last executing test programs: 34m44.625103724s ago: executing program 0 (id=1609): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe, 0x1}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x8) writev(r2, &(0x7f0000000500), 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) 34m40.918351069s ago: executing program 0 (id=1616): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 34m40.787222311s ago: executing program 0 (id=1618): fsopen(0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)=ANY=[], 0x35b) faccessat2(r4, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000080)=[{}, {}], 0x2, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) 34m37.671157606s ago: executing program 0 (id=1626): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 34m37.586782041s ago: executing program 0 (id=1628): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34m37.370872184s ago: executing program 0 (id=1629): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688"}, 0xc1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) unshare(0xa000080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 34m22.196384695s ago: executing program 32 (id=1629): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688"}, 0xc1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) unshare(0xa000080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 34m0.933411121s ago: executing program 1 (id=1708): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x4b, 0x3, 0x8, 0x5, 0x0, 0x29, 0x3ff, 0x2, 0xfa11, 0x4146}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1001, @empty, 0x0, 0x3}, 0x20) socket$kcm(0x10, 0x2, 0x10) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 33m58.050275521s ago: executing program 1 (id=1713): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 33m57.748278288s ago: executing program 1 (id=1715): r0 = syz_open_dev$audion(0x0, 0x3, 0x1) write$cgroup_devices(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f00001fc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffff4, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffffff, 0x0, 0x103a42, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000844) 33m57.191418632s ago: executing program 1 (id=1717): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x74, 0x41, 0x300, 0x70bd27, 0x0, "", [@generic="d0eb45b5b34bcce3f1201939fbf6221ff94a6bf13d7de0ff4ccdd88e9f7ba746936b81ee1fae5a55e7568f94bbcf7d8069f1d49e7ffdd7aef394c022a1d2d5273b7e98a0040ca71bbb05b8f4cffd738ae48f691a2efcaa8495eb1a884eb0bb48", @nested={0x4, 0x11f}]}, 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000000700000000000000b4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd702529e9166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b8be55040075ded0b1354ad4d297e75df75f997a67b5ba49a4cb3c0d762931ba9bb3384da0f4bfd9d6c34e1aeb5cc9ae6e1e8cee5de912162069ab837b775977c775c5182e4f8d812b7028ce54345f16c18d32e35be92f288ed45aa8f61d08198a467fbb680a6076f7e049bd51c2493ffaddc2fbae6ce72d09d0fe958c4738d15505d8cf1898272503afe6164bbda60998a50481661f3db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x18, 0x0, [{0x7, 0x12, "09b98fe000800000795f70b009eefe63"}]}]}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="c0100000007e01001c00128009000100626f6e64000000000c00028008000a0001000040"], 0x3c}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) 33m54.698649774s ago: executing program 1 (id=1721): fsopen(0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)=ANY=[], 0x35b) faccessat2(r4, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000080)=[{}, {}], 0x2, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) 33m51.846433145s ago: executing program 1 (id=1725): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xa6a9, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r0, r1, 0x54, 0x10000) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sequencer2(0xffffff9c, &(0x7f00000002c0), 0x309a82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 33m41.460233132s ago: executing program 4 (id=1763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000003c0)={0x80, 0x1, {0x3, 0x3, 0x8b2c, 0x3, 0x2c7}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d5", 0xd}, {0x0}], 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 33m40.765356803s ago: executing program 4 (id=1766): add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x0, @mcast1, 0xfffffff8}}, 0x0, 0x0, 0x5, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7620a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xdb) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 33m40.593294176s ago: executing program 4 (id=1767): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1, 0xf405eaead47bf345) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000180)={0x4, 0x3e, 0x0, 0x9d9c}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 33m38.486001347s ago: executing program 4 (id=1770): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000a40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xc, 0x2, 0x9, 0x10, 0x3}, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000400)={&(0x7f0000000140)=[{0x0, 0x8611, 0x45, &(0x7f00000000c0)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404aa4063169b921fe2c0b93c0e66e21421bd29fcb0c"}, {0x7, 0x0, 0x0, 0x0}], 0x2}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x38e}], 0x1}}], 0x2, 0x2090) close(0x3) 33m36.366565325s ago: executing program 33 (id=1725): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xa6a9, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r0, r1, 0x54, 0x10000) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sequencer2(0xffffff9c, &(0x7f00000002c0), 0x309a82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 33m35.18896314s ago: executing program 4 (id=1778): fsopen(0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)=ANY=[], 0x35b) faccessat2(r4, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000080)=[{}, {}], 0x2, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) 33m32.830331277s ago: executing program 4 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xb312}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x387c02, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 33m20.963046847s ago: executing program 6 (id=1807): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33m18.347594612s ago: executing program 6 (id=1812): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x2, 0x7ff, 0x0, 0x7fffffff, 0x100, 0x2, 0x3, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 33m17.562082995s ago: executing program 6 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x6, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x6, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x7, 0xb, 0x6, 0x4, 0x7ffffffd, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x4) 33m17.487840336s ago: executing program 34 (id=1780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xb312}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x387c02, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 33m16.317263558s ago: executing program 6 (id=1817): fsopen(0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)=ANY=[], 0x35b) faccessat2(r4, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000080)=[{}, {}], 0x2, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) 33m10.621311998s ago: executing program 6 (id=1832): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xf4, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x3f, 0x13}, [@processing_unit={0xf, 0x24, 0x8, 0x5, 0x5, [0x1, 0x1, 0x0, 0x0, 0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x1ff, 0x1, 0x5, 0x4, 0x6}, @processing_unit={0x7, 0x24, 0x8, 0x1, 0x6, [0x3]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x405, 0x1, 0x6, 0xf, 0x5b, 0x6, 0xd4, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x52, 0x5, 0x3, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff11, 0xa, 0x59, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x5, 0x9, {0x8, 0x25, 0x1, 0x3, 0xf, 0xc, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xd, 0x0, 0xb6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0xff, 0x4c, {0x8, 0x25, 0x1, 0x81, 0xf, 0x40, 0x5}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x9, 0x6, 0x7, 0x40, 0x7f}, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="050f15000110100a02c1000406835eae8700000fdf90d448e140fa06"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}]}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x14014) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64a50e8becd6cefc8c54c82827a9ee9fb6ba3cfbb6cfa94a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "173641290985b50d6e6120a6e384c375de650f2effcb242b"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4084010}, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r8, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r8, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 33m2.169335777s ago: executing program 6 (id=1842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000004c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 32m46.9490768s ago: executing program 35 (id=1842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000004c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 27m14.98833821s ago: executing program 7 (id=2705): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}]}]}, 0x64}}, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 27m12.972882811s ago: executing program 7 (id=2708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x4, 0x1}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="56b5bfa7"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 27m11.153225281s ago: executing program 7 (id=2712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0xa950, 0x7, {0x2, @sdr={0x384c4150, 0xfffffff7}}, 0x8}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x2f01, 0x0}) 27m10.063101148s ago: executing program 7 (id=2715): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f0930100000a0000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 27m9.781051737s ago: executing program 7 (id=2716): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x1c, 0xf7, 0x0, 0x4}, {0x6, 0x0, 0x6, 0x5635}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r14, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r13, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 27m8.69528823s ago: executing program 7 (id=2719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 26m53.305529202s ago: executing program 36 (id=2719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 25.032341533s ago: executing program 5 (id=6466): r0 = userfaultfd(0x80801) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 21.897731867s ago: executing program 5 (id=6474): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000100), 0x4) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lseek(r3, 0x9, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x101) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r6, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000000)) 20.38710882s ago: executing program 5 (id=6487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, 0x0, &(0x7f0000000280)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)=""/38, 0x26}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) gettid() add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000001b0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, 0xfffffffffffffffe) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r5, 0x2007ffb) close(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.307133095s ago: executing program 2 (id=6497): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r8 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r8, 0xffffc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 12.034882081s ago: executing program 5 (id=6501): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, 0xffffffffffffffff, 0xffffc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 11.385142686s ago: executing program 2 (id=6503): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000a00)="b002401d42b755c94142dfeb56e69ee92fb553bbe868a4be6fba0d398c1476c229eb8a3adcb877aab2b787762fd27d5f6d6ad9a4a2a47ce39ca6e3d760cc358243db3e44e58902158e35675b209a041d546325ceff9884bda4f9fe1902ad539cf6c75b084a384d94e7216a1daa987b43280a330090fe001faf5977e6806a474c3ebbcc323190bad3dfb465dad9653e3c9c24bd86fd965db3adffb3bde57540e967954dd5a1f2389d7348b1a44d938c3f32298bd5e10c28ead285bffb9ff418ce6562a1e417ed73d0f2624bb5796cbda04c3934bb4962a6eb46dccc686bf7e14fdf2bd42a8b7402dbe09247", 0xeb}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000400)) r3 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r3, &(0x7f0000000340)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 11.146985715s ago: executing program 9 (id=6505): r0 = open(0x0, 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f0000001440)=[{&(0x7f0000001ac0)=""/14, 0xe}, {&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000002b00)=""/4100, 0x1004}], 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf25}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)="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", 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0xdfe, 0x4, 0x4, 0xa}) 9.473373406s ago: executing program 3 (id=6507): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r8 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r8, 0xffffc000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 8.68536502s ago: executing program 2 (id=6510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/159, 0x9f}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x7, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r3, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) readahead(r5, 0x8004, 0x80000000) fcntl$lock(r4, 0x26, &(0x7f0000000080)) unshare(0x22020400) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r7 = syz_open_pts(0xffffffffffffffff, 0x8182) dup3(r7, 0xffffffffffffffff, 0x0) 8.602295779s ago: executing program 9 (id=6512): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'sh\x00', 0xb, 0x323b, 0x3a}, {@remote, 0x4e23, 0x2, 0xa4a, 0x12d60, 0x12d5c}}, 0x44) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file0\x00'}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x1, 0xffffffff, 0x2}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x3, 0x33, [0x0, 0x5, 0x3, 0x5, 0xde97, 0x39c], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/51}, &(0x7f0000000380)=0x50) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r8, r7, 0x80000) ioctl$FIONREAD(r8, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) write(r6, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) faccessat2(r4, &(0x7f0000000080)='./file0\x00', 0x180, 0x1000) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x2400) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc1105511, &(0x7f0000000040)={0x5, 0x0, 0x5000, 0xffd4, '\x00', 0xf57f}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0xc1105511, &(0x7f0000000040)) 8.319121102s ago: executing program 9 (id=6513): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@allocspi={0x148, 0x16, 0x711, 0x70bd2b, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x4e24, 0x1, 0x4e21, 0x3, 0x2, 0x20, 0xa0, 0x32}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x40000118, 0x5, 0x0, 0x8, 0x2, 0xbe1, 0x25, 0x1000}, {0x9, 0x40, 0x5, 0x1fffffffff}, {0x0, 0x8a1d, 0x9cb}, 0x70bd2c, 0x0, 0xa, 0x3, 0x0, 0x10}, 0x4, 0x8001}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_aead={0x4c, 0x12, {{'ccm(cast6-generic)\x00'}, 0x0, 0x200}}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bind$packet(r3, &(0x7f0000000300)={0x11, 0x6, r5}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001740)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r3, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000040)={0x12}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r10, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 7.63964243s ago: executing program 9 (id=6515): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r8 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r8, 0xffffc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 6.945040745s ago: executing program 3 (id=6516): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r2}, 0x38) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x40000000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0xb8, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff36}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x921}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x10000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xd}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 6.796455437s ago: executing program 3 (id=6517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/176, 0xb0}], 0x7}, 0x10100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7ff, @empty, 0x7}]}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x1, 0x5, 0x0, r5}, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001bc650085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r8, 0x0, r7, 0x0, 0x7, 0x3) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0x6, 0xa}) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000180)=0x8) 6.658286157s ago: executing program 9 (id=6518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x4c) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.514586825s ago: executing program 2 (id=6519): socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212000180000000090400"], 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x23d2, 0x10, 0x3, 0x210004}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000061401002bbd7000fedbdf2527611fb0cf55ffdaec440b82c08b2d0972eb6fecc4793b9715a639bbb69c76260574ca333f2a7c2aa1983a33cabd1cd5abc8f06712f6c031ad055c51a0ced736217a335cecf0bcc6553e9bbad5f5dd67998bec35230bbda81b0c378218dec6dedfa6f7eff3a3d5fb3c79b6a298fe4f88af4c867155850027398013dd32f1bfbea1a89394856cff1af217ecf71080a7faafb00d73b2dac0d61057d06d97fccfcd65a8a47cb6f3b71fd8bfcb4bdb3011654b8886"], 0x28}}, 0x20040080) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x6) listen(r1, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c00020008000100063371"], 0x3c}}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a19}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x54, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x6, 0x9}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="ace0969cb4a4"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0xfffffff9}}, @IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) io_submit(r8, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_getnexthop={0x3c, 0x6a, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc06c4124, &(0x7f0000000080)) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xfff3}, {0xe, 0x10}, {0xfff3, 0x2}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) 5.929815773s ago: executing program 5 (id=6520): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x44}}, 0x14004000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r2, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}}], 0x2, 0x8845) recvmmsg(r1, &(0x7f0000001d40), 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189082, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000080)={{0x4, 0x54000, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xfb, 0x0, 0x7f}, {0xd000, 0x2000, 0x3, 0x5, 0xd2, 0xbc, 0x9, 0x66, 0xc4, 0x7, 0x4, 0x40}, {0x0, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0xc, 0x7, 0xfe}, {0x60000, 0x6000, 0x8, 0x58, 0x7f, 0x7e, 0x2, 0xc, 0x7f, 0xfc, 0x4, 0x13}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x1, 0x2, 0x9, 0x1, 0x1, 0x9, 0x4, 0xfc}, {0x25000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x81, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0xdddd1000, 0x9, 0x6, 0xff, 0x7, 0x1, 0xbe, 0x9, 0x8f, 0xe, 0x31}, {0x100000, 0x59}, {0x9000, 0x6}, 0x10000, 0x0, 0x1, 0x146017, 0x3, 0x3400, 0xeeee0000, [0x8, 0x3, 0x3, 0x2]}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = syz_open_dev$cec(&(0x7f0000002080), 0x0, 0x200001) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f00000020c0)={0x7fffffffffffffff, 0x2, 0x5, 0x461, 0x4, 0x10000, "c378ae83857f51f973243b1ea31bb428", 0x3, 0x2, 0x9, 0x3, 0xd5, 0xd, 0x6e}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) copy_file_range(r0, &(0x7f0000000200)=0x2, 0xffffffffffffffff, &(0x7f00000002c0)=0x1, 0x6, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) 5.855664399s ago: executing program 3 (id=6521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x69ac00, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000002c0)=@echo=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000009640)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000000680)="c39cc04bf863960943da483c40fde6f71453296070a1924a4e29d677a2c490087d7fe2aec36f5684c11815fd64b040c402ad7024ab687f845b1efa0058877c9e39f6138c7b19c6fea3c582c1de19b12e78331cb77de8c3629c3d05871c1a38897b417eb48a0cf4f882042e810100eaef3342dd22914ba53881cc5013eaa80020854277ac494b0754919fb5467625", 0x8e}, {&(0x7f0000000740)="ea024007f2b6a40a274e1acf7b035135671bec128ecc15d2bdf6d3ded341d3fde9780eaf36fe42d688a202f6e07d76b58d3eaaa501f6dca5c70fb5b360e0c0ab37fafd48fd55f7b372cd0d76a249b4dd8ee288efa2c8c9306183ce687b83af6e4fe59a1a98aa8488cc5c5eaa90d7c62ff1779fbf24dd2bf9a25bc17952cc30", 0x7f}, {&(0x7f0000002340)="1abfb84e378bddf979ebc1420780deacc5ae22bcdcfbbc2154c2563242e5b3570617d198bc5869e8354d94f298b7a4c6711567d6b817d77e1667170c59a93f1d6e79a95acecf0dd469e1333a1638f422baa0631cb73316f9c7f2fbe33d43d63258e7e2724eb1f846266eb26b568a0e94b4d57b364ca709d01df169d9b98b3300c1fb914112979a6b6f5c61a1c625d4c1944ecbd1118c05eace796fd9ddab3ad02be3419d4026486f7054988c6ba1f9fa9f0c74f8c169feca0fec2e0d6789621e538d1772fae6b24e85966e30fa89fcc8b0405f8172bb6bd511eb80f4590e38c58e71c02ca22e7ee6b3065bd76ef85a80cc0f6c9608977bbb58ea38cae3463a235de923693812f50664caccd3a1233c405ea6d824d0b7288c64c28d61cd34c694d3d15e44993a7a356a47310e5b78e01ea15a76ddb81ff1c686abae8163fc178d2602990285686ce3233ff9a5d0f56a8b15d210b39da817491466c72b4f696155925b33ae6ae1098d9b8c830361bd2584f6c83e673466c6f5abd7ae766d03fb333f1d5400916ba20929a46e0713b09fc07bdac18fe5d71a5b4a880e8f1afa418c3f7c112d6d4e928d06e8b1f8551f29ef5b38d839204454ca70703e87bfad7f1c8beab2ad7a8db911b5b7ed4f93a9000f679e946b049a9cf8c4ab616cafe58b3dcfa2f6038c990a85a58cefd129c02925d71d3ed5ff602551c487482fd558706830020eae6c91397db13968ae7f7185e5c85ee0ff0e0021aab9c5ab8d7ed91d3a895cfccfd842853502060c413e5c174f8376992775fabd489de5cbe07caa5d7b393905fb66847b5070178274b05473b64c4be0c5fb28c32d5c750c298bc6ea854ace21473e7ba29135d5a9cfab2e162704b4180faa26025e50f2bec5e814152b9cc760fbc09d4efc4340c9472d11c96c48a7f30c1868e9b87140b1c7b152cd0e3a25358f5ff3ab833d7ec324c70e1cfc2ca299c96183485a7f02ccee3c2b5281d63eaa26ea188b7b3922db9512ce4233f10721ff54835ed7031e91a7dac6aac10af8e0a6029f060b55254d279284a6208b9b74078f9284d8fe1466cd7d6491550819ba7efc48cf95a65c13b3d0cf521075a4fbcf186a5b496ae046cf37e28fd872e0d1dae6c14ea74127f5a5167ba1cd7ae8de6e8b4318972183fb654f7721a5c044a23c56f4e0714ff9bd39d8d62b2a8aa5cf0e92e140d43ba8e166bbeb78d0a070b419d7f12e27f82948ae4cc807492b23f2f1ff66070654c337770371c3e9f862f9b14a245b6ca681001a3ec932b68612a5181ab163d5a8f1c12d43449ef06fe2a97974844c0cf86ae682bd1bdee2e04ad8d238763dbfea04a9128e2964ae57605103aa6a11e4e603052dac61b0484a15a5de8db10d3652e89949990d0182514507b36af68c877c7125a4577a87259ccb88c67d1dfb509463b56721d410e59d9dc8e156211f8bc0af0dbceca654ec8de152dac350133f06e5e4d36050ebddfb2851755dd27c10015830d97938f1f677064bd57483ba1353a294a58aa2b8707071ec6b0796c8bd2310552525799cf9c3fe19a29c7b46a5f997299292493f5b2d98543c9fcc5ff20da45761d740d1412f806fc31af99be8eda3b7c787690390a627f3cb34859b090d600575d31bc14660918a6fab086df95171627dc59c446cef8c0d0b9d9602d4ec2b667282b6fbeb3b50a7a5a138b1a98204947249a8a128b10192164dda08729594d45440a45068636f70fb2aadc961d6a5c8ee42c18d4d0faa10657cdbae51771c2fc65a637a492944521f1c54affdc82e39d6f72588c14bd15be7b928a038ce57887d763dd03d8836672a659f7c9f8d8d9e49e83f282b2a38083df24ecb4c62e27af7a1a284dce41c27a6f8bba9802e92ff0aa023fafbef57ad4e757a8f0f39a0ca262931c3440be4787cfd8b6ec7d28addd28ab7cea5127d7d16ea6b11ec020d4af961e45ab5ff29686ca7fb15cad253748f4366194321005b568469a1dd10e349cd4328377d7985967f0e4d1cbc8d09c554ecf5c0828b02cee0638c79bcf30eaa3b54f0c6ce11be9aa0eddd6a3d7dce92225dfb879b5bef6a7f96d060aad3cbb3e13b50f1cc4ca4f3917d55e15c36cc0bd8c6038e48ca5d21ba2086196fe3d7c006b77577135fb4c32a16e0b05643384a730bf853e92cd2bdc6a46860a768afb0f6f2d508680c23a4945ef6e88b3d786916a6daec279dda3a1294778363a292bb4baa98877240d01795ef00851e35fb2b1404a224d522ecd0919d854325f153375684284996c7771d2a6b70cb2373ee07ebfa3a1760e2d4c6cf9e1c162f76e046ca79dea45c8665584066fdab17d2e7e0ab4a4dc255dd509ec53e230b1622022dedc7355d904a6cd6d0d93e7cf47fa488d370fc99a7ef66f09e15d70a40cce22eebce89ef8480a5a56a5caa3273541ca13c84934bf46766fb3a6d4ccf77e1d42f6a632e3cb61ccbb2847932b84d4e8a933a4b3ee198f4406f2717195eeebd3b42dff3874aeeda55cccdc28d7f6be0455585a2fbe166a06dc061c019b49d82aaaacc2a07e48f3ad4785ffe5611e3acfc21f99e93feb96a9e3af26e66687d1f11ccaabbf6424f970dd564bf5ed859086b80fd0c38e5971d503593709d51fc3a64c286777eec4e19740cece54c830b542a2a2f7c0de99568235fd6530ca99a7afb6b7d29ca77a0974afe2c6e1abca4bc152a2e09a10acf958ea34b8f324a0ef94dde814dce29a67204f79781e8a33aa9210dce11c1304ce8f8bb4b4b684db69449cab2043340a58c68e2ed29839eddcaaab4b9a29d2e0201febb8fd66d9735809e160321de484a1dd0d2a2358216a2ca556472d07c725eb6782137ed1b0fc8309757d66282bc5b1d8abf7e7433d5ecf882902ed4b409d5f1a836305a3c4a737a8b80a97569caf3253b0ead3e2a56326b14cc08c8b1a33f7ea5540f2f5e00e4ae5fdd5d4a905f4b5d5d30b84750c39f4a2ae992ad4a3f0cacb9c7f5ead9cdbb31c9713872844b454ce17a4c7421f4953584d8ce7ecb681820d73bb05446f4ebba04201c058476f6b80cb7bdcd3c97e612e412125715f2147ad15c93a3f17d5e367760d5c791144a9fac23924b15507f0a2561e22372a34c934296941dc40d958ee17892f65b58f8c4052326bc168cc1a59c35c4ec1c9423795237800a40b315be10742e9846f9b4685a3f218d8185691c61496050e334259bbc9511c6409938a5f8432ba72e0cbdca8d48fb756a108f6cb96ac8d2fc2aabc10d28d5567f73a2ce276e5eb8c4388a7a971392da8caf9e8f1bc8053cc15d325921757bfa0da138079a7e2f370467bf0b3129cd41e7ac4e6e419a289b2b28548bcc8548d1a63e81da8c0adc1af8391a6279868a826a45ae01864e143353ebecb20d423b6528be763fe05102d6635aa3ec99363906662aa1e7dcfebfaf043de095f3fe262436bab6f7df8ece0899658a214f361cf17c4b86c9b7756d0dad29329bd44094309d118ae4cdabd9610fc0bdc0a02e7be1a0cf62bfb811f49fe0f0c01c24dc773265b106bc11195f8f63bc2c6d787ea69bc6e5702be83e7ed0a2168e430ba5cf54d7907eb6fbe2972e7a8aa729935317f96a7b435ab2c655edd87bf4b585d89364c320a5d9376b6ffc13a1b613a4fb5258f55d3d4c83e010fbe6c63a883526e9ff71c1303da61eeae4850b7b022cc3abfe11b06c8e6b0d4fabaa621e372d6917e951b0dce5c618fcaa578646df4b4bfa7ba69237046abbdf9023cd2bc298aae0c7cdddbf3a812fc47efe461127c0bb8165bc5b2a8a0be819b379a3d94840a86698074ad900c439484f0f4f9a3ec6ab4576e8d504e1e1713b1848a61243e94421f6bf387d4f3bf0e7f159f275131621b4b62433470fbc9c2aa4ca28e195fb5083c2d58b8a66e0d5167815d6a9cdd3e1aab3c94bc4eacf237175827836feca0b229718251ce88bbd0510e4ecb53a679ef1e4a5579aa417de060ad2c61ee9c02770db07ff0924d245bcb146d13ffad8ac95aaf084c6410ffb578b90361a094b2505930c0b1b4ec1b17857f49a2e94c857b36b85dbde9287066fce18aaa737983d8aeb974a5564d197b47eb8682dab8028de82f9e01d95508feaf8d50348530720a17aef49605e72c873a3c9ae48c2d52a856d776c6dda03866c85dc30a0329c3cb68f07f462c4093b201e1a39ae0b720eea4e4455b91b9bedd4747764db67c40e7cecb569af90ebbe8c335262088cca74c78b3b6e39039e50233add45a583565186dd749a722760bf728dfe6d157acb3557e9ed777266659f851ab6f66c9dcbfa06e06e8043a3789d2b0adb0c9a8634e6fd9ee39eeed45df9cab23916878a7bfbce8ff62f3c6850f03f16ca8f87be183c0810ab69bfc135c7e49ca206ed63d74fdefa5bf741d75a6e8bbb48bda49287f1c0cc787c36048d40811a6d83dd393a97ac8bfb0491d9741f35e958bfd43a8baf37f467dba5082b27848df9ac1db383138da2a39eb95400bf8bfd998b16ec4e5a7996d82d96e43f82c3596903367ee8bf2af62ea7a913f9ed6af1915732ccf6473ac73f7382cdd159e6cb813971db7489f73bfe213b803397982cfabd4326b3bf89237eed6d194bca4faf017d24a036aa3b9569faa9ba3362ce2281ee6c663ed7b743389f257e107972eb30d7b5552332ce5e34c678379faeef946a513432481171efb572622415b4b673b1ed5084ca56ddbdd660ee2ac444eb23a5af2a9eac2fb1f2c33d3ff9047a95093fac24820f9cfede9c35d0a0964c40fa734cd3c0458103a8461fe110facbe40d337ebb6e9eaa89d8f19464c2c19351660723be45d82c7b51e396a8a9b77b2907b076a99462fb8b3ef370ff774de7d9cb5e38a6f65f19bd7d2669dfc850584b1b34b495611154ed85a2f47b5796b7dab8f49897ffd69c2aafd20c3a311a68bb839c398fca0a8033d11294d8546586d79e33aee4f104530cf01c1bb68b0f1e906d2f43114a46543a796cdf4be0e2be6e185d4a3ffacbbb17b201d6d5ad41a0e8ab52212009a2f466be379a632eb930978d24dfe227640d8013b4eee11324732267f845b8f940c5fd275964034de3a1e808d5ba7a1af892e2182c0f648c7ae87ec8694a3381ef320c268c35649fb8760893775426f0b86785ec550f9b353f1b67f6f0dfe99fbb4c61712889c35aad26d6bf1acd04f0559b486d77e068c1bb8c468b7d8fae3940a6bc728120fef89af692f3973735c2d06b0c36a8b331353f32847bd14b9c7e463e13197567403a37db1393d9d8471d53d1206601d8f8089818d2483cd1d2d296822826b363e5ae504f51144371741a7941749aadb79c037cea13d04b5062680592f5af8fd670b74b9a1c2af9452f60a5bfeb12a602c48a63a618d71b94c828b9f6b2465aabeace9bac92790384ed1651dcbca532ba683587a0fc19c695bb57b15b487e34f06e15aabca01d253c6c6bb8cae97c14c77e4e183251ea85fa5bb0c534274b13d5ca98ef490a00b6d5b17158a67645c6b2b374192b61396b2ca9492286c6b9b2cd463ae42fb0d147251232b12c3b16e48baed80f649987ad6a51cf4632591fcd650a2c06a6b0eb3ba82d5a69f2987fafc01903732f00d1a0bcb9445ecf49a96b7853c8827f2cf8c7a50ce2ff49e6593957783a051be947129447e5c7dcaa11fb669aba9bea7eda6cfa17aafe12d30cbc5c0c9d2a7957018bed06d6150580680aad2fe9eb55b57209f247c281c2101b196e9ec01096b650df8ea741b493448d06215a5a423d5e0c70b3949ec5e4a5845394dc043656302fb3924f", 0x1000}, {&(0x7f0000003340)="aece3a0a0ecdbc5f3f2fc7aa86bfaabe4c659aeb7b7e333b2acf603686b2c0f243555b5fa7610d874aaf34c5f5266bdde72922e8820c39d7f45c21d7df5366bf65ade02ae06da5b1b886184d540d57a2997aa894e06bae0696a917001e52f8ae54957be7d99179f76c6f4227854a62294a852f32f18515856e19366e291d8d751925b414", 0x84}, {&(0x7f0000003400)="7bc27825c6ac71abe4bb9fb807ae93e4e9751dd8b144c72e60bb0fe2fcb12661dcdb031516849c810f4921f163285646e175fc6a1a345750ba84542cbb54a794bc6dee39c0afd741223b291b3ce26e1b6fd086bda5708d0094dc858359a8d69b242a8f2926abfa13d4f94666ff2af37214869bde42852a20ee0a", 0x7a}, {&(0x7f0000003480)="432c54886b73a127acc93a0b1f5b85d60d8bb7d02f8a802a138b519f6edb3b0aa3c7194f66231590962c72", 0x2b}], 0x6, &(0x7f00000095c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r3, r1, r3, r3, r2, r0]}}], 0x7c, 0x8000}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x540, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYRES64=r9, @ANYRES16=r6, @ANYBLOB="00000000000000000400000000000000000000000000000000bb8d000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000044c4614cf316aeb9540005000000000000000000000000000000000000000002ff0000000a00000000000000000000000000000000000000000000000400000000000000feffffff00000000fbc2a39430c9342f648fc5203f9c61026e", @ANYBLOB="9939b977f58e84c05a04d778b634e87fd374b16008f0cdebf165af682bf34d283f10630056d3a5d748d4e125437b36", @ANYRESOCT=r7], 0xf8}, 0x1, 0x0, 0x0, 0x4008011}, 0x400c805) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r12, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) 4.871601535s ago: executing program 8 (id=6522): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000500), &(0x7f0000000600)=""/146, 0x7000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1, 0x0, 0x218) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r8}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x277fffffffc, 0x0, 0x1, r8}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0xb6f3, 0x0, 0x1, r8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_complete(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="488af5d5561bd784f4c3543539"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r10, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r11, 0x4, 0x2800) close(0x3) 3.989691825s ago: executing program 8 (id=6523): lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000180)=0xdf, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0xac, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x6, 0x2a, [@ssid]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x34, 0x68, 0x6, 0x8}}}]}, 0xac}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x1, 0x0, &(0x7f00000000c0)={r8, r9+60000000}, &(0x7f0000000100), 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822f"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.643708155s ago: executing program 9 (id=6524): socket$can_raw(0x1d, 0x3, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x82) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x2, 0xfffffffe, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015002800"], 0x5c}}, 0x4000894) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.364506097s ago: executing program 3 (id=6525): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r10 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r10, 0x0, 0xfffffcd9) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 2.648866015s ago: executing program 2 (id=6526): r0 = socket$inet(0x2, 0x3, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000200)) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x0, 0x40000}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x70}, 0x1, 0x0, 0x0, 0x44840}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @random="0163014030d9"}) r6 = socket$inet6(0xa, 0x800000000000002, 0x10000) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x2110, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000040)='ip6_vti0\x00'}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f00000000c0)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x40}, 0x20008024) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) 2.176061013s ago: executing program 8 (id=6527): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r2}, 0x38) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x40000000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0xb8, 0x31, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff36}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x921}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x10000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xd}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 1.819134443s ago: executing program 5 (id=6528): r0 = io_uring_setup(0x8d7, &(0x7f0000000240)={0x0, 0x50c, 0x800, 0x1, 0x221}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x1c, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x5, 0x1, "ce"}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r6 = socket(0x2, 0xa, 0x0) sendfile(r6, r5, 0x0, 0x8) read$FUSE(r5, &(0x7f000000b040)={0x2020}, 0x2020) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000200)=0x4) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)="b145eaf4395adf3d", 0x8}], 0x1}}], 0x1, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 1.694794063s ago: executing program 8 (id=6529): r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x3, 0x0, 0xffffffffffffffff}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r3, 0x0, r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002680)="568fb1ce0f27271fd1ef8366a5f6833f642ff6f2eb031a44e602ac66b361a2145f915b2d8aa39abfeace90f4ad7e042073991d605210aecd1efd9b973e24bda44b79821e2b73950959890bba599a0b23572b53bb3a694ddb9e17442fc501df02d77572d34bdc347b3a3d67900f3f4f86cc9c30e8430f9bdab4a7c01c66eb9ac63fb7a475b1392309829cef8ccff4ea88f9ad68577bf4df48ae8df3fbcd6652e627407d2b22bf4d64af1c48dcf98a3cbeac1ae49bfd8651f7fac949be51335d0cf4206dd64cc47d0849c3f257164158d0d94765b577653573ec34fe65731565e9fa26b3a9ce8909808f463a66c431585256c7325ad74dbc8cef386ad372ae86f5c8dcc394ffa9f522e4487bf7ee57e1a62b2588a2225f6c5a9d421992d761cf79880649d4b57e946d2a476862f095bfd22f4ab26f6e34fc63216c58e4084f1d1c9d97297ec07a95", 0xff57, 0x2) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4c051) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000000c0)=0x3) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 902.79986ms ago: executing program 8 (id=6530): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x10000, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x6, 0xa}, {0x100, 0x3}, {0x2, 0x4}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000280)}) socket(0x2b, 0x1, 0x1) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x290) 858.468427ms ago: executing program 3 (id=6531): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, &(0x7f0000001280)={0x2020}, 0x2020) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, 0xffffffffffffffff, 0xffffc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 204.742632ms ago: executing program 2 (id=6532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc0, 0x60, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="001028"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') mmap$IORING_OFF_SQES(0x0, 0x6000, 0x1000004, 0x2010, r5, 0x10000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000b00)="a6", 0x1, r8) r10 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r8) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/dev/cec#\x00', r10) r11 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000) ioctl$CEC_S_MODE(r11, 0x40046109, &(0x7f0000000000)=0xe2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f00000002c0)={0x10}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r9}) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x11, 0x0, r12, 0x0, 0x0, 0x74, 0x40, 0x12345}) 0s ago: executing program 8 (id=6533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4d, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x10, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r6 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x3, 0x6, @random="71d2e1764654"}, 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x803, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="10002dbd7000fddbdf255500dbe1d4542bc439c74e070000000300850ec8ef26ff42b254eb7507111060e4fd4dc070ea94bc49cb8bfe733070a09c77710e942843194d1b999b7c84dc553c75213aa5fc1b00c4557a0212e97f7dea1953bdd3014e06d8692cd7b2ea281abc65e329a1b278fe01057f719a87e08b357b5d49c998a43d539528654dbcd94c78e86f0358bc8115c2ca2b22d668b8", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20001810) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r12 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r12, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r11, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) kernel console output (not intermixed with test programs): fig 14 interface 228 has no altsetting 0 [ 2542.763029][T26154] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2542.780516][T26154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.800668][T26154] usb 4-1: Product: syz [ 2542.808069][T26154] usb 4-1: Manufacturer: syz [ 2542.814090][T26154] usb 4-1: SerialNumber: syz [ 2543.313937][T26154] legousbtower 4-1:14.57: interrupt endpoints not found [ 2543.526117][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 2543.794347][T26154] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 2543.851000][T26154] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2544.563941][T31329] binder: 31327:31329 ioctl c0306201 800002c0 returned -14 [ 2544.583154][T31332] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6134'. [ 2544.618286][T31332] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6134'. [ 2544.860271][ C0] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 2544.871392][T26154] usb 4-1: USB disconnect, device number 57 [ 2544.888156][T26154] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 2545.545734][T15814] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 2545.743821][T15814] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 2545.760856][T15814] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2545.790547][T15814] usb 10-1: config 0 has no interfaces? [ 2545.806439][T15814] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2545.837965][T15814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.906614][T26154] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2545.922935][T15814] usb 10-1: config 0 descriptor?? [ 2546.066516][T26154] usb 4-1: Using ep0 maxpacket: 32 [ 2546.087159][T26154] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2546.103015][T26154] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2546.129231][T26154] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2546.153894][T26154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2546.179618][T26154] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2546.203370][T26154] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2546.242272][T26154] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2546.258332][T26154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.289856][T26154] usb 4-1: config 0 descriptor?? [ 2546.566490][T26154] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2548.062152][T31353] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 2548.075449][T31353] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 2548.082449][T26156] usb 4-1: USB disconnect, device number 58 [ 2548.110105][T26156] usblp0: removed [ 2548.119628][T31353] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 2548.142790][T31353] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 2548.164326][T31353] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 2548.195195][T31353] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 2548.211480][T31353] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 2548.228389][T31353] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 2548.238289][T31353] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 2550.000056][T15814] usb 10-1: string descriptor 0 read error: -71 [ 2550.063163][T15814] usb 10-1: USB disconnect, device number 41 [ 2551.169534][T15814] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2551.415121][T15814] usb 4-1: Using ep0 maxpacket: 16 [ 2551.457784][T15814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2551.525221][T15814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2551.582563][T15814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2551.699259][T15814] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2551.722909][T15814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.819522][T15814] usb 4-1: Product: syz [ 2551.839837][T15814] usb 4-1: Manufacturer: syz [ 2551.851992][T15814] usb 4-1: SerialNumber: syz [ 2551.867741][T15814] usb 4-1: config 0 descriptor?? [ 2551.930189][T15814] mcba_usb 4-1:0.0: Can't find endpoints [ 2553.445612][T15814] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2553.641795][T26156] usb 4-1: USB disconnect, device number 59 [ 2553.668343][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2553.701392][T15814] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2553.735883][T15814] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2553.758699][T15814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.808156][T15814] usb 9-1: config 0 descriptor?? [ 2554.502913][T31493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2554.530272][T31493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.676747][T15814] Bluetooth: Can't get version to change to load ram patch err [ 2554.725306][T15814] Bluetooth: Loading sysconfig file failed [ 2554.752534][T15814] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 2554.823741][T15814] usb 9-1: USB disconnect, device number 73 [ 2556.295137][ T30] audit: type=1800 audit(1783800623.032:1641): pid=31518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6152" name="file1" dev="tmpfs" ino=6190 res=0 errno=0 [ 2557.433403][T31513] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2558.800606][T16556] Bluetooth: unknown link type 128 [ 2559.790868][T31648] bond10: entered allmulticast mode [ 2560.225191][T15814] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2560.455552][T15814] usb 10-1: Using ep0 maxpacket: 16 [ 2560.476003][T31641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.553371][T15814] usb 10-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 2560.596487][T15814] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2560.608399][T15814] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2560.617589][T15814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.652548][T15814] usb 10-1: config 0 descriptor?? [ 2560.834837][T16556] Bluetooth: hci2: command 0x0406 tx timeout [ 2560.914514][T31641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.130037][T15814] usbhid 10-1:0.0: can't add hid device: -71 [ 2561.173422][T15814] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2561.254031][T15814] usb 10-1: USB disconnect, device number 42 [ 2561.255673][T31654] PKCS7: Unknown OID: [4] 0.19 [ 2561.294107][T31654] PKCS7: Only support pkcs7_signedData type [ 2561.484666][T31654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6163'. [ 2561.587808][T31655] pim6reg: entered allmulticast mode [ 2561.646687][T31654] pim6reg: left allmulticast mode [ 2564.325207][T31775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2564.360102][T31775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2565.291725][T16556] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 2565.805610][T26154] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2565.976897][T26154] usb 4-1: Using ep0 maxpacket: 8 [ 2565.997716][T26154] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2566.017232][T26154] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2566.032562][T26154] usb 4-1: Product: syz [ 2566.045617][T26154] usb 4-1: Manufacturer: syz [ 2566.054123][T26154] usb 4-1: SerialNumber: syz [ 2566.071837][T26154] usb 4-1: config 0 descriptor?? [ 2566.106847][T26154] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2566.348683][T32000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6174'. [ 2566.519930][T26154] gspca_zc3xx: reg_r err -71 [ 2566.552119][T26154] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2566.586457][T26154] usb 4-1: USB disconnect, device number 60 [ 2567.396515][T15814] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2567.602839][T15814] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 2567.648127][T15814] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2567.684258][T15814] usb 9-1: Product: syz [ 2567.708667][T15814] usb 9-1: config 0 descriptor?? [ 2567.754588][T15814] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 2567.788763][T15814] usb 9-1: Detected FT232H [ 2568.002372][T15814] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2568.031921][T32005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2568.135763][T32005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2568.630346][T32012] netlink: 464 bytes leftover after parsing attributes in process `syz.8.6176'. [ 2569.054203][T15814] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2569.462306][T32019] netlink: 'syz.9.6179': attribute type 1 has an invalid length. [ 2569.791945][T26154] usb 9-1: USB disconnect, device number 74 [ 2569.878308][T26154] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2569.902640][T32019] bond11: entered promiscuous mode [ 2569.918032][T26154] ftdi_sio 9-1:0.0: device disconnected [ 2570.011508][T32019] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2571.104132][T32018] ptrace attach of ""[32135] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[32018] [ 2571.486125][T15814] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2571.667472][T15814] usb 4-1: device descriptor read/64, error -71 [ 2572.042483][T15814] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2572.095554][T32239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6183'. [ 2572.235085][T15814] usb 4-1: device descriptor read/64, error -71 [ 2572.366198][T15814] usb usb4-port1: attempt power cycle [ 2573.554630][T32251] PKCS7: Unknown OID: [4] 0.19 [ 2573.590910][T32251] PKCS7: Only support pkcs7_signedData type [ 2573.660213][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6185'. [ 2573.750569][T32251] pim6reg: entered allmulticast mode [ 2573.779076][T32251] pim6reg: left allmulticast mode [ 2574.396559][T15814] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2574.615294][T15814] usb 6-1: Using ep0 maxpacket: 32 [ 2574.736512][T15814] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2574.774882][T15814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.796799][T15814] usb 6-1: Product: syz [ 2574.804538][T15814] usb 6-1: Manufacturer: syz [ 2574.809182][T15814] usb 6-1: SerialNumber: syz [ 2574.827668][T15814] usb 6-1: config 0 descriptor?? [ 2574.888753][T15814] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2574.905829][T15814] dvb-usb: bulk message failed: -22 (4/0) [ 2574.911833][T15814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2574.950860][T15814] dvb-usb: bulk message failed: -22 (5/0) [ 2574.980677][T15814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2575.076094][T15814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2575.131082][T15814] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2575.208779][T15814] usb 6-1: media controller created [ 2575.292337][T15814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2575.402693][T15814] usb 6-1: selecting invalid altsetting 3 [ 2575.457691][T15814] ttusb2: set interface to alts=3 failed [ 2575.543404][T15814] DVB: Unable to find symbol tda10086_attach() [ 2575.570807][T15814] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2575.622448][T15814] dvb-usb: bulk message failed: -22 (4/0) [ 2575.651811][T15814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2575.707645][T15814] dvb-usb: bulk message failed: -22 (5/0) [ 2575.745130][T15814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2575.785800][T15814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2575.865703][T15814] usb 6-1: USB disconnect, device number 123 [ 2576.242027][T15814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2577.333942][T32376] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6191'. [ 2577.765219][T15814] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 2578.030481][T15814] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2578.046329][T15814] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 2578.057520][T15814] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2578.105908][T20566] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2578.120504][T15814] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2578.139040][T15814] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2578.152479][T15814] usb 10-1: Product: syz [ 2578.159168][T15814] usb 10-1: Manufacturer: syz [ 2578.164836][T15814] usb 10-1: SerialNumber: syz [ 2578.185392][T15814] usb 10-1: config 0 descriptor?? [ 2578.244351][T15814] usb 10-1: selecting invalid altsetting 0 [ 2578.266088][T20566] usb 6-1: Using ep0 maxpacket: 16 [ 2578.288617][T20566] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.343518][T20566] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2578.363242][T20566] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2578.381469][T20566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.401403][T20566] usb 6-1: config 0 descriptor?? [ 2579.438191][T32391] vivid-001: ================= START STATUS ================= [ 2579.448949][T32391] vivid-001: Radio HW Seek Mode: Bounded [ 2579.459992][T32391] vivid-001: Radio Programmable HW Seek: false [ 2579.465279][T20566] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2579.468832][T32391] vivid-001: RDS Rx I/O Mode: Block I/O [ 2579.480525][T32391] vivid-001: Generate RBDS Instead of RDS: false [ 2579.488352][T32391] vivid-001: RDS Reception: true [ 2579.493364][T32391] vivid-001: RDS Program Type: 0 inactive [ 2579.500272][T32391] vivid-001: RDS PS Name: inactive [ 2579.529297][T32391] vivid-001: RDS Radio Text: inactive [ 2579.555940][T32391] vivid-001: RDS Traffic Announcement: false inactive [ 2579.570098][T32391] vivid-001: RDS Traffic Program: false inactive [ 2579.585381][T32391] vivid-001: RDS Music: false inactive [ 2579.590985][T32391] vivid-001: ================== END STATUS ================== [ 2579.638811][T20566] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 2579.658183][T20566] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2579.678133][T20566] usb 4-1: Product: syz [ 2579.695600][T20566] usb 4-1: config 0 descriptor?? [ 2579.715936][T20566] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2579.739297][T26154] usb 10-1: USB disconnect, device number 43 [ 2579.756904][T20566] usb 4-1: Detected FT232H [ 2579.955565][T20566] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2579.973430][T32390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.003015][T32390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.369186][T32399] netlink: 464 bytes leftover after parsing attributes in process `syz.3.6195'. [ 2580.708045][T20566] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2581.440882][T15814] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2581.669045][T15814] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2581.694086][T15814] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2581.723382][T15814] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2581.741231][T15814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.760670][T15814] usb 10-1: config 0 descriptor?? [ 2582.312677][T20566] usb 4-1: USB disconnect, device number 64 [ 2582.373579][T20566] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2582.413279][T20566] ftdi_sio 4-1:0.0: device disconnected [ 2582.480944][T32431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.542703][T32431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.628022][T32431] sctp: [Deprecated]: syz.9.6197 (pid 32431) Use of int in max_burst socket option. [ 2582.628022][T32431] Use struct sctp_assoc_value instead [ 2582.817891][T15814] Bluetooth: Can't get version to change to load ram patch err [ 2582.843947][T15814] Bluetooth: Loading sysconfig file failed [ 2582.893554][T15814] ath3k 10-1:0.0: probe with driver ath3k failed with error -71 [ 2582.963487][T15814] usb 10-1: USB disconnect, device number 44 [ 2584.427559][T26154] usb 6-1: USB disconnect, device number 124 [ 2584.965280][T26154] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2585.138036][T26154] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2585.152333][T26154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2585.169527][T26154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2585.204293][T26154] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2585.215825][T26154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.236184][T26154] usb 4-1: Product: syz [ 2585.242040][T26154] usb 4-1: Manufacturer: syz [ 2585.247488][T26154] usb 4-1: SerialNumber: syz [ 2585.265325][T26154] usb 4-1: config 0 descriptor?? [ 2585.276026][T32623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2585.405381][T26154] rc_core: IR keymap rc-streamzap not found [ 2585.413988][T26154] Registered IR keymap rc-empty [ 2585.429437][T26154] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2585.459305][T26154] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input156 [ 2585.501436][T32623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.619876][T32623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.850702][T32623] sg_write: data in/out 614400/136 bytes for SCSI command 0x9-- guessing data in; [ 2585.850702][T32623] program syz.3.6201 not setting count and/or reply_len properly [ 2586.095847][T15814] usb 4-1: USB disconnect, device number 65 [ 2586.584911][T26154] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2586.745558][T26154] usb 6-1: Using ep0 maxpacket: 32 [ 2586.769110][T26154] usb 6-1: config 2 has an invalid interface number: 45 but max is 0 [ 2586.792629][T26154] usb 6-1: config 2 has no interface number 0 [ 2586.816593][T26154] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2586.857065][T26154] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2586.928689][T26154] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 2586.960127][T26154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.974202][T26154] usb 6-1: Product: syz [ 2586.983269][T26154] usb 6-1: Manufacturer: syz [ 2586.992288][T26154] usb 6-1: SerialNumber: syz [ 2587.023530][T26154] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected [ 2587.049640][T26154] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2587.105289][T28668] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2587.266246][T28668] usb 4-1: Using ep0 maxpacket: 16 [ 2587.282516][T28668] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2587.302082][T28668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.330207][T28668] usb 4-1: Product: syz [ 2587.352101][T28668] usb 4-1: Manufacturer: syz [ 2587.371268][T28668] usb 4-1: SerialNumber: syz [ 2587.413355][T28668] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2587.433230][T28668] r8152-cfgselector 4-1: config 0 descriptor?? [ 2587.457944][T28668] hub 4-1:0.0: bad descriptor, ignoring hub [ 2587.465706][T28668] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2587.660477][T32648] binder: 32647:32648 ioctl c0306201 0 returned -14 [ 2587.689033][T28668] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2587.697167][T28668] r8152-cfgselector 4-1: No union descriptors [ 2587.719219][T26154] usb 6-1: USB disconnect, device number 125 [ 2587.760825][T26154] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2587.800853][T26154] kobil_sct 6-1:2.45: device disconnected [ 2587.951204][T32651] netlink: 'syz.3.6208': attribute type 1 has an invalid length. [ 2587.968113][T32651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 2588.256303][T15814] r8152-cfgselector 4-1: USB disconnect, device number 66 [ 2589.065529][T15814] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2589.165496][T26154] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2589.325923][T26154] usb 9-1: Using ep0 maxpacket: 8 [ 2589.342077][T26154] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.383178][T26154] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2589.433789][T15814] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2589.454585][T26154] usb 9-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 2589.491374][T26154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.491392][T15814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.520611][T26154] usb 9-1: Product: syz [ 2589.531315][T15814] usb 6-1: Product: syz [ 2589.539178][T26154] usb 9-1: Manufacturer: syz [ 2589.539932][T15814] usb 6-1: Manufacturer: syz [ 2589.559127][T26154] usb 9-1: SerialNumber: syz [ 2589.572602][T15814] usb 6-1: SerialNumber: syz [ 2590.065602][T32671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.077604][T32671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.155793][T26156] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2590.349943][T26156] usb 10-1: Using ep0 maxpacket: 32 [ 2590.445495][T26156] usb 10-1: config 0 has no interfaces? [ 2590.591528][T26156] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2590.646842][T26156] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2590.675538][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2590.683374][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 2590.703830][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.709153][T26156] usb 10-1: Product: syz [ 2590.719117][T26156] usb 10-1: Manufacturer: syz [ 2590.719984][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.723840][T26156] usb 10-1: SerialNumber: syz [ 2590.735553][T26156] usb 10-1: config 0 descriptor?? [ 2590.937518][T26154] usb 9-1: unit 5 not found! [ 2590.968043][T26154] usb 9-1: unit 16 not found! [ 2591.330457][T26154] usb 9-1: USB disconnect, device number 75 [ 2591.672760][T15814] rtl8150 6-1:1.0: couldn't reset the device [ 2591.755639][T15814] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 2591.779241][T32679] trusted_key: encrypted_key: keyword 'new2똱,' not recognized [ 2591.834112][T32679] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2592.300917][T32671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6214'. [ 2593.831290][T26154] usb 6-1: USB disconnect, device number 126 [ 2594.116114][T26156] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2594.178250][T26154] usb 10-1: USB disconnect, device number 45 [ 2594.339561][T26156] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2594.351109][T26156] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.376734][T26156] usb 9-1: config 0 descriptor?? [ 2594.438101][ T329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2594.472272][T26156] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2594.893692][T26156] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 2595.092255][ T329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.108233][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6217'. [ 2595.966246][T26156] gspca_cpia1: usb_control_msg 01, error -110 [ 2595.978606][T26156] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 2596.574279][ T342] fuse: Bad value for 'fd' [ 2597.234335][T26154] usb 9-1: USB disconnect, device number 76 [ 2598.370581][ T348] input: syz0 as /devices/virtual/input/input157 [ 2600.305295][T26156] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 2600.489035][T26156] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2600.513515][T26156] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2600.538020][T26156] usb 4-1: config 0 has no interfaces? [ 2600.549860][T26156] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2600.585617][T26156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.622627][T26156] usb 4-1: config 0 descriptor?? [ 2602.695506][T26154] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2602.862799][T26154] usb 6-1: Using ep0 maxpacket: 16 [ 2602.900540][T26154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.957281][T26154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.992472][T26156] usb 4-1: string descriptor 0 read error: -71 [ 2603.011595][T26154] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2603.074259][T26154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.135565][T26154] usb 6-1: config 0 descriptor?? [ 2603.159806][T26156] usb 4-1: USB disconnect, device number 67 [ 2603.634037][ T592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6230'. [ 2603.665972][ T477] batadv_slave_0: entered promiscuous mode [ 2603.777236][T26154] ntrig 0003:1B96:0008.006F: bogus close delimiter [ 2603.777266][T26154] ntrig 0003:1B96:0008.006F: item 0 4 2 10 parsing failed [ 2603.782478][T26154] ntrig 0003:1B96:0008.006F: parse failed [ 2603.796214][T26154] ntrig 0003:1B96:0008.006F: probe with driver ntrig failed with error -22 [ 2604.034389][ T437] batadv_slave_0: left promiscuous mode [ 2604.210023][T26154] usb 6-1: USB disconnect, device number 127 [ 2604.315332][T28668] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2604.465493][T28668] usb 9-1: Using ep0 maxpacket: 16 [ 2604.473374][T28668] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2604.490589][T28668] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2604.515344][T28668] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2604.534649][T28668] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2604.566231][T28668] usb 9-1: config 0 descriptor?? [ 2605.354510][ T613] program syz.2.6236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2605.777486][T28668] usb 9-1: USB disconnect, device number 77 [ 2606.082487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2606.868496][T15814] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2606.922418][ T831] fuse: Bad value for 'fd' [ 2607.090069][T15814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2607.124583][T15814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2607.166172][T15814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2607.251663][T15814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2607.361569][T15814] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2607.388241][T15814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.569074][T15814] usb 4-1: config 0 descriptor?? [ 2608.560362][T15814] usbhid 4-1:0.0: can't add hid device: -71 [ 2608.579524][T15814] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2608.647887][T15814] usb 4-1: USB disconnect, device number 68 [ 2609.899968][ T967] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2609.942320][ T967] batman_adv: batadv0: Adding interface: dummy0 [ 2609.966544][ T967] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2610.061874][ T967] batman_adv: batadv0: Interface activated: dummy0 [ 2613.015418][T28668] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2613.197310][T28668] usb 4-1: Using ep0 maxpacket: 8 [ 2613.213609][T28668] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2613.279170][T28668] usb 4-1: config 179 has no interface number 0 [ 2613.309333][T28668] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2613.371830][T28668] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2613.437547][T28668] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2613.500314][T28668] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2613.570355][T28668] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2613.662535][T28668] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2613.693325][T28668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.761674][ T1326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2616.914411][T28668] usb 4-1: USB disconnect, device number 69 [ 2616.914476][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2616.928783][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2617.066366][ T1453] netlink: 'syz.3.6257': attribute type 1 has an invalid length. [ 2617.170002][ T1453] bond7: entered promiscuous mode [ 2617.177543][ T1453] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2617.300929][ T1502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2617.327409][ T1502] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2617.346844][ T1502] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 2617.915395][T28668] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2618.087793][T28668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2618.119826][T28668] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2618.131775][T28668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.148661][T28668] usb 6-1: Product: syz [ 2618.158961][T28668] usb 6-1: Manufacturer: syz [ 2618.164230][T28668] usb 6-1: SerialNumber: syz [ 2618.177852][T28668] usb 6-1: config 0 descriptor?? [ 2618.780353][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6262'. [ 2618.804391][ T1650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6262'. [ 2618.813922][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6262'. [ 2619.173577][ T1660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2619.225467][T26154] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2619.387380][T26154] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2619.400457][T26154] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2619.412730][T26154] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2619.428049][T26154] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2619.462620][ T1654] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2619.527057][T26154] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2619.778987][ T1668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2619.968161][T26156] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2620.189849][T26156] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2620.203332][T26156] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2620.212346][T26156] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2620.221443][T26156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.304859][T26156] usb 4-1: config 0 descriptor?? [ 2620.326761][T15814] usb 10-1: USB disconnect, device number 46 [ 2620.768790][T28668] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2620.786931][T28668] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2620.821490][T28668] usb 6-1: USB disconnect, device number 2 [ 2621.033585][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.089314][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.118281][ T1672] sctp: [Deprecated]: syz.3.6268 (pid 1672) Use of int in max_burst socket option. [ 2621.118281][ T1672] Use struct sctp_assoc_value instead [ 2621.169395][T26156] Bluetooth: Can't get version to change to load ram patch err [ 2621.178718][T26156] Bluetooth: Loading sysconfig file failed [ 2621.187529][T26156] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 2621.216567][T26156] usb 4-1: USB disconnect, device number 70 [ 2621.889997][ T1788] syzkaller1: entered promiscuous mode [ 2621.900973][ T1788] syzkaller1: entered allmulticast mode [ 2622.046141][T15814] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2622.289912][T15814] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2622.302259][T15814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2622.321109][T15814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2622.334776][T15814] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2622.356491][T15814] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2622.367275][T15814] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2622.380996][T15814] usb 9-1: Manufacturer: syz [ 2622.395133][T15814] usb 9-1: config 0 descriptor?? [ 2622.475374][T26156] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2622.657680][T26156] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2622.668365][T26156] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2622.678576][T26156] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2622.687584][T26156] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2622.721791][T26156] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2622.806469][T26156] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2622.826142][T26156] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2622.861299][T15814] appleir 0003:05AC:8243.0070: unknown main item tag 0x0 [ 2622.873873][T26156] usb 4-1: Product: syz [ 2622.878186][T26156] usb 4-1: Manufacturer: syz [ 2622.897889][T15814] appleir 0003:05AC:8243.0070: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2622.920257][T26156] cdc_wdm 4-1:1.0: skipping garbage [ 2622.930008][T26156] cdc_wdm 4-1:1.0: skipping garbage [ 2622.990412][T26156] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 2623.002770][T26156] cdc_wdm 4-1:1.0: Unknown control protocol [ 2623.891358][ T1783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2623.939470][T26156] usb 9-1: USB disconnect, device number 78 [ 2624.643209][ T1805] program syz.8.6278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2624.709116][ T1803] netlink: 'syz.2.6276': attribute type 4 has an invalid length. [ 2624.947216][T15814] usb 4-1: USB disconnect, device number 71 [ 2624.975137][T26156] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2625.177018][T26156] usb 9-1: Using ep0 maxpacket: 16 [ 2625.201498][T26156] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2625.240032][T26156] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 2625.358033][T26156] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2625.381690][T26156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.401163][T26156] usb 9-1: Product: syz [ 2625.431114][T26156] usb 9-1: Manufacturer: syz [ 2625.451948][T26156] usb 9-1: SerialNumber: syz [ 2625.814600][T26156] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 2625.886793][T26156] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2626.480868][T26156] usb 9-1: USB disconnect, device number 79 [ 2626.616971][T30068] udevd[30068]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2628.356654][T28145] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967286. macoff=82 [ 2631.374483][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6291'. [ 2631.443562][ T2060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6291'. [ 2631.475219][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6291'. [ 2634.685800][ T2296] qrtr: Invalid version 0 [ 2634.743392][ T2296] syzkaller1: entered promiscuous mode [ 2634.759376][ T2296] syzkaller1: entered allmulticast mode [ 2635.586137][T28668] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2636.156705][T28668] usb 6-1: Using ep0 maxpacket: 8 [ 2636.212917][T28668] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.256365][T28668] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 2636.270784][T28668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.319305][T28668] usb 6-1: Product: syz [ 2636.344128][T28668] usb 6-1: Manufacturer: syz [ 2636.374072][T28668] usb 6-1: SerialNumber: syz [ 2636.416955][T28668] usb 6-1: config 0 descriptor?? [ 2636.445980][T28668] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2638.035273][T28668] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 2638.204523][T28668] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2638.263594][T28668] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2638.315322][T28668] usb 4-1: config 0 has no interfaces? [ 2638.324576][T28668] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2638.408076][T28668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2638.473057][T28668] usb 4-1: config 0 descriptor?? [ 2639.208773][T26154] usb 6-1: USB disconnect, device number 3 [ 2639.655615][T20566] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2639.819173][T20566] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.834168][T20566] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 2639.874536][T20566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.932769][T20566] usb 9-1: config 0 descriptor?? [ 2640.006994][T20566] pwc: Askey VC010 type 2 USB webcam detected. [ 2640.195542][T26154] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2640.211938][T20566] pwc: send_video_command error -71 [ 2640.233683][T20566] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2640.279696][T20566] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 2640.350575][T20566] usb 9-1: USB disconnect, device number 80 [ 2640.425469][T26154] usb 10-1: config index 0 descriptor too short (expected 16619, got 75) [ 2640.474193][T26154] usb 10-1: config 12 has too many interfaces: 66, using maximum allowed: 32 [ 2640.522734][T26154] usb 10-1: config 12 has an invalid descriptor of length 119, skipping remainder of the config [ 2640.564593][T26154] usb 10-1: config 12 has 0 interfaces, different from the descriptor's value: 66 [ 2640.665728][T26154] usb 10-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2640.712959][T26154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.742094][T26154] usb 10-1: Product: syz [ 2640.765884][T26154] usb 10-1: Manufacturer: syz [ 2640.775585][T26154] usb 10-1: SerialNumber: syz [ 2640.875311][T20566] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2641.045267][T20566] usb 9-1: Using ep0 maxpacket: 8 [ 2641.070582][T20566] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 2641.109040][T20566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.143297][T20566] usb 9-1: Product: syz [ 2641.159770][T20566] usb 9-1: Manufacturer: syz [ 2641.182484][T20566] usb 9-1: SerialNumber: syz [ 2641.183560][ T30] audit: type=1326 audit(1783800707.922:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2641.226732][ T2425] bridge0: port 1(erspan0) entered blocking state [ 2641.238671][ T2425] bridge0: port 1(erspan0) entered disabled state [ 2641.282086][ T30] audit: type=1326 audit(1783800707.962:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2641.380724][ T2425] erspan0: entered allmulticast mode [ 2641.415956][ T30] audit: type=1326 audit(1783800707.962:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2641.425426][T20566] usb 9-1: config 0 descriptor?? [ 2641.505118][ T30] audit: type=1326 audit(1783800707.962:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2641.546452][ T30] audit: type=1326 audit(1783800708.022:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2641.586999][ T2425] erspan0: entered promiscuous mode [ 2641.629892][ T2426] erspan0: left allmulticast mode [ 2641.649307][ T2426] erspan0: left promiscuous mode [ 2641.659260][ T2426] bridge0: port 1(erspan0) entered disabled state [ 2641.679841][T20566] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 2641.759382][T28668] usb 4-1: string descriptor 0 read error: -71 [ 2641.836058][T28668] usb 4-1: USB disconnect, device number 72 [ 2641.998857][T20566] gspca_vc032x: reg_r err -32 [ 2642.004035][T20566] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 2642.356256][T20566] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2642.435827][ T30] audit: type=1326 audit(1783800709.152:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2642.519480][ T30] audit: type=1326 audit(1783800709.162:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2424 comm="syz.9.6307" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2642.544911][T20566] usb 4-1: Using ep0 maxpacket: 16 [ 2642.557471][T20566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2642.573062][T20566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.619219][T20566] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2642.672608][T26154] usb 10-1: USB disconnect, device number 47 [ 2642.684330][T20566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.741620][T20566] usb 4-1: config 0 descriptor?? [ 2643.191394][T20566] ntrig 0003:1B96:0008.0071: bogus close delimiter [ 2643.213181][T20566] ntrig 0003:1B96:0008.0071: item 0 4 2 10 parsing failed [ 2643.231564][T20566] ntrig 0003:1B96:0008.0071: parse failed [ 2643.238856][T20566] ntrig 0003:1B96:0008.0071: probe with driver ntrig failed with error -22 [ 2643.459958][T20566] usb 4-1: USB disconnect, device number 73 [ 2643.513007][T15814] usb 9-1: USB disconnect, device number 81 [ 2644.752032][ T2591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6317'. [ 2644.800565][ T2591] binder_alloc: 2589: binder_alloc_buf, no vma [ 2644.939239][ T2598] fuse: Bad value for 'fd' [ 2645.108628][T15814] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2645.305072][T15814] usb 9-1: Using ep0 maxpacket: 8 [ 2645.336669][T15814] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2645.391387][T15814] usb 9-1: config 179 has no interface number 0 [ 2645.428684][T15814] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2645.451817][T15814] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2645.503303][T15814] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2645.569321][T15814] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2645.619987][T15814] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2645.753320][T15814] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2645.802052][T15814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2645.924156][ T2596] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2646.751577][T20566] usb 9-1: USB disconnect, device number 82 [ 2646.751605][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2646.768342][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2649.302037][ T30] audit: type=1326 audit(1783800716.042:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.411115][ T30] audit: type=1326 audit(1783800716.092:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.506758][ T30] audit: type=1326 audit(1783800716.092:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.543773][ T30] audit: type=1326 audit(1783800716.092:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.572070][ T3124] fuse: Bad value for 'fd' [ 2649.589564][ T30] audit: type=1326 audit(1783800716.092:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.660830][ T30] audit: type=1326 audit(1783800716.122:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.772503][ T30] audit: type=1326 audit(1783800716.122:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.815276][ T30] audit: type=1326 audit(1783800716.122:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.847951][ T30] audit: type=1326 audit(1783800716.132:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.934908][ T30] audit: type=1326 audit(1783800716.182:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.5.6329" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2649.999478][T26154] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2650.155388][T26154] usb 9-1: Using ep0 maxpacket: 8 [ 2650.174043][T26154] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2650.199305][T26154] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 2650.216770][T26154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.248090][T26154] usb 9-1: Product: syz [ 2650.258386][T26154] usb 9-1: Manufacturer: syz [ 2650.264053][T26154] usb 9-1: SerialNumber: syz [ 2650.301452][T26154] usb 9-1: config 0 descriptor?? [ 2650.312668][T26154] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2651.185972][T20566] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2651.353611][T20566] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.389261][T26154] usb 9-1: USB disconnect, device number 83 [ 2651.397474][T20566] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 2651.452432][T20566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.474519][T20566] usb 6-1: config 0 descriptor?? [ 2651.514515][T20566] pwc: Askey VC010 type 2 USB webcam detected. [ 2651.760662][T20566] pwc: send_video_command error -71 [ 2651.771686][T20566] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2651.818782][T20566] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 2651.876601][T20566] usb 6-1: USB disconnect, device number 4 [ 2652.121597][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.131716][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.375427][T26154] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2652.605317][T26154] usb 6-1: Using ep0 maxpacket: 8 [ 2652.878285][T26154] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 2652.889964][T26154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.932409][T26154] usb 6-1: Product: syz [ 2652.969125][T26154] usb 6-1: Manufacturer: syz [ 2653.009268][T26154] usb 6-1: SerialNumber: syz [ 2653.072201][T26154] usb 6-1: config 0 descriptor?? [ 2653.151016][T26154] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 2653.550057][T26154] gspca_vc032x: reg_r err -32 [ 2653.560416][T28668] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2653.577487][T26154] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 2653.793374][T28668] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2653.828628][T28668] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2653.865851][T28668] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2653.902947][T28668] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.942930][T28668] usb 10-1: config 0 descriptor?? [ 2654.350532][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2654.350565][ T30] audit: type=1326 audit(1783800721.092:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2654.402153][ T30] audit: type=1326 audit(1783800721.142:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2654.511262][ T30] audit: type=1326 audit(1783800721.142:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2654.593848][ T30] audit: type=1326 audit(1783800721.142:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2654.669957][T28668] cm6533_jd 0003:0D8C:0022.0072: unknown main item tag 0x0 [ 2654.683404][ T30] audit: type=1326 audit(1783800721.142:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d71eb code=0x7ffc0000 [ 2654.719055][T28668] cm6533_jd 0003:0D8C:0022.0072: unknown main item tag 0x0 [ 2654.791083][T28668] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.0072/input/input159 [ 2654.808006][ T30] audit: type=1326 audit(1783800721.382:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2655.181917][ T30] audit: type=1326 audit(1783800721.382:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2655.207749][ T3258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.216748][ T3258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2655.240954][T28668] cm6533_jd 0003:0D8C:0022.0072: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 2655.299584][ T30] audit: type=1326 audit(1783800721.382:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2655.360552][ T30] audit: type=1326 audit(1783800721.382:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2655.423409][ T30] audit: type=1326 audit(1783800721.382:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3255 comm="syz.9.6336" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd70ec code=0x7ffc0000 [ 2655.671848][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6342'. [ 2655.950969][ T3588] binder_alloc: 3581: binder_alloc_buf, no vma [ 2656.355824][T15814] usb 10-1: reset high-speed USB device number 48 using dummy_hcd [ 2656.685903][T28668] usb 6-1: USB disconnect, device number 5 [ 2656.995379][T20566] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2657.156001][T20566] usb 9-1: Using ep0 maxpacket: 8 [ 2657.170038][T20566] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2657.185180][T20566] usb 9-1: config 179 has no interface number 0 [ 2657.193688][T20566] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2657.208538][T20566] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2657.223015][T20566] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2657.237829][T20566] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2657.250904][T20566] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2657.281307][T20566] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2657.298303][T20566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.319607][ T3791] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2657.686016][T26156] usb 10-1: USB disconnect, device number 48 [ 2657.943055][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6349'. [ 2658.240524][ T3809] syzkaller1: entered promiscuous mode [ 2658.252682][ T3809] syzkaller1: entered allmulticast mode [ 2659.800726][T26156] usb 9-1: USB disconnect, device number 84 [ 2659.800774][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2659.800823][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2660.725275][T20566] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2660.888861][T20566] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2660.939807][T20566] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2660.968056][T20566] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2660.980490][T20566] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2661.000537][T20566] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2661.021727][T20566] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2661.067759][T20566] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2661.108140][T20566] usb 10-1: Product: syz [ 2661.123724][T20566] usb 10-1: Manufacturer: syz [ 2661.188195][T20566] cdc_wdm 10-1:1.0: skipping garbage [ 2661.227223][T20566] cdc_wdm 10-1:1.0: skipping garbage [ 2661.322991][T20566] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2661.358610][T20566] cdc_wdm 10-1:1.0: Unknown control protocol [ 2661.550077][ T4123] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6356'. [ 2661.628403][ T4123] binder_alloc: 4122: binder_alloc_buf, no vma [ 2662.185266][T26156] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2662.392329][T26156] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2662.405313][T26156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.415535][T26156] usb 9-1: Product: syz [ 2662.420581][T26156] usb 9-1: Manufacturer: syz [ 2662.428434][T26156] usb 9-1: SerialNumber: syz [ 2662.985588][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 2662.985642][ T30] audit: type=1326 audit(1783800729.722:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.046730][T15814] usb 10-1: USB disconnect, device number 49 [ 2663.093690][ T30] audit: type=1326 audit(1783800729.722:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.324186][ T30] audit: type=1326 audit(1783800730.062:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.418165][ T30] audit: type=1326 audit(1783800730.082:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.468418][ T30] audit: type=1326 audit(1783800730.082:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.532170][ T30] audit: type=1326 audit(1783800730.082:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.577627][ T30] audit: type=1326 audit(1783800730.082:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.610447][ T30] audit: type=1326 audit(1783800730.082:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.3.6360" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2663.774369][T26156] cdc_ncm 9-1:1.0: failed to get mac address [ 2664.319883][ T4168] netlink: 'syz.3.6364': attribute type 1 has an invalid length. [ 2664.601035][ T4168] bond8: entered promiscuous mode [ 2664.678720][ T4168] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2664.724730][T26156] cdc_ncm 9-1:1.0: bind() failure [ 2664.767268][T26156] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2665.062771][T26156] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2665.091841][ T4242] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2665.099083][ T4242] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2665.115363][T26156] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 2665.136343][ T4242] bond8: (slave ip6gre1): Error -95 calling set_mac_address [ 2665.149793][T26156] usb 9-1: USB disconnect, device number 85 [ 2665.578820][T15814] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2665.831270][T15814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2665.880738][T26156] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 2665.913918][T15814] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2665.929417][T15814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.942948][T15814] usb 6-1: Product: syz [ 2665.951017][T15814] usb 6-1: Manufacturer: syz [ 2665.958779][T15814] usb 6-1: SerialNumber: syz [ 2665.982470][T15814] usb 6-1: config 0 descriptor?? [ 2666.133302][T26156] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2666.146124][T26156] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2666.312216][T15814] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2666.321364][T26156] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 2666.334238][T15814] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2666.354446][T26156] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.373618][T26156] usb 10-1: Product: syz [ 2666.387421][T15814] usb 6-1: USB disconnect, device number 6 [ 2666.397114][T26156] usb 10-1: Manufacturer: syz [ 2666.401823][T26156] usb 10-1: SerialNumber: syz [ 2668.348850][T15814] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2668.692527][T15814] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2668.765450][T15814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2668.795544][T15814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2668.845168][T15814] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2668.965731][T15814] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2668.979260][T15814] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2668.987497][T15814] usb 6-1: Manufacturer: syz [ 2669.047388][T15814] usb 6-1: config 0 descriptor?? [ 2669.287516][T26156] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2669.314580][T26156] usb 10-1: MIDIStreaming interface descriptor not found [ 2669.719511][T26156] usb 10-1: USB disconnect, device number 50 [ 2669.902043][T15814] appleir 0003:05AC:8243.0073: unknown main item tag 0x0 [ 2669.965311][T15814] appleir 0003:05AC:8243.0073: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2670.072723][ T2368] udevd[2368]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2670.285410][T20566] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 2670.520224][ T5119] netlink: 'syz.8.6379': attribute type 1 has an invalid length. [ 2670.539990][T20566] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2670.598686][ T5119] bond10: entered promiscuous mode [ 2670.647811][T20566] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2670.655953][ T5119] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2670.710762][T20566] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2670.973591][T20566] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2671.043642][T20566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.101862][T20566] usb 4-1: Product: syz [ 2671.121305][T20566] usb 4-1: Manufacturer: syz [ 2671.144344][T20566] usb 4-1: SerialNumber: syz [ 2671.195431][T26154] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 2671.272914][T20566] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2671.316989][T20566] cdc_ncm 4-1:1.0: bind() failure [ 2671.695495][T20566] usb 9-1: new full-speed USB device number 86 using dummy_hcd [ 2671.900889][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2671.940482][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2671.988412][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2672.036821][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.109708][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2672.172732][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.221985][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2672.292711][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.427132][ T5224] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2672.598622][T28668] usb 6-1: USB disconnect, device number 7 [ 2672.912188][T20566] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2672.982262][T20566] usb 9-1: no configurations [ 2673.000420][T26156] usb 4-1: USB disconnect, device number 74 [ 2673.013374][T20566] usb 9-1: can't read configurations, error -22 [ 2673.277107][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2673.297116][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.273863][ T5366] 8021q: adding VLAN 0 to HW filter on device .` [ 2674.320657][ T5366] 8021q: adding VLAN 0 to HW filter on device team0 [ 2674.561445][ T5366] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 2674.589476][ T5366] gretap2: left promiscuous mode [ 2674.696216][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2674.751748][ T5366] batadv0: entered promiscuous mode [ 2674.808879][ T5366] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2674.864516][ T5366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2674.930593][ T5366] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2674.994044][T20566] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 2675.511250][ T5780] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2675.546187][T20566] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2675.561243][ T5780] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2675.715124][T26156] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2675.751918][ T5585] netlink: 'syz.9.6393': attribute type 1 has an invalid length. [ 2675.949513][T26156] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2675.967468][T26156] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2675.976925][T26156] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2675.986647][T26156] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.005418][T26156] usb 9-1: config 0 descriptor?? [ 2676.145727][ T5585] bond12: entered promiscuous mode [ 2676.236498][ T5585] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2676.275737][T28668] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2676.517559][T20566] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2676.712126][ T5583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.738722][ T5583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.784560][ T5583] sctp: [Deprecated]: syz.8.6394 (pid 5583) Use of int in max_burst socket option. [ 2676.784560][ T5583] Use struct sctp_assoc_value instead [ 2677.203025][T26156] Bluetooth: Can't get version to change to load ram patch err [ 2677.218617][T26156] Bluetooth: Loading sysconfig file failed [ 2677.233955][T26156] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 2677.293108][T26156] usb 9-1: USB disconnect, device number 88 [ 2677.474363][ T5714] netlink: 'syz.9.6395': attribute type 1 has an invalid length. [ 2677.543304][ T5714] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.6395'. [ 2677.813036][T26156] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2678.045227][T26156] usb 9-1: Using ep0 maxpacket: 8 [ 2678.063697][T26156] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2678.078148][T26156] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2678.087843][T26156] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2678.097689][T26156] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2678.153887][T26156] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2678.172466][T26156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2678.193115][T26156] usb 9-1: Product: syz [ 2678.207671][T26156] usb 9-1: Manufacturer: syz [ 2678.212302][T26156] usb 9-1: SerialNumber: syz [ 2678.232132][ T5711] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2678.267449][T26156] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2678.276898][T26156] usbtest 9-1:1.0: Linux user mode ISO test driver [ 2678.283550][T26156] usbtest 9-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2678.561751][ T5711] syz_tun: entered promiscuous mode [ 2678.757216][T28668] usb 9-1: USB disconnect, device number 89 [ 2679.090887][ T5833] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6401'. [ 2679.150658][ T5833] openvswitch: netlink: Message has 512 unknown bytes. [ 2679.245533][T28668] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2679.407320][T28668] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2679.441867][T28668] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.565664][T28668] usb 4-1: config 0 has no interfaces? [ 2679.619398][T28668] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2679.635333][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2679.691744][T28668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.763102][T28668] usb 4-1: config 0 descriptor?? [ 2680.384867][T26154] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2680.542811][ T6044] netlink: 'syz.8.6405': attribute type 1 has an invalid length. [ 2680.571258][T26154] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2680.629343][T26154] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2680.664352][T26154] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.715757][T26154] usb 10-1: Product: syz [ 2680.728515][ T6044] bond11: entered promiscuous mode [ 2680.741983][T26154] usb 10-1: Manufacturer: syz [ 2680.750404][ T6044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2680.760120][T26154] usb 10-1: SerialNumber: syz [ 2680.780593][T26154] usb 10-1: config 0 descriptor?? [ 2680.841758][T26156] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2681.032621][T26154] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2681.041553][T26154] dvb_usb_af9035 10-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2681.073791][T26154] usb 10-1: USB disconnect, device number 51 [ 2681.135079][T26156] usb 6-1: Using ep0 maxpacket: 8 [ 2681.147818][T26156] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2681.161312][T26156] usb 6-1: config 0 has no interface number 0 [ 2681.167465][T26156] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2681.178429][T26156] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2681.198008][T26156] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2681.209006][T26156] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2681.221991][T26156] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2681.247935][T26156] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.311280][T26156] usb 6-1: config 0 descriptor?? [ 2681.343853][T26156] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2681.845380][T26154] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2682.003295][T20566] usb 6-1: USB disconnect, device number 8 [ 2682.018567][T26154] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.046510][T20566] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2682.061479][T26154] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2682.096427][T26154] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2682.131485][T26154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2682.185882][T26154] usb 9-1: config 0 descriptor?? [ 2682.836899][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2682.862131][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2682.891445][ T6249] sctp: [Deprecated]: syz.8.6407 (pid 6249) Use of int in max_burst socket option. [ 2682.891445][ T6249] Use struct sctp_assoc_value instead [ 2683.250237][ T6258] cgroup: fork rejected by pids controller in /syz9 [ 2683.338532][T26154] Bluetooth: Can't get version to change to load ram patch err [ 2683.370969][T26154] Bluetooth: Loading sysconfig file failed [ 2683.408408][T26154] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 2683.504952][T26154] usb 9-1: USB disconnect, device number 90 [ 2684.916857][T28668] usb 4-1: string descriptor 0 read error: -32 [ 2685.390688][ T6781] netlink: 'syz.8.6416': attribute type 1 has an invalid length. [ 2685.502227][ T6781] bond12: entered promiscuous mode [ 2685.530682][ T6781] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2685.571054][T26156] usb 4-1: USB disconnect, device number 75 [ 2686.881174][ T7099] dummy0: entered allmulticast mode [ 2686.897787][ T7099] dummy0: left allmulticast mode [ 2686.968272][ T7099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2687.836458][T28668] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2687.955188][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2688.047629][T28668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2688.087541][T28668] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2688.101001][T28668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.131518][T28668] usb 4-1: Product: syz [ 2688.142485][T28668] usb 4-1: Manufacturer: syz [ 2688.149925][T28668] usb 4-1: SerialNumber: syz [ 2688.157478][T28668] usb 4-1: config 0 descriptor?? [ 2688.437309][T28668] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2688.479447][T28668] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2688.602548][T28668] usb 4-1: USB disconnect, device number 76 [ 2690.135342][T28668] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2690.295706][T28668] usb 9-1: Using ep0 maxpacket: 8 [ 2690.335640][T28668] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2690.362653][T28668] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 2690.398956][T28668] usb 9-1: config 0 has no interface number 0 [ 2690.419619][T28668] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2690.450049][T28668] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2690.478220][T28668] usb 9-1: config 0 interface 88 has no altsetting 0 [ 2690.504012][T28668] usb 9-1: language id specifier not provided by device, defaulting to English [ 2690.533239][T28668] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2690.557931][T28668] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 2690.576751][T28668] usb 9-1: Product: syz [ 2690.590791][T28668] usb 9-1: SerialNumber: syz [ 2690.620331][T28668] usb 9-1: config 0 descriptor?? [ 2690.735542][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'. [ 2691.139145][T28668] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input161 [ 2691.246544][T28668] usb 9-1: USB disconnect, device number 91 [ 2693.471984][ T7653] input: syz1 as /devices/virtual/input/input162 [ 2695.200160][ T7964] program syz.9.6437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2695.385222][T28668] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2695.557267][T28668] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2695.816560][T28668] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2695.861266][T28668] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2695.896654][T28668] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2695.924086][ T7964] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 2696.013971][T28668] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2696.149674][T28668] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2696.200513][T28668] usb 9-1: Manufacturer: syz [ 2696.231548][T28668] usb 9-1: config 0 descriptor?? [ 2696.672097][T28668] appleir 0003:05AC:8243.0074: unknown main item tag 0x0 [ 2696.749828][T28668] appleir 0003:05AC:8243.0074: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2697.135667][T28668] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2697.420527][T28668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2697.527145][T28668] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2697.603399][T28668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.643696][T28668] usb 6-1: Product: syz [ 2697.660690][T28668] usb 6-1: Manufacturer: syz [ 2697.683011][T28668] usb 6-1: SerialNumber: syz [ 2697.768349][T28668] usb 6-1: config 0 descriptor?? [ 2697.895563][T26156] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 2698.153809][T26156] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.181967][T15814] usb 9-1: reset high-speed USB device number 92 using dummy_hcd [ 2698.243148][T26156] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2698.309211][T26156] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2698.468073][T26156] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2698.480032][T26156] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.491309][T26156] usb 10-1: Product: syz [ 2698.496186][T26156] usb 10-1: Manufacturer: syz [ 2698.515750][T26156] usb 10-1: SerialNumber: syz [ 2698.525472][T28668] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2698.555309][T28668] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2698.608214][T26156] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 2698.641509][T28668] usb 6-1: USB disconnect, device number 9 [ 2698.698863][T26156] cdc_ncm 10-1:1.0: bind() failure [ 2699.052592][T26157] usb 9-1: USB disconnect, device number 92 [ 2699.456877][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6444'. [ 2699.755928][T26157] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2700.111086][T26157] usb 4-1: Using ep0 maxpacket: 32 [ 2700.247361][T26157] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2700.257220][T26157] usb 4-1: config 0 has no interface number 0 [ 2700.361003][T26157] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2700.371590][T26157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.382634][T26157] usb 4-1: Product: syz [ 2700.391475][T26157] usb 4-1: Manufacturer: syz [ 2700.399912][T26157] usb 4-1: SerialNumber: syz [ 2700.408800][T26157] usb 4-1: config 0 descriptor?? [ 2700.432861][T26157] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2700.486076][T26154] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2700.646463][T26154] usb 9-1: Using ep0 maxpacket: 8 [ 2700.656239][T26154] usb 9-1: config 255 has an invalid interface number: 106 but max is 0 [ 2700.656351][T26157] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2700.680506][T26154] usb 9-1: config 255 has no interface number 0 [ 2700.689216][T26154] usb 9-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2700.701760][T26157] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2700.703146][T26154] usb 9-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2700.724233][T26154] usb 9-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 2700.740570][T26154] usb 9-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2700.773300][T26154] usb 9-1: config 255 interface 106 has no altsetting 0 [ 2700.800487][T26154] usb 9-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=9a.00 [ 2700.811116][T26154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.819713][T26154] usb 9-1: Product: syz [ 2700.823908][T26154] usb 9-1: Manufacturer: syz [ 2700.830616][T26154] usb 9-1: SerialNumber: syz [ 2701.061928][T28668] usb 10-1: USB disconnect, device number 52 [ 2701.125440][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.194233][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2701.296212][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.344645][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2701.507324][ T8195] usb usb8: usbfs: process 8195 (syz.3.6444) did not claim interface 0 before use [ 2701.696615][T20566] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 2701.858832][T20566] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2701.873309][T20566] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2701.890631][T20566] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2701.918338][T20566] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2701.982939][T20566] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2702.004447][T20566] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2702.019156][T20566] usb 10-1: Manufacturer: syz [ 2702.050980][T20566] usb 10-1: config 0 descriptor?? [ 2702.169778][T26154] sierra 9-1:255.106: Sierra USB modem converter detected [ 2702.240817][T26154] usb 9-1: Sierra USB modem converter now attached to ttyUSB2 [ 2702.262578][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2702.263289][T26155] usb 4-1: USB disconnect, device number 77 [ 2702.333355][T26154] usb 9-1: Sierra USB modem converter now attached to ttyUSB3 [ 2702.384602][T26155] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2702.447794][T26154] usb 9-1: Sierra USB modem converter now attached to ttyUSB4 [ 2702.478349][T26155] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2702.510128][T26154] usb 9-1: USB disconnect, device number 93 [ 2702.533442][T26155] quatech2 4-1:0.51: device disconnected [ 2702.632956][T26154] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 2702.671091][T20566] appleir 0003:05AC:8243.0075: unknown main item tag 0x0 [ 2702.718488][T26154] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 2702.730888][T20566] appleir 0003:05AC:8243.0075: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 2702.751026][T26154] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 2702.790648][T26154] sierra 9-1:255.106: device disconnected [ 2703.203672][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6453'. [ 2703.312244][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6453'. [ 2703.525078][ T8536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.569153][T26157] usb 9-1: new low-speed USB device number 94 using dummy_hcd [ 2703.696777][T26154] usb 10-1: USB disconnect, device number 53 [ 2703.820645][T26157] usb 9-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2703.856302][T26157] usb 9-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.887216][T26157] usb 9-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2703.905084][T26157] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2703.954885][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2703.997377][T26157] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2704.015368][T26157] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.075791][T26157] usb 9-1: config 0 descriptor?? [ 2704.340731][ T30] audit: type=1326 audit(1783800771.082:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2704.378837][ T30] audit: type=1326 audit(1783800771.082:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2704.660778][ T30] audit: type=1326 audit(1783800771.082:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2704.833827][ T30] audit: type=1326 audit(1783800771.082:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2704.942585][ T30] audit: type=1326 audit(1783800771.082:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.003465][ T30] audit: type=1326 audit(1783800771.082:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.030851][ T30] audit: type=1326 audit(1783800771.092:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.070124][ T30] audit: type=1326 audit(1783800771.092:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.140231][ T30] audit: type=1326 audit(1783800771.092:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.169117][ T30] audit: type=1326 audit(1783800771.092:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.8.6456" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 2705.198600][T26154] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2705.259674][T15814] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 2705.358302][T26154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2705.376004][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.388811][T26154] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2705.389847][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.400802][T26154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.435305][T26154] usb 4-1: Product: syz [ 2705.442867][T26154] usb 4-1: Manufacturer: syz [ 2705.451724][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.461386][T26154] usb 4-1: SerialNumber: syz [ 2705.468918][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.482014][T26154] usb 4-1: config 0 descriptor?? [ 2705.620190][T15814] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2705.622751][ T8553] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6459'. [ 2705.639334][T15814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.743702][T26154] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2705.752496][T15814] usb 10-1: selecting invalid altsetting 3 [ 2705.763046][T26154] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2705.772848][T15814] comedi comedi5: could not set alternate setting 3 in high speed [ 2705.772892][T15814] usbduxsigma 10-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2705.802856][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.813810][T15814] usbduxsigma 10-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2705.830999][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.848720][ T8538] ALSA: mixer_oss: invalid OSS volume '' [ 2705.859503][ T8538] ALSA: mixer_oss: invalid OSS volume 'ѥϮvvcr^IjDw?q)AE' [ 2705.868997][ T8538] ALSA: mixer_oss: invalid OSS volume '#yw܏#h8' [ 2705.880907][T26154] usb 4-1: USB disconnect, device number 78 [ 2705.892731][ T8538] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 2705.902512][ T8538] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 2706.073000][ T8538] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 2706.081911][ T8538] ALSA: mixer_oss: invalid OSS volume '+8' [ 2706.164980][T26157] usbhid 9-1:0.0: can't add hid device: -71 [ 2706.181990][T26157] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2706.214593][T26157] usb 9-1: USB disconnect, device number 94 [ 2707.115112][T26154] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2707.268870][T26154] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2707.280647][T26154] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2707.293044][T26154] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2707.312069][T26154] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.334020][T26154] usb 9-1: config 0 descriptor?? [ 2707.812731][T26157] usb 10-1: USB disconnect, device number 54 [ 2707.970840][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2707.988715][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.020433][ T8563] sctp: [Deprecated]: syz.8.6462 (pid 8563) Use of int in max_burst socket option. [ 2708.020433][ T8563] Use struct sctp_assoc_value instead [ 2708.262633][T26154] Bluetooth: Can't get version to change to load ram patch err [ 2708.283882][T26154] Bluetooth: Loading sysconfig file failed [ 2708.292099][T26154] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 2708.343841][T26154] usb 9-1: USB disconnect, device number 95 [ 2708.831756][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6464'. [ 2708.946274][T20566] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2709.125554][T20566] usb 9-1: Using ep0 maxpacket: 16 [ 2709.149418][T20566] usb 9-1: config 127 has an invalid interface number: 92 but max is 0 [ 2709.181632][T20566] usb 9-1: config 127 has no interface number 0 [ 2709.205910][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2709.258684][T20566] usb 9-1: config 127 interface 92 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 2709.293571][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6468'. [ 2709.307325][T20566] usb 9-1: config 127 interface 92 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 2709.360066][T20566] usb 9-1: config 127 interface 92 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 2709.373385][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6468'. [ 2709.390836][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0x4 has an invalid bInterval 255, changing to 7 [ 2709.428913][T20566] usb 9-1: config 127 interface 92 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 64 [ 2709.522257][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0x8 has an invalid bInterval 252, changing to 11 [ 2709.577910][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2709.602923][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2709.623260][T20566] usb 9-1: config 127 interface 92 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 2709.683770][T20566] usb 9-1: config 127 interface 92 altsetting 11 endpoint 0xD has invalid maxpacket 415, setting to 64 [ 2709.767147][T20566] usb 9-1: config 127 interface 92 has no altsetting 0 [ 2709.844120][T20566] usb 9-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=e0.ca [ 2709.965341][T20566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.016160][T20566] usb 9-1: Product: syz [ 2710.027150][T20566] usb 9-1: Manufacturer: syz [ 2710.059753][T20566] usb 9-1: SerialNumber: syz [ 2710.087794][ T8771] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2710.195470][T15814] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 2710.373992][T15814] usb 10-1: config index 0 descriptor too short (expected 28277, got 36) [ 2710.424815][T15814] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2710.464015][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6465'. [ 2710.485770][T15814] usb 10-1: config 0 has no interfaces? [ 2710.493031][T15814] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2710.579254][T15814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.606995][T15814] usb 10-1: config 0 descriptor?? [ 2710.687315][T20566] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 2710.706348][T20566] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 2710.730036][T20566] gspca_pac7302 9-1:127.92: probe with driver gspca_pac7302 failed with error -71 [ 2710.752646][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 2710.752666][ T30] audit: type=1326 audit(1783800777.492:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2710.837475][T20566] usb 9-1: USB disconnect, device number 96 [ 2710.847638][ T30] audit: type=1326 audit(1783800777.492:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2710.918427][ T30] audit: type=1326 audit(1783800777.492:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2710.955424][ T30] audit: type=1326 audit(1783800777.492:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2710.955578][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.992803][ T30] audit: type=1326 audit(1783800777.492:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.029376][ T30] audit: type=1326 audit(1783800777.492:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.058460][ T30] audit: type=1326 audit(1783800777.492:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.059202][T15814] usb 10-1: USB disconnect, device number 55 [ 2711.085772][ T30] audit: type=1326 audit(1783800777.492:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.130536][ T30] audit: type=1326 audit(1783800777.492:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.209072][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6466'. [ 2711.299056][ T30] audit: type=1326 audit(1783800778.042:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.6471" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 2711.660977][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.945611][T20566] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2712.105275][T20566] usb 4-1: Using ep0 maxpacket: 32 [ 2712.116124][T20566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2712.130025][T20566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2712.150647][T20566] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2712.170870][T20566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2712.190150][T20566] usb 4-1: config 0 descriptor?? [ 2712.227468][T20566] hub 4-1:0.0: USB hub found [ 2712.426657][T20566] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2712.573099][T15814] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2712.651469][T20566] hid-generic 0003:046D:C31C.0076: item fetching failed at offset 0/1 [ 2712.691871][T20566] hid-generic 0003:046D:C31C.0076: probe with driver hid-generic failed with error -22 [ 2712.840581][T15814] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2712.851211][T15814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2712.862215][T15814] usb 9-1: config 0 descriptor?? [ 2712.903957][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2712.921947][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2713.067025][T20566] usb 4-1: USB disconnect, device number 79 [ 2713.225838][T15814] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2713.260426][T15814] [drm:udl_init] *ERROR* Selecting channel failed [ 2713.279390][T15814] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 2713.286147][T15814] [drm] Initialized udl on minor 2 [ 2713.331000][T15814] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2713.339765][T15814] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2713.356993][T15814] usb 9-1: USB disconnect, device number 97 [ 2713.367954][T26157] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2713.376617][T26157] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 2713.384675][T26157] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2713.572705][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.580341][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.006834][T26155] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 2714.195645][T15814] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2714.197431][T26155] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2714.220676][T26155] usb 4-1: config 0 has no interface number 0 [ 2714.235456][T26155] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2714.291017][T26155] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2714.327615][T26155] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2714.348306][T26155] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2714.368303][T26155] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2714.395643][T26155] usb 4-1: Product: syz [ 2714.400059][T26155] usb 4-1: SerialNumber: syz [ 2714.411830][T15814] usb 9-1: Using ep0 maxpacket: 16 [ 2714.421373][T26155] usb 4-1: config 0 descriptor?? [ 2714.439475][T26155] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 2714.461393][T26155] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input164 [ 2714.477516][T15814] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 2714.516877][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.666041][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.714933][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.860618][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.941691][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6480'. [ 2714.992972][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.128316][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.192546][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.211322][T15814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.245140][T15814] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2715.290940][T15814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 2715.343513][T15814] usb 9-1: SerialNumber: syz [ 2715.408589][T15814] usb 9-1: config 0 descriptor?? [ 2715.487608][T15814] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input165 [ 2715.591226][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.599348][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.607156][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.614524][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.622374][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.629794][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.637115][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.644266][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.651657][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.659319][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2715.669487][T26155] usb 4-1: USB disconnect, device number 80 [ 2715.676318][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2715.749913][ T8922] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6479'. [ 2716.045683][ T9015] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2716.193767][ T4975] bcm5974 9-1:0.0: could not read from device [ 2716.214269][ T4975] bcm5974 9-1:0.0: could not read from device [ 2716.261490][T26155] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2716.266904][T15814] usb 9-1: USB disconnect, device number 98 [ 2716.322219][ T4975] bcm5974 9-1:0.0: could not read from device [ 2717.045466][T26155] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2717.212165][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2717.212185][ T30] audit: type=1800 audit(1783800783.882:2000): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6487" name="bus" dev="ramfs" ino=180153 res=0 errno=0 [ 2717.274258][T26155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2717.307495][T26155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2717.364388][T26155] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2717.410457][T26155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.468978][T26155] usb 10-1: config 0 descriptor?? [ 2718.081053][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2718.238476][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2718.348152][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.394279][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.426217][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.458873][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.492736][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.519408][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.544114][T26155] pyra 0003:1E7D:2CF6.0077: unknown main item tag 0x0 [ 2718.605737][T26155] pyra 0003:1E7D:2CF6.0077: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 2718.661513][T26155] pyra 0003:1E7D:2CF6.0077: couldn't init struct pyra_device [ 2718.712044][T26155] pyra 0003:1E7D:2CF6.0077: couldn't install mouse [ 2718.759605][T26155] pyra 0003:1E7D:2CF6.0077: probe with driver pyra failed with error -71 [ 2718.802150][T26155] usb 10-1: USB disconnect, device number 56 [ 2718.992398][ T9361] fido_id[9361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2719.871458][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6493'. [ 2719.900196][ T9485] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 2719.962139][ T30] audit: type=1326 audit(1783800786.702:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.3.6494" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f380ec code=0x0 [ 2720.355997][T26155] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2720.516608][T26155] usb 10-1: Using ep0 maxpacket: 8 [ 2720.525583][T26155] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2720.557914][T26155] usb 10-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 2720.574316][T26155] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.591641][T26155] usb 10-1: Product: syz [ 2720.599966][T26155] usb 10-1: Manufacturer: syz [ 2720.607289][T26155] usb 10-1: SerialNumber: syz [ 2720.636471][T26155] usb 10-1: config 0 descriptor?? [ 2720.661129][T26155] gspca_main: t613-2.14.0 probing 17a1:0128 [ 2721.026598][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2721.046800][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2721.184062][T26155] gspca_t613: unknown sensor 0000 [ 2721.214094][T26155] t613 10-1:0.0: probe with driver t613 failed with error -22 [ 2721.297857][T26155] usb 10-1: USB disconnect, device number 57 [ 2723.992805][T10008] vlan2: entered promiscuous mode [ 2724.045049][T10008] hsr0: entered promiscuous mode [ 2724.078379][T10008] vlan2: entered allmulticast mode [ 2724.099874][T10008] hsr0: entered allmulticast mode [ 2724.130318][T10008] hsr_slave_0: entered allmulticast mode [ 2724.835704][T26157] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2724.945421][T26155] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2725.122953][T26155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2725.157102][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2725.161105][T26155] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2725.165979][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2725.217999][T26155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2725.252569][T26155] usb 4-1: Product: syz [ 2725.263820][T26155] usb 4-1: Manufacturer: syz [ 2725.272234][T26155] usb 4-1: SerialNumber: syz [ 2725.296752][T26155] usb 4-1: config 0 descriptor?? [ 2725.552372][T10330] input: syz0 as /devices/virtual/input/input166 [ 2725.582396][T26155] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2725.602045][T26155] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2725.684032][T10330] input: failed to attach handler leds to device input166, error: -6 [ 2725.708996][T26155] usb 4-1: USB disconnect, device number 81 [ 2725.810377][T10323] input: syz1 as /devices/virtual/input/input167 [ 2726.861531][ T8090] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2726.990261][ T9898] ip6gretap1: left promiscuous mode [ 2727.085318][ T8090] usb 9-1: Using ep0 maxpacket: 8 [ 2727.106033][ T8090] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 2727.116281][ T8090] usb 9-1: config 0 has no interface number 0 [ 2727.122871][ T8090] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2727.144287][ T8090] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 2727.155357][ T8090] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2727.178779][ T8090] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2727.202310][ T8090] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2727.308429][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2727.348863][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2727.400554][ T8090] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2727.434798][ T8090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2727.463346][ T8090] usb 9-1: Product: syz [ 2727.469643][ T8090] usb 9-1: Manufacturer: syz [ 2727.476328][ T8090] usb 9-1: SerialNumber: syz [ 2727.491149][ T8090] usb 9-1: config 0 descriptor?? [ 2727.503785][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6519'. [ 2727.563526][T11226] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2727.584328][T11226] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.595905][T11226] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2727.604820][T11226] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.618969][T11226] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2727.631592][T10548] netlink: 'syz.2.6519': attribute type 1 has an invalid length. [ 2727.645654][T11226] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.654679][T11226] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2727.669791][T11226] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.753052][ T8090] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2728.775056][ T8090] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2728.812889][T20566] usb 9-1: USB disconnect, device number 99 [ 2728.998082][ T8090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2729.039112][ T8090] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2729.072242][ T8090] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2729.085527][ T8090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.098388][ T8090] usb 4-1: config 0 descriptor?? [ 2729.151950][ T8090] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2729.161930][ T8090] dvb-usb: bulk message failed: -22 (3/0) [ 2729.177859][ T8090] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2729.222706][ T8090] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2729.232668][ T8090] usb 4-1: media controller created [ 2729.240809][ T8090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2729.256942][ T8090] dvb-usb: bulk message failed: -22 (6/0) [ 2729.262768][ T8090] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2729.421486][ T8090] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input168 [ 2729.478024][ T8090] dvb-usb: schedule remote query interval to 150 msecs. [ 2729.486731][ T8090] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2729.540055][ T8090] usb 4-1: USB disconnect, device number 82 [ 2729.569918][T20566] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2729.652818][ T8090] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2729.755335][T20566] usb 6-1: Using ep0 maxpacket: 16 [ 2729.772875][T20566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2729.788047][T20566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2729.800150][T20566] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2729.816798][T20566] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2729.826297][T20566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.859571][T20566] usb 6-1: config 0 descriptor?? [ 2730.115755][T26155] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2730.275701][T26155] usb 9-1: Using ep0 maxpacket: 16 [ 2730.292138][T26155] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2730.309432][T26155] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25701, setting to 1024 [ 2730.332001][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.345817][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.360508][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.372194][T26155] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2730.386531][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.393851][T26155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.403134][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.411893][T26155] usb 9-1: Product: syz [ 2730.427197][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.441138][T26155] usb 9-1: Manufacturer: syz [ 2730.453162][T26155] usb 9-1: SerialNumber: syz [ 2730.463562][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.491593][T26155] usb 9-1: config 0 descriptor?? [ 2730.512464][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.534562][T10872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2730.556060][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.580204][T20566] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2730.596408][T10876] netlink: 'syz.3.6525': attribute type 10 has an invalid length. [ 2730.637905][T26155] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2730.652597][T10876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6525'. [ 2730.745059][T20566] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0078/input/input169 [ 2730.779895][T10876] geneve1: entered promiscuous mode [ 2730.799525][T20566] microsoft 0003:045E:07DA.0078: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2730.813713][T10876] team0: Port device geneve1 added [ 2730.859173][T20566] usb 6-1: USB disconnect, device number 11 [ 2730.945923][T26155] usb 9-1: USB disconnect, device number 100 [ 2730.973047][ T8090] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 2730.986126][T28497] usb 9-1: Failed to submit usb control message: -71 [ 2731.023640][T28497] usb 9-1: unable to send the bmi data to the device: -71 [ 2731.051328][T28497] usb 9-1: unable to get target info from device [ 2731.057866][T28497] usb 9-1: could not get target info (-71) [ 2731.063730][T28497] usb 9-1: could not probe fw (-71) [ 2731.098088][T10881] fido_id[10881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2731.294007][ T8090] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2731.339358][ T8090] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2731.352008][ T8090] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2731.377559][ T8090] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2731.388878][ T8090] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2731.430554][ T8090] usb 4-1: Product: syz [ 2731.439499][ T8090] usb 4-1: Manufacturer: syz [ 2731.444156][ T8090] usb 4-1: SerialNumber: syz [ 2731.455212][ T8090] usb 4-1: config 0 descriptor?? [ 2731.474363][ T8090] usb 4-1: selecting invalid altsetting 0 [ 2731.631327][T10883] @0: renamed from virt_wifi0 [ 2731.924207][T26155] usb 4-1: USB disconnect, device number 83 [ 2732.509969][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6524'. [ 2732.535073][ T8090] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2732.718835][ T8090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2732.753792][ T8090] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2732.801058][ T8090] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2732.867343][ T8090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.924504][ T8090] usb 6-1: config 0 descriptor?? [ 2733.744783][T26155] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2733.864427][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.910685][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.937328][T26155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2733.985712][T26155] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 2733.995945][T26155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.010515][T26155] usb 4-1: Product: syz [ 2734.017787][T26155] usb 4-1: Manufacturer: syz [ 2734.023653][T26155] usb 4-1: SerialNumber: syz [ 2734.025528][T11104] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6533'. [ 2734.048768][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.053676][T10994] sctp: [Deprecated]: syz.5.6528 (pid 10994) Use of int in max_burst socket option. [ 2734.053676][T10994] Use struct sctp_assoc_value instead [ 2734.078208][T26155] usb 4-1: config 0 descriptor?? [ 2734.201810][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.243211][ T8090] Bluetooth: Can't get version to change to load ram patch err [ 2734.263809][ T8090] Bluetooth: Loading sysconfig file failed [ 2734.300526][ T8090] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 2734.311345][ T8090] usb 6-1: USB disconnect, device number 12 [ 2734.556292][ T5780] [ 2734.558674][ T5780] ============================================ [ 2734.564840][ T5780] WARNING: possible recursive locking detected [ 2734.571104][ T5780] syzkaller #0 Tainted: G L [ 2734.577098][ T5780] -------------------------------------------- [ 2734.583503][ T5780] kworker/u8:8/5780 is trying to acquire lock: [ 2734.589669][ T5780] ffff888057ae6958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 2734.599602][ T5780] [ 2734.599602][ T5780] but task is already holding lock: [ 2734.606977][ T5780] ffff888058288158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 2734.616848][ T5780] [ 2734.616848][ T5780] other info that might help us debug this: [ 2734.625006][ T5780] Possible unsafe locking scenario: [ 2734.625006][ T5780] [ 2734.632564][ T5780] CPU0 [ 2734.636033][ T5780] ---- [ 2734.639385][ T5780] lock(&qdisc_xmit_lock_key#4); [ 2734.644460][ T5780] lock(&qdisc_xmit_lock_key#4); [ 2734.649507][ T5780] [ 2734.649507][ T5780] *** DEADLOCK *** [ 2734.649507][ T5780] [ 2734.657694][ T5780] May be due to missing lock nesting notation [ 2734.657694][ T5780] [ 2734.666386][ T5780] 11 locks held by kworker/u8:8/5780: [ 2734.671801][ T5780] #0: ffff888029dd1140 ((wq_completion)bond2#5){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2734.682899][ T5780] #1: ffffc90004c37c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2734.695789][ T5780] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 2734.705453][ T5780] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 2734.715439][ T5780] #4: ffff888034b40228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 2734.728094][ T5780] #5: ffff888058288158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 2734.738418][ T5780] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 2734.747326][ T5780] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 2734.757094][ T5780] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 2734.765898][ T5780] #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 2734.775860][ T5780] #10: ffff88807606e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 2734.788615][ T5780] [ 2734.788615][ T5780] stack backtrace: [ 2734.794512][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 2734.794534][ T5780] Tainted: [L]=SOFTLOCKUP [ 2734.794541][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2734.794553][ T5780] Workqueue: bond2 bond_alb_monitor [ 2734.794576][ T5780] Call Trace: [ 2734.794636][ T5780] [ 2734.794689][ T5780] dump_stack_lvl+0xe8/0x150 [ 2734.794770][ T5780] print_deadlock_bug+0x279/0x290 [ 2734.794796][ T5780] __lock_acquire+0x24df/0x2cf0 [ 2734.794820][ T5780] ? __pfx_netif_skb_features+0x10/0x10 [ 2734.794857][ T5780] ? ret_from_fork_asm+0x1a/0x30 [ 2734.794875][ T5780] ? __lock_acquire+0x683/0x2cf0 [ 2734.794895][ T5780] ? sch_direct_xmit+0x15f/0x4c0 [ 2734.794914][ T5780] lock_acquire+0x106/0x350 [ 2734.794942][ T5780] ? sch_direct_xmit+0x15f/0x4c0 [ 2734.794967][ T5780] _raw_spin_lock+0x2e/0x40 [ 2734.795010][ T5780] ? sch_direct_xmit+0x15f/0x4c0 [ 2734.795029][ T5780] sch_direct_xmit+0x15f/0x4c0 [ 2734.795050][ T5780] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2734.795071][ T5780] ? arp_solicit+0xba0/0xe40 [ 2734.795092][ T5780] __dev_queue_xmit+0x1754/0x37f0 [ 2734.795108][ T5780] ? bond_alb_monitor+0x3d0/0x17c0 [ 2734.795126][ T5780] ? process_scheduled_works+0xa8e/0x14e0 [ 2734.795146][ T5780] ? __dev_queue_xmit+0x29b/0x37f0 [ 2734.795163][ T5780] ? __lock_acquire+0x683/0x2cf0 [ 2734.795183][ T5780] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2734.795201][ T5780] ? rcu_is_watching+0x15/0xb0 [ 2734.795230][ T5780] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2734.795259][ T5780] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2734.795276][ T5780] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2734.795298][ T5780] ? NF_HOOK+0xa2/0x3c0 [ 2734.795314][ T5780] ? lock_acquire+0x106/0x350 [ 2734.795337][ T5780] ? NF_HOOK+0xa2/0x3c0 [ 2734.795357][ T5780] NF_HOOK+0x33a/0x3c0 [ 2734.795377][ T5780] ? __pfx_arp_xmit_finish+0x10/0x10 [ 2734.795397][ T5780] ? NF_HOOK+0xa2/0x3c0 [ 2734.795414][ T5780] ? __pfx_NF_HOOK+0x10/0x10 [ 2734.795433][ T5780] ? lock_acquire+0x106/0x350 [ 2734.795454][ T5780] ? arp_xmit+0x23/0x270 [ 2734.795473][ T5780] ? inet_addr_type_dev_table+0x25/0x190 [ 2734.795534][ T5780] arp_xmit+0x16c/0x270 [ 2734.795552][ T5780] ? arp_xmit+0x23/0x270 [ 2734.795571][ T5780] arp_solicit+0xbdc/0xe40 [ 2734.795595][ T5780] ? __pfx_arp_solicit+0x10/0x10 [ 2734.795615][ T5780] ? __neigh_event_send+0xea4/0x1510 [ 2734.795669][ T5780] ? __pfx_arp_solicit+0x10/0x10 [ 2734.795690][ T5780] __neigh_event_send+0xf0c/0x1510 [ 2734.795713][ T5780] neigh_resolve_output+0x1a1/0x720 [ 2734.795735][ T5780] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 2734.795760][ T5780] ? ip_finish_output2+0x3de/0x10b0 [ 2734.795781][ T5780] ip_finish_output2+0xc4b/0x10b0 [ 2734.795802][ T5780] ? ip_skb_dst_mtu+0x811/0xa50 [ 2734.795822][ T5780] ? ip_finish_output2+0x3de/0x10b0 [ 2734.795843][ T5780] ? ip_finish_output+0x40b/0x530 [ 2734.795865][ T5780] ip_output+0x29f/0x450 [ 2734.795886][ T5780] ? ip_output+0x5a/0x450 [ 2734.795904][ T5780] iptunnel_xmit+0x626/0xd10 [ 2734.795931][ T5780] ip_tunnel_xmit+0x195b/0x2040 [ 2734.795966][ T5780] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 2734.795988][ T5780] ? __pfx_gre_build_header+0x10/0x10 [ 2734.796075][ T5780] ? kfree+0x1c5/0x640 [ 2734.796091][ T5780] ? pskb_expand_head+0x469/0x13a0 [ 2734.796128][ T5780] __gre_xmit+0x19e/0x240 [ 2734.796148][ T5780] ? __pfx___gre_xmit+0x10/0x10 [ 2734.796167][ T5780] erspan_xmit+0xad5/0x1590 [ 2734.796190][ T5780] ? __pfx_erspan_xmit+0x10/0x10 [ 2734.796209][ T5780] ? __lock_acquire+0x683/0x2cf0 [ 2734.796230][ T5780] dev_hard_start_xmit+0x2cd/0x830 [ 2734.796252][ T5780] sch_direct_xmit+0x257/0x4c0 [ 2734.796273][ T5780] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2734.796293][ T5780] ? __switch_to_asm+0x70/0x70 [ 2734.796310][ T5780] __dev_queue_xmit+0x1754/0x37f0 [ 2734.796329][ T5780] ? __dev_queue_xmit+0x29b/0x37f0 [ 2734.796349][ T5780] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2734.796365][ T5780] ? rcu_is_watching+0x15/0xb0 [ 2734.796387][ T5780] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2734.796407][ T5780] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2734.796423][ T5780] ? kmem_cache_alloc_node_noprof+0x151/0x610 [ 2734.796443][ T5780] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2734.796461][ T5780] ? local_lock_release+0x9c/0x160 [ 2734.796499][ T5780] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 2734.796518][ T5780] ? __alloc_skb+0x276/0x7a0 [ 2734.796537][ T5780] ? __alloc_skb+0x276/0x7a0 [ 2734.796558][ T5780] ? __alloc_skb+0x4cc/0x7a0 [ 2734.796580][ T5780] ? alb_send_lp_vid+0x14e/0x550 [ 2734.796600][ T5780] alb_send_lp_vid+0x348/0x550 [ 2734.796623][ T5780] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 2734.796648][ T5780] alb_send_learning_packets+0x12c/0x300 [ 2734.796669][ T5780] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 2734.796688][ T5780] ? bond_alb_monitor+0xf3/0x17c0 [ 2734.796710][ T5780] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 2734.796752][ T5780] bond_alb_monitor+0x3d0/0x17c0 [ 2734.796774][ T5780] ? bond_alb_monitor+0xf3/0x17c0 [ 2734.796793][ T5780] ? __pfx_bond_alb_monitor+0x10/0x10 [ 2734.796813][ T5780] ? rcu_is_watching+0x15/0xb0 [ 2734.796836][ T5780] ? process_scheduled_works+0xa20/0x14e0 [ 2734.796852][ T5780] process_scheduled_works+0xa8e/0x14e0 [ 2734.796879][ T5780] ? __pfx_process_scheduled_works+0x10/0x10 [ 2734.796900][ T5780] ? assign_work+0x3cf/0x5d0 [ 2734.796917][ T5780] worker_thread+0xa47/0xfb0 [ 2734.796951][ T5780] kthread+0x388/0x470 [ 2734.796973][ T5780] ? __pfx_worker_thread+0x10/0x10 [ 2734.796989][ T5780] ? __pfx_kthread+0x10/0x10 [ 2734.797010][ T5780] ret_from_fork+0x514/0xb70 [ 2734.797035][ T5780] ? __pfx_ret_from_fork+0x10/0x10 [ 2734.797055][ T5780] ? __switch_to+0xc89/0x1420 [ 2734.797075][ T5780] ? __pfx_kthread+0x10/0x10 [ 2734.797096][ T5780] ret_from_fork_asm+0x1a/0x30 [ 2734.797115][ T5780] [ 2735.348415][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2735.463655][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2735.472835][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2735.791181][T10999] geneve1: left promiscuous mode [ 2736.906616][T14968] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2736.923751][T14968] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.939355][T14968] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2736.952074][T14968] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2736.967141][T14968] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.989747][T14968] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2736.996221][T26155] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 2737.016719][T14968] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2737.017609][T26155] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 2737.044407][T14968] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2737.060685][T14968] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2737.063958][T26155] usb 4-1: USB disconnect, device number 84 [ 2737.076576][T14968] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2737.076612][T14968] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2737.076635][T14968] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0