Released all slaves [ 1092.207700][ T5290] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1092.383114][ T7392] tipc: Left network mode [ 1092.496293][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1092.529746][T21524] netlink: 'syz.7.4175': attribute type 3 has an invalid length. [ 1092.712983][T19313] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1093.033323][T19313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.086787][T19313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.123038][T19313] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1093.265938][T19313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.282869][T19313] usb 5-1: config 0 descriptor?? [ 1093.568018][T21490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.580348][T21490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.589538][T21490] bridge_slave_0: entered allmulticast mode [ 1093.604572][T21490] bridge_slave_0: entered promiscuous mode [ 1093.617166][T21490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.627515][T21490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.680870][T21490] bridge_slave_1: entered allmulticast mode [ 1093.722761][T21490] bridge_slave_1: entered promiscuous mode [ 1093.750154][T19313] usbhid 5-1:0.0: can't add hid device: -71 [ 1093.792589][T19313] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1093.861174][T19313] usb 5-1: USB disconnect, device number 25 [ 1094.032105][ T5645] Bluetooth: hci0: command tx timeout [ 1094.249267][T21490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.320262][T21490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.545883][ T7392] hsr_slave_0: left promiscuous mode [ 1094.582437][ T7392] hsr_slave_1: left promiscuous mode [ 1094.605434][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.647880][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.779317][ T7392] batadv1 (unregistering): left promiscuous mode [ 1094.810268][ T7392] team0 (unregistering): Port device batadv1 removed [ 1095.385345][ T7392] team_slave_1 (unregistering): left promiscuous mode [ 1095.423276][ T7392] team0 (unregistering): Port device team_slave_1 removed [ 1095.482846][ T7392] team_slave_0 (unregistering): left promiscuous mode [ 1095.509794][ T7392] team0 (unregistering): Port device team_slave_0 removed [ 1095.649736][T21465] net_ratelimit: 20 callbacks suppressed [ 1095.649759][T21465] Set syz1 is full, maxelem 65536 reached [ 1095.976405][T21490] team0: Port device team_slave_0 added [ 1095.996076][T21490] team0: Port device team_slave_1 added [ 1096.016323][ T5290] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1096.091142][ T6373] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1096.115801][ T5645] Bluetooth: hci0: command tx timeout [ 1096.255336][T21490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.287052][T21490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.350034][ T6373] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1096.363405][ T6373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.375090][T21490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.386556][ T6373] usb 5-1: config 0 descriptor?? [ 1096.401712][T21490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.419809][T21490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.500570][T21490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.636059][T21490] hsr_slave_0: entered promiscuous mode [ 1096.646126][T21490] hsr_slave_1: entered promiscuous mode [ 1096.655290][T21490] debugfs: 'hsr0' already exists in 'hsr' [ 1096.680843][T21490] Cannot create hsr debugfs directory [ 1096.804365][ T6373] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1096.820070][ T6373] [drm:udl_init] *ERROR* Selecting channel failed [ 1096.902550][ T6373] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1096.922721][ T7392] IPVS: stop unused estimator thread 0... [ 1096.931895][ T6373] [drm] Initialized udl on minor 2 [ 1096.950810][ T6373] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1096.979577][ T6373] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1096.996305][ T6362] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1097.028418][ T6362] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1097.044261][ T6373] usb 5-1: USB disconnect, device number 26 [ 1097.476047][ T7392] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1097.637469][T21585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.713726][T21585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.039240][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1098.121787][T21490] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1098.179866][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.188189][T21490] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1098.195975][ T5645] Bluetooth: hci0: command tx timeout [ 1098.221929][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.237088][T21490] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1098.269290][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.287220][T21490] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1098.312364][T21490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.493978][ T5290] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1098.563526][T21490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.635001][T21490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.643535][T19313] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1098.676240][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.683503][T13244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.730117][T21609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.742571][T21609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.791901][T19817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.799146][T19817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.821530][T19313] usb 5-1: Using ep0 maxpacket: 16 [ 1098.833751][T19313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.865173][T19313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.893624][T19313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1098.934695][T19313] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1098.955462][T19313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.979253][T19313] usb 5-1: config 0 descriptor?? [ 1099.074734][T21490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.201762][T21490] veth0_vlan: entered promiscuous mode [ 1099.265458][T21490] veth1_vlan: entered promiscuous mode [ 1099.337429][T21490] veth0_macvtap: entered promiscuous mode [ 1099.366375][T21490] veth1_macvtap: entered promiscuous mode [ 1099.449040][T21490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.511379][T21490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.578849][T19815] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.605804][T19815] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.607736][T21599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.632688][T19815] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.651588][T21599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.671858][T19815] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.696628][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1099.710197][T21599] loop2: detected capacity change from 0 to 7 [ 1099.754049][T21599] Dev loop2: unable to read RDB block 7 [ 1099.767505][T21599] loop2: unable to read partition table [ 1099.780937][T21599] loop2: partition table beyond EOD, truncated [ 1099.797531][T21599] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1099.945202][T19313] usbhid 5-1:0.0: can't add hid device: -71 [ 1099.974562][T19313] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1100.035278][T19313] usb 5-1: USB disconnect, device number 27 [ 1100.153338][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.197111][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.374922][T21632] netlink: 'syz.7.4191': attribute type 2 has an invalid length. [ 1100.395689][ T5290] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1100.423012][T21632] netlink: 'syz.7.4191': attribute type 5 has an invalid length. [ 1100.434932][T19817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.474044][T19817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.490096][T21632] netlink: 'syz.7.4191': attribute type 2 has an invalid length. [ 1100.565525][T21632] netlink: 'syz.7.4191': attribute type 5 has an invalid length. [ 1101.049477][T21666] usb usb7: usbfs: process 21666 (syz.5.4197) did not claim interface 0 before use [ 1101.125042][T21666] FAULT_INJECTION: forcing a failure. [ 1101.125042][T21666] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.184897][T21666] CPU: 0 UID: 0 PID: 21666 Comm: syz.5.4197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.184930][T21666] Tainted: [L]=SOFTLOCKUP [ 1101.184939][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.184953][T21666] Call Trace: [ 1101.184962][T21666] [ 1101.184971][T21666] dump_stack_lvl+0xe8/0x150 [ 1101.185013][T21666] should_fail_ex+0x412/0x560 [ 1101.185046][T21666] should_failslab+0xa8/0x100 [ 1101.185078][T21666] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1101.185108][T21666] ? __kernfs_new_node+0xaa/0x970 [ 1101.185141][T21666] kstrdup+0x42/0x100 [ 1101.185161][T21666] __kernfs_new_node+0xaa/0x970 [ 1101.185215][T21666] ? kernfs_root+0x1c/0x230 [ 1101.185245][T21666] ? __pfx___kernfs_new_node+0x10/0x10 [ 1101.185273][T21666] ? kernfs_root+0x1c/0x230 [ 1101.185305][T21666] ? kernfs_root+0x1c/0x230 [ 1101.185332][T21666] ? kernfs_root+0x1c/0x230 [ 1101.185364][T21666] kernfs_new_node+0x102/0x210 [ 1101.185402][T21666] kernfs_create_link+0xa7/0x200 [ 1101.185431][T21666] sysfs_do_create_link_sd+0x83/0x110 [ 1101.185463][T21666] driver_sysfs_add+0x89/0x210 [ 1101.185517][T21666] device_bind_driver+0x17/0x60 [ 1101.185546][T21666] usb_driver_claim_interface+0x23a/0x450 [ 1101.185592][T21666] claimintf+0x166/0x240 [ 1101.185619][T21666] parse_usbdevfs_streams+0x7b5/0x9e0 [ 1101.185664][T21666] proc_free_streams+0xa9/0x430 [ 1101.185686][T21666] ? __pfx___mutex_lock+0x10/0x10 [ 1101.185724][T21666] ? __pfx_proc_free_streams+0x10/0x10 [ 1101.185756][T21666] usbdev_ioctl+0x15cd/0x2120 [ 1101.185796][T21666] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1101.185825][T21666] ? __fget_files+0x2a/0x420 [ 1101.185850][T21666] ? __fget_files+0x3a0/0x420 [ 1101.185874][T21666] ? __fget_files+0x2a/0x420 [ 1101.185903][T21666] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1101.185935][T21666] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1101.185966][T21666] __se_sys_ioctl+0xfc/0x170 [ 1101.185997][T21666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.186021][T21666] do_syscall_64+0x15f/0xf80 [ 1101.186050][T21666] ? trace_irq_disable+0x3b/0x140 [ 1101.186081][T21666] ? clear_bhb_loop+0x40/0x90 [ 1101.186107][T21666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.186129][T21666] RIP: 0033:0x7fb2ca99cdd9 [ 1101.186149][T21666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.186167][T21666] RSP: 002b:00007fb2cb815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.186189][T21666] RAX: ffffffffffffffda RBX: 00007fb2cac15fa0 RCX: 00007fb2ca99cdd9 [ 1101.186205][T21666] RDX: 0000200000000000 RSI: 000000008008551d RDI: 0000000000000003 [ 1101.186219][T21666] RBP: 00007fb2cb815090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.186232][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.186246][T21666] R13: 00007fb2cac16038 R14: 00007fb2cac15fa0 R15: 00007fb2cad3fa48 [ 1101.186281][T21666] [ 1102.030789][T19306] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1102.220801][T19306] usb 5-1: Using ep0 maxpacket: 32 [ 1102.235962][T19306] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1102.257257][T19306] usb 5-1: config 0 has no interface number 0 [ 1102.279348][T19306] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1102.302157][T19306] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1102.325187][T19306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.349639][T19306] usb 5-1: Product: syz [ 1102.364401][T19306] usb 5-1: Manufacturer: syz [ 1102.381859][T19306] usb 5-1: SerialNumber: syz [ 1102.403612][T19306] usb 5-1: config 0 descriptor?? [ 1102.472069][T21672] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1102.489722][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.515086][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.726009][T19306] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1102.759311][T19306] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1102.793865][T19306] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1102.818711][T19306] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1102.858593][T19306] usb 5-1: USB disconnect, device number 28 [ 1102.909674][T21693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.918636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.279960][T21700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4205'. [ 1103.517903][T21712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.530180][T21712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.539665][T21707] netlink: 'syz.9.4208': attribute type 1 has an invalid length. [ 1103.543578][T21712] netlink: 'syz.5.4209': attribute type 5 has an invalid length. [ 1103.591231][T19298] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1103.607883][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1103.674599][T21707] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1103.702290][T21718] input: syz0 as /devices/virtual/input/input135 [ 1103.708960][T21707] netlink: 'syz.9.4208': attribute type 12 has an invalid length. [ 1103.732870][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1103.763081][T19298] usb 5-1: Using ep0 maxpacket: 8 [ 1103.773057][T19298] usb 5-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1103.785223][T19298] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1103.796996][T19298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.809513][T19298] usb 5-1: config 0 descriptor?? [ 1103.826091][T19298] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 1103.836179][T19298] uvcvideo 5-1:0.0: No valid video chain found. [ 1104.036566][T21700] vxcan1: entered promiscuous mode [ 1104.042958][T21700] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1104.066725][T19298] usb 5-1: USB disconnect, device number 29 [ 1104.108567][T21720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.131754][T21720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.149554][T21720] program syz.5.4211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.570837][T19298] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1104.720610][T19298] usb 10-1: Using ep0 maxpacket: 16 [ 1104.727892][T19298] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1104.739802][T19298] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.754074][T19298] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.766047][T19298] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.776529][T19298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.789832][T19298] usb 10-1: Product: syz [ 1104.805250][T19298] usb 10-1: Manufacturer: syz [ 1104.811453][T19298] usb 10-1: SerialNumber: syz [ 1104.831349][T19298] usb 10-1: 0:2 : does not exist [ 1104.885831][T21727] No such timeout policy "syz1" [ 1105.637891][T21734] binder: 21733:21734 ioctl 4008af12 200000000300 returned -22 [ 1106.096064][T19298] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1106.261325][T21742] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4 out of range (1000000..45000000) [ 1106.305236][T21742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1106.326056][T19298] usb 10-1: USB disconnect, device number 2 [ 1106.360111][T21742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.404537][T21742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.578222][T21751] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 1106.578222][T21751] program syz.7.4220 not setting count and/or reply_len properly [ 1106.780764][T19306] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1106.960770][T19306] usb 5-1: Using ep0 maxpacket: 16 [ 1106.977604][T19306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.999924][T19306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.025918][T19306] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1107.039741][T19306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.094475][T19306] usb 5-1: config 0 descriptor?? [ 1107.216073][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.261054][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.373529][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.413808][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.537580][T19306] razer 0003:1532:011B.003C: unbalanced collection at end of report description [ 1107.565364][T19306] razer 0003:1532:011B.003C: probe with driver razer failed with error -22 [ 1107.735653][T19298] usb 5-1: USB disconnect, device number 30 [ 1107.850615][T21766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.870737][T21766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.897401][T21766] program syz.3.4224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1108.913105][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4230'. [ 1108.913105][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4230'. [ 1109.200796][T19298] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1109.230316][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1109.241197][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1109.374467][T19298] usb 5-1: config 0 has no interfaces? [ 1109.386595][T19298] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1109.397039][T19298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.405543][T19298] usb 5-1: Product: syz [ 1109.410107][T19298] usb 5-1: Manufacturer: syz [ 1109.415613][T19298] usb 5-1: SerialNumber: syz [ 1109.430273][T19298] usb 5-1: config 0 descriptor?? [ 1109.688501][T21790] veth0_vlan: left promiscuous mode [ 1109.694876][T21790] veth0_vlan: entered promiscuous mode [ 1109.709117][T19305] usb 5-1: USB disconnect, device number 31 [ 1109.841472][T19298] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1109.944799][T21812] MPI: mpi too large (113288 bits) [ 1110.003128][T19298] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1110.011985][T19298] usb 10-1: not running at top speed; connect to a high speed hub [ 1110.021159][T19298] usb 10-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 1110.033386][T19298] usb 10-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1110.048498][T19298] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1110.063391][T19298] usb 10-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1110.074420][T19298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.090846][T19298] usb 10-1: Product: syz [ 1110.099841][T19298] usb 10-1: Manufacturer: syz [ 1110.104860][T19298] usb 10-1: SerialNumber: syz [ 1110.123839][T21801] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22 [ 1110.254927][T21815] xt_bpf: check failed: parse error [ 1110.364199][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4238'. [ 1110.407418][T19298] usbhid 10-1:1.0: can't add hid device: -71 [ 1110.439079][T19298] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1110.447014][T21819] usb usb7: usbfs: process 21819 (syz.5.4239) did not claim interface 0 before use [ 1110.447295][T21819] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1110.509652][T19298] usb 10-1: USB disconnect, device number 3 [ 1110.711689][T21828] binfmt_misc: register: failed to install interpreter file ./file0 [ 1111.108283][T21837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.144325][T21837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.425557][T21842] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4245'. [ 1111.515474][T21818] ALSA: mixer_oss: invalid OSS volume 'w' [ 1111.538206][T21818] ALSA: mixer_oss: invalid OSS volume 'V$~w āĒ0?2' [ 1111.575390][T21818] ALSA: mixer_oss: invalid OSS volume ' SOFTIRQ-unsafe lock order detected [ 1118.594067][T21937] syzkaller #0 Tainted: G L [ 1118.600081][T21937] ----------------------------------------------------- [ 1118.607045][T21937] syz.4.4260/21937 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1118.614802][T21937] ffff8880335ccc90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1118.623673][T21937] [ 1118.623673][T21937] and this task is already holding: [ 1118.631073][T21937] ffff888053b6d028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1118.641049][T21937] which would create a new lock dependency: [ 1118.646965][T21937] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1118.655118][T21937] [ 1118.655118][T21937] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1118.664597][T21937] (&dev->event_lock#2){..-.}-{3:3} [ 1118.664648][T21937] [ 1118.664648][T21937] ... which became SOFTIRQ-irq-safe at: [ 1118.677609][T21937] lock_acquire+0x106/0x350 [ 1118.682252][T21937] _raw_spin_lock_irqsave+0x40/0x60 [ 1118.687664][T21937] input_event+0x71/0xc0 [ 1118.692030][T21937] xpad360_process_packet+0xda/0xdc0 [ 1118.697439][T21937] xpad_irq_in+0x14e/0x25c0 [ 1118.702070][T21937] __usb_hcd_giveback_urb+0x376/0x540 [ 1118.707668][T21937] dummy_timer+0xbc0/0x4650 [ 1118.712308][T21937] __hrtimer_run_queues+0x3c0/0xa20 [ 1118.717644][T21937] hrtimer_run_softirq+0x17a/0x240 [ 1118.722874][T21937] handle_softirqs+0x22a/0x840 [ 1118.727772][T21937] __irq_exit_rcu+0xca/0x220 [ 1118.732515][T21937] irq_exit_rcu+0x9/0x30 [ 1118.736967][T21937] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1118.742719][T21937] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1118.748827][T21937] plist_check_list+0x6a/0x310 [ 1118.753803][T21937] plist_del+0x5b/0x3f0 [ 1118.758077][T21937] __futex_unqueue+0xf0/0x160 [ 1118.762866][T21937] futex_wake_mark+0xe2/0x1f0 [ 1118.767672][T21937] futex_wake+0x39b/0x580 [ 1118.772118][T21937] do_futex+0x395/0x420 [ 1118.776387][T21937] __se_sys_futex+0x3a8/0x450 [ 1118.781174][T21937] do_syscall_64+0x15f/0xf80 [ 1118.785895][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.791903][T21937] [ 1118.791903][T21937] to a SOFTIRQ-irq-unsafe lock: [ 1118.798933][T21937] (tasklist_lock){.+.+}-{3:3} [ 1118.798970][T21937] [ 1118.798970][T21937] ... which became SOFTIRQ-irq-unsafe at: [ 1118.811648][T21937] ... [ 1118.811662][T21937] lock_acquire+0x106/0x350 [ 1118.818958][T21937] _raw_read_lock+0x36/0x50 [ 1118.823627][T21937] __do_wait+0xde/0x740 [ 1118.827935][T21937] do_wait+0x1e7/0x510 [ 1118.832135][T21937] kernel_wait+0xd6/0x1c0 [ 1118.836584][T21937] call_usermodehelper_exec_work+0xbe/0x230 [ 1118.842659][T21937] process_scheduled_works+0xb5d/0x1860 [ 1118.848336][T21937] worker_thread+0xa53/0xfc0 [ 1118.853048][T21937] kthread+0x388/0x470 [ 1118.857230][T21937] ret_from_fork+0x514/0xb70 [ 1118.861920][T21937] ret_from_fork_asm+0x1a/0x30 [ 1118.866792][T21937] [ 1118.866792][T21937] other info that might help us debug this: [ 1118.866792][T21937] [ 1118.877043][T21937] Chain exists of: [ 1118.877043][T21937] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1118.877043][T21937] [ 1118.890908][T21937] Possible interrupt unsafe locking scenario: [ 1118.890908][T21937] [ 1118.899353][T21937] CPU0 CPU1 [ 1118.904746][T21937] ---- ---- [ 1118.910167][T21937] lock(tasklist_lock); [ 1118.914455][T21937] local_irq_disable(); [ 1118.921244][T21937] lock(&dev->event_lock#2); [ 1118.928489][T21937] lock(&client->buffer_lock); [ 1118.935907][T21937] [ 1118.939390][T21937] lock(&dev->event_lock#2); [ 1118.944282][T21937] [ 1118.944282][T21937] *** DEADLOCK *** [ 1118.944282][T21937] [ 1118.952446][T21937] 7 locks held by syz.4.4260/21937: [ 1118.957669][T21937] #0: ffff88802be5c110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1118.966959][T21937] #1: ffff88801ff76230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1118.977140][T21937] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1118.987148][T21937] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1118.996855][T21937] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1119.006257][T21937] #5: ffff888053b6d028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1119.016513][T21937] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1119.025627][T21937] [ 1119.025627][T21937] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1119.036144][T21937] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1119.041849][T21937] IN-SOFTIRQ-W at: [ 1119.045961][T21937] lock_acquire+0x106/0x350 [ 1119.052317][T21937] _raw_spin_lock_irqsave+0x40/0x60 [ 1119.059367][T21937] input_event+0x71/0xc0 [ 1119.065484][T21937] xpad360_process_packet+0xda/0xdc0 [ 1119.072627][T21937] xpad_irq_in+0x14e/0x25c0 [ 1119.078986][T21937] __usb_hcd_giveback_urb+0x376/0x540 [ 1119.086226][T21937] dummy_timer+0xbc0/0x4650 [ 1119.092613][T21937] __hrtimer_run_queues+0x3c0/0xa20 [ 1119.099688][T21937] hrtimer_run_softirq+0x17a/0x240 [ 1119.106693][T21937] handle_softirqs+0x22a/0x840 [ 1119.113324][T21937] __irq_exit_rcu+0xca/0x220 [ 1119.119810][T21937] irq_exit_rcu+0x9/0x30 [ 1119.125923][T21937] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1119.133461][T21937] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1119.141416][T21937] plist_check_list+0x6a/0x310 [ 1119.148041][T21937] plist_del+0x5b/0x3f0 [ 1119.154054][T21937] __futex_unqueue+0xf0/0x160 [ 1119.160599][T21937] futex_wake_mark+0xe2/0x1f0 [ 1119.167169][T21937] futex_wake+0x39b/0x580 [ 1119.173373][T21937] do_futex+0x395/0x420 [ 1119.179410][T21937] __se_sys_futex+0x3a8/0x450 [ 1119.185947][T21937] do_syscall_64+0x15f/0xf80 [ 1119.192433][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.200200][T21937] INITIAL USE at: [ 1119.204250][T21937] lock_acquire+0x106/0x350 [ 1119.210524][T21937] _raw_spin_lock_irqsave+0x40/0x60 [ 1119.217494][T21937] input_inject_event+0xa4/0x330 [ 1119.224324][T21937] kbd_led_trigger_activate+0xbc/0x100 [ 1119.231577][T21937] led_trigger_set+0x535/0x960 [ 1119.238216][T21937] led_trigger_set_default+0x260/0x2a0 [ 1119.245462][T21937] led_classdev_register_ext+0x787/0x9c0 [ 1119.252991][T21937] input_leds_connect+0x517/0x790 [ 1119.259813][T21937] input_register_device+0xce0/0x1140 [ 1119.266979][T21937] atkbd_connect+0x71e/0xa10 [ 1119.273345][T21937] serio_driver_probe+0x82/0xb0 [ 1119.280004][T21937] really_probe+0x267/0xaf0 [ 1119.286311][T21937] __driver_probe_device+0x1ef/0x380 [ 1119.293388][T21937] driver_probe_device+0x4f/0x240 [ 1119.300287][T21937] __driver_attach+0x34c/0x640 [ 1119.306896][T21937] bus_for_each_dev+0x23b/0x2c0 [ 1119.313514][T21937] serio_handle_event+0x1af/0xf80 [ 1119.320336][T21937] process_scheduled_works+0xb5d/0x1860 [ 1119.327681][T21937] worker_thread+0xa53/0xfc0 [ 1119.334061][T21937] kthread+0x388/0x470 [ 1119.339913][T21937] ret_from_fork+0x514/0xb70 [ 1119.346358][T21937] ret_from_fork_asm+0x1a/0x30 [ 1119.352905][T21937] } [ 1119.355618][T21937] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1119.365042][T21937] -> (&client->buffer_lock){....}-{3:3} { [ 1119.370914][T21937] INITIAL USE at: [ 1119.374838][T21937] lock_acquire+0x106/0x350 [ 1119.380937][T21937] _raw_spin_lock+0x2e/0x40 [ 1119.387137][T21937] evdev_pass_values+0xb9/0xbd0 [ 1119.393610][T21937] evdev_events+0x1e6/0x340 [ 1119.399808][T21937] input_pass_values+0x288/0x890 [ 1119.406369][T21937] input_event_dispose+0x330/0x6b0 [ 1119.413085][T21937] input_inject_event+0x1dc/0x330 [ 1119.419718][T21937] evdev_write+0x325/0x4c0 [ 1119.425736][T21937] vfs_write+0x29a/0xb90 [ 1119.431586][T21937] ksys_write+0x150/0x270 [ 1119.437608][T21937] do_syscall_64+0x15f/0xf80 [ 1119.443816][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.451307][T21937] } [ 1119.453849][T21937] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1119.462153][T21937] ... acquired at: [ 1119.466087][T21937] _raw_spin_lock+0x2e/0x40 [ 1119.470811][T21937] evdev_pass_values+0xb9/0xbd0 [ 1119.476040][T21937] evdev_events+0x1e6/0x340 [ 1119.480790][T21937] input_pass_values+0x288/0x890 [ 1119.485932][T21937] input_event_dispose+0x330/0x6b0 [ 1119.491354][T21937] input_inject_event+0x1dc/0x330 [ 1119.496595][T21937] evdev_write+0x325/0x4c0 [ 1119.501234][T21937] vfs_write+0x29a/0xb90 [ 1119.505704][T21937] ksys_write+0x150/0x270 [ 1119.510257][T21937] do_syscall_64+0x15f/0xf80 [ 1119.515064][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.521164][T21937] [ 1119.523528][T21937] [ 1119.523528][T21937] the dependencies between the lock to be acquired [ 1119.523548][T21937] and SOFTIRQ-irq-unsafe lock: [ 1119.537295][T21937] -> (tasklist_lock){.+.+}-{3:3} { [ 1119.542633][T21937] HARDIRQ-ON-R at: [ 1119.546852][T21937] lock_acquire+0x106/0x350 [ 1119.553374][T21937] _raw_read_lock+0x36/0x50 [ 1119.559920][T21937] __do_wait+0xde/0x740 [ 1119.566115][T21937] do_wait+0x1e7/0x510 [ 1119.572242][T21937] kernel_wait+0xd6/0x1c0 [ 1119.578612][T21937] call_usermodehelper_exec_work+0xbe/0x230 [ 1119.586535][T21937] process_scheduled_works+0xb5d/0x1860 [ 1119.594106][T21937] worker_thread+0xa53/0xfc0 [ 1119.600725][T21937] kthread+0x388/0x470 [ 1119.606831][T21937] ret_from_fork+0x514/0xb70 [ 1119.613437][T21937] ret_from_fork_asm+0x1a/0x30 [ 1119.620503][T21937] SOFTIRQ-ON-R at: [ 1119.624694][T21937] lock_acquire+0x106/0x350 [ 1119.631231][T21937] _raw_read_lock+0x36/0x50 [ 1119.637778][T21937] __do_wait+0xde/0x740 [ 1119.644011][T21937] do_wait+0x1e7/0x510 [ 1119.650113][T21937] kernel_wait+0xd6/0x1c0 [ 1119.656492][T21937] call_usermodehelper_exec_work+0xbe/0x230 [ 1119.664416][T21937] process_scheduled_works+0xb5d/0x1860 [ 1119.671995][T21937] worker_thread+0xa53/0xfc0 [ 1119.678615][T21937] kthread+0x388/0x470 [ 1119.684710][T21937] ret_from_fork+0x514/0xb70 [ 1119.691326][T21937] ret_from_fork_asm+0x1a/0x30 [ 1119.698234][T21937] INITIAL USE at: [ 1119.702348][T21937] lock_acquire+0x106/0x350 [ 1119.708786][T21937] _raw_write_lock_irq+0x3d/0x50 [ 1119.715691][T21937] copy_process+0x2b4c/0x4440 [ 1119.722331][T21937] kernel_clone+0x284/0x8f0 [ 1119.728774][T21937] user_mode_thread+0x110/0x180 [ 1119.735596][T21937] rest_init+0x23/0x300 [ 1119.741705][T21937] start_kernel+0x38a/0x3e0 [ 1119.748223][T21937] x86_64_start_reservations+0x24/0x30 [ 1119.755641][T21937] x86_64_start_kernel+0x143/0x1c0 [ 1119.762710][T21937] common_startup_64+0x13e/0x147 [ 1119.769607][T21937] INITIAL READ USE at: [ 1119.774134][T21937] lock_acquire+0x106/0x350 [ 1119.781034][T21937] _raw_read_lock+0x36/0x50 [ 1119.787915][T21937] __do_wait+0xde/0x740 [ 1119.794486][T21937] do_wait+0x1e7/0x510 [ 1119.800937][T21937] kernel_wait+0xd6/0x1c0 [ 1119.807656][T21937] call_usermodehelper_exec_work+0xbe/0x230 [ 1119.816100][T21937] process_scheduled_works+0xb5d/0x1860 [ 1119.824019][T21937] worker_thread+0xa53/0xfc0 [ 1119.831169][T21937] kthread+0x388/0x470 [ 1119.837720][T21937] ret_from_fork+0x514/0xb70 [ 1119.844966][T21937] ret_from_fork_asm+0x1a/0x30 [ 1119.852283][T21937] } [ 1119.854974][T21937] ... key at: [] tasklist_lock+0x18/0x40 [ 1119.863064][T21937] ... acquired at: [ 1119.867058][T21937] _raw_read_lock+0x36/0x50 [ 1119.871771][T21937] send_sigurg+0x12b/0x420 [ 1119.876419][T21937] sk_send_sigurg+0x6c/0x2e0 [ 1119.881210][T21937] queue_oob+0x42c/0x4f0 [ 1119.885651][T21937] unix_stream_sendmsg+0xcb1/0xe80 [ 1119.890964][T21937] ____sys_sendmsg+0x972/0x9f0 [ 1119.895950][T21937] ___sys_sendmsg+0x2a5/0x360 [ 1119.900922][T21937] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1119.906092][T21937] do_syscall_64+0x15f/0xf80 [ 1119.910989][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.917309][T21937] [ 1119.919649][T21937] -> (&f_owner->lock){....}-{3:3} { [ 1119.924999][T21937] INITIAL USE at: [ 1119.929082][T21937] lock_acquire+0x106/0x350 [ 1119.935381][T21937] _raw_write_lock_irq+0x3d/0x50 [ 1119.942128][T21937] __f_setown+0x67/0x370 [ 1119.948149][T21937] f_setown+0x23a/0x300 [ 1119.954089][T21937] do_fcntl+0x6cd/0x1a20 [ 1119.960115][T21937] __se_sys_fcntl+0xc8/0x150 [ 1119.966483][T21937] do_syscall_64+0x15f/0xf80 [ 1119.972862][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.980616][T21937] INITIAL READ USE at: [ 1119.985086][T21937] lock_acquire+0x106/0x350 [ 1119.991807][T21937] _raw_read_lock_irqsave+0x48/0x60 [ 1119.999211][T21937] send_sigio+0x38/0x370 [ 1120.005668][T21937] kill_fasync+0x24d/0x4d0 [ 1120.012294][T21937] sock_wake_async+0x137/0x160 [ 1120.019258][T21937] sk_wake_async+0x184/0x280 [ 1120.026226][T21937] unix_release_sock+0x74f/0xc80 [ 1120.033454][T21937] unix_release+0x92/0xd0 [ 1120.039995][T21937] sock_close+0xc3/0x240 [ 1120.046444][T21937] __fput+0x44f/0xa60 [ 1120.052647][T21937] task_work_run+0x1d9/0x270 [ 1120.059545][T21937] get_signal+0x11eb/0x1330 [ 1120.066436][T21937] arch_do_signal_or_restart+0xbc/0x840 [ 1120.074208][T21937] exit_to_user_mode_loop+0x8c/0x4d0 [ 1120.081695][T21937] do_syscall_64+0x33e/0xf80 [ 1120.088598][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.096712][T21937] } [ 1120.099326][T21937] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1120.108373][T21937] ... acquired at: [ 1120.112286][T21937] _raw_read_lock_irqsave+0x48/0x60 [ 1120.117714][T21937] send_sigio+0x38/0x370 [ 1120.122184][T21937] kill_fasync+0x24d/0x4d0 [ 1120.126824][T21937] sock_wake_async+0x137/0x160 [ 1120.131800][T21937] sk_wake_async+0x184/0x280 [ 1120.136599][T21937] unix_release_sock+0x74f/0xc80 [ 1120.141737][T21937] unix_release+0x92/0xd0 [ 1120.146261][T21937] sock_close+0xc3/0x240 [ 1120.150724][T21937] __fput+0x44f/0xa60 [ 1120.154919][T21937] task_work_run+0x1d9/0x270 [ 1120.159771][T21937] get_signal+0x11eb/0x1330 [ 1120.164482][T21937] arch_do_signal_or_restart+0xbc/0x840 [ 1120.170281][T21937] exit_to_user_mode_loop+0x8c/0x4d0 [ 1120.175802][T21937] do_syscall_64+0x33e/0xf80 [ 1120.180711][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.186865][T21937] [ 1120.189218][T21937] -> (&new->fa_lock){....}-{3:3} { [ 1120.194380][T21937] INITIAL USE at: [ 1120.198308][T21937] lock_acquire+0x106/0x350 [ 1120.204411][T21937] _raw_write_lock_irq+0x3d/0x50 [ 1120.210950][T21937] fasync_remove_entry+0xf1/0x1c0 [ 1120.217590][T21937] sock_fasync+0x85/0xf0 [ 1120.223422][T21937] __fput+0x890/0xa60 [ 1120.229004][T21937] task_work_run+0x1d9/0x270 [ 1120.235184][T21937] exit_to_user_mode_loop+0xf3/0x4d0 [ 1120.242079][T21937] do_syscall_64+0x33e/0xf80 [ 1120.248274][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.255776][T21937] INITIAL READ USE at: [ 1120.260137][T21937] lock_acquire+0x106/0x350 [ 1120.266666][T21937] _raw_read_lock_irqsave+0x48/0x60 [ 1120.273917][T21937] kill_fasync+0x199/0x4d0 [ 1120.280373][T21937] sock_wake_async+0x137/0x160 [ 1120.287189][T21937] sk_wake_async+0x184/0x280 [ 1120.293814][T21937] unix_release_sock+0x74f/0xc80 [ 1120.300778][T21937] unix_release+0x92/0xd0 [ 1120.307172][T21937] sock_close+0xc3/0x240 [ 1120.313453][T21937] __fput+0x44f/0xa60 [ 1120.319469][T21937] task_work_run+0x1d9/0x270 [ 1120.326182][T21937] get_signal+0x11eb/0x1330 [ 1120.332903][T21937] arch_do_signal_or_restart+0xbc/0x840 [ 1120.340576][T21937] exit_to_user_mode_loop+0x8c/0x4d0 [ 1120.347898][T21937] do_syscall_64+0x33e/0xf80 [ 1120.354617][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.362541][T21937] } [ 1120.365065][T21937] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1120.373780][T21937] ... acquired at: [ 1120.377624][T21937] _raw_read_lock_irqsave+0x48/0x60 [ 1120.383206][T21937] kill_fasync+0x199/0x4d0 [ 1120.387919][T21937] evdev_pass_values+0x627/0xbd0 [ 1120.393057][T21937] evdev_events+0x1e6/0x340 [ 1120.397777][T21937] input_pass_values+0x288/0x890 [ 1120.402918][T21937] input_event_dispose+0x330/0x6b0 [ 1120.408237][T21937] input_inject_event+0x1dc/0x330 [ 1120.413465][T21937] evdev_write+0x325/0x4c0 [ 1120.418079][T21937] vfs_write+0x29a/0xb90 [ 1120.422524][T21937] ksys_write+0x150/0x270 [ 1120.427053][T21937] do_syscall_64+0x15f/0xf80 [ 1120.431846][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.437949][T21937] [ 1120.440301][T21937] [ 1120.440301][T21937] stack backtrace: [ 1120.446222][T21937] CPU: 0 UID: 0 PID: 21937 Comm: syz.4.4260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.446253][T21937] Tainted: [L]=SOFTLOCKUP [ 1120.446261][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1120.446275][T21937] Call Trace: [ 1120.446291][T21937] [ 1120.446299][T21937] dump_stack_lvl+0xe8/0x150 [ 1120.446319][T21937] __lock_acquire+0x2a94/0x2cf0 [ 1120.446347][T21937] ? kill_fasync+0x199/0x4d0 [ 1120.446390][T21937] lock_acquire+0x106/0x350 [ 1120.446411][T21937] ? kill_fasync+0x199/0x4d0 [ 1120.446441][T21937] ? do_raw_spin_lock+0x12b/0x2f0 [ 1120.446474][T21937] _raw_read_lock_irqsave+0x48/0x60 [ 1120.446496][T21937] ? kill_fasync+0x199/0x4d0 [ 1120.446537][T21937] kill_fasync+0x199/0x4d0 [ 1120.446565][T21937] ? kill_fasync+0x53/0x4d0 [ 1120.446593][T21937] evdev_pass_values+0x627/0xbd0 [ 1120.446629][T21937] ? evdev_pass_values+0x611/0xbd0 [ 1120.446656][T21937] evdev_events+0x1e6/0x340 [ 1120.446705][T21937] ? evdev_events+0x79/0x340 [ 1120.446736][T21937] ? input_pass_values+0x8d/0x890 [ 1120.446769][T21937] input_pass_values+0x288/0x890 [ 1120.446794][T21937] ? input_handle_event+0x70c/0xf30 [ 1120.446814][T21937] input_event_dispose+0x330/0x6b0 [ 1120.446854][T21937] input_inject_event+0x1dc/0x330 [ 1120.446879][T21937] ? input_inject_event+0xb5/0x330 [ 1120.446905][T21937] evdev_write+0x325/0x4c0 [ 1120.446928][T21937] ? __lock_acquire+0x6b5/0x2cf0 [ 1120.446945][T21937] ? __pfx_evdev_write+0x10/0x10 [ 1120.446960][T21937] ? bpf_lsm_file_permission+0x9/0x20 [ 1120.446999][T21937] ? security_file_permission+0x75/0x260 [ 1120.447023][T21937] ? rw_verify_area+0x255/0x4d0 [ 1120.447050][T21937] ? __pfx_evdev_write+0x10/0x10 [ 1120.447070][T21937] vfs_write+0x29a/0xb90 [ 1120.447099][T21937] ? __pfx_vfs_write+0x10/0x10 [ 1120.447121][T21937] ? __fget_files+0x2a/0x420 [ 1120.447157][T21937] ? __fget_files+0x2a/0x420 [ 1120.447182][T21937] ? __fget_files+0x3a0/0x420 [ 1120.447205][T21937] ? __fget_files+0x2a/0x420 [ 1120.447237][T21937] ksys_write+0x150/0x270 [ 1120.447259][T21937] ? __pfx_ksys_write+0x10/0x10 [ 1120.447284][T21937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.447319][T21937] do_syscall_64+0x15f/0xf80 [ 1120.447347][T21937] ? trace_irq_disable+0x3b/0x140 [ 1120.447377][T21937] ? clear_bhb_loop+0x40/0x90 [ 1120.447402][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.447417][T21937] RIP: 0033:0x7f0dd9f9cdd9 [ 1120.447432][T21937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.447462][T21937] RSP: 002b:00007f0dd81ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1120.447486][T21937] RAX: ffffffffffffffda RBX: 00007f0dda215fa0 RCX: 00007f0dd9f9cdd9 [ 1120.447502][T21937] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 1120.447516][T21937] RBP: 00007f0dda032d69 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1120.447530][T21937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.447548][T21937] R13: 00007f0dda216038 R14: 00007f0dda215fa0 R15: 00007f0dda33fa48 [ 1120.447566][T21937] [ 1120.884269][ T5746] usb 5-1: Firmware version (0.0) predates our first public release. [ 1120.900698][T21982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.945993][ T5746] usb 5-1: Please update to version 0.2 or newer [ 1121.075657][T21982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.173563][ T5746] usb 5-1: USB disconnect, device number 33 [ 1121.251811][T21982] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1121.379422][T19314] usb 6-1: USB disconnect, device number 61 [ 1122.471659][T19291] usb 4-1: USB disconnect, device number 82 [ 1123.103769][ T48] bond0 (unregistering): Released all slaves [ 1123.445038][ T48] hsr_slave_0: left promiscuous mode [ 1123.451469][ T48] hsr_slave_1: left promiscuous mode [ 1123.625720][ T5290] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1123.922620][ T48] IPVS: stop unused estimator thread 0... [ 1124.046620][ T5290] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1124.307227][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1124.329441][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.388733][ T5290] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1124.428142][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1124.438629][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.520594][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1124.532763][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.589978][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1124.602090][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.718557][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.736835][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.791909][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.802707][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.837719][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.848758][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.892409][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.903514][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.927900][ T5290] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1125.009989][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1125.022811][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.056391][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1125.066929][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.097801][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1125.112238][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.159969][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1125.171058][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.281416][ T48] bridge_slave_1: left allmulticast mode [ 1125.287771][ T48] bridge_slave_1: left promiscuous mode [ 1125.295426][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.305946][ T48] bridge_slave_0: left allmulticast mode [ 1125.312210][ T48] bridge_slave_0: left promiscuous mode [ 1125.318012][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.333077][ T48] bridge_slave_1: left allmulticast mode [ 1125.338820][ T48] bridge_slave_1: left promiscuous mode [ 1125.346996][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.357109][ T48] bridge_slave_0: left allmulticast mode [ 1125.363042][ T48] bridge_slave_0: left promiscuous mode [ 1125.368882][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.666820][ T48] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1125.675703][ T48] bridge1 (unregistering): left promiscuous mode [ 1125.724953][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.735349][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.745892][ T48] bond0 (unregistering): Released all slaves [ 1125.754672][ T48] bond1 (unregistering): Released all slaves [ 1125.767261][ T48] bond2 (unregistering): Released all slaves [ 1125.848584][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.858982][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.868886][ T48] bond0 (unregistering): Released all slaves [ 1125.953755][ T48] bond0 (unregistering): Released all slaves [ 1125.965182][ T48] bond1 (unregistering): Released all slaves [ 1125.979134][ T5290] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1126.155187][ T48] tipc: Left network mode [ 1126.494853][ T5290] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1126.628730][ T48] hsr_slave_0: left promiscuous mode [ 1126.642423][ T48] hsr_slave_1: left promiscuous mode [ 1126.655725][ T48] hsr_slave_0: left promiscuous mode [ 1126.662854][ T48] hsr_slave_1: left promiscuous mode [ 1126.668777][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.677407][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.688152][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.698081][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.709740][ T48] hsr_slave_0: left promiscuous mode [ 1126.716053][ T48] hsr_slave_1: left promiscuous mode [ 1126.731374][ T48] veth1_macvtap: left promiscuous mode [ 1126.736966][ T48] veth0_macvtap: left promiscuous mode [ 1126.743201][ T48] veth1_vlan: left promiscuous mode [ 1126.748530][ T48] veth0_vlan: left promiscuous mode [ 1126.755970][ T48] veth1_macvtap: left promiscuous mode [ 1126.762799][ T48] veth0_macvtap: left promiscuous mode [ 1126.768501][ T48] veth1_vlan: left promiscuous mode [ 1126.774330][ T48] veth0_vlan: left promiscuous mode [ 1126.782462][ T48] veth1_macvtap: left promiscuous mode [ 1126.788102][ T48] veth0_macvtap: left promiscuous mode [ 1126.794643][ T48] veth1_vlan: left promiscuous mode [ 1126.799951][ T48] veth0_vlan: left promiscuous mode [ 1127.146945][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1127.289676][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1127.302353][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1127.518684][ T5290] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1128.143335][ T5290] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1128.294112][ T48] IPVS: stop unused estimator thread 0... [ 1128.308750][ T48] IPVS: stop unused estimator thread 0... [ 1128.518615][ T5290] 8021q: adding VLAN 0 to HW filter on device eth29