last executing test programs: 13m51.740188628s ago: executing program 0 (id=2853): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000840)={0x40, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}]}]}]}, 0x40}}, 0x0) 13m51.467109134s ago: executing program 0 (id=2854): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x8) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(0x3) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800, 0x1, 0x3, 0x1}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x1d) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000092c0)=[{{&(0x7f0000000380)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000400)="5b4eb64a434181ff8a9cc6991dc47ab1fd5d1f99b2e0da9855966bba845ae23f7782da2642a7ad7c2d877dacdfdc832d637297d7d320dd089ed8004e94a8807b43738b", 0x43}, {&(0x7f0000000480)="497c250af47d4d0a7b1c3e78719098fa9e1bceaf0574af371b11453f4b1f6949818fc74d43583d2749", 0x29}, {&(0x7f00000005c0)="745bb266fe9f0e17b89f3e036a63867e81b5efc206730998330e45c5143abcbe52fa14f853d3b945c4dab9f849145c4f781d00f2d3a6ecd996ff9fb17c2c470764dfad2387a5d8c9669dba9c5789692d76a3d4829ce117b1b2d22983ba9dd9513d97b3c660a4adb446caf8c13a202f3f1e9f71133dab4960697fa5c6f1c7dbf5c8bfb09184863e031e5fe27dc54ed00acbf266f1635119f1a8f318a8611827c700646204e0dc1385af945e2095e403766177d9f0e02e37c7f4ee086d8d5345a930408a5b1a4f39fca741d84fcc5cf3814ba143429d146d844ad88f7bdf6e39a61e", 0xe1}, {&(0x7f00000006c0)="9253b29bfd23e59f1d7078a7e1f1069196a19bce37af53668d785d7e2d1c", 0x1e}, {&(0x7f0000000700)="24e6bacc2f89646efc7f9bbd4630bc4459dcccb93844f45b0a2e55adc0e8c889e99931f4873cd5472766fac1", 0x2c}, {&(0x7f0000000740)="7b3d6157a8c1bbea9d21a8623beda27f49e193f5ea70b387e1cdbef531eb311e04a30168fc4c1e43adf001589658ee988c4f0002080663b6c5719bfa5ab6494edffc3e0f8e6e65bf5304b22b7651e7bcedd375a122a810fb88affce7755e6da91842b7912a01ea490bd3e0e93d369cf13348ec8c956dbd6d433f0fbc4513a135ff3b0cc52c2519c8072c9f717cadc0f1e1cfc347a86f85efea842de63958a3b403b61040e2841cf5", 0xa8}, {&(0x7f0000000800)="282add622fe9678338b61bf30cbe3abcf0f06187f81d1df079351ae75f511bcd974093d2e12aec370789bb0a36a605fa38a46fc43ad959ac6366ab0c0d92d16f177291660dc4e232dc1a4ee0c5709e7dbac772e93244aff48dae4191b8f186a0d78a59b474c34aed67cb57f9d6fbe361f381a437230e102fd64d2798fd6dbfae3251e3512fbe13bbb9073a4f88a6346e830d851bf50b96e734104ecb77f18130eef56faf9d21984102e94767aed4b0542b497643bb63d9ac0ca0c1598d27cfb6", 0xc0}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)="d27400568d11b838d34bfa9f5fbff1780b1d904d53f9da02d9adf0539024e654e8366bbe10edc1fe9d2b2f2dc74d3576b6c67af5a5e9ea283a41b92e9fc401e144", 0x41}, {&(0x7f00000009c0)="1b90cec58003582c2bcfc35524e602bc55536667d531a29f0d933b7d4454912e0f1984b20f61b32bf59228978aebaf2a782ecbdf8a125654a53ffbd8698553bbb8b5d4042131677cb5aacac033aa459c003e907c85f64af1b194e1ae28692d81c891eb4b165f1925171fbe874e59618e100e026347f5cbfc06d78c06faec5a6c78829f96889adf74f24b2faa", 0x8c}, {&(0x7f0000000a80)="1c43f64ea4dfa5c7dbbb4d23139f577cf1a8cc172ada82efeac4a53204d07c128f19ecf58c9df6ce967d53483b5be5c5e84cf84187985059096a4c284b31d3cc96af7baa4487d34d02a5c276b6e9a618eb049d47bafe17bc7ec1f6e43a589b62e20ff8aaaed113cc51d6d748bd25b3adf0541392036bf1d2e330890e0db425e459c2b782010e6d8fee9a", 0x8a}, {&(0x7f0000000b40)="9434a347d0f788", 0x7}, {&(0x7f0000000b80)="f7cfc5275c42a9e3c50edcd00a6681d3a95c9b7a81131cb7d1e8831ce3ce959a5339d8c13525e929ae7d981ae5bd6ba5691e98a9b689faef9b36fe8736ae99766f7f0b99f333caf5016e159b7215374e67a2e02156648d499205fed448dcbdf45832a712e41ed86903ccfddf906379ba77f9c3d310a0491090518e2d289354d332761d4c051599402f074b5d40db74c8eabb42be7b2ee7317093345010049dcdcd1cbe1650b6fa091717cb9e27ff9a530a6044bad5ce80a057da1cca71b5da6f085e50713a67381a950d5ab33a6852401aa6c628a5b8eaadc6ac5852b40d887d1f6d133065708cdc157413d709e1f4781001c8cecbe081b57b716a7aef564d080cefad8b6148252582f641abf96214933588f3ab7b447915a1d6fc9dcea892b10070a9d0f138d997ad77d16e451d104fc9f3fedaa3792105b5c90e66e065c0c4d195ed5cffdb6ffcacf08965ee0bdf3c167d13471738875b2411889a4d8277ea7a5c3509b9e0503c740b34cab3d3ef1448fe71a2eb4da42c24bc82d2e3b295e0372ca48d93434b8fad90901fa9ae8a9ec4e40bfffb2d7fc7c1f89937a9563a8ded01db0045ca8748c080a137b458f968c9d4f34b1d4aa3547690996a34b0997ac8fcac736568a40abd9ad16a6f505aa24ac3ab7485dabeb50c3eda71dd15eb422ade4bf82d7634fc3ddf994edf520456149dc05c6bc05652c4616d545ea1324e817b4ef11afdb44e4b2bed14bf762a9a0ab2b223424bef3d1086948865f779d111f67ed7e5d4dfdcf7b0cfa64c9fbb5f03d648f28d17ec8787028a6471b00fe233fa7c0ce7589f065e77819168efd350b26c7e2a64941013447ce712cb91edd60bdba4708ac01b4d6901e19301cf56204615d7b61cd6972124f7281799496d424e20c0a6c8d57752a9bcd7678f4f57fffecfd65b178d33e6c5ab18c7cd4324fa1ed07dfe32c5238135d7930b4ce0a5a130ce233165d3131a4ebe55ea13724c529a70e6d86af6b4a621746f29ceae6a10738ccfbd14af79345c4cc7f9fdc3238d196810b0891f1aedbc579b1a4c52ddd5fe6c9cc72614a7a4907130a9537c1fd273d3b4111265ca6e6990009454f9f53cafc53523bf9a9e0b2968f65eca9ae532f95b24ed8a7b65844b6b39cef0b8379377d71e2490d081a688500383b4d41ddacc1606ad631af401fc9ad99346662820e4fcc848ed690e1a77c9f270e7b5f7e04060f7e07289b993098527e074df24225fff8720b403d6bd24659eb03b93815791f0e5c9eff66e4498f6656d35a99936354cfb6420e9db2c1cb823b7cd4f132995ec2bd536878adfd74f1007d3ad7f3b7732179436b9204792bd72e18ec4cb1ffe65d7dc11b50f8725838909bd028794510c13d2250e22d863a34653db638ea23d181962015f3e26c5ec6b71a88862e87124670bde08e6dce5558f447187e0cbd6d96de291ae5d672431a9e5014de5e8a6671ed15cb5ba40fe02fa3544ed73be385b389a8c63a45ba6fad265af253c30f5a4cfa9c8493071c225dc17e4dcfa6272c2d04b9ac4cdbe85219fe2d5b82b32788d72726eb96cb96369ef373579b4aa9b32ede346a2b75a4665deb1e711500293f2833a2b62c7ca199e0d8cd8eeb03619ded76df494dfcd6df30beb4ff6f2842edae373e0dc7ef547235bd71e458bcc31b259e2bdbfef3aa49d498ca7a0a0c69514168f69479ace5cbe62dc99c1848b161ca2a15552078948745073b1e5e41134d51cf4b3a9d6347f4e9a22522a44d5b511b3dca89c61cc953a0ad6a233638d71137331f0344504d1ddb339b5cd8280b8ef2399d101891cb47961db2516281099f90bd2b5a5c8ac267a1cbc584da080588d3f88c7105cdbb56e2cc9e3affee74a08194d4a059801a86ef3d028d3b35599065559c8e337edc95e402969c1b1f9ce0e8af66042695d30b6caf35ff48b9e052c9e84d83827d64963fe43312bb5636fd056ad7ee4aee0c23cc4a94bcd434a5eb7e00eb591e61235536cfe440f81280e3702673d763b681e7177bfbf6dd1bf9a3488468ed5dd7a9020b7a13d476570c8f9fb464ccbda6703960e30429f81e0268df4891923daa454849fd7bcbee4e38a9e3c57a52b0f2befe7248c07323c76021a9f0beb21ee6f2ae5bbd0cbec617a22b076d3c583c97e84b9f1d825b65df8799de9aab87a131c54e2e586e63508f9b3d0835953f2481cda265af0a0f035277570d61d87c52dee2faf83d9bfdfe2f28c6c606596e9e9bf7efbc1082d71513cff646b1aac882c5ded14e09b588abb257a00123361afbf1d4258a2b1b04a8c88d23bf11ba5bea98e8fd99bcc4045dc310523fefb3a927926d844994331a4e9eebfa86be210234054da95a173cf88fd39ef2e61a857e602a838126b50db3f71f4ebdf839d2c0a34c18abd544c78ea9f494c0da7f600fb8e41e38058ec1af1f100a2b5dd41e8032521cde248f54293a214d3a9c720ebe0edf442621177c56cf4fdc1610b31ec85f97d1ffad37482f9b66a50e58d7fe86917359285bdda1557b8922d7b933393b5bd6d1cce459979c67cf20c902c52f1524970dbb6be7e486bc01f155672d9ac5b7c91912b9a0bd584016afd92658ac65ef9ad3ccad1d60404b597043f480802f8b57ff989d1643b90ffc34f72955b4ef28dfe3ba14d9568da0b74149d9ae334ebcb7496a434c7c8d95a2682de0ea7c16e6acf08ab96f31ae1c535bf45acc50b966e2e94050d7cf2308b34f6d8f5b5e8a924e8c2ce65c94682de973f44872a8b8ed3cb06783bd4128d38400375d5e4df9568657754b1b3410389a476ea927f2e27d1d7a5e2c38918d05560d1f9625b2596e4e75d918c94c285dd00ccb3b77cb1d2f22247af61558747950335c4c948a727ee17ee96ba92e153b8519fd82b1c55c6e3a8554a27fa217ac7818c28c2dffe6e1dc1042aff8738faa6a380011a4676ccf69df47a8d7a3c2c4e4abd52ae1804bb876b79b5b7a13d11fb04849c9e50acb4ce2493f89a9cc2667ed8477a130e8bcc763a38eb61f71b98897960391d4dd6620ee1e0202834ca71d4be4598f7eed67d08a69bf194d4b8fe01d09659fb966def5d997f8b8555d3fcd352a21fab43aff556ed2a560d3aee446c8b9862f3a13e150611fca36abe5402a758975177e9d94bac1624a929ec1e9f150b7bf4917ba28923f73e1321f2f91e348fc874e5cc12a84eaa1b3e25f52e01be15083ddb737f65ebbf7cff045b1dc0bfcc2f2d5b0f62b47a2a34b2003c95f93b80e2b862f553dce878d542e2327d809d055e46ce2c17e307c728ae3642ec127b6a376a69abe3238feaa44d1f411ada0e7a4c4722062663c0390005f253e7312910acc8839a9dfe38a6654c293a9bf47c4be9121c86b9c4ea61aa50d2b0f47bf9ab53dbada6c4493992097d84dbbe988b960a8d8b0fa01fd2ea989f9f709f8a90ea14b771a349520f99d135fd6a59ba68fe62fbe3c1f4679c9a64506289598994d792ea27ad3b65744f77fcbb49caed07bcfe2dbd4293cb1341b34a38d3995f77bcf53235acd5a5bf42ba5871f2c679c598ea8a9c52e90c592ca3d5063cd3be53f4d5743af16380d7e2af29ba1825b935b5eefdf3c41ca34eae8ee2c84bddfb58fe10b657e69e368081a3708713c9ce393ef6b89d418abb4160cd86f62435062514eff1c5fd53e9bbada9eb374e1342734d6399c68f42c80bec7c30e2e2c6f8dbdb2d04c4d4d8188608e8615b7a9a7c355ed476102bc28c16263c20df0b8d54451b24152e714c9d6c40abd24bf42bbbfc85d416baac15e20a3ebc0805bdd5653b0c9825d302db97bdc6652619dc9cedd54d3cc2cf765ed0bd894e89d73a7b54beec9a014c9076c38b3092feed24efd761db52a5f9b279b2a0ac3ad9f4d7e1546767f51b7b93a5a2adf461db7e03446e1dbc54ec200b2add4b5b344f2c29f0c74a5cf2e520094246a6d8b7282ada38a711f51380b7e9e6b96e0139bd63a85c9244cd17e19e32da23b54b51f8a11d4e8553ef5088a031314a4ca42bcd5da6b2dfdab53388333fcbaeb38073ee78ef426a96ed88d5bed7a6a294d6ebcfe16550d1577b8b3f0d45f42d8787eb808bffa386c40a08881426885343bbbbe99df073d6fd1817366b6407ab04eb691f525c8b2b59a461f3414654546494eee2143707a62533f03dc19ecfa4ccae8bdc492097e4df8853ba2bf9659cd0becc5779010ec6fe8216c05d6d75977623d578c3722ff8a0a7ffb78705546124368065aee1a0e883b5b7ff4cbdfcb344a92abfb4b26f6dea71f4812a1cb3778c4594014b1e8dd4583273c68f695d39761d9031b985e459c6ac58d6a71470dee00a291ab28363cc7fa3e03a2ef24f5b09e5fef4062e96644f42fbd52432fdee6468958acb3b7cc5414821863575d6f18d07fc9dbf23207878c43fcfdb1d4b24da57567a2a4cae965e6b61c2c721587d844300a6e7071f868746797e032ae843dc166ab4cc68fafb84d5c0606fb25d09d5e62b43fc67bfad14f4d0b478f61f490bd1725f438863b13f499627f1952f0f010e80253127797af488cdb6cc0466db9049df6ebf101872bf0c8d178e0412eca4b91f27d1147d4325d2f827eb1ff98bbeb343b48351c67513c4bd2d28d3a2c0a1cf08cb59da9d9c6e58cb71ab619f06f201b12f7c8918ab798296c88306b4713ef16caddde80c632295f5433dee391bc3c5a6676c35d9a24561ada4661dd8fc0e7309173fa25bc4a8d149d9eda8a4ef0844bef3cbe882fdcb445e7769c9d4abe2c643148d10a99a81963541925f53224cc15729c7b0eb6ad46aa960d81d64f2fd9280805463f3bf8b72ec19acaedbc67fbe01634f439964549f2818b0de4d9d8e2d0e0cd11aed4eebd55e6191a1fca9ae01b489e9ae479962477c04f443a4d2ca7ec0eb4e85f3f99ec81f54fe9737c4e6eddd618b81f9d1f67fc8dbfbc132ee637cca6a6d6396dc7dc895a13e175756a760a2bd1845ea7b5c3d08638bf3cbfe7727d296110f7c201974b7fe747d2807558fb11d036081c3cf5e958d0f7b056cb57edefa4f146ef733cd3dc2c1e9a2852f0b49e5aeebae0ae6385653b1b286b03e983e69da9b2e7a4a451835aaba7efc338fd8b8f8df8bdf795fd09596e95ce998320472a63b556d6fc0c688941d4161f177c78f321ae502cdf55dc5abf099ca3fddf210aeab09b1172d40517449fb45fc26ac3203b73072636cac1a0bfb09e5ab7db30792e5a7e8a750744c4aaeccb20524b7da474ee02f960d5c93d6689289b0aa9e73ac0a27bf5ea21757223f677f2a20f8ea37fc1c5165008be6765715bc07e694c468aa0781176ffecb05e3050e04cd3096d3675f1bb23d2804549b212d3dd3a39e24d7f2fe702df1815aaa3dd6cfe987161e75c0bc69af9ba994a48d2916d5b4e2447ddb754b9d156291765696b595ec9e0b67872d03c1e5ccc6d3d6473e4f321bf92c2fd3dcde5f4273ab3e4563824dc2baa110413e077240094d7b20cc3b5b3292967bf93745d17cf736f04eeb496280fcbee6cff005884a8e488e80535d24a5783e7e0897c3399ab4e40b5c8fe5455e46884d4f12c5d2a66e4c460ab8053decd55f7cd943ac459ac3b0ea112969717eef15e3732d05c7de151f59af79493844ebf1e961c5cc4feef32a8adf4b07d465239874fc290802ef7486316511aaa04d4e2bbca7c451193795521d947a094ae308020e5c203f87aeaa5381933c13da02b1c1b54bf1109fbaa55045cf2ef15d8d4d6b715546ec32e6c4fe7d08558fd4d59c116f5f8488049a40cb687317f33740643e4ed1f513", 0x1000}, {&(0x7f0000001b80)="c364b9127fff5902a14404f5986223e31e297ea7e10c4a60e3a88b11e542eb363ea9b56d", 0x24}], 0x6, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r3, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x40}}, {{&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000001e80)="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", 0xfa}, {&(0x7f0000003540)="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", 0x100a}, {&(0x7f0000003140)="536f7bd33124886a3802b9f4", 0xc}, {&(0x7f0000003180)="b09a5fced8361c6f5bcf007fbaecc7a06e72e6973dff61c78197618a837a14f6111cd445b01613f3f7e4a7806991538b803c9c5a69be3b0789f9df3acb5dd7706e2c56efb4", 0x45}, {&(0x7f0000003200)="f25a166ae2487a0ffda92f57c7d4dc11da2dfd2da5eec6d43d3995f7d9e5d61a1ce19ecd83297fa8b36d44b98a44778771dc7c698a80bf550cffe35f5a07f69802ee447ad322fb54fae820ea714b54f43b570dbf933957231b0531da5ff6", 0x5e}, {&(0x7f0000003280)="42f9fce519808a4d4eade5b4f67d3a064af1fa6016932c61bacc94a86f3140191630b0dfd595a99617e24507f575fd8af4188b159ab38c34dc66d131eb4ebbbeadbda0faec7743e2d045e6e855e48a6236f797bb48c2132e863a0d0c99cb403181091211784ac1e532599bbd52edc3a04886a1c890afa82ede49c045ba552ea21b1eff3e6a95e652ea36fc1958a8c0acbee0d5665157a8ab33347a36fba09e80e73558465ceb30aaec2c7549d9262f67f9c109d97296c2b8df1848b8f77e12730cd05a292fc1b18366871916406e50b681725dfd452d3c50ed04205dc8", 0xdd}], 0x6, &(0x7f0000003400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100001c000000000000000100000002000065", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x20000040}}, {{&(0x7f0000006200)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000008800)=[{&(0x7f0000008340)="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", 0xfc}, {&(0x7f0000008440)="578aee9e", 0x4}, {&(0x7f0000008480)="c34d97a3dece2b09ae29d063e81050d0f834b6ac09e1b3f1e12fe2b7547b5647b9473dd1a7c4e9d04ed9136b148773c64a3dc5e3e9fe7d0a53a4a9f834f4ee3748da9d6ecec0771bdd49b3698eaac4a162b5e3d386cb8ac6b857890e2a69b94edd1b80fd2d2ba59a8ed63c6817e6601857d1b642a6323942449bbd2cf6842e23dd8d4b6ee0e4445bb84a7c72f2d83970cd7fa6", 0x93}, {&(0x7f0000008540)="21e6c094c3109369385a41687096831234799204c688337a4774af751bf499548de0e81b582d3c247fc0f6738f0a87e6a8dbf6ed3ddae8c72330eab1ffccdfdb7475c23fba158fae8f469eb4e4cbeda2f0ee18bdf9e1cb211441c72630c540c8c488da23376a4edc082a52c852c789e8037e06a77d8cdaf392dcbd4d5a7e44ac1e44c7fe6176da8bdb910a82f08f1b22fcc98c5d8b56b4d0a09e", 0xfffffffffffffefb}, {&(0x7f0000008600)="61b00f2454ec1471b07a056ce21aa33cb4c1981c19d19f9b3394dfe702ae63f5c93fcef0d2181307cd62618171717b84918de0e34bfe7c9800934c17c79df9fcae5a1183d1e693ea3f9ee89bf087387baaf4444c3142c73ee86c98e8ce8414bbd3eefe78f8c67a72b833c7bcbffd3e5682dc16925ec627f03c79a1265c64b03dee094640e5aa8bb2238739d4d2032dae03e47d06a86d87e6af1960dc8aa1a17fcc54826a7f8b9dcd8c9a1a0e33302ded0dcd83da64c15f62eabd3dcbfab5a50bc959ee5ec474ccf47338e4bb2664f3744df6dc5e82caf24f339695328a05610e8f8698cbea0b57e8e3255417425ada38147f31cf75", 0xf5}, {&(0x7f0000008700)="ca038446aa02577cd5e6a5a2c600be26b80373ef9557096267cffe33b5d810c8ac38db669a7d842ad97628a721715c8d3945ed73aa4f4507d4986bd79efbe876efdeb2327aa527288e7341d1c57be033ed7cea94d10fdbcaa47343e1d2abf9fefec712aee52e4d1b64a9714fa0d5ecbf73dd5acf30a922828a936619554279e30163f7691f75e111dd4d66dc4ab54f351aa633ef0477e5ad6b1aafe0cebbe6f4ca0ae7522ca3ba6f55351ec04b432bb3dd344883b917ed1060b098dd22ca0810bf65d38adbb2d7255da7ef", 0xcb}], 0x6, &(0x7f0000008940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x40080}}, {{&(0x7f0000008980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008f80)=[{&(0x7f0000008a00)="92cae45fe6226a78d694bb83faa0f2da18b4b7bc87cea22f94870ed9107b16894006b962d04cb3c27aa6adc8eee9682dd7ca30f8a9c44c80b6af9f9d5d5f507bba443dfc96b643b06f0b5e220737e7bd1d881c2b053c7ab49897cee61caa790433f5c8896a01ddfdc68b213f711f5452c45d7d949febc25884", 0x79}, {&(0x7f0000008a80)="49474662e569da9af9729fbd31b2dbc64e50c967befb8dfd7494077c9d81c662a62693b2a5d8d9641f64649a824f021282141f751c1608ced2c0fe5e2891a39d3dc043872293871a095a01743a4d30c1e8c1e9977a52fcbda01546d51d74117d7b5edb61c2515c984a", 0x69}, {&(0x7f0000008b00)="a82c2bcf84d339ec349ff7ca7e61bf17e0aeff60a5d5cceab97cb52fe267749cca5868f118cb1398448c808a6ab07c58d79a0887786dd8d6953e18ab30d5c47f8e175200284412acbbcb0c1a705fd24b8d64b205b1d10fbc441a240b30be437d4f2cd5e0692862d4c1654694796c9ce853350c1d49c03a5aadb3df258d6c0c79e84e70dfaec9e2556bce72", 0x8b}, {&(0x7f0000008bc0)="7806a4e8fc7dcdaa6541c66eacc39c73842e3023341adf3926f8955f0f02c287e5e18ff72ebcfa3cccb3fb8f0b69c819074b5d6f2cc061a5eda5618b062680830ed6e9", 0x43}, {&(0x7f0000008c40)="d2f5f17a444dc02a515d5464787ed31d813e243bf04108682ce7a76851840380f703681c877fcae16b0b2ff6b6eb30f8714569c3b3eef51608a0b8ea4bf470568261078170eeb7e4dbdf1158f503790770653a9f74942e8c553f0f63066450ed600e1f0a2f52eea7c6f98c0abfc96343dca05a582e00da98933f77493cd6b5751fb49c2701e4c9a18506d501bf503cfa37817d5841460f7fb149ae3724e1e1b736c3a1f49fa5c42db6e3e5737c0eb806bd3b9a520f656f67f32f9ba000f627815bc552225b243142996606f2ad52b1ea6735d83c0bf6665687e8f33addcfc0917a30b4e13cd25ca5b8053854eced19", 0xef}, {&(0x7f0000008d40)="f9e93c18ba10a543cea0e32b56486adaa9219a2a1470285e81d5610b62960f2648b5d7c1e25f1613b5d89caae71d65c7a109a4cbdb02dbcba5d91b2c4b52d0c06a2617147d3f757387cc777d4ed61e04f80e9c8d53147b6d3a3b3a4e07f36aa2d7249878bc8aa5d93d3aea99a1b6c8b3ec5d32fcae38e656b449b1372639af49a59a5c2b108ebc0dcfa97ed146dea2b8021da98b99251a5fcb207667a53a4958a0d1c7f8af4802451eb5b0beb0e1cf036c36d4f676f1e625e5788f8cd2fa834a5be6811f2f2edd323bbc0e85963173961230912710a03cb8af2ab753f750c56d710e", 0xe2}, {&(0x7f0000008e40)="a2a16cb293575f5762bc76f21c5730029715cb664367b3af29b9dd0575468366d51255ee8c8af80a62f62e3ca79c1b3d477cb2bdb6ee530b04124d3014ef", 0x3e}, {&(0x7f0000008e80)="b4a16425bd5d89304174680e2484847ed29a42e5fbd0c5c7578cc03768b3cd9d8ac1ac34d049e8468e9c7465b5227d45587dbee53ca33daf7b0ca95a99a2b4d3988a43245e603dd9e85c1d1b7158a20de7f93eb6b9beb722f5ecefdd9e3b64db1f8ebf05ceb4b71e3c17662c19270d7b9aec038595aec9b8240b7cb60c9fa1a2c5d34a1714e6be289c50da11c07edd8a27149d14b92ac520460aa3e1cb0383cb31f689ecdde07a3308a3548b386fc7f6286a3dfb8571c973d2ceee40316bbfa3dfb401ec016dc9", 0xc7}], 0x8, 0x0, 0x0, 0x20040044}}, {{&(0x7f0000009000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009240)=[{&(0x7f0000009080)="c86b9b43ffc89e90814b0c0c8331771852bead16d566ca646f8c38204f112eba9312786e48f06519b173058bda0c67c5d51fb5bc6240f70b6dfd09c45985a3c2169922ea7fdc288886b17e70322389271da11192eca88a252d4484ae13dc31195fa52fc0f64dff3111f5dc53b7b9219dd2db61a1db1de997f593a8793e3fa6c468da311a0687dfa73d7e41976682ee21b97b02e385e8bc1c1a18445fb41d0fff0f85651bda29ca737472897c088264654f88ae5ae08dd43267d6dd7a3b6a22e53f3a23041a297dae3db1b748fe8303f714bccccc506b2cd5ec97ccca90da03aad47753a6a81270a5345b6ba2ff0c08c72c1e3094752991", 0xf7}, {&(0x7f0000009180)="2ad95996d9c63c9217f743ee30494253c44a398e50f4b4d7f03274735eb0c112731dacc0e927420a11a5669bd33c725df476c3f07ee14eea71cfd10567583608a40723efd7ce083cd364e61c1dfc81b380709a6cdb914ea0922d4c750b652f23ccbbb7afd546dd0cf51c97fff5ba391c51fc75c87d963f1d03b8f138c16740367961d289536382ceab266832a9aace5e477517c80153f939241a609424540df3a0bfdd", 0xa3}], 0x2, &(0x7f0000009280)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000fe00"], 0x20, 0x20008084}}], 0x6, 0x4000040) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r4, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1e480, 0x100, 0x100399}) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r6 = socket(0x2b, 0x6, 0x89) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 13m51.003562218s ago: executing program 0 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0xe, 0xdc12, 0xd628, 0x8, 0x6, 0x9, 0x0, 0xffffffff}, &(0x7f00000000c0)={0x5, 0xc1, 0x1, 0x5846c735, 0x43b, 0xa0, 0x3, 0x800000}, &(0x7f0000000100)={0x6, 0x0, 0xd, 0xffff, 0xf422, 0x6, 0x6, 0x2}, &(0x7f0000000240)={r1, r2/1000+10000}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x14880, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x34, "a10124f51800000000000000000000000002a39b85d82e5cec068ce8989dea0a3f81e9ed4a8b7479a35177a1147c6877533f6f84"}, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000280)={0x3, 0x7ff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000040)=0x8001) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010090}, 0x8840) 13m47.63654964s ago: executing program 0 (id=2869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x98) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'dvmrp1\x00', 0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = gettid() fcntl$lock(r5, 0x25, &(0x7f0000000200)={0x1, 0x2, 0x5, 0x6, r6}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300ec8896cfca3c7c825738cec10a000a3c0040400c0a010100000000000000000a0000060900020073797a3100000000ecff01b4ce797a3100000000100003800c0000800800034000000002140000001100010000000000180000000100000aa9e46ed17e0f12fb26b9cd942f1ba20ebe44abbda1e59012c0594733c0d5d307942a3e38121a4627a65ebc72f705f76266e09256cb80e5d3e256fd50397b77c94b1a7ec378cdc4b1163ac63f09257bc7063652940e4d0d026bcfbf86f6a6cdd29abc00"/223], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r12 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000900ffffffffffffaaaaaaaaaa0c0e9a2357e7e03d329fa752bebbbbbb03000000aaaaaaaaaaaaaaaaaaaa20c6da8315de460180c20000017b18a74fc47a69784f2a660a09265ad15c24ac668c7b81b927c6fc222ea9790a6b23bc6eb9c4548faf6dc8e4cd314415407557c7f52e12fa6031ef045b"]) 13m46.294991225s ago: executing program 0 (id=2874): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 13m45.729726935s ago: executing program 0 (id=2876): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x006'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x400000000000220, 0x1c000) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=""/168, &(0x7f0000000140)=0xa8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x13, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000a40)="00edff406a5641e517aeda701bd0202969efd0fd5644d756aca065bd6e0c7a5e8d9c7f42dc712841e8d13059dae508db2e4e5a652beaa9c74779ce7261816b09462fb2066dd0e119c3bae40ed760f7ed35b7195073d1fcd1ef5b5f2860da7ee2966f9ade4f791bf692ac5c760420fba30b2932bd215d0625d100948245511f429f49f46b7ba6e3f876f1c3177facd9e356c1cd4a8c96fed38f8e5bab52eebe346c7ac1e0047c25c404d82483f8164af69cd1846efeba15e4d1900537e1658ebc8a06cdf926527529cae4189363c1ddbcee19b711e49293734bfb2fe34e92906a540eacf26466e2061189b44ea1c4fcb47b4d", 0xfffffd7b}}, 0x4000000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000880)=[{0x0, 0x2001, 0x25, &(0x7f0000000780)="310effe2d13e03ce32538a798a56ff148c0bd8086264365a63372dbf5e90c79d0aa9390f75"}], 0x1}) 13m45.181752355s ago: executing program 32 (id=2876): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x006'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x400000000000220, 0x1c000) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=""/168, &(0x7f0000000140)=0xa8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x13, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000a40)="00edff406a5641e517aeda701bd0202969efd0fd5644d756aca065bd6e0c7a5e8d9c7f42dc712841e8d13059dae508db2e4e5a652beaa9c74779ce7261816b09462fb2066dd0e119c3bae40ed760f7ed35b7195073d1fcd1ef5b5f2860da7ee2966f9ade4f791bf692ac5c760420fba30b2932bd215d0625d100948245511f429f49f46b7ba6e3f876f1c3177facd9e356c1cd4a8c96fed38f8e5bab52eebe346c7ac1e0047c25c404d82483f8164af69cd1846efeba15e4d1900537e1658ebc8a06cdf926527529cae4189363c1ddbcee19b711e49293734bfb2fe34e92906a540eacf26466e2061189b44ea1c4fcb47b4d", 0xfffffd7b}}, 0x4000000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000880)=[{0x0, 0x2001, 0x25, &(0x7f0000000780)="310effe2d13e03ce32538a798a56ff148c0bd8086264365a63372dbf5e90c79d0aa9390f75"}], 0x1}) 10m53.274803678s ago: executing program 5 (id=3677): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x4}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@delqdisc={0x34, 0x25, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xfff1, 0x7}, {0x4, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x8a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008004) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000440), 0x3) ptrace(0x10, 0x1) 10m51.036955764s ago: executing program 5 (id=3685): r0 = socket$inet6(0xa, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x485, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x62}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0x1f4, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}, 0x0, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @lifetime_val={0x24, 0x9, {0x42a4, 0x9, 0x0, 0x100000001}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in6=@local, 0x4e21, 0xc000, 0x4e20, 0x3, 0x2, 0xa0, 0x80, 0x33, r3, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4d3, 0x33}, @in6=@empty, {0x3, 0x4, 0x10000, 0x4, 0x8, 0x5dc12390, 0x8, 0x2}, {0xf5e, 0x4, 0x4, 0xf0f4}, {0xfffffff8, 0xeea00000}, 0x70bd2d, 0x3505, 0xa, 0x1, 0x8, 0x83}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) listen(r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r8, 0x11, 0x64, 0x0, &(0x7f00000025c0)) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b240605", @ANYRESDEC], 0x0) 10m47.51605011s ago: executing program 5 (id=3696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000090) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r11, &(0x7f0000004500)={0x2020}, 0xfffffe0c) ioctl$SNDCTL_FM_LOAD_INSTR(r11, 0x40285107) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="1403bd0b3c9c545109ee78f2fdec4bb3f03c5388c17964f34dd5ba4a3b700cc0296b81c2dba8805649d174c792d44ecdf8f4212c6ed959243247cf0d0592c8eb8e4ed7653ad0051972341bc287381f24dcfa90a4448707fa73ea7539ea894ac79e90bdb23fef2ecd3853e148f6672c0ba0b562e2904f1983dffcfede94fa733aa7edb3dbc73a147ae107e41cd6fcb268e9c7bd3c9cdd6857dd96b837fddc37d45da846efabb2c3e7f711f91dc121d3a107503d5593bc3d7a0c76052b29ee08e276ca0f58d3f9eca55a76f04d4060b178a8190f54284a7b8dcfe29999bcf7e24d9f58d5f2", @ANYRESDEC=r3], 0x4c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r1], 0x23c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m44.850912074s ago: executing program 5 (id=3709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7aeafc2ce21862ea6c923c0000fffd0000c70000", @ANYRES8=r1, @ANYRESDEC=r5], 0x3c}}, 0x20060405) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x278, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x248, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x1400000, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x278}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r9, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m42.830064669s ago: executing program 5 (id=3714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 10m42.592791313s ago: executing program 5 (id=3716): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 10m42.168022231s ago: executing program 33 (id=3716): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 3m47.658278121s ago: executing program 6 (id=5457): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2cabc0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) 3m47.503769661s ago: executing program 6 (id=5458): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfff8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x7}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0x12, "f413567c09029e947789b80755483b46"}, {0x5, 0x8, "c92d3002d91d"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m47.191673806s ago: executing program 6 (id=5462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x10000000000009, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r7) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r9, &(0x7f00000063c0)={0x2020}, 0x2020) 3m43.790362177s ago: executing program 6 (id=5470): unshare(0x6a040000) landlock_create_ruleset(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) (async) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x4c, 0x1f) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000106010200000000000000000000000606000040000600000005000100010000004a0bbe5802d5a26bfa1b8e3136b8ee2b9dabc198daaa7359a746fb4f8c050431c8c0731091d4b066459ff5f7e2506f64994ad0540124241c721a3bdaecff0594bd9cd203d6987cb204bbbb1f0676fea52efc923aab0463eb2e0c69493ca53d591abded8b37993409deaecd1cda79db68205973b4fdea1c5f8fa52178ccc4e2c75215a985cd614b80c4a5b67ad6b711b5245f166c123807905dbaf475aa34413d50ddf35044"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000800) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r3, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) (async) bind$alg(r5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$TCSETSW2(r7, 0x80047437, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m43.448539958s ago: executing program 6 (id=5473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x3, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x103000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltclass={0x34, 0x29, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0xa}, {0x9, 0x7}, {0x5, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x81}}, @TCA_RATE={0x6, 0x5, {0x5, 0x81}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0xffffffffffffffff, 0x6, 0x5f3}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 3m43.057076735s ago: executing program 6 (id=5477): prctl$PR_GET_TSC(0x43, &(0x7f0000000280)) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='nd\f', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,permit_directio,subj_user=rootmode,obj_role=/,defcontext=user_u,dont_measure,\x00'], 0x0, 0x0, &(0x7f0000000380)="acccb4a11e890484468b542df9da7eb107b848cf079bf7db4c48018de58dea6dab891c4a15fffa65529068ad6dc1d4e9987a562151905b1cee2a56affd2b25329358600b13a8efcaf261ab81af059e2aaf3c2d69e83caa243f7f3dfc6ded321847d97705") openat(r1, &(0x7f000000c380)='./file0\x00', 0x103000, 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x10f, 0x7, 0x0, &(0x7f0000000100)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000400)={"78a16c0c", 0xa6, 0x4, 0x0, 0xe, 0x4, "cac6107738f660f37d936ff27185fe", "9377ad2e", "ee7628cc", "56041c45", ["fcd678d365f59591fc727013", "9f0b8e968518678b8a124fd7", "061a85a5e9ef8b9ba5c50606", "00000000000000000056ab00"]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSABS0(r5, 0x401845c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x2, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x3, 0x6, 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "65fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd0, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x61, 0x0, {0x7, 0x25, 0x1, 0xc, 0x4, 0x4a}}}}}}}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x12, 0x0}) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r8 = socket$kcm(0x2, 0x3, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x48, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) ptrace$pokeuser(0x6, r3, 0x385, 0x7ffffffa) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) read(r0, &(0x7f00000002c0)=""/200, 0x39) 3m27.827223483s ago: executing program 34 (id=5477): prctl$PR_GET_TSC(0x43, &(0x7f0000000280)) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='nd\f', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,permit_directio,subj_user=rootmode,obj_role=/,defcontext=user_u,dont_measure,\x00'], 0x0, 0x0, &(0x7f0000000380)="acccb4a11e890484468b542df9da7eb107b848cf079bf7db4c48018de58dea6dab891c4a15fffa65529068ad6dc1d4e9987a562151905b1cee2a56affd2b25329358600b13a8efcaf261ab81af059e2aaf3c2d69e83caa243f7f3dfc6ded321847d97705") openat(r1, &(0x7f000000c380)='./file0\x00', 0x103000, 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x10f, 0x7, 0x0, &(0x7f0000000100)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000400)={"78a16c0c", 0xa6, 0x4, 0x0, 0xe, 0x4, "cac6107738f660f37d936ff27185fe", "9377ad2e", "ee7628cc", "56041c45", ["fcd678d365f59591fc727013", "9f0b8e968518678b8a124fd7", "061a85a5e9ef8b9ba5c50606", "00000000000000000056ab00"]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSABS0(r5, 0x401845c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x2, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x3, 0x6, 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "65fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd0, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x61, 0x0, {0x7, 0x25, 0x1, 0xc, 0x4, 0x4a}}}}}}}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x12, 0x0}) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r8 = socket$kcm(0x2, 0x3, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x48, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) ptrace$pokeuser(0x6, r3, 0x385, 0x7ffffffa) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) read(r0, &(0x7f00000002c0)=""/200, 0x39) 41.609938442s ago: executing program 2 (id=6325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x480240, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x804) syz_emit_ethernet(0x83, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) (rerun: 32) sendto$packet(r6, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) shutdown(r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) (async) listen(r1, 0xfac) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async, rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) (rerun: 64) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0xb, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x2, 0xff, 0x0, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x21, '\x00', 0x5, 0x3}) 40.745518771s ago: executing program 2 (id=6326): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000980)={0x1, 0x2, 0x0, 'queue1\x00'}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000980)={0x1, 0x2, 0x0, 'queue1\x00'}) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) (async) 40.607212417s ago: executing program 2 (id=6328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4c515919419b952740e4"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket(0x1, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xa, 0x88, 0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000380)="44d815ce94627a37b74fd410c15663e06ee9a5180552990d323ae63a6c66176077833c4a80d29bdd7cdb619d218ba8dccde0943b6232df8ee84671b97f798de50e20b8c16a41df985bb445a6ad674aabedc9748585c5d778488947c9906cfeef88b932ba8b9ac768f2f3d4d023b4691b48126a95dd3a5fa9f00bb6cf675f1e1d3dc96ff2f8a7d8b4bc4449aa8ac85f1f26a42127621ffa85791ea260fe764be2febe30d5846eae1d018c7567de80c765e3c17e45064478b491041796c64e64e2aa14dad94bd3c6b74dd39d3c4f466567fd91769faa5b91b514b1a1a0b1", 0xdd, 0x4000, &(0x7f00000004c0)={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) (async) sendto$packet(r4, &(0x7f0000000380)="44d815ce94627a37b74fd410c15663e06ee9a5180552990d323ae63a6c66176077833c4a80d29bdd7cdb619d218ba8dccde0943b6232df8ee84671b97f798de50e20b8c16a41df985bb445a6ad674aabedc9748585c5d778488947c9906cfeef88b932ba8b9ac768f2f3d4d023b4691b48126a95dd3a5fa9f00bb6cf675f1e1d3dc96ff2f8a7d8b4bc4449aa8ac85f1f26a42127621ffa85791ea260fe764be2febe30d5846eae1d018c7567de80c765e3c17e45064478b491041796c64e64e2aa14dad94bd3c6b74dd39d3c4f466567fd91769faa5b91b514b1a1a0b1", 0xdd, 0x4000, &(0x7f00000004c0)={0x11, 0xf5, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050026bd704c41357d000f00000008000300", @ANYRES32=r6, @ANYBLOB="51000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100050307c7062d1a00031d00000000000000a60200fe0004000000000009000000037206030303030303000000080026006c090000080027000300000008000c006400000008000d0000000000"], 0x90}}, 0x20000014) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050026bd704c41357d000f00000008000300", @ANYRES32=r6, @ANYBLOB="51000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100050307c7062d1a00031d00000000000000a60200fe0004000000000009000000037206030303030303000000080026006c090000080027000300000008000c006400000008000d0000000000"], 0x90}}, 0x20000014) 38.549219318s ago: executing program 2 (id=6340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) close_range(r5, 0xffffffffffffffff, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r1, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x81, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') lseek(r12, 0xfffffffffffffff7, 0x0) 38.42169055s ago: executing program 2 (id=6343): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000d1) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0xd, 0x0, 0x6, "5deb16561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfc, 0x0, 0xfe}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={0x0}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 38.107359578s ago: executing program 2 (id=6345): syz_emit_ethernet(0x106, &(0x7f0000000140)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xd0, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [{0x2, 0x15, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d14eb966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8"}]}}}}}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') linkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00', 0x400) (async, rerun: 32) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 37.569303724s ago: executing program 35 (id=6345): syz_emit_ethernet(0x106, &(0x7f0000000140)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xd0, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [{0x2, 0x15, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d14eb966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8"}]}}}}}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') linkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00', 0x400) (async, rerun: 32) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 5.535081819s ago: executing program 8 (id=6456): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002001}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x3, 0x6, 0xc26, 0xda, 0xb, "d2db6cccde42e27169db13c1c7a44c48a97377", 0x0, 0x2}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0x7ff, 0x80}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x2, 0x16ac9ba9, 0x1, 0x7, 0x6, 0x1000}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000008c0)={{r3, &(0x7f0000000180)=']{\\a\x00', 0x42200, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x1]}, {0x8, 0x6000, 0x8, 0x80000000}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xe}, 0x6, &(0x7f0000000800)=[{0x2, 0x10, &(0x7f0000000280)='{\x00', &(0x7f00000002c0)="237c256a5b514ffdcaf75c3cceb791691fa271ddc6d1a9da486f562b8e", 0x1d, 0x10}, {0x2, 0xfffffffb, &(0x7f0000000300)='ns/user\x00', &(0x7f0000000340)="e2524c561826aef2b287978407a442d0941ce5e62fddc98150b137eb39c48445f048b435c5a0d3d5c7460e3c66e18534bd156b896edb0c37aba0bbdb4388ea0e288d4c4c42d9cbea8f9fb6771c5b0d8fcc34c36da404a804152e4173bfce505bd6e51f938cb42ea977f58823d7c62f4a4f99a7386e20c70dd870490d82befa6f656d18806cee5db688109d5363e57ab26cafcf366ef5aa10895d9e688c486a676f8801d462fa3f91b21d16479e79604315b52fb41cdd2d0a200fbc3cd10846ba913fcb4954c39c48a0b4fbb432b32272d8fff17f57890c004cf9b4115333", 0xde, 0x2}, {0x2, 0x4, &(0x7f0000000440)='#\x00', &(0x7f0000000480)="64db44ac48c136241c485be56f09899ebc9fed1961e3512b3d1f053767c00ab770e2a45ce6482425b8f390ab574f7b0db5644bd966759172b791151a2bcb6b27cd8ba5e4d196da", 0x47, 0x48}, {0x1, 0x2, &(0x7f0000000500)='ns/user\x00', &(0x7f0000000540)="e070052bbfea6a70052cdf4d492e314e99acb9e8ec9393697772d20badd747b3a4bf85fd9a224c047f782cf853e884b5a1b2b4c5faebd3f6fb6067e1a00306ebc5ec15d8f486762031a0685d043cfdf27fd19a5243ccc52eff69bde5848134b448a08a5a8658aefa88128307aa507a2c4a59d972206409ba95f39278b9bbd6de24579b80b6fde9e9dcaa", 0x8a, 0x20}, {0x2, 0x7ff, &(0x7f0000000600)='ns/user\x00', &(0x7f0000000640)="4799ffbaa2c4b2ed27d86451b9d6ed531f8d0e0907c30bc7e6f3acef303628dbec070fb7379722f0b050cc7a0ee1e52d57d628a0381e6cbb26e840a9cb4a9f32da47b82efd8504667cb0b3f77837767db7af7a79223b2af896c7b88504f21d808d7c92f79cafc68eac419a49c533780cfbcfea5df1d4265817af67ba874172781a896b0594390103d1393d8e9782c2c391ed4c526fa13e74be0423eeb42de2dcd1d5548ccc4f10e283affdd42bcba941a5f79400dbc5029b168ad64fdc791136625ebf", 0xc3, 0x8}, {0x2, 0xfffffffe, &(0x7f0000000740)='ns/user\x00', &(0x7f0000000780)="a3220329fb61aaf826aa3395ac6838d419e3639c4959cf39861234f32bc443daf9470a15a43b378b0aed9316120ab8af79a39f0ce10f981d090ff051ba0f76de95ba34e169a31d022ab0ef682dc304bcf5beea59ccabe0af8db2e7ed53086c48eb553bce1a9dffcbcccc08ab6dd326991ce5b9f6c4537112ae7a76878f7a6522", 0x80, 0x10}]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000940)=0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000980)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000009c0)) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000a00)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000a80)={0x6, 0x0, r3}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0xb660d000) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f0000000ac0)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000b40)) ioctl$KDSETLED(r6, 0x4b32, 0xffffffff00000001) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000b80)={0x311ff681, r5, 0x6, {0x4, 0x5ff9}}, 0x1) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000c00)={0x28, 0x6f95e1a2d9b1c45a, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000bc0)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000c80)={0x30, r8, 0x0, 0x0, 0x2d1e0a65, 0x1, 0x4, &(0x7f0000000c40)=""/62}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xf) syz_open_dev$sndpcmp(&(0x7f0000000d00), 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x107800, 0x0) 5.476703508s ago: executing program 8 (id=6458): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a", 0x2}], 0x1) (async, rerun: 32) r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 32) gettid() (async) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) (async) mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x300000b) (async, rerun: 32) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) (rerun: 32) write$binfmt_register(r2, &(0x7f0000000640)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x200000000000101, 0x3a, '+#\\+', 0x3a, '', 0x3a, './file0'}, 0x2b) (async) unshare(0x2040400) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) (async) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.763090203s ago: executing program 8 (id=6461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newroute={0x3c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xc8, 0x7}, [@RTA_GATEWAY={0x14, 0x5, @private0}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0x80}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newroute={0x3c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xc8, 0x7}, [@RTA_GATEWAY={0x14, 0x5, @private0}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0x80}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.571022116s ago: executing program 3 (id=6462): syz_usb_connect$uac1(0x5, 0x7e, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x105, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x3ad9a649f8329dd2, 0x3, 0x5, 0xb9, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfa, 0x5, 0x0, {0x7, 0x25, 0x1, 0x4, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x48, 0x4, 0x1, {0x7, 0x25, 0x1, 0x4, 0xd, 0x6}}}}}}}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}}) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x20040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x204, 0x0) write$dsp(r4, &(0x7f0000000100)="60328d95fce84b59e3adcffdc4d614796d1cd4c6d4d0c6eca1e99179b46e2208881c4de135f7eb75bf8f6b2cc04c3f9b7ef69654271ae7c06294d0205032313dfb7c3ae5ee0f4d0cac942ea7b5c7b3cf00cff1d09c19acde1f6dc01f0e275c0313c3384f6587542bad6c35e2056de81d772b3eac9d22baae22f89553a63b3856431821d5baa268af04934a796d977977f918d177467edfed3483b1d4299a6a2a7b0de08516d3e95094e624837805a30bc1c19fd063ba85bfb0805ebf98eadb216d2434d9fd8c892ce8df3eaa14a02ed1c8", 0xd1) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x89c0) (async) r5 = syz_open_dev$mouse(&(0x7f0000000440), 0x759e, 0xa0000) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000280)) (async) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x440480, 0x46) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000400)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0x1, 0xb7, 0x10000}}) r7 = gettid() wait4(r7, 0x0, 0x1, 0x0) 4.524774045s ago: executing program 3 (id=6463): r0 = socket$alg(0x26, 0x5, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000000), 0x4003) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xefeffffe}, {0x6, 0x64, 0x8, 0x8}]}) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}}, 0x0) socket$inet(0x2, 0x800, 0x80) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x7, 0x4) r5 = dup(r1) sendmmsg$inet6(r5, &(0x7f0000002a80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c, 0x0}}], 0x1, 0x20000000) 4.35104497s ago: executing program 8 (id=6465): syz_usb_connect$uac2(0x1, 0xf7, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x9, 0x60, 0x84, {0x8, 0xb, 0x2, 0x2, 0x1, 0xff, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9525, 0x0, 0x49, 0xc0}, [@source_unit={0x8, 0x24, 0xa, 0xff, 0x2, 0x9, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, [0x0, 0x3, 0x3, 0x3]}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, [0xa, 0x1, 0x1, 0x1, 0x7, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0xa, 0x1, 0x7, 0x4, 0x3}, @source_unit={0x8, 0x24, 0xa, 0x5, 0x0, 0x7, 0x3}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0xdb, 0x4, "eea11d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x6, 0xfd, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0xff, 0x5, "a5f8"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x5, 0x1e, "3daa39d113"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x30, 0x2, 0xff, {0x8, 0x25, 0x1, 0x2, 0xc, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0xe2, "", "d07096"}, @as_header={0x10, 0x24, 0x1, 0x6, 0x0, 0x1, 0xebe9af3f3791b7ef, 0x3, 0x6, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0xb, 0x5, {0x8, 0x25, 0x1, 0x2, 0x30, 0x3, 0x1ff}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x8, 0x2, 0x5, 0x8, 0x9}, 0x57, &(0x7f0000000380)={0x5, 0xf, 0x57, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfc, 0x1, 0x7}, @ptm_cap={0x3}, @generic={0x37, 0x10, 0x1, "a43fcaad8406d090a232104456edcecbb02cdb054b7b2ddddcea0acf481fcb1aad108ed80876dbefc2f007079229e2ee2a482dd0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xdf, 0x7, 0x23a, 0x7}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x423}}, {0xac, &(0x7f0000000480)=@string={0xac, 0x3, "5731da4924bb67d7b58c46d33af10f50868294be2a980059f0c2b620b70ad070ff71a880456daa08cf70aa89239b0d0d9e7e7c59174d2dda5357b9cddd9379f16acb3a1782049195f40783296a2c4c0792b73c546a2117b886476f2fc4941fbcaf5d6b4baa527461fe03503b0eb69e6cb4d2cc7ca87cbec8237fbe496dd54d930188bab247cf559defa6d717a0ea46c184b39a9cd45f01019e08f66c7442ad7bd5d6745245d04a8d57ff"}}, {0xc4, &(0x7f0000000540)=@string={0xc4, 0x3, "72aee8a81b445541730037e256395239ea774d61b631056a9f3596f08eada42b40de0953b7811f07b76bf02deacf036be653ca7cbbd302223eb400695ed6dc0d442f001d145e93334d1765254c70a4c854f86d24159b111091ee1ee5ae417196f26b3f65bdad9ed84a4e7f2f98267ffdc51821f800796083ba61106d36f9f1279d9056981885cfebf5bd26e1f15948fa9466f86d7658a7582e4a99f3650fb4317b69a47bfda2b3c41dea15e7f0483338a85f51bcc8d60ef2874ff8aaa023089ad9cc"}}]}) unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b15000000004000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006aff028008001c00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) 4.032400158s ago: executing program 3 (id=6466): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r5, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r7, 0x0, r8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0xa, r4, 0x0, r6}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002205000000a35f"], 0x0}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r9, 0x7ab, &(0x7f0000000b00)={&(0x7f00000006c0)={{@hyper, 0x5}, {@hyper, 0x8}, 0x400, "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"}, 0x418, 0xd}) r10 = socket(0x2, 0x80805, 0x0) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) sendto$inet(r10, &(0x7f0000000340)='j', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$unix(r10, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[], 0x2c}}, 0x0) 4.020382879s ago: executing program 7 (id=6467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x9fc641091ae84973, &(0x7f00000005c0)=ANY=[@ANYBLOB="660e08", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id', @ANYRESDEC=0xee00, @ANYBLOB=',group_', @ANYRESDEC, @ANYBLOB="2c64656661756c745f7065726d364bbccf75b606037fc7f1697373696f6e732c6465666181756c745f7065726d69737369", @ANYRES64=r1, @ANYRES32=0xffffffffffffffff, @ANYRES16=r1, @ANYRESOCT=r1], 0x1, 0x0, 0x0) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r2], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000200)={{@any, 0xffffffff}, 0x0, 0x1, 0x3}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = semget(0x3, 0x3, 0x282) semctl$SETVAL(r7, 0x4, 0x10, &(0x7f0000000100)=0x20000000) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r7], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r8) readv(r9, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001040)=""/203, 0xcb}], 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0xe8}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 3.743095854s ago: executing program 1 (id=6469): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="05002d000100000008000600"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x2e8, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "6a6ccc8a98764ff67ad91337ba65bd9c6995463a143ebfd275c3b2390c51d17594a2798658cd73ccc6de0c991399f3054dacd375f767b070bc64b53d63f3e214810b47f1000cccec50a4ede316ea2277f39a9dd2c8d33d014e17a65631a51871612730c063db929115c11d64db12b50e1924da13f108d2f8e6c89679951a3155ee450fe73df8462048e0fbe81645b9341e8720c47d009cce66259370b807636760fac0e083a3a22768b730d3d4adf4f6d7e01e2f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&[-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0xff, 0x3, "bd1b3ce4470da94af30556267af72dd745d5b19796b614884e277b6ffd7d09d3779f8eff9061f5664fa2f6cf897191fad88027493c9c31d2cff2ed3336a004c7b1811d54aecf7b2c7c8a2945029565211e83f29fcb8507e63a833d0d20ffa8bf641b207cd2d5f406a1137dd565a0c8e1a904b8de6064d069a786c76b300df45cd61742b11a22ff5d35e8c486eb84be16b966771246815061b56b2c6468eb4289e7357866bc949a35fe353568d3ec77df1242776071b061069e0ddb36adfc0e587d6b81e8f0fb3c82d77a1ee72e9b776073e74fe45426662f3246638e2b116a5796ea4e97679fe358cb343b793a665597ec6ec24fb4c7cbb0b54d69"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r8 = memfd_create(0x0, 0x3) r9 = syz_open_dev$vim2m(0x0, 0x7d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000080)={0x10, 0x1, 0x4, "268108ffffffff12ffff58d9f2a15b8c4800000000010011000000000200", 0x50313459}) unshare(0x2c060000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x5, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000640)={0xb0000004}) ftruncate(r8, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.298945838s ago: executing program 4 (id=6473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x80300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r5, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'rose0\x00'}) (async) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random}) 3.088085887s ago: executing program 4 (id=6474): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1000000000000007, 0x0, [{0x40000081, 0x0, 0x1}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.420610873s ago: executing program 1 (id=6475): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="fb4fc04c63b03fde57454311fa58207fd06d", 0x12, 0x20000800, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="fb4fc04c63b03fde57454311fa58207fd06d", 0x12, 0x20000800, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0xc, @sliced={0x4, [0x6, 0x6, 0x6, 0x3fd, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x4000, 0x3, 0x2, 0xfdfb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x2, 0x5, 0x7, 0x0, 0x7f, 0xa62c, 0x7, 0xbbc1, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0xb01, 0x9, 0x7, 0xfcc4], 0x6}}) getpeername$packet(r2, 0x0, 0x0) (async) getpeername$packet(r2, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000700)={0x25, &(0x7f0000000500)=[{0xf, '\x00', @data=0xfff, 0x100}, {0x2b, '\x00', @data=0x4, 0x9}, {0xf, '\x00', @st={0x4, [{0x2, @svalue}, {0x0, @uvalue=0x400}, {0x2, @svalue=0x6}, {0x2, @uvalue=0xbe9}]}, 0x2}, {0x7, '\x00', @data=0x81d, 0x8}, {0x42, '\x00', @data=0xdb, 0xa}, {0x3f, '\x00', @data=0x1, 0x9}]}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x10}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100, 0x100, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000085c0)={0x90, 0x0, 0x9, {0x6, 0x2, 0x7, 0x0, 0x9, 0xc, {0x1, 0x5c, 0x9, 0x2, 0x8000000000000000, 0x3, 0x9, 0x10000, 0xb, 0x4000, 0x1, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) (async) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.147157122s ago: executing program 3 (id=6476): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000680)="3cd0e35f549056bc68f0a5b8ae148630fdd0248b1085a75e96261389fad828d5bec6bd0070da113d76631425d238ebc645c25a2a56133ef525b5", 0x3a}, {&(0x7f00000006c0)="f735bd9341ee0f30236fbab7cce15f86a7765a52a69aaf08bb2e145aad9dc9d924dadbced68144be6831355a0a1c5d7509f028808069324cc82089ad48db792e64d064e5c55b3d7db7bfd039f9c8a50a4d93e520727c09965b6ca2e47ddbf3fc67ea29df223c13e2af2e2e346aab236660420feb93308f2e3c4b326eca84c0b372d7dbb7f7e5853e7f0442798f877355978ee41efa0f4cd951fca4692a0ced591bfa2217555b8842a9465af7f2656f3314d8db93363647c555e97370c71e7ee6db04669aa538882aefe545fc47ea566a6e79fb025b86feeade24cd68bdf3e4a4fd7a3f", 0xe3}, {&(0x7f00000007c0)="11430a4ecf0c90cc07d46109fbfc8f3fd55f62b6f8b9f157c432ac2ebb2b163094b7275e8b6a757c98ac23291675f8ebb5ba84672f837fd5df4b2085adc3f9684dea4299067f01aade78ff8fa6689f9d0177b89303c6303523f30290eec38aeb48b435d45336d9336e4f9a737df1f15b72d2653865279d1f2d5fda61bdef53612dd6296ff92a48a5ed588755e76c4c0d42deee9572bac7aa8aeffb1dd8590236c46f854ae0ab8c42942591b01dfde87c449f0e654aeb5d2acb9028f9", 0xbc}, {&(0x7f0000000880)="32313a88bafcff7e920528db7dac44c4dad2500578e608d8e819ab62a0d0962f849e32e1fd308cd3b73285de70f722381b5bc0bfcf04ee2f06ba598ec0479a70da282729d2e312958e6469d46753a7f605857830b71fe9335416bb81db5c597fe40cffbb631e6dfc4ae4e6176b71b5e6bf04102fcab9fc5b27f6a70a5d66e658573f461040d01f283884f3d250827de88478d392a1302d928aa4b6a1d54d6d26a00ddc88f50a66da55085bdfc9d5b11db5415bf32afa0880611665855706bfdf018c954220f03209fca5d4d535b463890369e9043ec9a7c8117f1133", 0xdc}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x20004840}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="9e7adb718e6c12055dce81d8bc827e34ad50b3fc4e79ee728b63c7bfb2da7d146cfb11936ba55dba28ef", 0x2a}], 0x1, &(0x7f0000004940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0xb8, 0x4000800}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f00000017c0)=""/4104, 0x1008}, {&(0x7f0000000300)=""/87, 0x57}], 0x4, &(0x7f0000001680)=""/211, 0xd3}, 0x101}], 0x1, 0x10101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x40000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000200)={0x10, 0x2, {0x51, 0xb90b, 0x2, {0x8000, 0x6}, {0x8, 0x2}, @const={0x5, {0x4, 0x7, 0x6, 0x101}}}, {0x51, 0xc, 0x3, {0x9, 0x35}, {0xb13f, 0xa3b}, @period={0x5a, 0x3, 0x505, 0xb4, 0x7, {0x6, 0x10, 0x2, 0x8001}, 0x2, &(0x7f0000000b00)=[0x75c, 0xf1dd, 0x40]}}}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x8080) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x9}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r6, r6, 0x0, 0x2000fb) 2.136166284s ago: executing program 1 (id=6477): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f00000002c0)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2) (async) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) (async) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ftruncate(r3, 0x74c893df) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) 1.915163515s ago: executing program 3 (id=6478): close(0x3) r0 = socket$inet(0x2, 0x80001, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket(0x22, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r5, @ANYBLOB="00082abd7000fddbdf2508000000080003000500000030000680080006001000000014000400fc02000000000000000000000000000108000700", @ANYRES32=r7, @ANYBLOB="060005004e2000000c000680080003007f000001040001804c0006801400040000000000000000000000000000000000080006000200000008000300e0000001050002000d00000014000400fe800000000000000000000000000010050002000e0000000cc63f8fa0f800068005000200060000001400068008000700", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa14000680060005004e24000008000700", @ANYRES32=r8, @ANYBLOB="2800068008000700", @ANYRES32=r11, @ANYBLOB="1400040000000000000000000000ffffe0000001050002003000000005000500f8000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000801) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r12, 0x29, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x60}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000240)=0x8) 1.914895642s ago: executing program 1 (id=6479): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000580)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x280100, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x2, 0xfffffffb}) sendmsg$nl_xfrm(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x64, 0x15, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, 0x6e6bba, 0x2}, [@XFRMA_IF_ID={0x8}, @mark={0x44, 0x15, {0x0, 0x1}}]}, 0x64}}, 0x0) 1.884591317s ago: executing program 1 (id=6480): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000100)='R\x10rust\xe3c*sgrVdn:Dd\xa5W\xfd\x81-jn\x81\xf6\xf8\x1e\x0e2\x83L\x02\xb5[3\x0e\xc4=p\xd8\xf9`0\x178R\xdd\xa5K\x1a\xadB\xbd\x88\'q\x18\xbc\xf2u\xf6\"\t\x81\x06\xc5n\xfd\xb9\x96\b. \x83|%c\xeb\xc2\xd8\xa3\xc3\x99\xea\x10\x80\xff\xf7E\xc4\x19V\x99\xcbu\xf7\x93\xf0\'\xb91\x99&9jg\x90\xc7^\xa8\xe8\xe9\x05_\xd8\x82w\x84?\x12zz@\x89\xad\x96\xe6%T\xee\xd3}\x8c\xd0\x02\\\xfe\xb86\t\xc8\xfc\xb6\xf8\xf1\x87\x7f\xc6\n\xcc}\x1fr\x8e\x05i\x9f\x05!\xe4UY\x02B\xa5\xb5[\x17\xe5\xde*\xb8\x9esJ\xb78\x1f\x14\x0f\xb9\xdeB\xbd\xf6\xe1\xd5\x12\xc6\x8en\xae\xcb\x90A\xc5VykB\x06\xca\'l\xda\xc0\xf8E\xee\xf9\xd1\as\xed\n\xd0u\x97\x87\x15~\xa8\x8a\x97T}\r\'\x92\xaa;8\xd8\x90\xf0lF\x12\x1f\xf7j\xd5\xa9\x84\xdd\x1e\xa0\xf7&\x01\xc1n\xa2\x898Vw\x8bF\xd0\xfc\xb4\xb0Qz\x8e\xc5\xb6\x90\xcd\xe2\xcb,W\xff\f\n\xa0\xde7\xc3\xec\x8ef\xeb\xe36\x8d\xa4:\xd6(*\x06\xfd\xc4h\xfc.j\xc5uV\xea\x8c\xc5\x93\xccH\xdb\xf7\t\x89d]\x85K\b\x83&\xb2p\xd7CW-cO\x82\xf9\xe2dNk', 0x0) 1.857554592s ago: executing program 3 (id=6481): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000980)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1mm\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xfa\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\x00\x00\x00\x00\xd6\x91%||\xa0\x8ez\xa1T\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xdf\x8a\xb1\x16YW\xd7\xfe\xc4\xcfX\x88\x00\x03\x1e\xd3\x19_\xb5\x93\xcas[\xd1\xe4!\xdd\x83%\x9a_\xe2\x9c3\x14\x90\xe7e\x84C\x85\xbaX\x18\b\x8a\x983\xb8\x990\xb3\t\xc2\xf2@,Z\xe4\xb8\xa5o\xfd7\xdf\x14\xfc\xd5\xe2\xcd\xf7\xb1\x03\a\x00\x00\x00\x1f\x82\f\xe0\xa8\xab\xef\x02\xe4\x00\x00\x00\x00\xdeo\xa7\'\x8f\xb2\nwtR&\x8b\x8d\xbe\x1df\xdb\xf1\x8b\xff\x11\x93tr\x8e\xaa\xe94\x82\xe0\"X\x00b\xe9\xb6\x02#\x94ta\xbe\xab\xe7\x16\x87Rd\x86\xdb\xbf?WU&\xb1\xb8\x01\xd7\xd8\x1a\xc2gK+|\xdb\xce \xb0\x15>;Qo\xbf\x1e\v\xa94\xa9\xb8.\xd8{qxU\xe8\xc6\x88\xe7\xec\x02l^\x9f\xe8\xd4y\x17\xc5\x7f\xcb\xc6\x95\xd5=\x19GjR\v\x1f(\xeblM=\x18\x90\xf6\xe7>\xbe7`\xb0\x96$Mi\f\xe2!w\xb8\xb9bv\xf5z\x02\xf7X\xc8`\xd5\x0f\n\t\x00bl\x17\xe5n!\xef\xe4/sF\x86\x8d\xdey\xcd', 0x3) write$binfmt_script(r2, &(0x7f0000000b40)={'#! ', './file0/../file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}, {0x20, '/dev/i2c-#\x00'}, {0x20, '/dev/video2\x00'}, {}], 0xa, "252808bc3d909db4a4c84c83a4b221e14478963729823398ab4867570a5274eb848bbd8c495be7fe9f510e222e5c9274d26440a202a430e5e944815e8ecfb73c8751a1eea002f007e046af50d5c06f81c33fc35020ecf271b4b705cb7c64f59c6eb852370f51a31a46ac4c1373e89b8f5aea02513a634038af788cf88e8673f5c6e6d95e8225bf5f25c8b26df7d4647e5ae01495e469fa9cde67aa470ec7cd485eaa53b0a092f89ceed9edca6baaba3e55623ac9e316b74e3abd4a6011241dbf89c27cb1f9c9e940cd2afb2928aef3699d3d9c3f7a"}, 0xffffffffffffff21) execveat(r2, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000cc0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0xfff, {"a6685bb2dea2092288c56584bd43c4d6"}, 0x498aab36, 0x5, 0x80000000}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x40ba, &(0x7f0000000140)={0x0, 0xeef1, 0x4000, 0x1, 0x283}, 0x0, 0x0, &(0x7f00000001c0)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xe, 0x8, 0x84, 0x2, 0x3, 0x10007f, 0x20000006, 0x4b, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff02, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x1000007, 0x200, 0x5, 0x1007, 0x200, 0x3e, 0x2, 0xff, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x0, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6d7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f3c, 0xd, 0x0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x5b9, 0x100, 0x8d2, 0x9, 0x3, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x3, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x2, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x405, 0x6, 0xac6, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x6, 0xffffffff, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x55e0, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x10001, 0xf0e4, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x1, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) 1.779363038s ago: executing program 1 (id=6482): io_setup(0x222, &(0x7f0000000180)=0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x119, 0x9, 0x0, 0x33) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffffffff0b000000480005800800010065756800070002"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r8, 0x0, 0x0, 0x1000000000004, 0x0, 0x2}]) 1.589822933s ago: executing program 4 (id=6483): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x35, &(0x7f000000cf3d)=""/195}, 0x48) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d05, 0x0, 0x2}]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.406065681s ago: executing program 4 (id=6484): futex(0x0, 0x2, 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4041) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x0, 0x10000056, 0x8001, 0x4, 0x31, 0x0, 0x2245, 0x7fffffff, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x7f7f, 0x0, {0x9, 0x1}, {0x52, 0x2}, @period={0x58, 0x6, 0x2, 0x2, 0xf800, {0x6, 0x93, 0xe, 0x2}, 0x0, 0x0}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000480)="00505e0f66464cd2e17444ed3dfee3306168b35010e1e49f25fd607144e89f7d747896c041219d62bbe68fb856e60dfb54983c9c1a1f96657cc1701ca13387507662f43ff266b41fb7dae322c6eb53280a56c17c3129464cb79eb698191b93ed4bfb5fa620457395715aae3bf6ac21cf0cde10fc21227c0f4cacc0f699eafea4f5a45cd576fdf01a8fb8fd1139b3bff95093f6abedefb5aedf20564db7b5c32aadf08db377275a487e2c6c8c07a236785dd407f40064f690c4dc6d9dafa3ca314e218fedfa5c3d66046045d7d81e7be56d4f362b0be1bea56588a6", 0xdb) fstat(0xffffffffffffffff, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x80007, '\x00', @value=0x200}}) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000300)=@l2tp, 0x80, &(0x7f0000000400)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/198, 0xc6}], 0x2, &(0x7f0000001840)=""/64, 0x40}, 0x1}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000001900)=""/4, 0x4}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/253, 0xfd}, {&(0x7f0000001a80)=""/27, 0x1b}], 0x5, &(0x7f0000001b40)=""/119, 0x77}, 0x5}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/173, 0xad}], 0x1, &(0x7f0000001d40)=""/4096, 0x1000}, 0x5}], 0x3, 0x180, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0xffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.203221358s ago: executing program 8 (id=6485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0xfffff000, &(0x7f0000003c80)={0x77359400}) r2 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x2, 0x0) 837.554834ms ago: executing program 7 (id=6486): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000009000/0x2000)=nil}) (async) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) unshare(0x2a020400) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[], 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x26e8}) unshare(0x6020400) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket(0x10, 0x80002, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) (async) sendto$inet6(r3, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x4a) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0x97f, 0x0, 0x4}, {0x2dc, 0x0, 0x3}, {0x233, 0x0, 0x6}, {0x649, 0x0, 0x401}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000180)={0x300000000000000, 0x0, 0x4, 0x2, 0x8}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f00000002c0)="440f20c066350b000000440f22c00f00990c00f26e0f01c20f35360fc7320f01c9baf80c66b8e4b4288866efbafc0cb80500ef0f20c06635010000000f22c0baa000ec", 0x43}], 0x1, 0x2, &(0x7f00000001c0), 0x0) 632.000635ms ago: executing program 7 (id=6487): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x72, 0x20800, 0x0, 0x1a4, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810dc, 0xb4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000280)={0x800080, 0x3, 0x8, 0x7, 0x0, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000000540)={r2, 0x0, 0x800000000000000, 0xffff, 0xa, 0x4}) madvise(&(0x7f00000ec000/0x800000)=nil, 0xffffffffdff13fff, 0x17) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000052000102fcffffff000000000a"], 0x1c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1c2841, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) listen(r3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x6, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x2, 0x6, 0x28, @remote, @empty, 0x20, 0x8000, 0x2, 0xfffffffa}}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000001806fffe8000000000000800000000000000bbfe8000000000000000000000000000aa4e234e22425e64587267c96231b40fe2ee57383ac93786ee8fd47645bf6b872cebcfb889", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2fffc9078ff6b02040e00"], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x58, 0x2f, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x40, 0x51, 0x0, 0x1, [@generic="0a09c5e7a26576a8b5a401d7c1fdd0fe857341c3a850da23194c6f2158ae9de441f2a8c18440f8bfab41ca9aec3fa312a33f41d03ecbed08fc344735"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 399.404813ms ago: executing program 4 (id=6488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004041}, 0x40040d2) 393.52308ms ago: executing program 8 (id=6489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000010c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r9, &(0x7f00000005c0)=""/4096, 0x1000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1411, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000055}, 0x10) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@RTM_DELMDB={0xf8, 0x55, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x3, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x3, 0x2, {@ip4=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x0, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x1, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0xf8}}, 0x0) 354.256736ms ago: executing program 7 (id=6490): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) 143.17088ms ago: executing program 7 (id=6491): close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000430001002abd7000fddbdf250700000008000300080000000c00080006000000000000000c00080000000000800000000800030001040000080004004a0c00000800020000019000090001005b2d457b000000000800020001000000680006800c000f0009000000000000000c000c000c000600000000000c000d00020000000000050005000000000000000c000500050000000000000008000800070000000c000700010000000000000008001100100000000c0008000000000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x24004805}, 0x20000080) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x6c, 0x1, @local, @mcast2}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000240)=0x8) 142.757115ms ago: executing program 4 (id=6492): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0xd) r5 = getpgrp(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r5}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd7000510000000004197c99001700020000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0x20, 0x0, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0xffff, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 0s ago: executing program 7 (id=6493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8993, &(0x7f0000000a40)={'sit0\x00', @ifru_mtu=0x6f5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = eventfd(0x1) write$eventfd(r6, &(0x7f0000000000)=0xb0, 0x8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x5, 0x0, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8020, 0x0) ioctl$RTC_SET_TIME(r11, 0x4024700a, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES64=r11, @ANYBLOB="8304050000000000380012800b00010069d81b5e996c000028000280080008001300000014000300fe4162bd002b929fc33f0046a8b3dd750fffb0efb0370df5fe2d24049539642cd1e826d3550fad925773d7a8a10715d03417c63e815cba0581d3d7c8afabb73072452c32127315973cc5b65df122657564738c140a57e639e0af9ec65e286c59da42794a06180adbc4f6cdac0ae5ea55afbbfd9d01725bdea927240947ee4d05ddd81a4765de94abca51ebb53591ca63b28d", @ANYBLOB="3cd871c6ec2532010bcc9e651db8a8bc76f1a43f03dccc16ba466ba16f46d912c6bc1cfe25d03f9e6086464f393b703b18d633eb7760b7a50900000000000000cb45bf74615ea585d888007e764f52934296fb53b5c7a4b1ae795b01ce4c965c3009c413f4fe7602c2e2c723ccb6fef5c4064e57653b9eb4f49686d73e2f61e275185e5407781fde302fdb1f907c35af2c09b871084ab21476b11f282064475a4a92de5526fa223ab4420b53faca1c4953007f7c5acad38d6cfb96c13f995e909d28422e6618165cc9e2f1f3598191c28877cb4e09e7a48995d3165471cf2de459d54795c53bafe76dfc2b3c6d39220000000000", @ANYRES32=r11, @ANYBLOB="0011bf590a9fc7d6b8ce8bfe41cb26b42aa8f55f413e8e57239cd9896cee2cd5c8fec2ed6160e36047f03fa65ce0e7b3678831e33d167606529f0bce51dd37731e6501cfe1a02862e3"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000012200001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB="080002"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000812020050003c8000000000008000200"], 0x60}}, 0x0) r12 = dup(r7) write$UHID_INPUT(r12, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) syz_emit_ethernet(0x18f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd65"], 0x0) kernel console output (not intermixed with test programs): 136187][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6156'. [ 1500.238753][T29121] bond3: entered allmulticast mode [ 1500.280070][T29131] syzkaller0: entered promiscuous mode [ 1500.296740][T29131] syzkaller0: entered allmulticast mode [ 1500.800413][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.837823][ T6520] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1500.942679][T29156] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1500.964488][T29156] fuse: Bad value for 'user_id' [ 1500.969845][T29156] fuse: Bad value for 'user_id' [ 1501.028215][ T6520] usb 5-1: not running at top speed; connect to a high speed hub [ 1501.048778][ T6520] usb 5-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config [ 1501.088547][ T6520] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24 [ 1501.101494][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.110589][ T6520] usb 5-1: Product: syz [ 1501.115276][ T6520] usb 5-1: Manufacturer: syz [ 1501.122041][ T6520] usb 5-1: SerialNumber: syz [ 1501.126905][T23907] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1501.353129][T29124] xt_cgroup: invalid path, errno=-2 [ 1501.365353][ T6520] qmi_wwan 5-1:6.0: invalid descriptor buffer length [ 1501.373104][ T6520] qmi_wwan 5-1:6.0: probe with driver qmi_wwan failed with error -22 [ 1501.393706][ T6520] usb 5-1: USB disconnect, device number 75 [ 1501.679576][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.837851][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.908469][T15309] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1502.077216][T15309] usb 2-1: Using ep0 maxpacket: 16 [ 1502.091415][T15309] usb 2-1: config 15 has an invalid interface number: 108 but max is 1 [ 1502.109439][T15309] usb 2-1: config 15 has an invalid interface number: 141 but max is 1 [ 1502.126808][T23907] usb 4-1: device descriptor read/64, error -71 [ 1502.134185][T15309] usb 2-1: config 15 contains an unexpected descriptor of type 0x2, skipping [ 1502.147742][T15309] usb 2-1: config 15 has no interface number 0 [ 1502.147750][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6169'. [ 1502.164330][T15309] usb 2-1: config 15 has no interface number 1 [ 1502.171719][T15309] usb 2-1: config 15 interface 108 altsetting 33 has an invalid descriptor for endpoint zero, skipping [ 1502.184491][T15309] usb 2-1: config 15 interface 108 altsetting 33 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1502.199982][T15309] usb 2-1: config 15 interface 108 altsetting 33 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1502.211660][T15309] usb 2-1: config 15 interface 108 altsetting 33 bulk endpoint 0x3 has invalid maxpacket 32 [ 1502.243408][T15309] usb 2-1: config 15 interface 108 altsetting 33 has a duplicate endpoint with address 0x3, skipping [ 1502.262183][T15309] usb 2-1: config 15 interface 108 altsetting 33 has an invalid descriptor for endpoint zero, skipping [ 1502.274387][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0x4, skipping [ 1502.285719][T15309] usb 2-1: config 15 interface 141 altsetting 67 endpoint 0x7 has invalid maxpacket 1535, setting to 1024 [ 1502.298941][T15309] usb 2-1: config 15 interface 141 altsetting 67 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1502.311967][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0x8, skipping [ 1502.324120][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0xC, skipping [ 1502.335920][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0x6, skipping [ 1502.348365][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0xC, skipping [ 1502.368964][T15309] usb 2-1: config 15 interface 141 altsetting 67 bulk endpoint 0x1 has invalid maxpacket 32 [ 1502.379678][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0x5, skipping [ 1502.391019][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0x7, skipping [ 1502.402641][T15309] usb 2-1: config 15 interface 141 altsetting 67 has a duplicate endpoint with address 0xD, skipping [ 1502.415410][T15309] usb 2-1: config 15 interface 108 has no altsetting 0 [ 1502.417121][T23907] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1502.434897][T15309] usb 2-1: config 15 interface 141 has no altsetting 0 [ 1502.450150][T15309] usb 2-1: New USB device found, idVendor=1737, idProduct=0073, bcdDevice= a.91 [ 1502.459419][T15309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.468233][T15309] usb 2-1: Product: syz [ 1502.472489][T15309] usb 2-1: Manufacturer: ﯇ [ 1502.478538][T15309] usb 2-1: SerialNumber: syz [ 1502.493225][T29167] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1502.556842][T23907] usb 4-1: device descriptor read/64, error -71 [ 1502.669349][T29185] bond0: left promiscuous mode [ 1502.674182][T29185] bond_slave_0: left promiscuous mode [ 1502.680842][T23907] usb usb4-port1: attempt power cycle [ 1502.688499][T29185] bond_slave_1: left promiscuous mode [ 1502.694996][T29185] bond0: left allmulticast mode [ 1502.701619][T29185] bond_slave_0: left allmulticast mode [ 1502.709081][T29185] bond_slave_1: left allmulticast mode [ 1502.784731][T29185] bond1: left promiscuous mode [ 1502.878115][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.026746][T23907] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1503.048186][T23907] usb 4-1: device descriptor read/8, error -71 [ 1503.286751][T23907] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1503.307501][T23907] usb 4-1: device descriptor read/8, error -71 [ 1503.417380][T23907] usb usb4-port1: unable to enumerate USB device [ 1503.699258][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1503.699303][ T30] audit: type=1326 audit(1778415693.247:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0fd9cdd9 code=0x7ffc0000 [ 1503.732691][ T30] audit: type=1326 audit(1778415693.247:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0fd9cdd9 code=0x7ffc0000 [ 1503.758804][ T30] audit: type=1326 audit(1778415693.287:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f6f0fd9cdd9 code=0x7ffc0000 [ 1503.789260][ T30] audit: type=1326 audit(1778415693.287:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0fd9cdd9 code=0x7ffc0000 [ 1503.816009][ T30] audit: type=1326 audit(1778415693.287:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0fd9cdd9 code=0x7ffc0000 [ 1503.842893][ T30] audit: type=1326 audit(1778415693.307:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f0fd5d60e code=0x7ffc0000 [ 1503.872185][ T30] audit: type=1326 audit(1778415693.307:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f0fd9ca6b code=0x7ffc0000 [ 1503.899284][ T30] audit: type=1326 audit(1778415693.307:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f0fd9ca6b code=0x7ffc0000 [ 1503.925950][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.934797][ T30] audit: type=1326 audit(1778415693.307:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f0fd9ca6b code=0x7ffc0000 [ 1503.961376][ T30] audit: type=1326 audit(1778415693.307:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29191 comm="syz.7.6173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f0fd9ca6b code=0x7ffc0000 [ 1504.067988][T29195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.080448][T29195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.089946][T29195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.099308][T29195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.109834][T29195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.119965][T29195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.130545][T29195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.141505][T29195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.151644][T29195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.161425][T29195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.306734][T23907] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1504.456991][T23907] usb 3-1: Using ep0 maxpacket: 32 [ 1504.472067][T23907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1504.483720][T23907] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1504.493000][T23907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.501139][T23907] usb 3-1: Product: syz [ 1504.505772][T23907] usb 3-1: Manufacturer: syz [ 1504.510672][T23907] usb 3-1: SerialNumber: syz [ 1504.565818][T15309] usb 2-1: unknown interface protocol 0x56, assuming v1 [ 1504.579466][T15309] usb 2-1: cannot find UAC_HEADER [ 1504.635802][T15309] snd-usb-audio 2-1:15.141: probe with driver snd-usb-audio failed with error -22 [ 1504.654969][T15309] usb 2-1: USB disconnect, device number 99 [ 1504.700377][T27277] udevd[27277]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:15.141/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.722611][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.771431][T23907] usb 3-1: unit 0 not found! [ 1504.793748][T23907] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1504.811179][T23907] usb 3-1: unit 0 not found! [ 1504.823744][T23907] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1504.838134][T23907] usb 3-1: unit 0 not found! [ 1504.907784][T23907] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1504.922311][T23907] usb 3-1: USB disconnect, device number 25 [ 1504.958317][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.971886][T21280] udevd[21280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.988380][T15309] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1505.147059][T15309] usb 2-1: Invalid ep0 maxpacket: 64 [ 1505.277361][T15309] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 1505.322373][T29207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1505.357895][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.398177][T23907] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1505.447448][T15309] usb 2-1: Invalid ep0 maxpacket: 64 [ 1505.457290][T15309] usb usb2-port1: attempt power cycle [ 1505.546849][T23907] usb 4-1: device descriptor read/64, error -71 [ 1505.797163][T23907] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1505.801731][T15309] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 1505.859574][T15309] usb 2-1: Invalid ep0 maxpacket: 64 [ 1505.916855][T22089] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1505.956829][T23907] usb 4-1: device descriptor read/64, error -71 [ 1505.998933][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.008024][T15309] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 1506.027410][T15309] usb 2-1: Invalid ep0 maxpacket: 64 [ 1506.032942][T15309] usb usb2-port1: unable to enumerate USB device [ 1506.067133][T23907] usb usb4-port1: attempt power cycle [ 1506.076940][T22091] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1506.086879][T22089] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1506.095042][T22089] usb 5-1: config 0 has no interface number 0 [ 1506.101391][T22089] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1506.113681][T22089] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1506.125519][T22089] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1506.139946][T22089] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1506.149962][T22089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.159544][T22089] usb 5-1: Product: syz [ 1506.163749][T22089] usb 5-1: Manufacturer: syz [ 1506.168895][T22089] usb 5-1: SerialNumber: syz [ 1506.175461][T22089] usb 5-1: config 0 descriptor?? [ 1506.184791][T29215] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1506.200111][T22089] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1506.212389][T22089] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1506.221535][T22089] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1506.251266][T22091] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1506.265934][T22091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.275566][T22091] usb 3-1: Product: syz [ 1506.279931][T22091] usb 3-1: Manufacturer: syz [ 1506.284607][T22091] usb 3-1: SerialNumber: syz [ 1506.293841][T22091] usb 3-1: config 0 descriptor?? [ 1506.400366][T22089] usb 5-1: USB disconnect, device number 76 [ 1506.416603][T22089] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1506.428041][T23907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1506.436284][T22089] cyberjack 5-1:0.69: device disconnected [ 1506.458452][T23907] usb 4-1: device descriptor read/8, error -71 [ 1506.507847][T22091] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1506.706892][T23907] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1506.737552][T23907] usb 4-1: device descriptor read/8, error -71 [ 1506.858004][T23907] usb usb4-port1: unable to enumerate USB device [ 1507.038018][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.078604][T29237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1507.296616][T29243] only policy match revision 0 supported [ 1507.297224][T29243] unable to load match [ 1507.740896][T29219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.758736][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.776467][T29219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.015242][T22091] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1508.048577][T22091] usb 3-1: USB disconnect, device number 26 [ 1508.080609][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.132176][T29248] trusted_key: encrypted_key: insufficient parameters specified [ 1508.589777][ T5719] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1508.738771][T15309] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1508.787069][T29273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1508.800266][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1508.809311][ T5719] usb 4-1: config 0 has no interfaces? [ 1508.817001][ T5719] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.826425][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.831951][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6202'. [ 1508.834898][ T5719] usb 4-1: Product: syz [ 1508.848379][ T5719] usb 4-1: Manufacturer: syz [ 1508.853088][ T5719] usb 4-1: SerialNumber: syz [ 1508.860679][ T5719] usb 4-1: config 0 descriptor?? [ 1508.898495][T15309] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.906614][T15309] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1508.918115][T15309] usb 5-1: config 0 has no interface number 0 [ 1508.924239][T15309] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 173, changing to 11 [ 1508.937934][T15309] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1508.950818][T15309] usb 5-1: New USB device found, idVendor=dad9, idProduct=a0e9, bcdDevice= 0.00 [ 1508.962213][T15309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.972994][T15309] usb 5-1: config 0 descriptor?? [ 1509.071528][T29250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.083089][T29250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.092639][T29250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.101650][T29250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.110599][ T6520] usb 4-1: USB disconnect, device number 4 [ 1509.120159][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.504656][T29276] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1509.511192][T29276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1509.520801][T29276] vhci_hcd vhci_hcd.0: Device attached [ 1509.538481][T29276] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1509.545182][T29276] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1509.557100][ T6520] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1509.570212][T29276] vhci_hcd vhci_hcd.0: Device attached [ 1509.591654][T15309] usbhid 5-1:0.1: can't add hid device: -71 [ 1509.600312][T15309] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1509.614720][T15309] usb 5-1: USB disconnect, device number 77 [ 1509.726816][ T6520] usb 4-1: Using ep0 maxpacket: 32 [ 1509.733501][ T6520] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1509.741742][ T6520] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1509.750098][ T6520] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1509.759310][T22082] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1509.766871][ T6520] usb 4-1: config 0 has no interface number 0 [ 1509.773217][ T6520] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 2304, setting to 1024 [ 1509.784544][ T6520] usb 4-1: config 0 interface 6 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1509.798752][ T6520] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1509.808042][ T6520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.816093][ T6520] usb 4-1: Product: syz [ 1509.820392][ T6520] usb 4-1: Manufacturer: syz [ 1509.825016][ T6520] usb 4-1: SerialNumber: syz [ 1509.831878][ T6520] usb 4-1: config 0 descriptor?? [ 1509.842568][ T6520] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1509.857015][ T6520] vmk80xx 4-1:0.1: driver 'vmk80xx' failed to auto-configure device. [ 1509.926843][T22084] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1510.071358][T29250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.081590][T29250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.103162][T29277] vhci_hcd: connection reset by peer [ 1510.108709][T29279] vhci_hcd: connection closed [ 1510.110901][T28757] vhci_hcd vhci_hcd.2: stop threads [ 1510.126322][T28757] vhci_hcd vhci_hcd.2: release socket [ 1510.132587][T28757] vhci_hcd vhci_hcd.2: disconnect device [ 1510.142057][T28757] vhci_hcd vhci_hcd.2: stop threads [ 1510.151977][T28757] vhci_hcd vhci_hcd.2: release socket [ 1510.158019][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.170525][T22091] usb 4-1: USB disconnect, device number 5 [ 1510.177804][T28757] vhci_hcd vhci_hcd.2: disconnect device [ 1510.253159][T29285] loop2: detected capacity change from 0 to 7 [ 1510.262911][T29285] Dev loop2: unable to read RDB block 7 [ 1510.268706][T29285] loop2: unable to read partition table [ 1510.274721][T29285] loop2: partition table beyond EOD, truncated [ 1510.282768][T29285] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1510.316294][T22084] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1510.347747][T22084] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1510.363098][T22084] usb 2-1: can't read configurations, error -71 [ 1510.435758][T29287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6206'. [ 1510.607626][ T6520] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1510.767641][ T6520] usb 3-1: Using ep0 maxpacket: 32 [ 1510.774398][ T6520] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1510.783861][ T6520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.795308][ T6520] usb 3-1: config 0 descriptor?? [ 1510.807026][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.815842][T22091] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1510.976832][T22091] usb 5-1: Using ep0 maxpacket: 16 [ 1510.983906][T22091] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.011809][T22091] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.040674][T22091] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1511.051346][T22091] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1511.071386][T22091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.085248][ T6520] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1511.102955][T22091] usb 5-1: config 0 descriptor?? [ 1511.118846][ T6520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1511.134911][ T6520] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1511.144808][ T6520] usb 3-1: media controller created [ 1511.197988][ T6520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1511.206686][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.390020][T29303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6207'. [ 1511.417133][ T6521] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1511.459679][T22091] usbhid 5-1:0.0: can't add hid device: -71 [ 1511.483834][T22091] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1511.527276][T22091] usb 5-1: USB disconnect, device number 78 [ 1511.579517][ T6521] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.642221][ T6521] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1511.692241][ T6521] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1511.714594][ T6521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.759580][ T6521] usb 4-1: Product: syz [ 1511.774239][ T6521] usb 4-1: Manufacturer: syz [ 1511.795073][ T6521] usb 4-1: SerialNumber: syz [ 1511.830236][ T6521] cdc_mbim 4-1:1.0: skipping garbage [ 1511.966880][T22091] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1512.028246][T29300] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1512.064032][ T6521] cdc_mbim 4-1:1.0: bind() failure [ 1512.086251][ T6521] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1512.131357][ T6521] cdc_ncm 4-1:1.1: bind() failure [ 1512.137571][T22091] usb 5-1: Using ep0 maxpacket: 32 [ 1512.147533][ T6521] usb 4-1: USB disconnect, device number 6 [ 1512.158534][T22091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.205559][T22091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.237705][T22084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.253379][T22091] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1512.278718][T22091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.305056][T22091] usb 5-1: config 0 descriptor?? [ 1512.324949][T22091] hub 5-1:0.0: USB hub found [ 1512.355515][T29318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1512.521573][T22091] hub 5-1:0.0: 1 port detected [ 1512.616780][T22084] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1512.779674][T22084] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 1512.814612][T22084] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1512.836780][T22084] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1512.860630][T22084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.889627][T22084] usb 4-1: config 0 descriptor?? [ 1513.131142][T22091] hub 5-1:0.0: activate --> -90 [ 1513.277077][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.300795][ T6520] az6027: usb out operation failed. (-71) [ 1513.312557][ T6520] stb0899_attach: Driver disabled by Kconfig [ 1513.336488][ T6520] az6027: no front-end attached [ 1513.336488][ T6520] [ 1513.360214][ T6520] az6027: usb out operation failed. (-71) [ 1513.382966][ T6520] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1513.412513][ T6520] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input162 [ 1513.482046][T29330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.491272][ T6520] dvb-usb: schedule remote query interval to 400 msecs. [ 1513.491295][ T6520] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1513.515779][ T6520] usb 3-1: USB disconnect, device number 27 [ 1513.538971][T29330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.632394][T22091] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1513.649325][T28757] usb 5-1: Failed to suspend device, error -71 [ 1513.664651][ T6521] usb 5-1: USB disconnect, device number 79 [ 1513.731010][ T6520] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1513.837020][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.317570][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.867899][T22082] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1514.964723][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.196512][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1515.357656][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.423664][T22091] usb 4-1: USB disconnect, device number 7 [ 1515.996783][ T6520] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1516.159229][T22080] usb usb38-port1: attempt power cycle [ 1516.164889][ T6520] usb 5-1: Using ep0 maxpacket: 32 [ 1516.175683][ T6520] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1516.193417][ T6520] usb 5-1: config 0 has no interface number 0 [ 1516.205730][ T6520] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1516.226323][ T6520] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.261430][ T6520] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1516.301852][ T6520] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1516.339755][ T6520] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1516.352771][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.361307][ T6520] usb 5-1: Product: syz [ 1516.369251][ T6520] usb 5-1: Manufacturer: syz [ 1516.376021][ T6520] usb 5-1: SerialNumber: syz [ 1516.402085][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.412028][ T6520] usb 5-1: config 0 descriptor?? [ 1516.422758][T29364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1516.728358][T22080] usb usb38-port1: unable to enumerate USB device [ 1516.837888][ T6520] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1516.877547][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.926241][ T6520] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 1517.008430][ T6520] usb 5-1: USB disconnect, device number 80 [ 1517.376760][ T6520] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1517.423946][T29399] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1517.433173][T29399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1517.449384][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.471475][T29399] fuse: Unknown parameter 'q' [ 1517.526747][ T6520] usb 5-1: device descriptor read/64, error -71 [ 1517.767748][ T6520] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1517.782705][T29415] FAULT_INJECTION: forcing a failure. [ 1517.782705][T29415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.796301][T29415] CPU: 1 UID: 0 PID: 29415 Comm: syz.2.6242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1517.796328][T29415] Tainted: [L]=SOFTLOCKUP [ 1517.796336][T29415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1517.796348][T29415] Call Trace: [ 1517.796355][T29415] [ 1517.796362][T29415] dump_stack_lvl+0xe8/0x150 [ 1517.796388][T29415] should_fail_ex+0x412/0x560 [ 1517.796417][T29415] _copy_to_user+0x31/0xb0 [ 1517.796446][T29415] simple_read_from_buffer+0xe1/0x170 [ 1517.796472][T29415] proc_fail_nth_read+0x1bb/0x230 [ 1517.796498][T29415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1517.796524][T29415] ? rw_verify_area+0x2a6/0x4d0 [ 1517.796549][T29415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1517.796573][T29415] vfs_read+0x20c/0xa70 [ 1517.796601][T29415] ? __pfx___mutex_lock+0x10/0x10 [ 1517.796633][T29415] ? __pfx_vfs_read+0x10/0x10 [ 1517.796659][T29415] ? __fget_files+0x2a/0x420 [ 1517.796685][T29415] ? __fget_files+0x3a0/0x420 [ 1517.796705][T29415] ? __fget_files+0x2a/0x420 [ 1517.796734][T29415] ksys_read+0x150/0x270 [ 1517.796761][T29415] ? __pfx_ksys_read+0x10/0x10 [ 1517.796793][T29415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.796813][T29415] do_syscall_64+0x15f/0xf80 [ 1517.796837][T29415] ? trace_irq_disable+0x3b/0x140 [ 1517.796864][T29415] ? clear_bhb_loop+0x40/0x90 [ 1517.796886][T29415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.796905][T29415] RIP: 0033:0x7f5c5b55d60e [ 1517.796921][T29415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1517.796937][T29415] RSP: 002b:00007f5c597f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1517.796963][T29415] RAX: ffffffffffffffda RBX: 00007f5c597f66c0 RCX: 00007f5c5b55d60e [ 1517.796977][T29415] RDX: 000000000000000f RSI: 00007f5c597f60a0 RDI: 0000000000000004 [ 1517.796988][T29415] RBP: 00007f5c597f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.797000][T29415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.797011][T29415] R13: 00007f5c5b816038 R14: 00007f5c5b815fa0 R15: 00007f5c5b93fa48 [ 1517.797040][T29415] [ 1517.906930][ T6520] usb 5-1: device descriptor read/64, error -71 [ 1518.016900][ T5719] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1518.128102][ T6520] usb usb5-port1: attempt power cycle [ 1518.176836][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 1518.186154][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.200562][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.211124][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1518.224994][ T5719] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1518.234087][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.250614][ T5719] usb 4-1: config 0 descriptor?? [ 1518.275531][ T5719] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input163 [ 1518.303818][ T4982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.348711][ T4982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.427281][ T4982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.458623][T21272] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.466864][ T6520] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1518.477002][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.485823][T29406] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.488374][ T6520] usb 5-1: device descriptor read/8, error -71 [ 1518.521988][ T4982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.532269][ T4982] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1518.589524][T29431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1518.597774][T29433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1518.756847][ T6520] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1518.777969][ T6520] usb 5-1: device descriptor read/8, error -71 [ 1518.907093][ T6520] usb usb5-port1: unable to enumerate USB device [ 1519.517380][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.917202][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.557367][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.605145][ T30] audit: type=1326 audit(1778415710.147:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1520.661203][T15309] usb 4-1: USB disconnect, device number 8 [ 1520.685761][ T30] audit: type=1326 audit(1778415710.187:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1520.753527][ T30] audit: type=1326 audit(1778415710.197:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1520.849831][ T30] audit: type=1326 audit(1778415710.197:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1520.911402][ T30] audit: type=1326 audit(1778415710.197:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1520.966731][ T6520] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1520.971085][ T30] audit: type=1326 audit(1778415710.197:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1521.023219][ T30] audit: type=1326 audit(1778415710.197:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1521.049080][ T30] audit: type=1326 audit(1778415710.197:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1521.078959][ T30] audit: type=1326 audit(1778415710.207:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1521.103860][ T30] audit: type=1326 audit(1778415710.207:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29471 comm="syz.4.6257" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8df9cdd9 code=0x7ffc0000 [ 1521.158906][ T6520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.204053][ T6520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.258106][ T6520] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1521.268323][ T6520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.280580][ T6520] usb 3-1: config 0 descriptor?? [ 1521.371679][T29490] netlink: 'syz.7.6264': attribute type 4 has an invalid length. [ 1521.389425][T29490] netlink: 'syz.7.6264': attribute type 4 has an invalid length. [ 1521.597702][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.696788][T15309] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1521.710907][ T6520] cp2112 0003:10C4:EA90.0081: item fetching failed at offset 5/7 [ 1521.721933][ T6520] cp2112 0003:10C4:EA90.0081: parse failed [ 1521.728028][ T6520] cp2112 0003:10C4:EA90.0081: probe with driver cp2112 failed with error -22 [ 1521.856758][T15309] usb 4-1: Using ep0 maxpacket: 16 [ 1521.870194][T15309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1521.889431][T15309] usb 4-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1521.908927][T23907] usb 3-1: USB disconnect, device number 28 [ 1521.927586][T15309] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1521.947754][T15309] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.40 [ 1521.957724][T15309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.965762][T15309] usb 4-1: Product: syz [ 1521.970014][T15309] usb 4-1: Manufacturer: syz [ 1521.974625][T15309] usb 4-1: SerialNumber: syz [ 1522.156794][T23396] Bluetooth: hci6: command 0x0406 tx timeout [ 1522.208593][T15309] usbhid 4-1:1.0: can't add hid device: -71 [ 1522.219982][T15309] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1522.235199][T15309] usb 4-1: USB disconnect, device number 9 [ 1522.446802][ T6520] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1522.608999][ T6520] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 1522.621863][ T6520] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1522.639326][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.651687][ T6520] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1522.661645][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.669996][ T6520] usb 5-1: Product: syz [ 1522.674243][ T6520] usb 5-1: Manufacturer: syz [ 1522.682392][ T6520] usb 5-1: SerialNumber: syz [ 1522.797115][ T5719] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1522.957081][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.965372][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 1522.981601][T29504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1522.993934][T29504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1522.994298][ T5719] usb 3-1: too many configurations: 22, using maximum allowed: 8 [ 1523.008117][T29504] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1523.034362][T29504] netlink: 'syz.3.6269': attribute type 2 has an invalid length. [ 1523.051097][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.078818][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.097193][T29504] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1523.111258][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.133096][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.177780][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.186153][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.199297][T29504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1523.217148][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.233943][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.267885][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.281509][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.316212][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.325188][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.334394][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.342930][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.355869][ T5719] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1523.366036][ T5719] usb 3-1: config 0 has no interface number 0 [ 1523.377267][ T5719] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1523.386594][ T5719] usb 3-1: New USB device strings: Mfr=127, Product=6, SerialNumber=36 [ 1523.395480][ T5719] usb 3-1: Product: syz [ 1523.401078][ T5719] usb 3-1: Manufacturer: syz [ 1523.405718][ T5719] usb 3-1: SerialNumber: syz [ 1523.414113][ T5719] usb 3-1: config 0 descriptor?? [ 1523.429812][ T5719] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1523.678690][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.366458][T29514] IPVS: Unknown mcast interface: vlan1 [ 1524.474914][T29500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.486750][T23907] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1524.496693][T29500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.558018][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.572462][ T5719] gspca_spca1528: reg_w err -71 [ 1524.578415][ T5719] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1524.590935][ T5719] usb 3-1: USB disconnect, device number 29 [ 1524.668626][T23907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1524.687644][T23907] usb 4-1: config 3 has an invalid interface number: 19 but max is 0 [ 1524.696110][T23907] usb 4-1: config 3 has an invalid interface number: 4 but max is 0 [ 1524.705081][T23907] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1524.714484][T23907] usb 4-1: config 3 has no interface number 0 [ 1524.717394][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.733495][T23907] usb 4-1: config 3 has no interface number 1 [ 1524.740404][T23907] usb 4-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1524.758755][T23907] usb 4-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1524.770233][T23907] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1524.781575][T23907] usb 4-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1524.796252][T23907] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1524.809113][T23907] usb 4-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1524.823984][T23907] usb 4-1: config 3 interface 19 has no altsetting 0 [ 1524.831207][T23907] usb 4-1: config 3 interface 4 has no altsetting 0 [ 1524.846240][T23907] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 1524.864855][T23907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.882895][T23907] usb 4-1: Product: syz [ 1524.892153][T23907] usb 4-1: Manufacturer: syz [ 1524.902828][T23907] usb 4-1: SerialNumber: syz [ 1525.034865][ T6520] cdc_ncm 5-1:1.0: bind() failure [ 1525.046598][T29525] xt_hashlimit: size too large, truncated to 1048576 [ 1525.086999][ T6520] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1525.112040][ T6520] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1525.137701][ T6520] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1525.188982][ T6520] usb 5-1: USB disconnect, device number 85 [ 1525.205010][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.243166][T28756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.279460][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.301322][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.559004][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1525.578864][T29537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1525.591675][T29537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1525.756849][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.791035][T23907] pl2303 4-1:3.19: required endpoints missing [ 1525.838399][T23907] pl2303 4-1:3.4: required interrupt-in endpoint missing [ 1525.884388][T29544] netlink: 'syz.7.6281': attribute type 12 has an invalid length. [ 1525.929723][T23907] usb 4-1: USB disconnect, device number 10 [ 1525.990105][T29547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1526.004093][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.028851][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1526.387329][ T6520] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1526.516305][T29567] fuse: Unknown parameter '0{' [ 1526.565349][ T6520] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.600001][ T6520] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1526.620491][ T6520] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1526.644813][ T6520] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1526.660534][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.678219][ T6520] usb 5-1: Product: syz [ 1526.688378][ T6520] usb 5-1: Manufacturer: syz [ 1526.699198][ T6520] usb 5-1: SerialNumber: syz [ 1526.799362][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.934675][T29518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1526.964836][ T6520] uvcvideo 5-1:220.0: Found Unit with invalid ID 0 [ 1526.972385][ T6520] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 1526.986956][ T6520] usb 5-1: USB disconnect, device number 86 [ 1527.276803][T22080] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1527.428827][T22080] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1527.442108][T22080] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1527.451936][T22080] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1527.461410][T22080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.472251][T22080] usb 4-1: config 0 descriptor?? [ 1527.546928][T29584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1527.627807][T29586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1527.675149][T29586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.684780][T29586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.692360][T29587] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1527.744269][T29589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1528.122015][T22080] hid_parser_main: 440 callbacks suppressed [ 1528.122032][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.137766][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.144896][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.154482][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.164765][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.172079][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.176979][ T5719] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1528.187707][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.194912][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.202526][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.210071][T22080] lenovo 0003:17EF:60A3.0082: unknown main item tag 0x0 [ 1528.223394][T22080] lenovo 0003:17EF:60A3.0082: hidraw0: USB HID vff.fd Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 1528.320826][T23907] usb 4-1: USB disconnect, device number 11 [ 1528.338599][ T5719] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1528.348123][ T5719] usb 3-1: config 0 has no interface number 0 [ 1528.361248][ T5719] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1528.371955][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.383572][ T5719] usb 3-1: Product: syz [ 1528.389167][ T5719] usb 3-1: Manufacturer: syz [ 1528.394148][ T5719] usb 3-1: SerialNumber: syz [ 1528.401957][ T5719] usb 3-1: config 0 descriptor?? [ 1528.815210][T29595] fuse: Bad value for 'fd' [ 1528.880531][ T6521] net_ratelimit: 1 callbacks suppressed [ 1528.880547][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.899234][T29604] binder: 29591:29604 ioctl c0306201 200000000080 returned -22 [ 1529.054121][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.106707][T22080] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1529.258426][T22080] usb 4-1: config 12 has an invalid interface number: 187 but max is 0 [ 1529.266884][T22080] usb 4-1: config 12 has an invalid descriptor of length 174, skipping remainder of the config [ 1529.278550][T22080] usb 4-1: config 12 has no interface number 0 [ 1529.284888][T22080] usb 4-1: config 12 interface 187 altsetting 26 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1529.296366][T22080] usb 4-1: config 12 interface 187 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1529.309990][T22080] usb 4-1: config 12 interface 187 has no altsetting 0 [ 1529.317151][T22089] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1529.326319][T22080] usb 4-1: New USB device found, idVendor=1784, idProduct=0001, bcdDevice=aa.ac [ 1529.335758][T22080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.344073][T22080] usb 4-1: Product: syz [ 1529.348709][T22080] usb 4-1: Manufacturer: syz [ 1529.353959][T22080] usb 4-1: SerialNumber: syz [ 1529.365149][T29603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1529.480749][T22089] usb 5-1: config 7 has an invalid interface number: 209 but max is 0 [ 1529.489697][T22089] usb 5-1: config 7 has no interface number 0 [ 1529.495999][T22089] usb 5-1: config 7 interface 209 has no altsetting 0 [ 1529.518483][T22089] usb 5-1: string descriptor 0 read error: -22 [ 1529.525311][T22089] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=7c.f2 [ 1529.536173][T22089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.639752][T29616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.654512][T29616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.782338][ T6521] usb 5-1: USB disconnect, device number 87 [ 1529.916958][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.397570][T28763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.463548][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.505560][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.607915][T29630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6306'. [ 1530.613824][T29628] syzkaller0: entered promiscuous mode [ 1530.622601][T29628] syzkaller0: entered allmulticast mode [ 1530.773756][T29634] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6307'. [ 1530.784695][T29634] netlink: 'syz.7.6307': attribute type 11 has an invalid length. [ 1530.795511][T29634] netlink: 'syz.7.6307': attribute type 5 has an invalid length. [ 1530.823782][T29634] netlink: 6548 bytes leftover after parsing attributes in process `syz.7.6307'. [ 1530.963715][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.973077][ T5719] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1531.013952][ T5719] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1531.037081][T22091] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1531.060162][ T5719] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1531.114828][ T5719] usb 3-1: USB disconnect, device number 30 [ 1531.216780][T22091] usb 5-1: Using ep0 maxpacket: 8 [ 1531.235402][T22091] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1531.257898][T22091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1531.278953][T22091] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1531.288444][T22091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.296551][T22091] usb 5-1: Product: syz [ 1531.303051][T22091] usb 5-1: Manufacturer: syz [ 1531.317767][T22091] usb 5-1: SerialNumber: syz [ 1531.338648][T22091] usb 5-1: config 0 descriptor?? [ 1531.375572][T22091] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1531.466891][T29649] xt_hashlimit: size too large, truncated to 1048576 [ 1531.581516][T22091] usb 5-1: USB disconnect, device number 88 [ 1531.866903][T22082] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1531.912270][T22080] usb 4-1: USB disconnect, device number 12 [ 1531.951547][T29658] binder: 29657:29658 ioctl c00c6211 9999999999999999 returned -14 [ 1531.960234][ T6520] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1531.998832][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.016972][T22082] usb 3-1: Using ep0 maxpacket: 16 [ 1532.029772][T22082] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1532.040534][T22082] usb 3-1: config 7 has an invalid interface number: 118 but max is 0 [ 1532.049012][T22082] usb 3-1: config 7 has no interface number 0 [ 1532.055204][T22082] usb 3-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 1532.065708][T22082] usb 3-1: config 7 interface 118 has no altsetting 0 [ 1532.078684][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.080584][T22082] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=22.09 [ 1532.098175][ T6520] usb 2-1: device descriptor read/64, error -71 [ 1532.105874][T22082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.115367][T22082] usb 3-1: Product: syz [ 1532.121045][T22082] usb 3-1: Manufacturer: syz [ 1532.125847][T22082] usb 3-1: SerialNumber: syz [ 1532.136064][T29652] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1532.336884][ T6520] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1532.370079][T22082] (null): radio-mr800 - initialization failed [ 1532.376525][T22082] radio-mr800 3-1:7.118: probe with driver radio-mr800 failed with error -71 [ 1532.386171][T22082] usbhid 3-1:7.118: couldn't find an input interrupt endpoint [ 1532.397276][T15507] Bluetooth: hci0: command 0x0406 tx timeout [ 1532.415985][T22082] usb 3-1: USB disconnect, device number 31 [ 1532.429494][T22091] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1532.486751][ T6520] usb 2-1: device descriptor read/64, error -71 [ 1532.598987][ T6520] usb usb2-port1: attempt power cycle [ 1532.606742][T22091] usb 4-1: Using ep0 maxpacket: 32 [ 1532.614073][T22091] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1532.622939][T22091] usb 4-1: config 0 has no interface number 0 [ 1532.634116][T22091] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1532.649657][T22091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.659470][T22091] usb 4-1: Product: syz [ 1532.664187][T22091] usb 4-1: Manufacturer: syz [ 1532.671508][T22091] usb 4-1: SerialNumber: syz [ 1532.684012][T22091] usb 4-1: config 0 descriptor?? [ 1532.957010][ T6520] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1532.990547][ T6520] usb 2-1: device descriptor read/8, error -71 [ 1533.038307][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.099082][T22091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1533.134304][T22091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1533.248856][ T6520] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1533.285805][T29681] netlink: 'syz.2.6325': attribute type 1 has an invalid length. [ 1533.308753][ T6520] usb 2-1: device descriptor read/8, error -71 [ 1533.352839][T22091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1533.388863][T22091] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1533.432405][T29681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1533.446966][ T6520] usb usb2-port1: unable to enumerate USB device [ 1534.077012][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.459135][T22089] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1534.598057][T29698] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6327'. [ 1534.628695][T22089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.654778][T22089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.667431][T22089] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1534.695562][T22089] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1534.707677][T22089] usb 3-1: Manufacturer: syz [ 1534.716069][T22089] usb 3-1: config 0 descriptor?? [ 1535.117110][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.125927][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.286407][T29716] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1535.286407][T29716] The task syz.7.6331 (29716) triggered the difference, watch for misbehavior. [ 1535.440398][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.549434][T22089] uclogic 0003:256C:006D.0083: interface is invalid, ignoring [ 1535.601212][T22082] usb 4-1: USB disconnect, device number 13 [ 1535.834838][T29726] sctp: [Deprecated]: syz.3.6333 (pid 29726) Use of int in max_burst socket option deprecated. [ 1535.834838][T29726] Use struct sctp_assoc_value instead [ 1535.943339][T29728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1536.158206][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.246091][T29746] fuse: Unknown parameter '\I0xffffffffffffffff' [ 1536.269937][ T6521] usb 3-1: USB disconnect, device number 32 [ 1536.427612][T22082] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1536.599128][T22082] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1536.612194][T22082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1536.621454][T22082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.629929][T22082] usb 5-1: Product: syz [ 1536.634162][T22082] usb 5-1: Manufacturer: syz [ 1536.639250][T22082] usb 5-1: SerialNumber: syz [ 1536.728027][T22091] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1536.792665][T28755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.871994][T29743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.904694][T29743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.928617][T29757] could not allocate digest TFM handle sha384-ssse3 [ 1536.971015][T22091] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1536.996549][T22091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1537.030314][T22091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1537.062802][T22091] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1537.079505][T22091] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1537.088742][T22091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.112652][T22091] usb 2-1: config 0 descriptor?? [ 1537.130478][T28755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.197712][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.264615][T28755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.461708][T28755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.512168][T15507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1537.530604][T22082] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1537.562066][T15507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1537.566373][T22082] cdc_ncm 5-1:1.0: bind() failure [ 1537.578999][T15507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1537.591207][T15507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1537.600256][T15507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1537.622990][T22082] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1537.640995][T22082] cdc_ncm 5-1:1.1: bind() failure [ 1537.669104][T22091] plantronics 0003:047F:FFFF.0084: ignoring exceeding usage max [ 1537.678269][T22082] usb 5-1: USB disconnect, device number 89 [ 1537.722779][T22091] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1537.969887][T28755] bridge_slave_1: left allmulticast mode [ 1537.975741][T28755] bridge_slave_1: left promiscuous mode [ 1537.984076][T28755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.994292][T28755] bridge_slave_0: left allmulticast mode [ 1538.000571][T28755] bridge_slave_0: left promiscuous mode [ 1538.006457][T28755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.016852][T22091] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1538.149251][T22091] usb 4-1: device descriptor read/64, error -71 [ 1538.163582][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.238479][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.290982][T29786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.303726][T29786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.376310][T22082] usb 2-1: USB disconnect, device number 110 [ 1538.407631][T22091] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1538.436151][T28755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.448097][T22092] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1538.475337][T28755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.501470][T28755] bond0 (unregistering): Released all slaves [ 1538.518263][T28755] bond1 (unregistering): Released all slaves [ 1538.546773][T22091] usb 4-1: device descriptor read/64, error -71 [ 1538.609944][T28755] tipc: Left network mode [ 1538.636981][T22092] usb 5-1: Using ep0 maxpacket: 8 [ 1538.670054][T22091] usb usb4-port1: attempt power cycle [ 1538.688842][T22092] usb 5-1: config 5 has an invalid interface number: 52 but max is 1 [ 1538.709436][T22092] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 1538.742142][T22092] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.768574][T22092] usb 5-1: config 5 has no interface number 0 [ 1538.775597][T22092] usb 5-1: config 5 has no interface number 1 [ 1538.800532][T22092] usb 5-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.806431][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1538.838736][T22092] usb 5-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1538.849220][T22092] usb 5-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1538.863731][T22092] usb 5-1: config 5 interface 52 has no altsetting 0 [ 1538.873321][T22092] usb 5-1: config 5 interface 4 has no altsetting 0 [ 1538.883571][T22092] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1538.893115][T22092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.901394][T22092] usb 5-1: Product: syz [ 1538.905589][T22092] usb 5-1: Manufacturer: syz [ 1538.910420][T22092] usb 5-1: SerialNumber: syz [ 1539.078057][T22091] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1539.107497][T22091] usb 4-1: device descriptor read/8, error -71 [ 1539.130764][T29784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.149246][T29784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.190630][T29784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.205549][T29784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.229602][T22092] cytherm 5-1:5.52: Cypress thermometer device now attached [ 1539.246483][T28755] hsr_slave_1: left promiscuous mode [ 1539.253902][T28755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.254462][T22092] cytherm 5-1:5.4: Cypress thermometer device now attached [ 1539.271730][T28755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.272604][T22092] usb 5-1: USB disconnect, device number 90 [ 1539.290148][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.304496][T22092] cytherm 5-1:5.52: Cypress thermometer now disconnected [ 1539.314772][T22092] cytherm 5-1:5.4: Cypress thermometer now disconnected [ 1539.346744][T22091] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1539.364767][T28755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.379068][T22091] usb 4-1: device descriptor read/8, error -71 [ 1539.388084][T28755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.434905][T28755] veth1_macvtap: left promiscuous mode [ 1539.455295][T28755] veth0_macvtap: left promiscuous mode [ 1539.476486][T28755] veth1_vlan: left promiscuous mode [ 1539.490489][T28755] veth0_vlan: left promiscuous mode [ 1539.508741][T22091] usb usb4-port1: unable to enumerate USB device [ 1539.677157][T15507] Bluetooth: hci0: command tx timeout [ 1539.866118][T28755] team0 (unregistering): Port device team_slave_1 removed [ 1539.882950][T28755] team0 (unregistering): Port device team_slave_0 removed [ 1540.022605][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1540.057173][T29771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.074528][T29771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.081927][T22092] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1540.089668][T29771] bridge_slave_0: entered allmulticast mode [ 1540.098447][T29771] bridge_slave_0: entered promiscuous mode [ 1540.108928][T29771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.116091][T29771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.123579][T29771] bridge_slave_1: entered allmulticast mode [ 1540.130940][T29771] bridge_slave_1: entered promiscuous mode [ 1540.166198][T29771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.180749][T29771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.225415][T29771] team0: Port device team_slave_0 added [ 1540.235002][T29771] team0: Port device team_slave_1 added [ 1540.249656][T22092] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1540.266003][T22092] usb 5-1: not running at top speed; connect to a high speed hub [ 1540.285719][T22092] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1540.301171][T29771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.309127][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.317700][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.350730][T29771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.363511][T22092] usb 5-1: New USB device found, idVendor=0582, idProduct=0064, bcdDevice= 0.40 [ 1540.372837][T22092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.381078][T22092] usb 5-1: Product: syz [ 1540.385385][T22092] usb 5-1: Manufacturer: syz [ 1540.392601][T29771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.404909][T22092] usb 5-1: SerialNumber: syz [ 1540.432298][T29771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.477368][T29771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.582651][T29771] hsr_slave_0: entered promiscuous mode [ 1540.589256][T29771] hsr_slave_1: entered promiscuous mode [ 1540.595631][T29771] debugfs: 'hsr0' already exists in 'hsr' [ 1540.601605][T29771] Cannot create hsr debugfs directory [ 1540.679473][T29825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6354'. [ 1540.697912][T22092] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1540.705480][T22092] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1540.795863][T22092] usb 5-1: USB disconnect, device number 91 [ 1540.891948][T27277] udevd[27277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1540.998734][T29845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1541.030625][T29845] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1541.060821][T29845] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1541.168698][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1541.207291][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.357026][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.584039][T29771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1541.660929][T29771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1541.692357][T29771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1541.725610][T29771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1541.757778][T15507] Bluetooth: hci0: command tx timeout [ 1541.769262][T29771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1541.816079][T29771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1541.857665][T29771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1541.903166][T29771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1542.126463][T29856] bond4: entered promiscuous mode [ 1542.148496][T29860] vcan1: entered promiscuous mode [ 1542.155594][T29860] vcan1: entered allmulticast mode [ 1542.164713][T29860] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1542.188414][T29860] bond4: (slave vcan1): Error -95 calling set_mac_address [ 1542.398450][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.428786][ T6520] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1542.550653][T29886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.563063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.598563][T29771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.605148][ T6520] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1542.605197][ T6520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.605216][ T6520] usb 5-1: Product: syz [ 1542.628151][ T6520] usb 5-1: Manufacturer: syz [ 1542.634601][ T6520] usb 5-1: SerialNumber: syz [ 1542.655986][ T6520] usb 5-1: config 0 descriptor?? [ 1542.687615][ T6520] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1542.716021][T29771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.759689][ T6520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1542.796977][T28758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.804132][T28758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.815321][ T6520] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1542.836814][ T6520] usb 5-1: media controller created [ 1542.853052][T29892] netlink: 'syz.7.6363': attribute type 4 has an invalid length. [ 1542.889397][T28758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.896589][T28758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.913762][T29894] netlink: 'syz.7.6363': attribute type 4 has an invalid length. [ 1542.924307][ T6520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1542.952081][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1543.151407][ T6520] DVB: Unable to find symbol mt352_attach() [ 1543.219741][ T6520] DVB: Unable to find symbol nxt6000_attach() [ 1543.250217][ T6520] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1543.290997][ T6520] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input164 [ 1543.317323][T29771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.334763][ T6520] dvb-usb: schedule remote query interval to 1000 msecs. [ 1543.360325][ T6520] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1543.410017][ T6520] dvb-usb: bulk message failed: -22 (7/0) [ 1543.422287][ T6520] dvb-usb: bulk message failed: -22 (7/0) [ 1543.437810][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.534945][T23907] usb 5-1: USB disconnect, device number 92 [ 1543.821632][T23907] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1543.848346][T15507] Bluetooth: hci0: command tx timeout [ 1543.866511][T29911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6365'. [ 1543.995501][T29771] veth0_vlan: entered promiscuous mode [ 1544.052534][T29771] veth1_vlan: entered promiscuous mode [ 1544.126378][T29771] veth0_macvtap: entered promiscuous mode [ 1544.148338][T29771] veth1_macvtap: entered promiscuous mode [ 1544.177109][T29771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.191314][T29771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.205598][T28755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.215681][T28755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.229685][T28755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.240636][T19943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.253037][T28755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.307054][T23907] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1544.421834][T28753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.453492][T28753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.479175][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.487956][T23907] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1544.509138][T23907] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 8 [ 1544.520567][T28756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.532788][T28756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.540269][T23907] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1544.559108][T23907] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1544.590518][T23907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1544.604980][T23907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.614903][T23907] usb 5-1: Product: 쥜얚輣瑯턄駤㳈즹ḃ䅒䠏콼퓇袣﷣᛺ꌧྵ捌鋹ᮢ젧兝ꟿぃ洛ꇙ䏵⡞ꡚᖙ䡲㗖㾋ꙫ뿀롛塲⨘✌뱠珠綛낃햦坜阅쏯艌슟흫쾌庯턃樈캫錜㑗鴠뤺ᜩ헍闋髃価㘨ᤓ࡝֊郞賶艿뾒ꭜ祂沾퉐䨿ⳉ諄㳅蕳丁ዛ [ 1544.644567][T23907] usb 5-1: Manufacturer: Э [ 1544.649607][T23907] usb 5-1: SerialNumber: 싲齹愈쪬侮伈㉬轾滆⥫᝖柃⽣䁉騉뒂욨㥹ᢚ星钘鉏ꏀ顂끭擓⿫牑榸藷㩓칶뮗毒昸蝠䝙媗쨎镃§ႚ鄩䔐﫤뒦⾌ⱎᐓ硗໵ꤹ줰㝁쯯鮽疷弳ꁎ쥅鳌䖐鲁腟양ᖹ⽬꜠캔ꎯ [ 1544.710594][T29915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1544.736205][T29915] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1544.838027][T29926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6347'. [ 1544.851379][T29926] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6347'. [ 1544.864245][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1544.864259][ T30] audit: type=1326 audit(1778415734.407:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.915466][ T30] audit: type=1326 audit(1778415734.447:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.973401][T29915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.986811][ T30] audit: type=1326 audit(1778415734.447:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.986858][ T30] audit: type=1326 audit(1778415734.447:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.986899][ T30] audit: type=1326 audit(1778415734.447:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.986938][ T30] audit: type=1326 audit(1778415734.447:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.986977][ T30] audit: type=1326 audit(1778415734.447:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.987014][ T30] audit: type=1326 audit(1778415734.447:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.987055][ T30] audit: type=1326 audit(1778415734.447:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1544.987093][ T30] audit: type=1326 audit(1778415734.447:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29927 comm="syz.3.6370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x7ffc0000 [ 1545.015660][T29915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.017789][T29915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.018855][T29915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.037773][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.097075][T19943] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1545.100187][T29933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.100648][T29933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.190703][T29909] netlink: 'syz.1.6364': attribute type 1 has an invalid length. [ 1545.190726][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1545.270098][T19943] usb 9-1: device descriptor read/64, error -71 [ 1545.414738][T29933] 8021q: VLANs not supported on ip6tnl0 [ 1545.427104][T23907] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1545.458247][T23907] usb 5-1: USB disconnect, device number 93 [ 1545.506762][T19943] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1545.531022][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.657011][T19943] usb 9-1: device descriptor read/64, error -71 [ 1545.680587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.695852][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.705008][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.715558][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.723962][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.767806][T19943] usb usb9-port1: attempt power cycle [ 1545.800058][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1545.809430][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1545.844514][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1545.854035][T22089] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1545.869490][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1545.916851][T29940] Bluetooth: hci0: command tx timeout [ 1545.991390][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1546.022258][T22089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1546.033942][T22089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1546.059263][T22089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1546.073836][T22089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1546.095040][T22089] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1546.106949][T22089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.115057][T22089] usb 4-1: Product: syz [ 1546.119658][T22089] usb 4-1: Manufacturer: syz [ 1546.124694][T22089] usb 4-1: SerialNumber: syz [ 1546.129993][T19943] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1546.140558][T22089] usb 4-1: config 0 descriptor?? [ 1546.155021][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1546.169245][T19943] usb 9-1: device descriptor read/8, error -71 [ 1546.218523][T29951] binder: 29950:29951 ioctl c0306201 200000000100 returned -22 [ 1546.237072][T29940] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1546.245915][T29940] Bluetooth: hci4: Injecting HCI hardware error event [ 1546.356256][T29939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.366394][T29939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.375079][T29939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.388498][T29939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.401518][T22089] adutux 4-1:0.0: Could not retrieve serial number [ 1546.408670][T19943] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1546.416927][T22089] adutux 4-1:0.0: probe with driver adutux failed with error -5 [ 1546.439601][T19943] usb 9-1: device descriptor read/8, error -71 [ 1546.554355][T19943] usb usb9-port1: unable to enumerate USB device [ 1546.613648][T22082] usb 4-1: USB disconnect, device number 18 [ 1546.987982][T29964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.009894][T29964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.536769][T22082] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1547.666859][T19943] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1547.696688][T22082] usb 4-1: Using ep0 maxpacket: 8 [ 1547.704448][T22082] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1547.715088][T22082] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1547.725426][T22082] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1547.745573][T22082] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.758719][T29940] Bluetooth: hci4: command 0x0406 tx timeout [ 1547.779639][T22082] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1547.789182][T22082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.805216][T15507] Bluetooth: hci4: hardware error 0x00 [ 1547.826712][T22089] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1547.834674][T19943] usb 5-1: device descriptor read/64, error -71 [ 1548.095691][T22082] usb 4-1: GET_CAPABILITIES returned 0 [ 1548.103199][T22082] usbtmc 4-1:16.0: can't read capabilities [ 1548.107661][T19943] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1548.276817][T19943] usb 5-1: device descriptor read/64, error -71 [ 1548.302503][T29971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.308173][T15309] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1548.321780][T29971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.332497][T29971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.341678][T29971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.387061][T19943] usb usb5-port1: attempt power cycle [ 1548.466745][T15309] usb 9-1: Using ep0 maxpacket: 16 [ 1548.474073][T15309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.488016][T15309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.498826][T15309] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1548.512628][T15309] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1548.522078][T15309] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.534072][T15309] usb 9-1: config 0 descriptor?? [ 1548.554683][T29971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.575238][T29971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.594332][T22092] usb 4-1: USB disconnect, device number 19 [ 1548.729112][T19943] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1548.768095][T19943] usb 5-1: device descriptor read/8, error -71 [ 1549.016830][T19943] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1549.039222][T19943] usb 5-1: device descriptor read/8, error -71 [ 1549.147343][T19943] usb usb5-port1: unable to enumerate USB device [ 1549.677890][T22082] net_ratelimit: 8 callbacks suppressed [ 1549.677920][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.713506][T15309] usbhid 9-1:0.0: can't add hid device: -71 [ 1549.737198][T15309] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1549.757703][T15309] usb 9-1: USB disconnect, device number 6 [ 1549.915542][T30000] __nla_validate_parse: 1 callbacks suppressed [ 1549.915561][T30000] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6388'. [ 1549.931539][T15507] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1549.966887][T30000] gretap0: entered promiscuous mode [ 1550.021488][T30000] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6388'. [ 1550.030834][T30000] 0{X: renamed from gretap0 [ 1550.045044][T30000] 0{X: left promiscuous mode [ 1550.051967][T30000] 0{X: entered allmulticast mode [ 1550.060114][T30000] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1550.720582][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.790618][T30011] program syz.8.6390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1550.801398][T15309] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1550.963327][T15309] usb 4-1: config 6 has an invalid interface number: 14 but max is 0 [ 1550.975886][T15309] usb 4-1: config 6 has no interface number 0 [ 1550.989352][T15309] usb 4-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1551.003332][T15309] usb 4-1: config 6 interface 14 has no altsetting 0 [ 1551.012719][T15309] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1551.022410][T15309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.031019][T15309] usb 4-1: Product: syz [ 1551.035282][T15309] usb 4-1: Manufacturer: syz [ 1551.040041][T15309] usb 4-1: SerialNumber: syz [ 1551.056743][T19943] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1551.152469][T30028] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6395'. [ 1551.162676][T30028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6395'. [ 1551.216765][T19943] usb 5-1: Using ep0 maxpacket: 16 [ 1551.218697][T19943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.218727][T19943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.218762][T19943] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1551.218785][T19943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.221413][T19943] usb 5-1: config 0 descriptor?? [ 1551.272995][T15309] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1551.273141][T15309] command write [95] error -8 [ 1551.299682][T30033] netlink: 'syz.7.6396': attribute type 9 has an invalid length. [ 1551.308630][T30031] loop9: detected capacity change from 0 to 2640 [ 1551.309224][T30031] buffer_io_error: 29 callbacks suppressed [ 1551.309239][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309368][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309457][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309567][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309676][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309802][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.309923][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.311922][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.312007][T30031] ldm_validate_partition_table(): Disk read failed. [ 1551.312053][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.312165][T30031] Buffer I/O error on dev loop9, logical block 0, async page read [ 1551.312398][T30031] Dev loop9: unable to read RDB block 0 [ 1551.313144][T30031] loop9: unable to read partition table [ 1551.313680][T15309] usb 4-1: USB disconnect, device number 20 [ 1551.318633][T30031] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1551.653782][T30025] syz.1.6393(30025): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1551.757049][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.768542][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.835320][T19943] usb 5-1: string descriptor 0 read error: -71 [ 1551.893139][T19943] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1551.907767][T19943] letsketch 0003:6161:4D15.0085: probe with driver letsketch failed with error -32 [ 1551.941450][T19943] usb 5-1: USB disconnect, device number 98 [ 1552.530847][T30060] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1552.573543][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1552.607448][T30060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1552.658488][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1552.667516][T30060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1552.789267][T30063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.824848][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.839592][T30063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.867001][T30063] bond0 (unregistering): Released all slaves [ 1553.017125][T19943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1553.176802][T19943] usb 9-1: Using ep0 maxpacket: 16 [ 1553.214910][T19943] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1553.237056][T19943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1553.255266][T19943] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1553.264733][T19943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.273239][T22089] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1553.282459][T19943] usb 9-1: Product: syz [ 1553.289759][T19943] usb 9-1: Manufacturer: syz [ 1553.294517][T19943] usb 9-1: SerialNumber: syz [ 1553.327875][T19943] usb 9-1: config 0 descriptor?? [ 1553.342086][T19943] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input165 [ 1553.361753][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.370222][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.377640][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.385081][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.392598][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.400113][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.407689][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.416737][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.427048][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.434588][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.442178][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.449733][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.460520][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.468037][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.475359][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.482682][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.490022][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.497358][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.504674][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.512014][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.520517][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.529640][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.537001][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.544340][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.551694][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.559132][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.566470][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.574061][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.581443][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.588785][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.596107][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.603818][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.611187][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.620619][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.629100][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.637837][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.646213][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.653537][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.660890][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.668245][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.675600][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.685149][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.692484][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.699804][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.707142][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.715943][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.723323][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.731846][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.739743][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.747152][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.754461][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.761804][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.768429][ T4982] usb 9-1: control msg error: -71 [ 1553.771206][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.781526][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.788855][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.798079][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.805400][ C1] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.812592][ C1] usb 9-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1553.829474][ C0] usb 9-1: pegasus_irq - nonzero urb status received: -71 [ 1553.835679][T19943] usb 9-1: USB disconnect, device number 7 [ 1553.836621][ C0] usb 9-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1553.852539][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.862599][ T4982] usb 9-1: control msg error: -71 [ 1553.871275][T22089] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1553.880460][T22089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.898146][T22089] usb 5-1: Product: syz [ 1553.921382][T22089] usb 5-1: Manufacturer: syz [ 1553.950122][T22089] usb 5-1: SerialNumber: syz [ 1553.988979][T22089] usb 5-1: config 0 descriptor?? [ 1554.018021][T22089] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 099 [ 1554.413451][T22089] (null): failure reading functionality [ 1554.450124][T22089] i2c i2c-4: connected i2c-tiny-usb device [ 1554.494076][T30098] fuse: Bad value for 'fd' [ 1554.587097][T22082] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1554.692726][T30092] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6412'. [ 1554.746747][T22082] usb 4-1: device descriptor read/64, error -71 [ 1554.797001][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.876987][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.986771][T22082] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1555.156733][T22082] usb 4-1: device descriptor read/64, error -71 [ 1555.287228][T22082] usb usb4-port1: attempt power cycle [ 1555.294541][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.636793][T22082] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1555.686894][T22082] usb 4-1: device descriptor read/8, error -71 [ 1555.937683][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.950293][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.960069][T22082] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1555.982161][T28756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.995183][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.007306][T22082] usb 4-1: device descriptor read/8, error -71 [ 1556.058812][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.107260][T15309] usb 5-1: USB disconnect, device number 99 [ 1556.117068][T22082] usb usb4-port1: unable to enumerate USB device [ 1556.539488][T30138] syzkaller0: entered promiscuous mode [ 1556.551175][T30138] syzkaller0: entered allmulticast mode [ 1556.958677][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.326716][T15309] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1557.349688][T22080] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1557.472240][T15309] usb 9-1: device descriptor read/64, error -71 [ 1557.518751][T22080] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1557.529103][T22080] usb 5-1: not running at top speed; connect to a high speed hub [ 1557.541794][T22080] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.552597][T22080] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.565630][T22080] usb 5-1: string descriptor 0 read error: -22 [ 1557.572185][T22080] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1557.582745][T22080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.605618][T22080] usb 5-1: 0:2 : does not exist [ 1557.726772][T15309] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1557.746794][T22089] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1557.856727][T15309] usb 9-1: device descriptor read/64, error -71 [ 1557.896802][T22089] usb 4-1: Using ep0 maxpacket: 16 [ 1557.903589][T22089] usb 4-1: config 1 has an invalid interface number: 193 but max is 0 [ 1557.913892][T22089] usb 4-1: config 1 has no interface number 0 [ 1557.920329][T22089] usb 4-1: config 1 interface 193 has no altsetting 0 [ 1557.934114][T22089] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 1557.943586][T22089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.951675][T22089] usb 4-1: Product: syz [ 1557.955871][T22089] usb 4-1: Manufacturer: syz [ 1557.960754][T22089] usb 4-1: SerialNumber: syz [ 1557.977126][T15309] usb usb9-port1: attempt power cycle [ 1557.997268][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.241681][T30151] pim6reg: entered allmulticast mode [ 1558.271413][T30151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.294599][T30151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.319821][T22080] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1558.327528][T15309] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1558.340813][T22080] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1558.349280][T15309] usb 9-1: device descriptor read/8, error -71 [ 1558.360641][T22080] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1558.401454][T22080] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1558.454848][T22080] usb 5-1: USB disconnect, device number 100 [ 1558.586758][T15309] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1558.607791][T15309] usb 9-1: device descriptor read/8, error -71 [ 1558.647392][T22089] usb 4-1: USB disconnect, device number 25 [ 1558.718919][T15309] usb usb9-port1: unable to enumerate USB device [ 1559.285252][T30189] netlink: 'syz.3.6426': attribute type 1 has an invalid length. [ 1559.319046][T30189] bond4: entered promiscuous mode [ 1559.324745][T30189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1559.410117][T30193] bond4: (slave bridge3): making interface the new active one [ 1559.431061][T30193] bridge3: entered promiscuous mode [ 1559.447768][T30193] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1560.078678][T15309] net_ratelimit: 2 callbacks suppressed [ 1560.078698][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.578576][T22089] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1560.759215][T22089] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1560.773792][T22089] usb 9-1: not running at top speed; connect to a high speed hub [ 1560.790735][T22089] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.808343][T22089] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1560.830006][T22089] usb 9-1: string descriptor 0 read error: -22 [ 1560.844567][T22089] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1560.870264][T22089] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.896840][T22080] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1560.909579][T22089] usb 9-1: 0:2 : does not exist [ 1560.943449][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1560.943465][ T30] audit: type=1326 audit(1778415750.487:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.3.6431" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdae9d9cdd9 code=0x40000 [ 1561.066726][T22080] usb 5-1: Using ep0 maxpacket: 16 [ 1561.073702][T22080] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1561.100974][T22080] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1561.111616][T22080] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1561.120906][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.132549][T22080] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 1561.141994][T22080] usb 5-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 1561.150306][T22080] usb 5-1: Manufacturer: syz [ 1561.155029][T22080] usb 5-1: SerialNumber: syz [ 1561.162625][T22080] usb 5-1: config 0 descriptor?? [ 1561.677228][T28753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.687816][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.698284][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.156978][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.754598][T30211] loop6: detected capacity change from 0 to 2640 [ 1562.764957][T30211] buffer_io_error: 336 callbacks suppressed [ 1562.764972][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.780634][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.788915][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.802545][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.812998][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.830318][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.842417][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.851371][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.865454][T30211] ldm_validate_partition_table(): Disk read failed. [ 1562.873348][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.886582][T30211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1562.896379][T30211] Dev loop6: unable to read RDB block 0 [ 1562.902666][T30211] loop6: unable to read partition table [ 1562.908915][T30211] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1563.198497][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.340761][T30225] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6435'. [ 1564.240499][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.717128][T19943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.877299][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.184948][ T30] audit: type=1326 audit(1778415754.727:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30238 comm="syz.4.6439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8df9cdd9 code=0x0 [ 1565.277152][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.748370][T15309] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1565.896795][T15309] usb 4-1: Invalid ep0 maxpacket: 32 [ 1566.026848][T15309] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1566.176686][T15309] usb 4-1: Invalid ep0 maxpacket: 32 [ 1566.177110][T15309] usb usb4-port1: attempt power cycle [ 1566.320965][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.536827][T15309] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1566.567674][T15309] usb 4-1: Invalid ep0 maxpacket: 32 [ 1566.696766][T15309] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1566.717490][T15309] usb 4-1: Invalid ep0 maxpacket: 32 [ 1566.723443][T15309] usb usb4-port1: unable to enumerate USB device [ 1567.207812][T30268] syzkaller0: entered promiscuous mode [ 1567.213325][T30268] syzkaller0: entered allmulticast mode [ 1567.278038][T22089] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1567.290510][T22089] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 1567.323890][T22089] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1567.359075][T22080] usb 5-1: 0:2 : does not exist [ 1567.366371][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.385147][T22080] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1567.398370][T22089] usb 9-1: USB disconnect, device number 12 [ 1567.415512][T22080] usb 5-1: 5:0: failed to get current value for ch 2 (-22) [ 1567.437858][T28758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.450804][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.463126][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.473164][T22080] usb 5-1: 5:0: failed to get current value for ch 3 (-22) [ 1567.493723][ T30] audit: type=1326 audit(1778415757.037:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30271 comm="syz.8.6447" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe0c79cdd9 code=0x0 [ 1567.519913][T22080] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1567.532174][T22080] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1567.549524][T22080] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1567.573709][T22080] usb 5-1: USB disconnect, device number 101 [ 1567.622553][T30273] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6447'. [ 1567.632753][T30273] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6447'. [ 1567.642489][T27277] udevd[27277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1567.976781][T22080] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1567.996779][T23907] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1568.136798][T22080] usb 5-1: Using ep0 maxpacket: 8 [ 1568.148022][T22080] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1568.148400][T23907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1568.157394][T22080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.179183][T23907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1568.179823][T22080] usb 5-1: Product: syz [ 1568.190078][T23907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1568.197526][T22080] usb 5-1: Manufacturer: syz [ 1568.211860][T23907] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1568.212636][T22080] usb 5-1: SerialNumber: syz [ 1568.221039][T23907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.236345][T22080] usb 5-1: config 0 descriptor?? [ 1568.239284][T23907] usb 2-1: config 0 descriptor?? [ 1568.250921][T30278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1568.259587][T22080] gspca_main: 2770:9120 too many config [ 1568.400142][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.411587][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.431417][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.443096][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.459234][T30281] 0{X: left allmulticast mode [ 1568.504745][T22089] usb 5-1: USB disconnect, device number 102 [ 1568.521679][T30283] fuse: Bad value for 'fd' [ 1568.693520][T30290] ipvlan2: entered promiscuous mode [ 1568.699420][T30290] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1568.712670][T30290] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1568.723601][T30290] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1568.829116][T30296] tipc: Started in network mode [ 1568.834110][T30296] tipc: Node identity 8ed7edc16436, cluster identity 4711 [ 1568.842229][T30296] tipc: Enabled bearer , priority 0 [ 1568.851232][T30296] syzkaller0: entered promiscuous mode [ 1568.856991][T30296] syzkaller0: entered allmulticast mode [ 1568.890210][T30296] tipc: Resetting bearer [ 1568.901244][T30295] tipc: Resetting bearer [ 1568.929525][T30295] tipc: Disabling bearer [ 1568.961986][T23907] uclogic 0003:5543:0004.0086: ignoring exceeding usage max [ 1568.972061][T23907] hid_parser_main: 22 callbacks suppressed [ 1568.972076][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1568.986884][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.001007][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.013809][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.025395][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.033035][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.040505][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.048529][T23907] uclogic 0003:5543:0004.0086: unknown main item tag 0x0 [ 1569.070727][T23907] uclogic 0003:5543:0004.0086: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 1569.452281][T30313] netlink: 'syz.4.6459': attribute type 1 has an invalid length. [ 1569.616944][T15309] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1569.691235][T30315] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1569.780949][T15309] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.795308][T15309] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1569.805131][T15309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.813455][T15309] usb 9-1: Product: syz [ 1569.818498][T15309] usb 9-1: Manufacturer: syz [ 1569.823234][T15309] usb 9-1: SerialNumber: syz [ 1569.837308][T15309] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1570.074958][T15309] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1570.104419][T15309] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1570.117405][T15309] usb 9-1: media controller created [ 1570.125570][T30324] netlink: 'syz.8.6461': attribute type 1 has an invalid length. [ 1570.135115][T30325] netlink: 'syz.8.6461': attribute type 1 has an invalid length. [ 1570.149493][T15309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1570.159847][T30324] 8021q: VLANs not supported on ipvlan0 [ 1570.169430][T30325] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6461'. [ 1570.171141][T30326] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6461'. [ 1570.377153][T15309] usb 9-1: USB disconnect, device number 13 [ 1570.556915][T22080] net_ratelimit: 6 callbacks suppressed [ 1570.556930][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.570713][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.876834][T15309] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1570.902256][T30338] syzkaller0: entered promiscuous mode [ 1570.908300][T30338] syzkaller0: entered allmulticast mode [ 1570.952884][T22092] usb 2-1: USB disconnect, device number 112 [ 1571.046719][T15309] usb 9-1: Invalid ep0 maxpacket: 32 [ 1571.139454][T22080] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1571.195221][T30360] IPVS: set_ctl: invalid protocol: 43 172.20.20.192:20001 [ 1571.203594][T15309] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1571.265488][T30364] loop5: detected capacity change from 0 to 7 [ 1571.292015][T30364] Dev loop5: unable to read RDB block 7 [ 1571.298271][T30364] loop5: unable to read partition table [ 1571.304070][T30364] loop5: partition table beyond EOD, truncated [ 1571.310560][T22080] usb 4-1: Using ep0 maxpacket: 32 [ 1571.318433][T30364] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1571.346284][T30364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6471'. [ 1571.351761][T22080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.370181][T22080] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.381450][T22080] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.391581][T15309] usb 9-1: Invalid ep0 maxpacket: 32 [ 1571.398123][T15309] usb usb9-port1: attempt power cycle [ 1571.404712][T22080] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1571.419514][T22080] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1571.426176][T22080] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1571.437494][T22080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.449555][T22080] usb 4-1: config 0 descriptor?? [ 1571.599882][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.749152][T15309] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1571.789185][T15309] usb 9-1: Invalid ep0 maxpacket: 32 [ 1571.869796][T30351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.881599][T30351] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1571.899367][T22080] hid-thrustmaster 0003:044F:B65D.0087: unbalanced collection at end of report description [ 1571.911134][T22080] hid-thrustmaster 0003:044F:B65D.0087: parse failed with error -22 [ 1571.920755][T22080] hid-thrustmaster 0003:044F:B65D.0087: probe with driver hid-thrustmaster failed with error -22 [ 1571.936829][T15309] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1571.957314][T15309] usb 9-1: Invalid ep0 maxpacket: 32 [ 1571.963025][T15309] usb usb9-port1: unable to enumerate USB device [ 1572.030106][T22089] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1572.108136][T22092] usb 4-1: USB disconnect, device number 30 [ 1572.186878][T22089] usb 5-1: Using ep0 maxpacket: 32 [ 1572.193843][T22089] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1572.202689][T22089] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1572.211731][T22089] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1572.220893][T22089] usb 5-1: config 1 has no interface number 0 [ 1572.227209][T22089] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1572.237207][T22089] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1572.251127][T22089] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1572.261569][T22089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.278517][T22089] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1572.481293][T22089] snd_usb_pod 5-1:1.1: invalid control EP [ 1572.488068][T22089] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1572.494956][T22089] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1572.503024][T22089] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1572.531618][T30378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1572.639262][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.671272][T30383] blktrace: Concurrent blktraces are not allowed on loop4 [ 1572.691285][T23907] usb 5-1: USB disconnect, device number 103 [ 1573.199330][T28758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.210363][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.228654][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.305901][T30407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1573.433942][T23907] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1573.605305][T23907] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.661657][T23907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1573.677502][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.703723][T23907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1573.748725][T23907] usb 4-1: Product: syz [ 1573.772165][T23907] usb 4-1: Manufacturer: syz [ 1573.794945][T23907] usb 4-1: SerialNumber: syz [ 1574.082067][T23907] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1574.453997][T30405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.477590][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.490336][T30405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.518293][ C1] usblp0: nonzero write bulk status received: -71 [ 1574.527665][T23907] usb 4-1: USB disconnect, device number 31 [ 1574.543441][T23907] usblp0: removed [ 1574.692641][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6489'. [ 1574.874181][T30440] [ 1574.876641][T30440] ===================================================== [ 1574.883588][T30440] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1574.891076][T30440] syzkaller #0 Tainted: G L [ 1574.897065][T30440] ----------------------------------------------------- [ 1574.903996][T30440] syz.4.6492/30440 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1574.911717][T30440] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1574.920440][T30440] [ 1574.920440][T30440] and this task is already holding: [ 1574.927819][T30440] ffff88807e20ee20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1574.936545][T30440] which would create a new lock dependency: [ 1574.942444][T30440] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1574.950047][T30440] [ 1574.950047][T30440] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1574.959498][T30440] (&client->buffer_lock){..-.}-{3:3} [ 1574.959521][T30440] [ 1574.959521][T30440] ... which became SOFTIRQ-irq-safe at: [ 1574.972596][T30440] lock_acquire+0x106/0x350 [ 1574.977202][T30440] _raw_spin_lock+0x2e/0x40 [ 1574.981809][T30440] evdev_pass_values+0xb9/0xbd0 [ 1574.986759][T30440] evdev_events+0x1e6/0x340 [ 1574.991362][T30440] input_pass_values+0x288/0x890 [ 1574.996401][T30440] input_event_dispose+0x330/0x6b0 [ 1575.001632][T30440] input_event+0x84/0xc0 [ 1575.005986][T30440] xpad360_process_packet+0x641/0xdc0 [ 1575.011455][T30440] xpad_irq_in+0x14e/0x25c0 [ 1575.016052][T30440] __usb_hcd_giveback_urb+0x376/0x540 [ 1575.021528][T30440] dummy_timer+0xbc0/0x4650 [ 1575.026131][T30440] __hrtimer_run_queues+0x3c0/0xa20 [ 1575.031426][T30440] hrtimer_run_softirq+0x17a/0x240 [ 1575.036647][T30440] handle_softirqs+0x22a/0x840 [ 1575.041508][T30440] __irq_exit_rcu+0xca/0x220 [ 1575.046202][T30440] irq_exit_rcu+0x9/0x30 [ 1575.050548][T30440] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1575.056282][T30440] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1575.062364][T30440] lock_acquire+0x221/0x350 [ 1575.066967][T30440] __might_fault+0xcb/0x130 [ 1575.071563][T30440] _copy_from_user+0x28/0xb0 [ 1575.076246][T30440] ___sys_recvmsg+0x175/0x590 [ 1575.081054][T30440] do_recvmmsg+0x334/0x800 [ 1575.085576][T30440] __x64_sys_recvmmsg+0x198/0x250 [ 1575.090695][T30440] do_syscall_64+0x15f/0xf80 [ 1575.095432][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.101427][T30440] [ 1575.101427][T30440] to a SOFTIRQ-irq-unsafe lock: [ 1575.108441][T30440] (tasklist_lock){.+.+}-{3:3} [ 1575.108464][T30440] [ 1575.108464][T30440] ... which became SOFTIRQ-irq-unsafe at: [ 1575.121123][T30440] ... [ 1575.121133][T30440] lock_acquire+0x106/0x350 [ 1575.128328][T30440] _raw_read_lock+0x36/0x50 [ 1575.132928][T30440] __do_wait+0xde/0x740 [ 1575.137184][T30440] do_wait+0x1e7/0x510 [ 1575.141356][T30440] kernel_wait+0xd6/0x1c0 [ 1575.145789][T30440] call_usermodehelper_exec_work+0xbe/0x230 [ 1575.151773][T30440] process_scheduled_works+0xb5d/0x1860 [ 1575.157414][T30440] worker_thread+0xa53/0xfc0 [ 1575.162124][T30440] kthread+0x388/0x470 [ 1575.166285][T30440] ret_from_fork+0x514/0xb70 [ 1575.170965][T30440] ret_from_fork_asm+0x1a/0x30 [ 1575.175823][T30440] [ 1575.175823][T30440] other info that might help us debug this: [ 1575.175823][T30440] [ 1575.186058][T30440] Chain exists of: [ 1575.186058][T30440] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1575.186058][T30440] [ 1575.199297][T30440] Possible interrupt unsafe locking scenario: [ 1575.199297][T30440] [ 1575.207620][T30440] CPU0 CPU1 [ 1575.212987][T30440] ---- ---- [ 1575.218355][T30440] lock(tasklist_lock); [ 1575.222607][T30440] local_irq_disable(); [ 1575.229361][T30440] lock(&client->buffer_lock); [ 1575.236763][T30440] lock(&f_owner->lock); [ 1575.243625][T30440] [ 1575.247091][T30440] lock(&client->buffer_lock); [ 1575.252123][T30440] [ 1575.252123][T30440] *** DEADLOCK *** [ 1575.252123][T30440] [ 1575.260285][T30440] 2 locks held by syz.4.6492/30440: [ 1575.265479][T30440] #0: ffff888030fb3150 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1575.274028][T30440] #1: ffff88807e20ee20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1575.283195][T30440] [ 1575.283195][T30440] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1575.293613][T30440] -> (&client->buffer_lock){..-.}-{3:3} { [ 1575.299553][T30440] IN-SOFTIRQ-W at: [ 1575.303714][T30440] lock_acquire+0x106/0x350 [ 1575.310222][T30440] _raw_spin_lock+0x2e/0x40 [ 1575.316738][T30440] evdev_pass_values+0xb9/0xbd0 [ 1575.323607][T30440] evdev_events+0x1e6/0x340 [ 1575.330134][T30440] input_pass_values+0x288/0x890 [ 1575.337114][T30440] input_event_dispose+0x330/0x6b0 [ 1575.344260][T30440] input_event+0x84/0xc0 [ 1575.350519][T30440] xpad360_process_packet+0x641/0xdc0 [ 1575.357915][T30440] xpad_irq_in+0x14e/0x25c0 [ 1575.364419][T30440] __usb_hcd_giveback_urb+0x376/0x540 [ 1575.371816][T30440] dummy_timer+0xbc0/0x4650 [ 1575.378344][T30440] __hrtimer_run_queues+0x3c0/0xa20 [ 1575.385567][T30440] hrtimer_run_softirq+0x17a/0x240 [ 1575.392682][T30440] handle_softirqs+0x22a/0x840 [ 1575.399446][T30440] __irq_exit_rcu+0xca/0x220 [ 1575.406057][T30440] irq_exit_rcu+0x9/0x30 [ 1575.412307][T30440] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1575.419952][T30440] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1575.427959][T30440] lock_acquire+0x221/0x350 [ 1575.434464][T30440] __might_fault+0xcb/0x130 [ 1575.440977][T30440] _copy_from_user+0x28/0xb0 [ 1575.447604][T30440] ___sys_recvmsg+0x175/0x590 [ 1575.454295][T30440] do_recvmmsg+0x334/0x800 [ 1575.460737][T30440] __x64_sys_recvmmsg+0x198/0x250 [ 1575.467782][T30440] do_syscall_64+0x15f/0xf80 [ 1575.474387][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.482285][T30440] INITIAL USE at: [ 1575.486369][T30440] lock_acquire+0x106/0x350 [ 1575.492808][T30440] _raw_spin_lock+0x2e/0x40 [ 1575.499234][T30440] evdev_handle_get_val+0x70/0x9f0 [ 1575.506264][T30440] evdev_ioctl_handler+0x127b/0x1fe0 [ 1575.513481][T30440] __se_sys_ioctl+0xfc/0x170 [ 1575.520008][T30440] do_syscall_64+0x15f/0xf80 [ 1575.526541][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.534348][T30440] } [ 1575.537030][T30440] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1575.545422][T30440] -> (&new->fa_lock){...-}-{3:3} { [ 1575.550638][T30440] IN-SOFTIRQ-R at: [ 1575.554710][T30440] lock_acquire+0x106/0x350 [ 1575.561045][T30440] _raw_read_lock_irqsave+0x48/0x60 [ 1575.568082][T30440] kill_fasync+0x199/0x4d0 [ 1575.574330][T30440] sock_wake_async+0x137/0x160 [ 1575.580958][T30440] sock_def_readable+0x3c1/0x550 [ 1575.587760][T30440] packet_rcv+0x11e4/0x1730 [ 1575.594093][T30440] __netif_receive_skb_core+0x2797/0x3170 [ 1575.601636][T30440] process_backlog+0x76d/0x1950 [ 1575.608319][T30440] __napi_poll+0xae/0x340 [ 1575.614479][T30440] net_rx_action+0x627/0xf70 [ 1575.620897][T30440] handle_softirqs+0x22a/0x840 [ 1575.627508][T30440] do_softirq+0x76/0xd0 [ 1575.633501][T30440] __local_bh_enable_ip+0xf8/0x130 [ 1575.640467][T30440] __dev_queue_xmit+0x1fe5/0x3950 [ 1575.647335][T30440] ip_finish_output2+0xc68/0x1070 [ 1575.654189][T30440] ip_output+0x29f/0x450 [ 1575.660276][T30440] __ip_queue_xmit+0x116a/0x1bb0 [ 1575.667066][T30440] __tcp_transmit_skb+0x2d76/0x4790 [ 1575.674116][T30440] tcp_connect+0x34a5/0x53a0 [ 1575.680549][T30440] tcp_v4_connect+0x10f7/0x19b0 [ 1575.687238][T30440] __inet_stream_connect+0x25a/0xdd0 [ 1575.694363][T30440] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1575.701397][T30440] tcp_sendmsg_locked+0x4a88/0x5360 [ 1575.708427][T30440] tcp_sendmsg+0x2f/0x50 [ 1575.714496][T30440] ____sys_sendmsg+0x80a/0x9f0 [ 1575.721095][T30440] ___sys_sendmsg+0x2a5/0x360 [ 1575.727637][T30440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1575.734439][T30440] do_syscall_64+0x15f/0xf80 [ 1575.740876][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.748612][T30440] INITIAL USE at: [ 1575.752602][T30440] lock_acquire+0x106/0x350 [ 1575.758852][T30440] _raw_write_lock_irq+0x3d/0x50 [ 1575.765543][T30440] fasync_remove_entry+0xf1/0x1c0 [ 1575.772316][T30440] lease_modify+0x4f7/0x6c0 [ 1575.778566][T30440] locks_remove_file+0x5f0/0xf70 [ 1575.785277][T30440] __fput+0x3ae/0xa60 [ 1575.791030][T30440] task_work_run+0x1d9/0x270 [ 1575.797366][T30440] exit_to_user_mode_loop+0xf3/0x4d0 [ 1575.804416][T30440] do_syscall_64+0x33e/0xf80 [ 1575.810756][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.818399][T30440] INITIAL READ USE at: [ 1575.822830][T30440] lock_acquire+0x106/0x350 [ 1575.829519][T30440] _raw_read_lock_irqsave+0x48/0x60 [ 1575.836899][T30440] kill_fasync+0x199/0x4d0 [ 1575.843494][T30440] lease_break_callback+0x26/0x30 [ 1575.850717][T30440] __break_lease+0x81f/0x1ea0 [ 1575.857570][T30440] try_break_deleg+0xfc/0x180 [ 1575.864436][T30440] notify_change+0xb5a/0xf40 [ 1575.871198][T30440] chown_common+0x466/0x6b0 [ 1575.877880][T30440] do_fchownat+0x14c/0x250 [ 1575.884477][T30440] __x64_sys_fchownat+0xb5/0xd0 [ 1575.891504][T30440] do_syscall_64+0x15f/0xf80 [ 1575.898273][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.906356][T30440] } [ 1575.908941][T30440] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1575.917756][T30440] ... acquired at: [ 1575.921666][T30440] _raw_read_lock_irqsave+0x48/0x60 [ 1575.927055][T30440] kill_fasync+0x199/0x4d0 [ 1575.931659][T30440] evdev_pass_values+0x627/0xbd0 [ 1575.936783][T30440] evdev_events+0x1e6/0x340 [ 1575.941492][T30440] input_pass_values+0x288/0x890 [ 1575.946641][T30440] input_event_dispose+0x330/0x6b0 [ 1575.951944][T30440] input_inject_event+0x1dc/0x330 [ 1575.957184][T30440] evdev_write+0x325/0x4c0 [ 1575.961788][T30440] vfs_write+0x29a/0xb90 [ 1575.966220][T30440] ksys_write+0x150/0x270 [ 1575.970739][T30440] do_syscall_64+0x15f/0xf80 [ 1575.975518][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.981616][T30440] [ 1575.983957][T30440] -> (&f_owner->lock){....}-{3:3} { [ 1575.989209][T30440] INITIAL USE at: [ 1575.993109][T30440] lock_acquire+0x106/0x350 [ 1575.999185][T30440] _raw_write_lock_irq+0x3d/0x50 [ 1576.005700][T30440] __f_setown+0x67/0x370 [ 1576.011528][T30440] generic_setlease+0xacf/0xfd0 [ 1576.017952][T30440] do_fcntl_add_lease+0x35e/0x470 [ 1576.024557][T30440] fcntl_setdeleg+0x14c/0x1e0 [ 1576.030829][T30440] do_fcntl+0xe6d/0x1a20 [ 1576.036650][T30440] __se_sys_fcntl+0xc8/0x150 [ 1576.042810][T30440] do_syscall_64+0x15f/0xf80 [ 1576.048976][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.056440][T30440] INITIAL READ USE at: [ 1576.060774][T30440] lock_acquire+0x106/0x350 [ 1576.067294][T30440] _raw_read_lock_irqsave+0x48/0x60 [ 1576.074513][T30440] send_sigio+0x38/0x370 [ 1576.080765][T30440] kill_fasync+0x24d/0x4d0 [ 1576.087195][T30440] lease_break_callback+0x26/0x30 [ 1576.094226][T30440] __break_lease+0x81f/0x1ea0 [ 1576.100907][T30440] try_break_deleg+0xfc/0x180 [ 1576.107583][T30440] notify_change+0xb5a/0xf40 [ 1576.114167][T30440] chown_common+0x466/0x6b0 [ 1576.120669][T30440] do_fchownat+0x14c/0x250 [ 1576.127113][T30440] __x64_sys_fchownat+0xb5/0xd0 [ 1576.133963][T30440] do_syscall_64+0x15f/0xf80 [ 1576.140578][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.148499][T30440] } [ 1576.151002][T30440] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1576.159861][T30440] ... acquired at: [ 1576.163690][T30440] _raw_read_lock_irqsave+0x48/0x60 [ 1576.169073][T30440] send_sigio+0x38/0x370 [ 1576.173515][T30440] kill_fasync+0x24d/0x4d0 [ 1576.178116][T30440] lease_break_callback+0x26/0x30 [ 1576.183326][T30440] __break_lease+0x81f/0x1ea0 [ 1576.188190][T30440] try_break_deleg+0xfc/0x180 [ 1576.193040][T30440] notify_change+0xb5a/0xf40 [ 1576.197817][T30440] chown_common+0x466/0x6b0 [ 1576.202495][T30440] do_fchownat+0x14c/0x250 [ 1576.207087][T30440] __x64_sys_fchownat+0xb5/0xd0 [ 1576.212111][T30440] do_syscall_64+0x15f/0xf80 [ 1576.216885][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.222973][T30440] [ 1576.225306][T30440] [ 1576.225306][T30440] the dependencies between the lock to be acquired [ 1576.225314][T30440] and SOFTIRQ-irq-unsafe lock: [ 1576.238847][T30440] -> (tasklist_lock){.+.+}-{3:3} { [ 1576.243993][T30440] HARDIRQ-ON-R at: [ 1576.247975][T30440] lock_acquire+0x106/0x350 [ 1576.254136][T30440] _raw_read_lock+0x36/0x50 [ 1576.260303][T30440] __do_wait+0xde/0x740 [ 1576.266134][T30440] do_wait+0x1e7/0x510 [ 1576.271860][T30440] kernel_wait+0xd6/0x1c0 [ 1576.277853][T30440] call_usermodehelper_exec_work+0xbe/0x230 [ 1576.285398][T30440] process_scheduled_works+0xb5d/0x1860 [ 1576.292602][T30440] worker_thread+0xa53/0xfc0 [ 1576.298843][T30440] kthread+0x388/0x470 [ 1576.304565][T30440] ret_from_fork+0x514/0xb70 [ 1576.310806][T30440] ret_from_fork_asm+0x1a/0x30 [ 1576.317220][T30440] SOFTIRQ-ON-R at: [ 1576.321237][T30440] lock_acquire+0x106/0x350 [ 1576.327407][T30440] _raw_read_lock+0x36/0x50 [ 1576.333582][T30440] __do_wait+0xde/0x740 [ 1576.339401][T30440] do_wait+0x1e7/0x510 [ 1576.345148][T30440] kernel_wait+0xd6/0x1c0 [ 1576.351139][T30440] call_usermodehelper_exec_work+0xbe/0x230 [ 1576.358684][T30440] process_scheduled_works+0xb5d/0x1860 [ 1576.365886][T30440] worker_thread+0xa53/0xfc0 [ 1576.372125][T30440] kthread+0x388/0x470 [ 1576.377868][T30440] ret_from_fork+0x514/0xb70 [ 1576.384125][T30440] ret_from_fork_asm+0x1a/0x30 [ 1576.390546][T30440] INITIAL USE at: [ 1576.394460][T30440] lock_acquire+0x106/0x350 [ 1576.400535][T30440] _raw_write_lock_irq+0x3d/0x50 [ 1576.407041][T30440] copy_process+0x2b4c/0x4440 [ 1576.413284][T30440] kernel_clone+0x284/0x8f0 [ 1576.419355][T30440] user_mode_thread+0x110/0x180 [ 1576.425778][T30440] rest_init+0x23/0x300 [ 1576.431514][T30440] start_kernel+0x38a/0x3e0 [ 1576.437636][T30440] x86_64_start_reservations+0x24/0x30 [ 1576.444673][T30440] x86_64_start_kernel+0x143/0x1c0 [ 1576.451370][T30440] common_startup_64+0x13e/0x147 [ 1576.457878][T30440] INITIAL READ USE at: [ 1576.462207][T30440] lock_acquire+0x106/0x350 [ 1576.468723][T30440] _raw_read_lock+0x36/0x50 [ 1576.475234][T30440] __do_wait+0xde/0x740 [ 1576.481416][T30440] do_wait+0x1e7/0x510 [ 1576.487488][T30440] kernel_wait+0xd6/0x1c0 [ 1576.493819][T30440] call_usermodehelper_exec_work+0xbe/0x230 [ 1576.501715][T30440] process_scheduled_works+0xb5d/0x1860 [ 1576.509262][T30440] worker_thread+0xa53/0xfc0 [ 1576.515854][T30440] kthread+0x388/0x470 [ 1576.521967][T30440] ret_from_fork+0x514/0xb70 [ 1576.528574][T30440] ret_from_fork_asm+0x1a/0x30 [ 1576.535355][T30440] } [ 1576.537861][T30440] ... key at: [] tasklist_lock+0x18/0x40 [ 1576.545671][T30440] ... acquired at: [ 1576.549473][T30440] _raw_read_lock+0x36/0x50 [ 1576.554162][T30440] send_sigurg+0x12b/0x420 [ 1576.558792][T30440] sk_send_sigurg+0x6c/0x2e0 [ 1576.563567][T30440] queue_oob+0x42c/0x4f0 [ 1576.568005][T30440] unix_stream_sendmsg+0xcb1/0xe80 [ 1576.573300][T30440] ____sys_sendmsg+0x972/0x9f0 [ 1576.578251][T30440] ___sys_sendmsg+0x2a5/0x360 [ 1576.583113][T30440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1576.588240][T30440] do_syscall_64+0x15f/0xf80 [ 1576.593024][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.599100][T30440] [ 1576.601441][T30440] [ 1576.601441][T30440] stack backtrace: [ 1576.607341][T30440] CPU: 1 UID: 0 PID: 30440 Comm: syz.4.6492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.607362][T30440] Tainted: [L]=SOFTLOCKUP [ 1576.607368][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1576.607378][T30440] Call Trace: [ 1576.607384][T30440] [ 1576.607390][T30440] dump_stack_lvl+0xe8/0x150 [ 1576.607407][T30440] __lock_acquire+0x2a94/0x2cf0 [ 1576.607432][T30440] ? send_sigurg+0x12b/0x420 [ 1576.607452][T30440] lock_acquire+0x106/0x350 [ 1576.607466][T30440] ? send_sigurg+0x12b/0x420 [ 1576.607490][T30440] _raw_read_lock+0x36/0x50 [ 1576.607507][T30440] ? send_sigurg+0x12b/0x420 [ 1576.607526][T30440] send_sigurg+0x12b/0x420 [ 1576.607547][T30440] sk_send_sigurg+0x6c/0x2e0 [ 1576.607562][T30440] queue_oob+0x42c/0x4f0 [ 1576.607579][T30440] ? __pfx_queue_oob+0x10/0x10 [ 1576.607594][T30440] ? __schedule+0x1837/0x5740 [ 1576.607614][T30440] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1576.607637][T30440] unix_stream_sendmsg+0xcb1/0xe80 [ 1576.607656][T30440] ? __lock_acquire+0x6b5/0x2cf0 [ 1576.607672][T30440] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1576.607689][T30440] ? aa_sock_msg_perm+0xda/0x1b0 [ 1576.607709][T30440] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1576.607729][T30440] ____sys_sendmsg+0x972/0x9f0 [ 1576.607748][T30440] ? __might_fault+0xaf/0x130 [ 1576.607769][T30440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1576.607792][T30440] ? import_iovec+0x73/0xa0 [ 1576.607813][T30440] ___sys_sendmsg+0x2a5/0x360 [ 1576.607832][T30440] ? __lock_acquire+0x6b5/0x2cf0 [ 1576.607848][T30440] ? __pfx____sys_sendmsg+0x10/0x10 [ 1576.607871][T30440] ? futex_wait+0x2a2/0x390 [ 1576.607899][T30440] ? __fget_files+0x2a/0x420 [ 1576.607916][T30440] ? __fget_files+0x3a0/0x420 [ 1576.607940][T30440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1576.607961][T30440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1576.607984][T30440] ? rcu_is_watching+0x15/0xb0 [ 1576.608004][T30440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.608019][T30440] do_syscall_64+0x15f/0xf80 [ 1576.608039][T30440] ? trace_irq_disable+0x3b/0x140 [ 1576.608060][T30440] ? clear_bhb_loop+0x40/0x90 [ 1576.608077][T30440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.608109][T30440] RIP: 0033:0x7f8e8df9cdd9 [ 1576.608136][T30440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.608150][T30440] RSP: 002b:00007f8e8ef22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1576.608166][T30440] RAX: ffffffffffffffda RBX: 00007f8e8e215fa0 RCX: 00007f8e8df9cdd9 [ 1576.608177][T30440] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000005 [ 1576.608188][T30440] RBP: 00007f8e8e032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1576.608198][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.608206][T30440] R13: 00007f8e8e216038 R14: 00007f8e8e215fa0 R15: 00007f8e8e33fa48 [ 1576.608223][T30440] [ 1576.893247][T22080] net_ratelimit: 1 callbacks suppressed [ 1576.893264][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.910708][T30426] trusted_key: encrypted_key: insufficient parameters specified [ 1577.161750][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.261978][T30445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6493'. [ 1577.316726][T30446] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6493'. [ 1577.331900][T30445] ipvlan2: entered allmulticast mode [ 1577.346749][T30445] syz_tun: entered allmulticast mode [ 1577.918898][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.957099][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.965330][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.974643][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.983305][T22080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.997054][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.037343][T15309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.996834][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.077060][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.117122][T22082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.076933][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.157007][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog