last executing test programs: 37m5.870786687s ago: executing program 4 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a31f0ff000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 37m5.574855778s ago: executing program 4 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fchmod(r2, 0x1d4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x5, 0xfffffffffffffffc, 0x1, 0x6, 0x7, 0x1, 0x80000000, 0x7f, 0xa, 0x5, 0x7, 0x9, 0x1, 0xbd8f]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8) 37m5.379300357s ago: executing program 4 (id=29): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x3ff, 0x4, 0x100000000, 0xffffffffffffffff, 0x1000000000000000}, 0x0, &(0x7f00000001c0)={0x1d, 0x4, 0x7, 0x6, 0x229c, 0x1, 0x800000000000004, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 37m4.778607374s ago: executing program 4 (id=31): r0 = socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @vbi={0x4, 0x0, 0xec9e, 0x34424752, [0x5, 0x80000001], [0x4, 0x2], 0x1}}, 0x9}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) syz_io_uring_setup(0x3917, 0x0, &(0x7f0000003000), &(0x7f0000000140), 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) getpgrp(0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) 37m3.97864878s ago: executing program 4 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x4c, &(0x7f0000000100)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x24008043) r2 = epoll_create1(0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000940)=0x0) sendmmsg$unix(r5, &(0x7f0000009680)=[{{&(0x7f0000000380)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)="42b5d69a15514f918b5afc72c16e1f7ce0d93bb1d7e88131633dfcb119d3b96d17c81a879201164b4b64346db1c75f631e264c15e1b2c865dd6f747d0c378c6d5cf7200f0094c16f5df40817c9a36c5ba53ad938ed15cad844cb6789af3ba624e4b6627438a41c36d6e926f8aa4bf70fcb012ee498414f623e9c0815f4045816a431c996fb0edfd471dd609923628dabcf5b6a3cd374bc7a418edfc76b69a68b9b06d972b9591494f63ddd8e8749e60096cd93c0a349ed1dba7ef30775bf4e3fc66b6be824a075", 0xc7}], 0x1}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)="c75519b2022fbd21be3790d271cd7bc7b643d0b21d09fd321516adb81c97eb0dd0245596ccd09a0f1220ba1cf2b2bef0802fe1108b28c0bb4dec4ce02c07b185989c002cf46995d7fb50", 0x4a}], 0x1, &(0x7f0000004940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000ff000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001000000000000000010000000100000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1], 0x98}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000004a00)="888c6bbfaef7b81e02a3f01102482c594d81c7fd613a90439bc9693bb316b85d98c7511a96c5178985ed77f21f7f20be8b6b47b7f29e5ec01a88ee7e9fb2b3a54dc58928f8368f802f6892059b8c5c", 0x4f}, {&(0x7f0000004a80)="1259de3d93e05cca4e025f5f00e659a3778f4c9c7f54fbb3192f051c4da722c4988346c1a53be6ba6cde267cfcf9a87e868e9a0af5f4c6e23bc7ea68b04856985de4ce61c64f624a8820c0007ca9b58aefa6c114d398a0eb0f1778c7a7097e8d7e8c2aef780796f45d6211266217f5d0d06184f4a05d46", 0x77}, {&(0x7f0000004b00)="2f3308eb3dd756faca82372f0c0ef57375970afa28e9588a818f2ab0f0f2a5e37a335ac5c005b3b0773ccf", 0x2b}, {&(0x7f0000004b40)="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", 0x1000}], 0x4, 0x0, 0x0, 0x88000}}, {{&(0x7f0000005b80)=@file={0x0, './file0/../file0/../file0/../file0/file1\x00'}, 0x6e, &(0x7f0000006280)=[{&(0x7f0000005c00)="28261b33a50354d9d9052a2a157288c03126e7eb6de85a4329e03b89cd38c9b806683197fe05aee49887eb7296cbb9f692bd0cb96ed8a3d711ad4531dd71a923747bfc807cea6cba2dc08d32c316328a0adb59eaa623eaa27c32", 0x5a}, {&(0x7f0000005c80)="9427fcb569b911d2f0e16f3178da89b6ff014675ac1ddf9c51a287e19359b76a2a8a706fbbe25e8d58d46bc706853cc0bcfc6300939f90eff2bc6708661d5059fdcea74c9a37b4daedf1cdfd33110e4238e71932c572ddf9ae7f04d0a1f9f31f857f7c9af05f2995d2a5b7d6f27686de6eb941034595ca3bf1c74e1fe8dfb6586bd4fd26801cddc74db4865989276a3a2a67141446c701c8889a4b1586bb97ab25a41de810655fef464ffae0506a0a838e6f9baacabda1139b3a24482e23c9a867ffdaff156110420065532ab341cab40729b94724bfada13aed38440fa00a9feafb6a799831adf7d98c0dfb8f400ac51a38dbaf5548085b7e", 0xf9}, {&(0x7f0000005d80)="fdc8925eedee192698dbfd441eee4e54fc5cc65c5d74dc434d89742507562783dcb09670bec6b373b85a3c1c6e0f3533340fbba8663d2baa7f8d17567008d146cacf0cd8291bab5d71c899b854325b0446961fa61e4d513ce9b3da2dad6b76c484689c86a1d02a550dc05effe1b2e5f4128c620c9e6847e15867343d48e3b215ee679565df071ae9d18078ec9c40298205ee9d367f476d2f00c50f8c83fb7ec9aecf830af2b2b8985bdba0ae3dec3d5a8a83cc593deb0dbaa0a34ed23a0201cbe298b1a309f4f09f7531585e69aab60efe5e506b63ad1d3d0d655c82073c", 0xde}, {&(0x7f0000005e80)="303305a1cea96253b7489e6d56c691d9", 0x10}, {&(0x7f0000005ec0)="56f53b562c25f6563b0c7c5144d6fdb198756102cb89ed0baf57803c0928de04e7ad1f400e8449e69e62182f908629fe26157b4474e48779d3ecefae6f4f46612ab459717f72c815bf4521e27966ec2d528ab2a7a6ff0901c22a3692", 0x5c}, {&(0x7f0000005f40)="230ab32687b65b6ebca3f6af8db26190b4ce1a02baf5fa86cb0f1d9cee9e0e1e9b87e745d773ec5cafa26993784ec9f78d970ed802c3b6f48c12b3aab89a2a2851624208ae8962706aa803488fa056489a0426940867b5a0fc7e51f8b2dabc11bbf10be47d0a39d54f2e41bdde547da251d8ba86fe1aca392078f2d9f3416977205c4af735343f6c4926b7c99feeb4b7bb4061", 0x93}, {&(0x7f0000006000)="eb2da9368e95d6e17b6b5e6cb5e3f02a557fd139b86b4d4c70a2bd0073de4cbc8c143da536eccdbb4e5a8b2133202cbf6c9c8945d39fae60d3d14504c1ac35a11ec64a4bf28ccb705a3b3028df5d9f042286c2660b30fe4f7aee", 0x5a}, {&(0x7f0000006080)="2df2a22d69a1a2cd41b022832c07652e3a08efaf5a87a8f909335b665c801124dabf63b39f8dabf2caabea79bded28ab5d50446920cd2137a0799e357fdc623b5afd32af08cbbfd59cc8870a725ecbc2b9578fda0c6595e4fa7587a602516d0da09d04088f26bffc66e756627dbb42e3ffff00007d1a7743b38b1c61f13d6939b7011336cf6bb68a40ba209bdf654e0000000000", 0x94}, {&(0x7f0000006140)="2a07c7", 0x3}, {&(0x7f0000006180)="56277734c8b5ac2c088a4f3acf8e8bea3603ad91d4636978b1a4b55844a564855d10244e3eccca04bdbd7613f5d019cae0a90e2e7fef0a5e4e3fa601cf666df1637f11d3955d18cb0533fce19d0db13f35f321ffba9bfda0ce8697ac9dfca360dcffd242b1564cc1f4182d9d0af6e7d6442799ea5a179884a5ae1e1e85862035c47dc7300591dcba0adf2835125c396a432d3164e843ac9a3ef0c421db321378e303a3f0d235cbe3f47911e50fc8e597a990bbacda70fbc5c811e0b9152f7437c4e87d69605799dccf8fcb76ce73", 0xce}], 0xa, &(0x7f0000006340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000000}}, {{&(0x7f00000007c0)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)="e62bd52adc9aebdad3e0ab56f89df3f0722e6500de7fd796e52d7f6e05da66060709f7e5317c8f92366d44a0c36043f4f5bb8e4a00aa103589b616f43dbead4f08da9c67955290dc995b7c9df22386580fb22184c898ffd234cf9adb31df53f80a75728cb005f87c34aea49b76df3b54c198cf2e290b7e81e90b157507f5cf2684e666d8b2bc5e128f0cc10fe309eab23aa2bf70ff2f246b49f4d4963f39a99be145e9b5d81462", 0xa7}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x44811}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)="8e95dc0a79e26bfb62c3dbb9191c6e072de698cfa7059026b29eb0f842027d2ec168cb0e953fd493dc4947b0ebb6a614549ea56650afaed6e02e5e02b1848d243e1773ba57aba00aa4223686f6783bd06689e09b6c3224374a527510f48e151648e2bf44f51769fed5bcecf921a99598cf080509405b06cb38cdf8c8a2e91e10886313ed19c43b03fa96fad7d0681184229a972daebecc931de381dde16b68c13305b7ee9bbb435b4e6743a9de6fd2b736b7640c836e5c8809630be270dd85f23da9832b1e74fc9dae7c0c46de6bd046bd6b5cb22d2f0bdb41217a08bea30fa1a4fd653b74accd78adbc989c0a7ca762fe4722", 0xf3}, {&(0x7f0000000d00)="6da3c7e8153ff66c1290a8f8dc443a09b105374e0c59e5da9257b546c8de5d671dec246050c23a8bbec624ec8e7c5d9e76727bed2c68bb45b39c7fa003621158cb9c30738878dac696a229f9e561a21ed5924f5727726ccb4533f0ef32920b2fcab893539856478c74d4fad8bda39169b095ee1224d811064756a837e3d6eefa46a6be0b569dd4af6e0f8a7df86649e59d7f64628a34a0", 0x97}, {&(0x7f0000000dc0)="aa201c92a930a7d56bbf84f492920d98236f6e28d6992e56780b3e732778bb1473fdf35a579d82af886b0209414b3a18924aace983ecb9df5f924f1e0798a8fe19b96ca6ce13043164ffbc5b6888e60c2472d3cf45f0dc365b518f50cb5287536542b6a6abd2b56c2816ddd7b512bc347979dd57b7", 0x75}, {&(0x7f0000000e40)="6be4c81792b9dac966ad691bb6ff35da43d4b1c94ffca1c188a2b26c5c42fb93d3abd8f343d34973f33dc4dbfd09db3333f9060255183cbedf6ebba6917f094534691ed4191f0a50d37fd0e1bfb40d66c8339cfacae0bed4c9cdfaac74762a2d7c6f0cb173b693a2bb92a865a9229062339e0a66db8f3508bf74457916c38e23ef05bb42547bc3c2ae2fe34816f7bc7dadc2653cb82d48038d1edb733e493a4cf8a145", 0xa3}, {&(0x7f0000000f00)="627322040bda5afad178a8ee1b32023c8e03f63241e971c09b576c756524b2d6e409209854ec458ab8f1ac585bf10826a831612ca6856b0916fec85fd78dc4790d09a7bb9f828d1183f91add2f70bc3413bb581d315162ee2d03d36bc0bb4688caf3ebde8560c5142ef70677c639f417ac1772e9d88790b39ce356501b903420425e2ce554df9b681e3db44db497965274ee7158793988ca8188efcc96107efd7b3a0502f97b3dff23d02e49a915402cb0b349b0c40beb71ba45b5d58d81d45c38731a91ab571491634f8dcd3147", 0xce}, {&(0x7f0000001000)="b78e4a0e05041f940b4f5f07c6ac8e2bb5a9c2d656d1e160be96777e9609ea1eedbb93918666eb890bd5d535d107fe6138f2bfb0e6a20902cd9f90f88d07e0a25c4ce0a89d440a8fbf8acdc72d384993373bda0930e3b8675a63c31239d321e66e8718ff9dd2e2091d54378cfb15cd9b52517dbf4fb513df82bd4c53", 0x7c}], 0x6, 0x0, 0x0, 0x10}}, {{&(0x7f0000001100)=@file={0x825f596857d2add9, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000001180)="b84c7789eee59eb56fd675010780a05c3d98c8094d7ef38d8a5595ced19c15c6d1df90a79b94e401e213ac83191b2d67d100b599cf779f7a8e449e7fe91ea5da3127ff240b3d37a99fcda34c223b31f5b4e259b0212ca28fb4f7613bcf1bf51660b2cb7a0a204cfe19679edc7e761ec115ccfe089a0f2537fa65c1751a86a46ff553250b0edf52", 0x87}, {&(0x7f0000001240)="615cdfe84d0a23646968d6da279428b54b98b5133bf16d8c75503a7352513f71cfffb2c6d22a05ed6b255dcd367f3dab416b439b825deff44551bfd46dc35d9533a2bc6e5252ab81531ff471db565f1e0567b497e3", 0x55}, {&(0x7f00000012c0)="6015958e60b7e0b97345295dd128712cf1fe98ef5fd72403c7bf388244353584f03e70ed3410ea208b5493767b3fbafa35e9498a3c0a2bd4fa28d8eb8ac0f592850d9306709fe6e5479df47ace77f27764fbb1b292ac60baa070fd2625d422718243ab5271ba57bdb45b", 0x6a}, {&(0x7f0000001340)="fef86278621239410b155f88ead4ed2e1dd339431fc54f24a8067b3155537b326800393a5b2da703a34e34f8d3fdc1d44ba66aab9970b84dd985aefd58c78f7516c86e8dadd6906842959b66e0595b23520c1de0a767faab55ded2ca8cc465c684a1319760c2f4b80727ccf3a45cea3aecbcb1447fb7c01cc44c6ef27e9dbf5211a7fdfa497154dfbc23655be030e823fc1581d82500543072cedeb50e51d2859f272ff1c6011f9a358c168b7b438b95c4e7221394079abdfe681d90cfa0dbdf9115de22354900adbedeb14ec49e26adb71ac32b18a2b0e49f", 0xd9}, {&(0x7f0000001440)="ce49be5a11d9f42f57f09d24c5", 0xd}, {&(0x7f0000001480)="5c6b8fcc20f4b2c61a0f913450f9b324c0410f579eea06e79fff134f7612a9149cd3fc84924a70ec6747b0efb0e28a618f6b754a6cb59b43919eb8dcaefe9c4902f26941034790e1d5ef12a9e6b7fbb811ef2a28a64b5c047b110f32dc1d232ee6766d69a73dc89399eb0e3a071038e7891b8a50d73566ce01d309895f4c3f0d99a7b97b27366daba2810ef3d26fc5a9721a7aab50b8babade8fdcf7172a0de30d05422f4865cd090929c41de41284c13ac97ef246607eeaafff27e858271a766a228cc4f22c9c802b3a5371d9a75b153d4216b59bb1534770613e19fba9a989d4", 0xe1}, {&(0x7f00000083c0)="ce865b30e209b6c30b5412540b32f07859386ee21f8a7e0744bed3a5c2662c52f97c390ac5e65054057e4ab80bba3cb73e4ce6b15e0a6e695953c0735c4286458d23db45578c33243a979efda7134e3c3e8c7f5935f183bb1a85dcb33a7bf5363ffe3ba9d7980f58c294453a3d7cc0e0347bac8c928782bf09a0576bb53814fe4a17ce9fafce83c98a9ad27fe1e3506b610ab62aa6d22c1a4f679823bc764aa8241178869350f7b290da7d946015da227c6071c8d94a85b142076799a633efc552ba64532a96dcb67cc52766ab9c7b58f8b6f27be09a9107b28078651a96ecd0ff64412551a9ab7dc72bf2a63ad0e9116623c3fd4220f35b98a69bff72277c02714df5d3fe307d03666a9c282694bc34e1cc81a4a137e873e670aff285f355ec8edb1193e373baf0d52274e1f694ebcc7a296d000be48086e11b09c6fc9650009f60607ab8f9c86cd177e490133821185a6c45108e5739f202ece6629bcec1065601b798fce6d523885892abfcf8d6070f332e929974bcd42f3675a2a5cc49e0d5e741c79b24bcd2b8bdc518adc590b2e951fe6d9ec31dfadc33ae6e52dd67e2b6d1f61d7157c2ddfcdac8288e31c0b65ec0540a244b2da6b02c248086ca57de690d4146b8ecf36c683dbf7988d15b9511aebedf653ac9b8d4a0f30edc18062295c04a8c66efd49817eb680281a5e6c305653242f85b320bc906388c4ef44c1047d3cf667f5114c5cb5d500d1aecd2cdbb2c07d363db28942d744eaa2e68c30499aed68acd6554cd856b31eabb03e69c4d0cc5c0930b5c1318f098df048359ddf817a9993b5f55592e3c304608124cebb1f3a7d0dbf713c3167b00b8fa3771ef9eb59c2819451b44461440f1958c471a3ec4e4d7227aed19e25bfd5511294bcf83493df379eac9c1527aee805ce184872dbb98a0d20a8d16267930225a340a1ed5c49656f9d2e857927b305582a019a56f362b2b0ef512dc62d88e03a38368ffb599692ca234a3f03af66661fd46aa8c59169ad4cd3aabfc0dc0a974b19ccfa6acdf4e6eade9045352a61fd5f22d84682c4beaf05f92092400af0e2478cb4e0bd57eebc593f00dc2e5479b99a12817c871b99ba9b0050356cc32f7f74009b225871f80326a3f91a55a55daf946aac0bbbb8c29b6245e6d074dfed04c80a8d3e5008e3117693e88243e0b96d3afed94bf01bb15ecba2ebbedffc93ca26e8515be39a6c7a60159fa792eb2a3274cb76b52bc1f5a3d5f02b801b4f607c5e5ea79d5f65058c74add6bc33c563df3eafcf5c6f8f04948d8f971aadc5c40eb17ace224e88d3651999a765f8d0a09445a7c4c658a1bd525ae33c5eb4378ddcc2344a670a727ce2812e4199b35f5848afb7a8b7733e42c03a05f08d326b0980c2d472780739add35f98a0d63bad2d85739424eb9f7ab4ced31cbe3e186011571b3590f3a3a22695c48216f05fec8d79c563982accb2a881011c097beef0ac72263f80780d5b3ff5495a3716c938bab7fc89b9ec4d346ffe56d33f865464e63b7124ccc567c06188fa5f8f784f2b50052f2676cd94b32d12a739b49512a7797e5c8fcfedc92d022943ecef3864b50d6568f4152d0ea417a2a812aee27ed7c5dd28f10bc050192aa28a3b4d03e6de6e0c3c8cb86c6e1bb10ebd2a7f184b3d535417743daeddda28a84a82d529fe70da348fe639893188f5d1148ac5e8cda8dc3037bcb6cea1b2644ef6bc9780c00836a72586b5fe5358bfef1a200fefbf7324a95b447490ec070d7a5ee69215b4d1530f4eeb2cf543c0c3baf4086a033ddeaf4338b4360247d8e0246bf1a22755cb7579712ccff7f71654e77525afdd1de8dcc7b20be39384535562a45b5b0d2b4556bc5690e8560976f88cd8e41a07e2c3cff5d1b97414ba322b5accf72864b0b662355e496b4f9a167f77722af1cf73401da791d4072415736f7641b805e2f99c611380edfc470952e79d2994124c0b8424716604266daf06a74e56a12d0487dc775a37c50cb78922a48ce8710bc1d3d3e33606b9cb1875513d37a295acb308f4aa8e52f0b02dba9f28f44b2631b526824b011ce1321d13adf365e6b43268c3f7eb40fbbe71e280a7663a4f224cb2d0207494f5dd14055368d5249cf0ec33a5134263492a90e42ff0ab9b09e5f14feb88d0047a1d0d7b7e1725dd44ab6e52d3ee62f4eb0d7a9ea4053b3b079850566ee3a837bdcb93da6a73f8d605c6bf533c76217c8f5ab366c1c7138f78a4e88d7824d62990c908ef8fb75a581589ba55b510593399f6a5039f6f00fe777b2530c4c20d8d6aff4d1ee1b0bc33f9992b41bc00c9e30b2a0ec3d6bdf470925b23f4d3960e8743115609a2395820f760baeb74b64c20fb2fe063a21ef50e11862781696e17e87f049a6487eabbaeec77f95aed33e9025c8d875fcba273e461673acf6a7263071e12ee795accb87ce13a6e966a33f7b405220e40c13b509b888596b13089c50441f77ed1fbab49e0758c2633813e3ca111be4982210467825f1c093770f87769d776d97ebe5898e61ddf1fefb0b5bd6feab3963ef473e84a681a943bfbb01eaab1a1cc2c41085421f7af29106ea58addbe63b9f7232a53130605a66ed6511f8cc0f3fbaf6dcf4172661aba9d5ecb242504bdbe4ca043624e507f8ce824645391f7c008fcec7f936cf019a28b0c4a3b8eba3af7442546a831599976493a98c87beefebd83273c20a8cbed584f3a3a4255283b676f70aab6210501789daf44bc2dea7f449aa5cd69c1f539fae837dba36631ea54248af7523dd9ee476c9b0aeb7ae663a19cc32b28b59c774a245bdb85f3e50a69e7dc3269e20103767a1a9ea55db82b8fad476879a74cb58a2e8da7e40cd94ebef7f4a0383251814e0a076474436aecc6bed35e3c1a17fbcf022c1b86ca6a97a4841de75ce41c4f944671fbc6da512cd0b9ece7d9defe9a736823e7010a5923945cc3a74293443451f940d33a80bad2690d5ff85ef013f2495b8228c468b761d82ba0096a4b58675a96263ecfae3202292c63d610b6f9ced260d687594e9f626ead0217ba9b054070017eb471e94a4e1561b82e2cadf808fca2bf5c0547d6a2558f5a3abb994da46ac0640053e32e212af716caf2cbaacf672dbe088846249f72d409a6bbd14d2a7acfba45591e657ef945d5373b4bc70520037d54edf6a4e537885ac7abbb10c06c1dba6a62d9154b140c2124636152cbeefb2066bf908d989f31cc3c668b2d7436f39c9590630163b336e2a05f24aa5adc3b3de076d0c0e23c82514732ad7142cb39849f1294dd4910ff50d6543e1e8ae60e7a69afcbfc5f6d91e53d836264955bb3e1f8eb4301c7f58ff81d97b82f6a67e3377d845c3ef4548a11c77aae0c1d29ba440982abdf80d0967438ff782a78470b5be3aeba61d8412d904c1088d18dfade10e5320af06b9eafb55649a23a2e60deb6f982205cf445388c0b3132b3ae77c303cee8d64bd251c34e9bad21a40841b99b98355890dc7ddb3a8919534b37b78b8201aa70162d8c6f539d03bbeaefa57709f5c403595cb31e8c8d6884e53d4e6a9c45d0cce552785eb47b707798690fa6580ccf8b048caa94b6e7457862cb599e3fec84aa0fd23344ff25fe5bc5185c6edf300bd24d65883e3e34de3902f1b76736196b5d34628f0fbd7a0cdf14bb7717050a9307af4730ed31bab8653184f5009d1fc757f78c0ca4fa6ee4c017feb3d95bd5f5b491b0cfea30304ff9497d647f57abb0ff3905b337e85de192a9db2f55c5dac3fd338414fe8dd12d1bc7bebec8f722bdffe732822e057a2b1f2354e61eb511ff8b3e84b86256f7f98de69c17a1b1e18a4cf2b601a520eb0b4534fcfa09ebc837903823fdf1dca8e70588feae77f86b46676aca08d1a15b4013122d988e12eb5049e274da9e870e3818fc6af1142b7bdf1e516ece6b3cb92b609de1dffdc6a18db77f4ae1d2997014ce1bf33973b6abefedbc3f73c16fb9b2f037d9f917a6c832b93982a64cebbaf73b763fd806b4285e714146ab6d756980a53e32f534cc141000427bfad9d769351d9f70d9318167e3b842b3535201951c0b21108025675cb044f096bdc8e160fa12344ee2407efc39071844e7a29a8f54fa4415a8a26fce7c81d17598148f2afb52e56504a3f4e86fa146447365c4d20f4b96adbd3922a6eeaa4f44d4776b98dc8fa47f08d817a064f1532414b07feeb018f85e7f4f2f364dc9315740137cab8907625eb74e037e64071108ba723adc21018ddffa0a5b9715b83fabe7992db1e421a11d0ba96344e640b571248ff4c0b072376d39a81dbdac2c12a6974a767dfbef0f15b4e3ccaf77d989d11e206e4691b8c66dbcd51bec0480ca2a0abe5a790cfe27ef557b29414848d6c5f1f9d9ff66e22b2ba6e20c883ba7de045537eaddfe75d27c9d817aace0f562cacaaf5547d0cd86af17313e40e2f834ed480a39571d8ed68abec011fc06b02723dbbceedfbcbf3a90bdb1808ace867ca08325e778b867ec0b8ceecbcb1bb0e45085559e8bfa001e5c8c19be87e00ef87721b5207d4740d09bae5a58fa0ee6365bf9dee64058e47e585864ae1d64f6a2131e44e0cfe809866ccdd6fae03576cef48f28615e3e32e291b47d18d77ba79b2607484357e7e8c03ca8f12d0986fcfac1d9fd1348c10776872bb0cb52d014d56dd38b87ee5e971e4f1efb9997fa9ee2145bc83571c320ebf92fa0abf44faffd77c2ead9555c2aa774d5a53062436f5ac30bac199a8c2f2bc07d6856799b3acdb15479081208634d1c4fd25deb969d169c7f91f1164e9c67b27a543308546040449d641f6a05fcb0c012dddd2e3eaf27b8aea7b3ec474558cf92558844a53042cd60b767e61b32ef12a771e9defc1fcd180df88f781df69ae1305902dbcb6e2cdf3a5cbec3a98970f78e0d71924022c24bd9335a4c88786150b105b7094eff7ce424db3fd0529d3360a8c750e7148d3b99b5b8d445ca2c1f3f0f2d95776206fc67190e435cb12397f745b9657888b1ec1e9bcc1a52938e868d75cba81bb3d641cf493585efc875767f6f436120542348ea2e537a47f756e59d9e3e21d7513bf62227c863be89258f9347231f100b60b8b7f9fdc6fa56da0aa17f214c561a831b426c296dfdbc3d3c2769d0bd4cca40bbf2314949b8943fc086c45d8ffa17b943add6f60fecf54da21c963703aad1ee315e750bbab122dc6a7d953eb9e1aef8c922770920c0ea7f34be3abb96d09d8bf634c74ab6ded8465e95f4a3fa2586ca24125fe8d67dedf0633872aaf5e3d13e28f78e9f949f8130289828cc5e649a75100a46128a67db5ef31010c301bdc96623589113bafc8f8d2df12229422f6d812dbebf9d219cada6279c2ddae8b128566771bca79a4d5ccf802400f441558771391dc3bc4961a3642a34e7ceb5a6f1ea323b9e2f75eed446cdced41d50c6270636672f1f2352418db3b364891e575e2020755a8926a1f17bc73410500a9ab79696bff03d55aee32716a3a29c3ad3430554e53f7f722ef532b467e835338d619fbe9f8dc927a85fa28edf725df58a98f9cd9f761c77d30dd146c1bd423b435adf6604494e5106ebda413012c5a10d5109cbd4de8093bce0163fa2269135220b6b3d5aadcf6cbf322552ae68428f90c29d56a3b440ff150a45b2dd9ca5a35a541172b66b9df9aa8c41f04b6605ea9d03b23dceb1fa0ed1bd342e9565a917b6fe0c23940008f9c63f6e9fd5631bf84e4f2aa93bb74f054f83489757f520a6b41f5525a1de7b7b33c6ddc70e318296818849bd02411e0", 0x1000}, {&(0x7f00000093c0)="4c4eb4a9ed7f4a67ede5706ddffd87c17a7769634f46543629ffc1ff354ed8e60bcc2d109f0706e4a873983ade5d7d589630cfd75d8834ca3a5227c1a9ff93d79a48c7f5aa7eea994d49e2ac56f3aa47ba223ab496597a0ba79dce308112eff35301d1da43556b68f2bf567e9cb01088d648df4dc5246b413875ff20048b7e0e68bb0616f2bbb806c4c27fe3c8e5fea2c3da982d3ddff62c76d7e93f787f0ff02a", 0xa1}], 0x8, &(0x7f0000009640)=[@cred={{0x1c}}], 0x20, 0x400c080}}], 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8081, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r7, 0x8940, &(0x7f0000000000)=@req={0x28, &(0x7f0000000180)={'dvmrp0\x00', @ifru_names='bond0\x00'}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4001) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x285}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRESHEX=0x0, @ANYRES32=r9, @ANYBLOB="0c0099000900000027000000080002002f000000db5cc24cd79efff12699bbc1393bb8bb5564d69cfc3f5b5a7701d6b74180b3471c2efe9c60f85c35aec6ac7ea2734ffc60370ec833a7971e07f6202be3e1b9894cecf9e54bd0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x20000000) r10 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x3e, 0x2, 0x1, "0ad64b68095a020000170064ffffffee000004000000000073c2b37c0128bf1f", 0x32315559}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 37m2.481535373s ago: executing program 4 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x80140) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x8001, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$inet(0x2, 0x0, 0xfffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e04000000000000bf300000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) (async) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x80140) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x8001, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) socket$inet(0x2, 0x0, 0xfffffffe) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) 36m47.429092249s ago: executing program 32 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x80140) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x8001, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$inet(0x2, 0x0, 0xfffffffe) openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) (async) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x80140) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x5, 0x8001, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) socket$inet(0x2, 0x0, 0xfffffffe) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) 25m32.974563124s ago: executing program 1 (id=3526): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4c, &(0x7f0000000100)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x24008043) r0 = epoll_create1(0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) sendmmsg$unix(r3, &(0x7f0000009680)=[{{&(0x7f0000000380)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)="42b5d69a15514f918b5afc72c16e1f7ce0d93bb1d7e88131633dfcb119d3b96d17c81a879201164b4b64346db1c75f631e264c15e1b2c865dd6f747d0c378c6d5cf7200f0094c16f5df40817c9a36c5ba53ad938ed15cad844cb6789af3ba624e4b6627438a41c36d6e926f8aa4bf70fcb012ee498414f623e9c0815f4045816a431c996fb0edfd471dd609923628dabcf5b6a3cd374bc7a418edfc76b69a68b9b06d972b9591494f63ddd8e8749e60096cd93c0a349ed1dba7ef30775bf4e3fc66b6be824a075", 0xc7}], 0x1}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)="c75519b2022fbd21be3790d271cd7bc7b643d0b21d09fd321516adb81c97eb0dd0245596ccd09a0f1220ba1cf2b2bef0802fe1108b28c0bb4dec4ce02c07b185989c002cf46995d7fb50", 0x4a}], 0x1, &(0x7f0000004940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000ff000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32], 0x98}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000004a00)="888c6bbfaef7b81e02a3f01102482c594d81c7fd613a90439bc9693bb316b85d98c7511a96c5178985ed77f21f7f20be8b6b47b7f29e5ec01a88ee7e9fb2b3a54dc58928f8368f802f6892059b8c5c", 0x4f}, {&(0x7f0000004a80)="1259de3d93e05cca4e025f5f00e659a3778f4c9c7f54fbb3192f051c4da722c4988346c1a53be6ba6cde267cfcf9a87e868e9a0af5f4c6e23bc7ea68b04856985de4ce61c64f624a8820c0007ca9b58aefa6c114d398a0eb0f1778c7a7097e8d7e8c2aef780796f45d6211266217f5d0d06184f4a05d46", 0x77}, {&(0x7f0000004b00)="2f3308eb3dd756faca82372f0c0ef57375970afa28e9588a818f2ab0f0f2a5e37a335ac5c005b3b0773ccf", 0x2b}, {&(0x7f0000004b40)="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", 0x1000}], 0x4, 0x0, 0x0, 0x88000}}, {{&(0x7f0000005b80)=@file={0x0, './file0/../file0/../file0/../file0/file1\x00'}, 0x6e, &(0x7f0000006280)=[{&(0x7f0000005c00)="28261b33a50354d9d9052a2a157288c03126e7eb6de85a4329e03b89cd38c9b806683197fe05aee49887eb7296cbb9f692bd0cb96ed8a3d711ad4531dd71a923747bfc807cea6cba2dc08d32c316328a0adb59eaa623eaa27c32", 0x5a}, {&(0x7f0000005c80)="9427fcb569b911d2f0e16f3178da89b6ff014675ac1ddf9c51a287e19359b76a2a8a706fbbe25e8d58d46bc706853cc0bcfc6300939f90eff2bc6708661d5059fdcea74c9a37b4daedf1cdfd33110e4238e71932c572ddf9ae7f04d0a1f9f31f857f7c9af05f2995d2a5b7d6f27686de6eb941034595ca3bf1c74e1fe8dfb6586bd4fd26801cddc74db4865989276a3a2a67141446c701c8889a4b1586bb97ab25a41de810655fef464ffae0506a0a838e6f9baacabda1139b3a24482e23c9a867ffdaff156110420065532ab341cab40729b94724bfada13aed38440fa00a9feafb6a799831adf7d98c0dfb8f400ac51a38dbaf5548085b7e", 0xf9}, {&(0x7f0000005d80)="fdc8925eedee192698dbfd441eee4e54fc5cc65c5d74dc434d89742507562783dcb09670bec6b373b85a3c1c6e0f3533340fbba8663d2baa7f8d17567008d146cacf0cd8291bab5d71c899b854325b0446961fa61e4d513ce9b3da2dad6b76c484689c86a1d02a550dc05effe1b2e5f4128c620c9e6847e15867343d48e3b215ee679565df071ae9d18078ec9c40298205ee9d367f476d2f00c50f8c83fb7ec9aecf830af2b2b8985bdba0ae3dec3d5a8a83cc593deb0dbaa0a34ed23a0201cbe298b1a309f4f09f7531585e69aab60efe5e506b63ad1d3d0d655c82073c", 0xde}, {&(0x7f0000005e80)="303305a1cea96253b7489e6d56c691d9", 0x10}, {&(0x7f0000005ec0)="56f53b562c25f6563b0c7c5144d6fdb198756102cb89ed0baf57803c0928de04e7ad1f400e8449e69e62182f908629fe26157b4474e48779d3ecefae6f4f46612ab459717f72c815bf4521e27966ec2d528ab2a7a6ff0901c22a3692", 0x5c}, {&(0x7f0000005f40)="230ab32687b65b6ebca3f6af8db26190b4ce1a02baf5fa86cb0f1d9cee9e0e1e9b87e745d773ec5cafa26993784ec9f78d970ed802c3b6f48c12b3aab89a2a2851624208ae8962706aa803488fa056489a0426940867b5a0fc7e51f8b2dabc11bbf10be47d0a39d54f2e41bdde547da251d8ba86fe1aca392078f2d9f3416977205c4af735343f6c4926b7c99feeb4b7bb4061", 0x93}, {&(0x7f0000006000)="eb2da9368e95d6e17b6b5e6cb5e3f02a557fd139b86b4d4c70a2bd0073de4cbc8c143da536eccdbb4e5a8b2133202cbf6c9c8945d39fae60d3d14504c1ac35a11ec64a4bf28ccb705a3b3028df5d9f042286c2660b30fe4f7aee", 0x5a}, {&(0x7f0000006080)="2df2a22d69a1a2cd41b022832c07652e3a08efaf5a87a8f909335b665c801124dabf63b39f8dabf2caabea79bded28ab5d50446920cd2137a0799e357fdc623b5afd32af08cbbfd59cc8870a725ecbc2b9578fda0c6595e4fa7587a602516d0da09d04088f26bffc66e756627dbb42e3ffff00007d1a7743b38b1c61f13d6939b7011336cf6bb68a40ba209bdf654e0000000000", 0x94}, {&(0x7f0000006140)="2a07c7", 0x3}, {&(0x7f0000006180)="56277734c8b5ac2c088a4f3acf8e8bea3603ad91d4636978b1a4b55844a564855d10244e3eccca04bdbd7613f5d019cae0a90e2e7fef0a5e4e3fa601cf666df1637f11d3955d18cb0533fce19d0db13f35f321ffba9bfda0ce8697ac9dfca360dcffd242b1564cc1f4182d9d0af6e7d6442799ea5a179884a5ae1e1e85862035c47dc7300591dcba0adf2835125c396a432d3164e843ac9a3ef0c421db321378e303a3f0d235cbe3f47911e50fc8e597a990bbacda70fbc5c811e0b9152f7437c4e87d69605799dccf8fcb76ce73", 0xce}], 0xa, &(0x7f0000006340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000000}}, {{&(0x7f00000007c0)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)="e62bd52adc9aebdad3e0ab56f89df3f0722e6500de7fd796e52d7f6e05da66060709f7e5317c8f92366d44a0c36043f4f5bb8e4a00aa103589b616f43dbead4f08da9c67955290dc995b7c9df22386580fb22184c898ffd234cf9adb31df53f80a75728cb005f87c34aea49b76df3b54c198cf2e290b7e81e90b157507f5cf2684e666d8b2bc5e128f0cc10fe309eab23aa2bf70ff2f246b49f4d4963f39a99be145e9b5d81462", 0xa7}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x44811}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)="8e95dc0a79e26bfb62c3dbb9191c6e072de698cfa7059026b29eb0f842027d2ec168cb0e953fd493dc4947b0ebb6a614549ea56650afaed6e02e5e02b1848d243e1773ba57aba00aa4223686f6783bd06689e09b6c3224374a527510f48e151648e2bf44f51769fed5bcecf921a99598cf080509405b06cb38cdf8c8a2e91e10886313ed19c43b03fa96fad7d0681184229a972daebecc931de381dde16b68c13305b7ee9bbb435b4e6743a9de6fd2b736b7640c836e5c8809630be270dd85f23da9832b1e74fc9dae7c0c46de6bd046bd6b5cb22d2f0bdb41217a08bea30fa1a4fd653b74accd78adbc989c0a7ca762fe4722", 0xf3}, {&(0x7f0000000d00)="6da3c7e8153ff66c1290a8f8dc443a09b105374e0c59e5da9257b546c8de5d671dec246050c23a8bbec624ec8e7c5d9e76727bed2c68bb45b39c7fa003621158cb9c30738878dac696a229f9e561a21ed5924f5727726ccb4533f0ef32920b2fcab893539856478c74d4fad8bda39169b095ee1224d811064756a837e3d6eefa46a6be0b569dd4af6e0f8a7df86649e59d7f64628a34a0", 0x97}, {&(0x7f0000000dc0)="aa201c92a930a7d56bbf84f492920d98236f6e28d6992e56780b3e732778bb1473fdf35a579d82af886b0209414b3a18924aace983ecb9df5f924f1e0798a8fe19b96ca6ce13043164ffbc5b6888e60c2472d3cf45f0dc365b518f50cb5287536542b6a6abd2b56c2816ddd7b512bc347979dd57b7", 0x75}, {&(0x7f0000000e40)="6be4c81792b9dac966ad691bb6ff35da43d4b1c94ffca1c188a2b26c5c42fb93d3abd8f343d34973f33dc4dbfd09db3333f9060255183cbedf6ebba6917f094534691ed4191f0a50d37fd0e1bfb40d66c8339cfacae0bed4c9cdfaac74762a2d7c6f0cb173b693a2bb92a865a9229062339e0a66db8f3508bf74457916c38e23ef05bb42547bc3c2ae2fe34816f7bc7dadc2653cb82d48038d1edb733e493a4cf8a145", 0xa3}, {&(0x7f0000000f00)="627322040bda5afad178a8ee1b32023c8e03f63241e971c09b576c756524b2d6e409209854ec458ab8f1ac585bf10826a831612ca6856b0916fec85fd78dc4790d09a7bb9f828d1183f91add2f70bc3413bb581d315162ee2d03d36bc0bb4688caf3ebde8560c5142ef70677c639f417ac1772e9d88790b39ce356501b903420425e2ce554df9b681e3db44db497965274ee7158793988ca8188efcc96107efd7b3a0502f97b3dff23d02e49a915402cb0b349b0c40beb71ba45b5d58d81d45c38731a91ab571491634f8dcd3147", 0xce}, {&(0x7f0000001000)="b78e4a0e05041f940b4f5f07c6ac8e2bb5a9c2d656d1e160be96777e9609ea1eedbb93918666eb890bd5d535d107fe6138f2bfb0e6a20902cd9f90f88d07e0a25c4ce0a89d440a8fbf8acdc72d384993373bda0930e3b8675a63c31239d321e66e8718ff9dd2e2091d54378cfb15cd9b52517dbf4fb513df82bd4c53", 0x7c}], 0x6, 0x0, 0x0, 0x10}}, {{&(0x7f0000001100)=@file={0x825f596857d2add9, './file0/../file0/../file0/../file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000001180)="b84c7789eee59eb56fd675010780a05c3d98c8094d7ef38d8a5595ced19c15c6d1df90a79b94e401e213ac83191b2d67d100b599cf779f7a8e449e7fe91ea5da3127ff240b3d37a99fcda34c223b31f5b4e259b0212ca28fb4f7613bcf1bf51660b2cb7a0a204cfe19679edc7e761ec115ccfe089a0f2537fa65c1751a86a46ff553250b0edf52", 0x87}, {&(0x7f0000001240)}, {&(0x7f00000012c0)="6015958e60b7e0b97345295dd128712cf1fe98ef5fd72403c7bf388244353584f03e70ed3410ea208b5493767b3fbafa35e9498a3c0a2bd4fa28d8eb8ac0f592850d9306709fe6e5479df47ace77f27764fbb1b292ac60baa070fd2625d422718243ab5271ba57", 0x67}, {0x0}, {0x0}, {0x0}, {&(0x7f00000093c0)="4c4eb4a9ed7f4a67ede5706ddffd87c17a7769634f46543629ffc1ff354ed8e60bcc2d109f0706e4a873983ade5d7d589630cfd75d8834ca3a5227c1a9ff93d79a48c7f5aa7eea994d49e2ac56f3aa47ba223ab496597a0ba79dce308112eff35301d1da43556b68f2bf567e9cb01088d648df4dc5246b413875ff20048b7e0e68bb0616f2bbb806c4c27fe3c8e5fea2c3da982d3ddff62c76d7e93f787f0ff02a", 0xa1}], 0x7, &(0x7f0000009640)=[@cred={{0x1c}}], 0x20, 0x400c080}}], 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8081, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@req={0x28, &(0x7f0000000180)={'dvmrp0\x00', @ifru_names='bond0\x00'}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x285}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=0x0, @ANYRES32=r7, @ANYBLOB="0c0099000900000027000000080002002f000000db5cc24cd79efff12699bbc1393bb8bb5564d69cfc3f5b5a7701d6b74180b3471c2efe9c60f85c35aec6ac7ea2734ffc60370ec833a7971e07f6202be3e1b9894cecf9e54bd0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x20000000) r8 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x3e, 0x2, 0x1, "0ad64b68095a020000170064ffffffee000004000000000073c2b37c0128bf1f", 0x32315559}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 25m32.139086652s ago: executing program 1 (id=3532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000d1909574484af8430002000100200000000000000048"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a0001002bbd700000010000ac1e010100000000005100000000000000010000000000000002000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b00000000000008000000000000001c250800000000000500000000000000fcffffffffffffff040000000000000025ad00000000000000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000"], 0x140}, 0x1, 0x0, 0x0, 0x8024}, 0x844) 25m32.027681614s ago: executing program 1 (id=3535): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$ublk_bdev(&(0x7f0000000000), r0, 0x242480) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x9, 0x0, r1}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000100)=0x80) (async) r3 = timerfd_create(0x9, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000001c0)={{r4, r5+60000000}, {r6, r7+60000000}}, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xbbbbbbbb}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x5, 0x5, 0x2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000009c0)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x2, 0x3, 0x6}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000ac0)={0x1, 0x6, &(0x7f00000007c0)=[r9, 0x0, r10, r11, r12, r13], &(0x7f0000000800)=[0x7, 0x101, 0x0], &(0x7f0000000a40)=[r14], &(0x7f0000000a80)=[0x2, 0x1aa5, 0x6, 0x2], 0x0, 0x5}) (async) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000b00)={0x0, r8, 0xffffffffffffffff, 0xa01, 0x69d, '\x00', {0xfffffffffffffff8, 0x510, 0x9, 0xffffffff, 0x6, 0x3, 0x1, 0x6, {0x6, 0x9}, {0x1, 0x15}, {0x7fffffffffffffff, 0xf}, 0xd74, 0x5, 0x5, 0xfffffffb, 0x3, 0x1, 0x6, 0x30, 0x9, 0x684, '\x00', 0x2, 0x3, 0xf86, 0x2}}) (async, rerun: 32) r15 = openat$cgroup_ro(r2, &(0x7f0000000bc0)='freezer.state\x00', 0x0, 0x0) (rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r15, 0x4004f50d, &(0x7f0000000c00)=0x1) (async) io_setup(0x7, &(0x7f0000000c40)=0x0) io_pgetevents(r16, 0xfff, 0x5, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], &(0x7f0000000d40)={0x77359400}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0x9]}, 0x8}) (async, rerun: 32) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000e00), &(0x7f0000000e40)={'L+', 0x8}, 0x16, 0x1) (async, rerun: 32) ioctl$KVM_SET_MP_STATE(r15, 0x4004ae99, &(0x7f0000000e80)=0x1) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000ec0)=""/3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000f40)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000001080)={&(0x7f0000000f80)=[0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], 0x1, 0x5, 0xa, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0], 0x4, 0x4, 0x2, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f0000001300)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_SETCRTC(r17, 0xc06864a2, &(0x7f0000001500)={&(0x7f0000001480)=[r18, r19, r20, 0x0], 0x4, 0x0, r11, 0x8, 0xe3, 0xd, 0x4, {0x0, 0x1, 0xb8c, 0x4, 0x44, 0x4, 0x2, 0x18, 0xe9, 0x5, 0x1, 0x6, 0xe3, 0x1, "279d8fe5c115d8149c7f004fe08106d6563256b4c84af55fda68d60175983c57"}}) 25m31.877118311s ago: executing program 1 (id=3539): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = add_key(&(0x7f0000003bc0)='big_key\x00', &(0x7f0000003c00)={'syz', 0x1}, &(0x7f0000003c40)="d5409a6c12ad0f52169f639f38f91ee668c0157431b8b8162891703dae136379e7d44b2aa303d935241d09bfe6dc310f8eb6c6257f8bb187b2fc16aab20515c93707e421721a6c317531fbde0d2a9e47b0dce45cc2", 0x55, 0xfffffffffffffffc) request_key(&(0x7f0000003b00)='dns_resolver\x00', &(0x7f0000003b40)={'syz', 0x0}, &(0x7f0000003b80)='mptcp_pm\x00', r2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x1000000, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) keyctl$revoke(0x3, r3) keyctl$revoke(0x3, r3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x1, 0x12) readv(r6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48) 25m31.751109977s ago: executing program 1 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_PRIORITY={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xa1ff}, 0x0) 25m31.642140581s ago: executing program 1 (id=3544): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x1, {0x0, 0xff}, {0x2, 0x0, 0x1}, 0xff, 0xff}, {0x2, 0x3, {0x0, 0xff, 0x4}, {0x0, 0xf, 0x1}, 0xfd}, {0x0, 0x1, {0x2, 0xf0, 0x3}, {0x1, 0x1}, 0x2}, {0x3, 0x1, {0x0, 0xff, 0xc9cb6d8ff88e52ed}, {0x7, 0xf0, 0x4}, 0xfd, 0xfd}, {0x3, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0x3}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x0, 0xf0, 0x2}, 0x0, 0x2}, {0x2, 0x0, {0x1}, {0x0, 0xe, 0x3}, 0x0, 0xff}, {0x1, 0x0, {0x2, 0xff, 0x1}, {0x1, 0x1, 0x4}, 0xff, 0x2}], 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3fb}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40054) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff14}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=@newtfilter={0x1554, 0x2c, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0xd}, {0xffff, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc28, 0x2, [@TCA_BASIC_POLICE={0xc1c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x8, 0x9, 0x8003, 0x4, 0x2, 0x8, 0x61, 0x1, 0x9, 0x7, 0x9, 0x6, 0x8, 0x7, 0x4, 0x7, 0x8, 0xb7, 0x4, 0x8, 0x3, 0x3, 0xffff, 0x5, 0x6, 0x4, 0x0, 0x2, 0x200, 0xd, 0x76, 0x8, 0xebce, 0x8000, 0xa9, 0x8, 0x10000, 0x8, 0xffff, 0x5, 0x3, 0xfffffffd, 0x8, 0xa0, 0x3, 0x10000, 0x100, 0x20000, 0x1, 0xff, 0x9, 0xf, 0x2, 0xfffffffd, 0x20fb00, 0xb, 0x4, 0xd, 0x10001, 0x100, 0x5, 0x8, 0xfffff8da, 0x7f, 0x4, 0xed, 0xe, 0x5, 0x3, 0x0, 0xf5, 0x9, 0x5, 0x0, 0x10000, 0xa3, 0x0, 0x7, 0x7, 0x3, 0x4, 0x1, 0x6, 0x3, 0x800, 0x5, 0x4, 0x4, 0x8, 0x7, 0x9, 0x4, 0xe, 0x9, 0x200, 0x6, 0x64d, 0x9, 0x9, 0x3, 0x4, 0x1, 0x79ab, 0x7, 0x4, 0xc, 0x3ff, 0x80000000, 0x40, 0x7, 0x8ac4, 0x8, 0x8, 0x10000, 0xf08e45c, 0x8, 0xfffffffe, 0x6, 0xcc6, 0xde90, 0x4, 0xb, 0x3, 0xc4, 0x1, 0x8, 0x80000000, 0x8, 0x6, 0x6, 0x9, 0x8001, 0x80, 0x3, 0x3, 0x9, 0xffff0001, 0x2, 0x19c, 0x4, 0x4, 0xc, 0x2a, 0x5, 0x3ff, 0x4, 0x40, 0x3, 0x4, 0xd4c, 0x7, 0x68e, 0x4f, 0xfffffff9, 0xfffffffd, 0x5, 0xffffffff, 0x4, 0x140, 0x1, 0x4, 0x800, 0xffff424c, 0x2, 0x679, 0xfffffffb, 0x2, 0x8000, 0x5, 0x6, 0x2, 0x0, 0x7, 0x1, 0x2, 0x0, 0x10000, 0x40, 0x9, 0x465, 0x6, 0x6239a37d, 0x101, 0x7fff, 0x0, 0x4, 0x80000000, 0xc12, 0xe, 0x1b5f, 0x6, 0x7807e85f, 0xc947, 0x5, 0x4, 0x5, 0xbe, 0x5, 0x2, 0x3cb, 0x2, 0x2b, 0x2, 0xb, 0xd96, 0x7, 0x2, 0x7ff, 0x9, 0x2, 0x200, 0xfffffffd, 0xde5, 0x9, 0x508, 0x8001, 0x2, 0xf8b, 0x7fff, 0xe, 0x7, 0x401, 0x4, 0xfffffff9, 0xa0, 0xeb1, 0x4, 0x1, 0x7, 0x5, 0xb74f, 0x4, 0x0, 0x3, 0x0, 0x101, 0x1, 0x2e9ad7b3, 0x9, 0xff1, 0x5, 0x1, 0x4, 0x1, 0xa, 0x8, 0x0, 0xe, 0xa, 0xfffffff8, 0xa23, 0x56, 0x8, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x93, 0x96ac, 0x2, 0x5, 0x40, 0x6, 0x6, 0xfffffffd, 0x22, 0xc34, 0x4, 0x10000, 0x465, 0x7fffffff, 0x5, 0xafe, 0x7, 0x8, 0x8, 0x1, 0x7af, 0x7, 0x5, 0x5, 0x7, 0xf07, 0xfff, 0x100, 0xfffffffc, 0x5, 0x4, 0x8, 0xfff, 0xd1, 0x4, 0x7ff, 0x8, 0x4, 0x200, 0x8, 0x4, 0xffff29f2, 0x5, 0x0, 0x6, 0xbd, 0x6c6964c6, 0x80, 0xffff, 0x5, 0x6, 0x6, 0x9, 0x7fff, 0x0, 0xffff, 0x8, 0x2, 0x3, 0x2, 0x9, 0xf, 0x6, 0x8, 0x7, 0x3, 0x1, 0x10001, 0x1, 0xd0, 0xdff, 0x8, 0xffffff3b, 0x8, 0xfffffff8, 0x0, 0x0, 0xa, 0x3, 0x8, 0xffffffff, 0xffffffff, 0xb8, 0x2, 0xfffff598, 0xf, 0xfffffffb, 0x1cb, 0x6, 0xe7c, 0x2, 0x9dea, 0x5e3, 0xaa0, 0x4bc, 0x1ff, 0x40, 0x6, 0x5, 0x3, 0x196, 0x80, 0x2bc8, 0x7, 0xe1, 0x0, 0xa, 0xfffffff9, 0xfffffffe, 0xfffffff2, 0x5, 0x4, 0x7, 0x5, 0x200, 0x297, 0x40, 0x0, 0x7, 0x8, 0x6, 0x101, 0xa0, 0x2, 0x1, 0xac, 0x2, 0xfffffffc, 0x8, 0x7, 0x4, 0xd, 0x33, 0x1, 0x5, 0x0, 0x4, 0xa, 0x5, 0x2, 0xb8, 0x8001, 0x6c7c, 0x7f, 0xe, 0x8, 0x4, 0x3, 0xa5, 0x0, 0x4, 0xe, 0x4, 0x100, 0x4, 0x3, 0x5, 0x8, 0x400, 0x9, 0x10000, 0x1, 0x0, 0xfdbd, 0x3, 0x100, 0x9, 0x800, 0x9, 0x0, 0xfff, 0x2, 0xffffffc0, 0x5, 0x60000000, 0x40, 0x5, 0x1c80, 0x800, 0x101, 0x7, 0x1, 0x9, 0x6, 0x3, 0x4, 0xf, 0xff, 0x5, 0x9, 0x7, 0xeb, 0xffffffff, 0x2, 0x9, 0x40, 0xc, 0x3, 0x821, 0x9, 0x9, 0x800, 0x10001, 0x4, 0xfffffc01, 0x1ff, 0xd1, 0x8, 0x40, 0x2, 0x0, 0xfffff000, 0xfffffff2, 0x4, 0xff, 0x401, 0xa7, 0xf3, 0xa3, 0xc, 0x7, 0x6, 0x7ff, 0x200, 0x9, 0x4, 0x7, 0x10000, 0x1, 0x8000, 0x1, 0x7, 0xffff, 0xb8, 0x1, 0x12d6, 0x0, 0xfff, 0x3, 0x4, 0x3ff, 0x4, 0x3, 0x7, 0x96fc, 0x0, 0x63, 0x332a6c33, 0xffff, 0x8, 0x5, 0x40, 0x6, 0x6, 0xd, 0x1ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x27, 0x7ff, 0x0, 0x7, 0x4, 0x5, 0x21a2, 0x3, 0xff, 0xfff, 0x5, 0xec25, 0x7, 0x5, 0xfffffff7, 0x7a, 0xf, 0x3ff, 0xc1, 0xe, 0x8, 0x3, 0x8, 0x2e9, 0x60, 0xffff0000, 0x3e5f, 0x5, 0x9, 0xdf2, 0x0, 0x8, 0x8, 0x3, 0x3, 0xd, 0x4, 0x10, 0x3, 0x1b37, 0x8, 0x3, 0x5, 0x7fffffff, 0xa039, 0x0, 0xfffffffa, 0x6, 0x5206, 0xfd1e, 0x6, 0x80000000, 0x9, 0x9, 0x9, 0xb6a, 0x1, 0x7f, 0x800, 0x6, 0x5, 0x5, 0xf, 0x0, 0x4, 0x41, 0x9, 0x3, 0x101, 0x4000, 0x7, 0x4, 0x5, 0x1000, 0x100, 0x3b, 0x3, 0x100, 0xfffff801, 0x6, 0x80000000, 0x40, 0x2, 0x7, 0x1e1, 0x8001, 0x3, 0x2, 0x200, 0x5, 0x7, 0xdd, 0x0, 0xfffffffd, 0x52, 0x7, 0x3, 0x6, 0x9, 0xfffffff9, 0x81, 0xff, 0x10000, 0x1, 0x53f3, 0x2, 0xf752, 0xe2d6, 0x3, 0x2, 0x4, 0x2, 0x10000, 0x8001, 0x2, 0x5, 0x2b3, 0x1, 0x8, 0x4, 0x9, 0x1, 0x400, 0x2, 0x7, 0x9, 0x4, 0x2, 0x800, 0x1, 0x182e, 0x3, 0xffff8001, 0x2, 0x2, 0x35, 0x1, 0x1c7, 0xc, 0x7, 0x9, 0x4, 0x8, 0x0, 0xfffffffb, 0x5, 0x7, 0x1, 0x401, 0xd, 0x3, 0xf9d, 0x2, 0x1, 0x0, 0x7, 0xc, 0xb, 0x4, 0x7fffffff, 0x40, 0x9, 0x200, 0x89, 0x81, 0x0, 0x2, 0x7e3, 0x7, 0x10, 0x5, 0x0, 0x4, 0x5a, 0x8, 0x4, 0xa, 0xb64, 0x4, 0xeef, 0x6, 0x7f, 0x9f, 0x5, 0x9, 0x7, 0x1, 0xa17, 0xe12, 0x9, 0x17f1f9ad, 0x10, 0x2, 0x15, 0x8, 0x1, 0x3, 0x7f, 0x8c70, 0x9, 0x3, 0x6d24, 0x4, 0xfa, 0x0, 0x1, 0x7, 0x0, 0xba, 0x2, 0x577a5edb, 0x7fffffff, 0xd, 0x8, 0x1000, 0x7bdc, 0x101, 0xcc71, 0x3, 0x8, 0x1, 0xcd, 0xe, 0x7, 0x0, 0x2, 0x9, 0x4, 0x1, 0xfffffc00, 0x4, 0x8, 0x2, 0x79b, 0x6, 0x1ff, 0x20, 0x5, 0xe2, 0xadc3, 0x6, 0x1, 0x0, 0x1, 0x9, 0x5, 0x5, 0x1, 0xfffff000, 0x0, 0x1, 0x0, 0x2, 0x7, 0x4, 0x500]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0xf1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0x888, 0x2, [@TCA_U32_INDEV={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_POLICE={0x854, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5, 0x1, 0x5, 0xfffffffa, 0x2, 0x7ff, 0xdc, 0x9, 0x8a, 0xfffffffb, 0x6, 0x1, 0x4, 0x87, 0x0, 0x5, 0x5, 0x1, 0xa, 0x6c, 0x7, 0x92, 0x572, 0x6, 0x3, 0x1, 0x4, 0x1000, 0x10000, 0x6, 0x9, 0x10, 0x818a, 0x400, 0x2, 0x4, 0x5, 0x8, 0x1, 0x2, 0x394e, 0x6, 0x800, 0x9, 0x1, 0xa2e, 0x4, 0x1828, 0x4, 0x5, 0x8, 0x7, 0x7, 0x40, 0xc811, 0xd69c, 0x70e, 0x3, 0x81, 0x1ff, 0x76, 0x2, 0x1, 0x2, 0x1, 0x1ff, 0x4, 0x401, 0xad0, 0xeb45, 0xf5f, 0x5, 0x5, 0x2, 0x2, 0x73e, 0x4, 0x101, 0x5, 0x10001, 0x6, 0x7, 0x3ff, 0xfffff000, 0x8, 0x9, 0xfff, 0x0, 0x400, 0x81, 0x3, 0x8, 0x1, 0x6, 0x50, 0x9, 0x5, 0x5, 0x81, 0x10a2000, 0x2, 0x0, 0x3, 0x2, 0x401, 0x6, 0xc36, 0x0, 0x3, 0x10001, 0x4, 0x1000, 0x3c00000, 0x6, 0xee1a, 0x0, 0x8001, 0x6, 0x5, 0x4, 0x7fffffff, 0xe, 0x8, 0x6, 0x6000, 0x8, 0x1a400000, 0x9, 0xffff8000, 0x100, 0x6, 0x3, 0x4, 0x80000000, 0xfff, 0x8, 0x993d, 0x101, 0xfffffffb, 0x2000000, 0x704, 0x3, 0x9, 0x8, 0xd, 0x7, 0xc, 0x9, 0x7, 0x10, 0x3, 0x5, 0x1, 0x10000, 0x1, 0xc0000000, 0x4, 0x0, 0x36e2, 0x5, 0x8, 0x1, 0x4, 0xffff8000, 0x3, 0x8000, 0x4, 0x5, 0xb9, 0x2, 0x4, 0x4, 0x1, 0x0, 0x5, 0x3, 0x44, 0x9, 0x80000001, 0x86, 0x3, 0x100, 0xf3e4, 0x8, 0x6, 0x100, 0x3, 0x1, 0x6, 0x40, 0xd, 0x3, 0x6, 0x60, 0x58000000, 0x200, 0x3, 0xffff, 0x6, 0x10001, 0x41, 0x0, 0xfffffffb, 0x1, 0x38, 0x6, 0x4, 0x9, 0x1, 0x3ff, 0x9, 0x2, 0x5, 0x1, 0xfffffc01, 0x4, 0x0, 0x1, 0x3, 0x8, 0x1, 0x6, 0x83f8, 0x41, 0x4, 0x5, 0x300, 0x1, 0x2, 0x5, 0x4, 0xc27, 0x4, 0xfffffffd, 0x5, 0x8, 0x87c, 0x3, 0x1, 0xa1e4, 0x7, 0x8001, 0x400, 0x6e, 0x0, 0x9, 0xa, 0x698, 0xfffff000, 0x6081, 0xf, 0x1, 0x3, 0x2ba]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x79e4, 0xc9, 0x6504, 0x0, 0x9, 0x0, 0x6, 0x10000, 0x3, 0x0, 0x81, 0x8, 0x5, 0x0, 0x400, 0x2, 0x200, 0x1, 0xfffffff7, 0x7, 0x9, 0xb, 0x0, 0x7fffffff, 0x8, 0x40, 0x5, 0x1ff, 0x44f, 0x100, 0x5d728188, 0x2, 0x7, 0x400, 0x1, 0x5, 0x2, 0x5, 0xb, 0x4, 0x7def, 0x9, 0x6, 0x9, 0x4, 0x6, 0xed8, 0x5, 0xc22e, 0x4, 0x2, 0x3ff, 0x8, 0x6, 0xb0e, 0x7fff, 0x8000, 0x3ff, 0x9, 0xe837, 0x6, 0xe7c, 0x0, 0x80, 0x8, 0x3ff, 0xf, 0x74ac, 0x7, 0x5, 0x5, 0x3, 0x8000, 0x5, 0x0, 0x1, 0x3, 0x6, 0xfffffffe, 0xfffffffb, 0x6, 0x4, 0x7, 0xa, 0x1, 0x9, 0x6, 0x8, 0x4, 0x9, 0xdb7, 0x3, 0x80000001, 0x8001, 0x1, 0x2, 0xb, 0x9, 0x3, 0x3, 0x7, 0x6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xc223, 0x20c, 0x40, 0x6, 0x52c, 0x4, 0x940, 0x2, 0x3, 0x1000, 0x2, 0x6, 0x6, 0xcc, 0xb, 0x5, 0x7, 0x1, 0xfffffffa, 0x7ff, 0x10000, 0xfffffffe, 0x1ff, 0xfffffffd, 0x5b, 0x7, 0x80, 0xc9be, 0xd, 0x3, 0x6, 0x2a27fa4f, 0x7, 0x1, 0x36f0, 0x6, 0xffff, 0x4, 0x9, 0x5, 0x1, 0xfffffffb, 0xfff, 0x1000, 0x2, 0x4, 0x2, 0x0, 0x9, 0xc00, 0x480000, 0x101, 0x9, 0x9, 0x6, 0xfff, 0x73c3, 0x4, 0x81, 0x6e2b, 0x4, 0x7, 0x8, 0x8, 0x2, 0x7, 0x8, 0x1, 0x7, 0x3, 0x11, 0x8, 0x8, 0x5, 0xffffa4d4, 0xfffffffd, 0x9, 0x7, 0xd, 0x183d, 0x1, 0x1, 0x7fff, 0x4, 0x8000, 0x1ff, 0x5, 0x2, 0x6, 0x3, 0x8, 0x6, 0xea, 0x5, 0x3, 0x1, 0x1, 0x3, 0x8, 0x101, 0x8, 0x400, 0x8, 0xd6, 0x2, 0x40, 0x7, 0xff, 0x3, 0x5, 0x8, 0x10, 0x7, 0x9, 0xfffffff7, 0xfffffff6, 0x101, 0x3684, 0x5, 0x7, 0x6, 0x4, 0x864, 0x1000, 0xffffff80, 0x7a05, 0x7fffffff, 0x7f, 0xb, 0xbe8e, 0x6, 0x7fffffff, 0xd8f, 0x7, 0x7, 0x5, 0x8, 0x9, 0x4, 0x2311, 0x2, 0xfffffff8, 0xa51d, 0xcdeb65ca, 0x7, 0x0, 0x80000001, 0x2, 0xdc0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xe72a, 0x3ce, 0x4, {0x76, 0x2, 0x4, 0x7, 0x3, 0xfffffff8}, {0x6, 0x0, 0x2a, 0x55b, 0x6, 0x4}, 0x16a, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}]}}, @filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfc00, 0x7, 0xa}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x66c}]}, 0x1554}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001b00)={r4}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, 0x1411, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000021}, 0x4800) r6 = syz_open_dev$ndb(&(0x7f0000001c40), 0x0, 0x40) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000001c80)=0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000001cc0)) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000001d00)={0x0, r6, r0, 0x80000001, 0x7fffffffffffffff, '\x00', {0x400, 0x1000, 0x2, 0x80000000, 0xcc1, 0x2, 0x47fd, 0xfffffffeffffffff, {0x6, 0x11}, {0x9, 0xbe4}, {}, 0x3, 0x1, 0x377f841f, 0x0, 0x9, 0x0, 0xfff7, 0x5, 0x1, 0x8, '\x00', 0x9, 0xb9d, 0x5, 0x8}}) r7 = accept4$vsock_stream(r5, &(0x7f0000001dc0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000001e00)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001e40)=0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ec0)=@generic={&(0x7f0000001e80)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001f00)="24d15dc776757ad83d013a8744c2970a350c9e9c2eab9c5f607dd77a0cc4558d794b288a8a70784b72012c985719c9689cb91e70d4d299ee3fb78bae629086825d80d52bb82f00f6e039c5896280b2432ed4ffd7f4a78c77f46a81b8b77a393d6c3d89b01e8e578f1b524d6becbc04fa1a1a361692726cb2255c1a6c18bd8464718c4c1a098d34983fccbcfa35e7efe9a3dc7f8c845ab0e659936f6c2b12a0fcb4d0cb00fb747278548ce25c828d13939b2c1c8ee920442d0fc1589134daab5f7b955f20f005da3b03715e4126517dad949825671df6", 0xd6, 0x1, &(0x7f0000002040)={0x11, 0xc, r8, 0x1, 0xbc, 0x6, @broadcast}, 0x14) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000002080)={'\x00', 0x3, 0xfffff79e, 0x1, 0x7f, 0x1, 0xffffffffffffffff}) kcmp(r9, 0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xf0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x34}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xc, 0x4}}]}}}]}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000002140)={0xa, 0x6, 0x110, 0x15, 0x0, 0x6, 0xff, 0x4}, 0xb0, &(0x7f0000002180)={0x5, 0xf, 0xb0, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xc7, 0x300, 0x9}, @generic={0x99, 0x10, 0x1, "84b4469b6c2b4cb395530dc7c3b7bd76c1f52caf02c1672fb5399b884ca1291993eb127d43feaef75be716ebae8be27b02fc842fa9cb77c3917bec77f861201b73e4e5261bb1e0b6d51c689e8422e9f8f140f7553d4d95bf126d6c83b0bc6944439200d866c54a2a2efb72aae8a6d2bb9cb94600ad92d7d11b4afe44778ca6b4ca670decf1279c6e590ca6d60a394be4f5e187648259"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x9, 0x7ba1}]}, 0x2, [{0x89, &(0x7f0000002240)=@string={0x89, 0x3, "490d0c8287a26ff65d708aaf63cefda4f7f61ff69019d191f96f625208f0730cd41919b507e444c235ccaed5c3a55d3fea80cf7e8f52cef3584d616775116319b19eb54b11830a5407327fe177ce3be1cc4ad84e2038c8fe1a13678c720688b606b24fed14346a0a591b94cdf8e8ace1c3d966a17bb9b9c406db8392d24bf9e5ade4ec17440e83"}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x804}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400)='./file0\x00', 0x8, 0x3) socket$unix(0x1, 0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002440), 0x494982, 0x0) ioctl$TIOCEXCL(r10, 0x540c) r11 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000002480), 0x80000, 0x0) ioctl$USERFAULTFD_IOC_NEW(r11, 0xaa00) connect$unix(r5, &(0x7f00000024c0)=@file={0x1, './file0\x00'}, 0x6e) 25m16.542242439s ago: executing program 33 (id=3544): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x1, {0x0, 0xff}, {0x2, 0x0, 0x1}, 0xff, 0xff}, {0x2, 0x3, {0x0, 0xff, 0x4}, {0x0, 0xf, 0x1}, 0xfd}, {0x0, 0x1, {0x2, 0xf0, 0x3}, {0x1, 0x1}, 0x2}, {0x3, 0x1, {0x0, 0xff, 0xc9cb6d8ff88e52ed}, {0x7, 0xf0, 0x4}, 0xfd, 0xfd}, {0x3, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0x3}, {0x1, 0x1, {0x1, 0xf0, 0x4}, {0x0, 0xf0, 0x2}, 0x0, 0x2}, {0x2, 0x0, {0x1}, {0x0, 0xe, 0x3}, 0x0, 0xff}, {0x1, 0x0, {0x2, 0xff, 0x1}, {0x1, 0x1, 0x4}, 0xff, 0x2}], 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3fb}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40054) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff14}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=@newtfilter={0x1554, 0x2c, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0xd}, {0xffff, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc28, 0x2, [@TCA_BASIC_POLICE={0xc1c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x8, 0x9, 0x8003, 0x4, 0x2, 0x8, 0x61, 0x1, 0x9, 0x7, 0x9, 0x6, 0x8, 0x7, 0x4, 0x7, 0x8, 0xb7, 0x4, 0x8, 0x3, 0x3, 0xffff, 0x5, 0x6, 0x4, 0x0, 0x2, 0x200, 0xd, 0x76, 0x8, 0xebce, 0x8000, 0xa9, 0x8, 0x10000, 0x8, 0xffff, 0x5, 0x3, 0xfffffffd, 0x8, 0xa0, 0x3, 0x10000, 0x100, 0x20000, 0x1, 0xff, 0x9, 0xf, 0x2, 0xfffffffd, 0x20fb00, 0xb, 0x4, 0xd, 0x10001, 0x100, 0x5, 0x8, 0xfffff8da, 0x7f, 0x4, 0xed, 0xe, 0x5, 0x3, 0x0, 0xf5, 0x9, 0x5, 0x0, 0x10000, 0xa3, 0x0, 0x7, 0x7, 0x3, 0x4, 0x1, 0x6, 0x3, 0x800, 0x5, 0x4, 0x4, 0x8, 0x7, 0x9, 0x4, 0xe, 0x9, 0x200, 0x6, 0x64d, 0x9, 0x9, 0x3, 0x4, 0x1, 0x79ab, 0x7, 0x4, 0xc, 0x3ff, 0x80000000, 0x40, 0x7, 0x8ac4, 0x8, 0x8, 0x10000, 0xf08e45c, 0x8, 0xfffffffe, 0x6, 0xcc6, 0xde90, 0x4, 0xb, 0x3, 0xc4, 0x1, 0x8, 0x80000000, 0x8, 0x6, 0x6, 0x9, 0x8001, 0x80, 0x3, 0x3, 0x9, 0xffff0001, 0x2, 0x19c, 0x4, 0x4, 0xc, 0x2a, 0x5, 0x3ff, 0x4, 0x40, 0x3, 0x4, 0xd4c, 0x7, 0x68e, 0x4f, 0xfffffff9, 0xfffffffd, 0x5, 0xffffffff, 0x4, 0x140, 0x1, 0x4, 0x800, 0xffff424c, 0x2, 0x679, 0xfffffffb, 0x2, 0x8000, 0x5, 0x6, 0x2, 0x0, 0x7, 0x1, 0x2, 0x0, 0x10000, 0x40, 0x9, 0x465, 0x6, 0x6239a37d, 0x101, 0x7fff, 0x0, 0x4, 0x80000000, 0xc12, 0xe, 0x1b5f, 0x6, 0x7807e85f, 0xc947, 0x5, 0x4, 0x5, 0xbe, 0x5, 0x2, 0x3cb, 0x2, 0x2b, 0x2, 0xb, 0xd96, 0x7, 0x2, 0x7ff, 0x9, 0x2, 0x200, 0xfffffffd, 0xde5, 0x9, 0x508, 0x8001, 0x2, 0xf8b, 0x7fff, 0xe, 0x7, 0x401, 0x4, 0xfffffff9, 0xa0, 0xeb1, 0x4, 0x1, 0x7, 0x5, 0xb74f, 0x4, 0x0, 0x3, 0x0, 0x101, 0x1, 0x2e9ad7b3, 0x9, 0xff1, 0x5, 0x1, 0x4, 0x1, 0xa, 0x8, 0x0, 0xe, 0xa, 0xfffffff8, 0xa23, 0x56, 0x8, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x93, 0x96ac, 0x2, 0x5, 0x40, 0x6, 0x6, 0xfffffffd, 0x22, 0xc34, 0x4, 0x10000, 0x465, 0x7fffffff, 0x5, 0xafe, 0x7, 0x8, 0x8, 0x1, 0x7af, 0x7, 0x5, 0x5, 0x7, 0xf07, 0xfff, 0x100, 0xfffffffc, 0x5, 0x4, 0x8, 0xfff, 0xd1, 0x4, 0x7ff, 0x8, 0x4, 0x200, 0x8, 0x4, 0xffff29f2, 0x5, 0x0, 0x6, 0xbd, 0x6c6964c6, 0x80, 0xffff, 0x5, 0x6, 0x6, 0x9, 0x7fff, 0x0, 0xffff, 0x8, 0x2, 0x3, 0x2, 0x9, 0xf, 0x6, 0x8, 0x7, 0x3, 0x1, 0x10001, 0x1, 0xd0, 0xdff, 0x8, 0xffffff3b, 0x8, 0xfffffff8, 0x0, 0x0, 0xa, 0x3, 0x8, 0xffffffff, 0xffffffff, 0xb8, 0x2, 0xfffff598, 0xf, 0xfffffffb, 0x1cb, 0x6, 0xe7c, 0x2, 0x9dea, 0x5e3, 0xaa0, 0x4bc, 0x1ff, 0x40, 0x6, 0x5, 0x3, 0x196, 0x80, 0x2bc8, 0x7, 0xe1, 0x0, 0xa, 0xfffffff9, 0xfffffffe, 0xfffffff2, 0x5, 0x4, 0x7, 0x5, 0x200, 0x297, 0x40, 0x0, 0x7, 0x8, 0x6, 0x101, 0xa0, 0x2, 0x1, 0xac, 0x2, 0xfffffffc, 0x8, 0x7, 0x4, 0xd, 0x33, 0x1, 0x5, 0x0, 0x4, 0xa, 0x5, 0x2, 0xb8, 0x8001, 0x6c7c, 0x7f, 0xe, 0x8, 0x4, 0x3, 0xa5, 0x0, 0x4, 0xe, 0x4, 0x100, 0x4, 0x3, 0x5, 0x8, 0x400, 0x9, 0x10000, 0x1, 0x0, 0xfdbd, 0x3, 0x100, 0x9, 0x800, 0x9, 0x0, 0xfff, 0x2, 0xffffffc0, 0x5, 0x60000000, 0x40, 0x5, 0x1c80, 0x800, 0x101, 0x7, 0x1, 0x9, 0x6, 0x3, 0x4, 0xf, 0xff, 0x5, 0x9, 0x7, 0xeb, 0xffffffff, 0x2, 0x9, 0x40, 0xc, 0x3, 0x821, 0x9, 0x9, 0x800, 0x10001, 0x4, 0xfffffc01, 0x1ff, 0xd1, 0x8, 0x40, 0x2, 0x0, 0xfffff000, 0xfffffff2, 0x4, 0xff, 0x401, 0xa7, 0xf3, 0xa3, 0xc, 0x7, 0x6, 0x7ff, 0x200, 0x9, 0x4, 0x7, 0x10000, 0x1, 0x8000, 0x1, 0x7, 0xffff, 0xb8, 0x1, 0x12d6, 0x0, 0xfff, 0x3, 0x4, 0x3ff, 0x4, 0x3, 0x7, 0x96fc, 0x0, 0x63, 0x332a6c33, 0xffff, 0x8, 0x5, 0x40, 0x6, 0x6, 0xd, 0x1ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x27, 0x7ff, 0x0, 0x7, 0x4, 0x5, 0x21a2, 0x3, 0xff, 0xfff, 0x5, 0xec25, 0x7, 0x5, 0xfffffff7, 0x7a, 0xf, 0x3ff, 0xc1, 0xe, 0x8, 0x3, 0x8, 0x2e9, 0x60, 0xffff0000, 0x3e5f, 0x5, 0x9, 0xdf2, 0x0, 0x8, 0x8, 0x3, 0x3, 0xd, 0x4, 0x10, 0x3, 0x1b37, 0x8, 0x3, 0x5, 0x7fffffff, 0xa039, 0x0, 0xfffffffa, 0x6, 0x5206, 0xfd1e, 0x6, 0x80000000, 0x9, 0x9, 0x9, 0xb6a, 0x1, 0x7f, 0x800, 0x6, 0x5, 0x5, 0xf, 0x0, 0x4, 0x41, 0x9, 0x3, 0x101, 0x4000, 0x7, 0x4, 0x5, 0x1000, 0x100, 0x3b, 0x3, 0x100, 0xfffff801, 0x6, 0x80000000, 0x40, 0x2, 0x7, 0x1e1, 0x8001, 0x3, 0x2, 0x200, 0x5, 0x7, 0xdd, 0x0, 0xfffffffd, 0x52, 0x7, 0x3, 0x6, 0x9, 0xfffffff9, 0x81, 0xff, 0x10000, 0x1, 0x53f3, 0x2, 0xf752, 0xe2d6, 0x3, 0x2, 0x4, 0x2, 0x10000, 0x8001, 0x2, 0x5, 0x2b3, 0x1, 0x8, 0x4, 0x9, 0x1, 0x400, 0x2, 0x7, 0x9, 0x4, 0x2, 0x800, 0x1, 0x182e, 0x3, 0xffff8001, 0x2, 0x2, 0x35, 0x1, 0x1c7, 0xc, 0x7, 0x9, 0x4, 0x8, 0x0, 0xfffffffb, 0x5, 0x7, 0x1, 0x401, 0xd, 0x3, 0xf9d, 0x2, 0x1, 0x0, 0x7, 0xc, 0xb, 0x4, 0x7fffffff, 0x40, 0x9, 0x200, 0x89, 0x81, 0x0, 0x2, 0x7e3, 0x7, 0x10, 0x5, 0x0, 0x4, 0x5a, 0x8, 0x4, 0xa, 0xb64, 0x4, 0xeef, 0x6, 0x7f, 0x9f, 0x5, 0x9, 0x7, 0x1, 0xa17, 0xe12, 0x9, 0x17f1f9ad, 0x10, 0x2, 0x15, 0x8, 0x1, 0x3, 0x7f, 0x8c70, 0x9, 0x3, 0x6d24, 0x4, 0xfa, 0x0, 0x1, 0x7, 0x0, 0xba, 0x2, 0x577a5edb, 0x7fffffff, 0xd, 0x8, 0x1000, 0x7bdc, 0x101, 0xcc71, 0x3, 0x8, 0x1, 0xcd, 0xe, 0x7, 0x0, 0x2, 0x9, 0x4, 0x1, 0xfffffc00, 0x4, 0x8, 0x2, 0x79b, 0x6, 0x1ff, 0x20, 0x5, 0xe2, 0xadc3, 0x6, 0x1, 0x0, 0x1, 0x9, 0x5, 0x5, 0x1, 0xfffff000, 0x0, 0x1, 0x0, 0x2, 0x7, 0x4, 0x500]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0xf1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0x888, 0x2, [@TCA_U32_INDEV={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_POLICE={0x854, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5, 0x1, 0x5, 0xfffffffa, 0x2, 0x7ff, 0xdc, 0x9, 0x8a, 0xfffffffb, 0x6, 0x1, 0x4, 0x87, 0x0, 0x5, 0x5, 0x1, 0xa, 0x6c, 0x7, 0x92, 0x572, 0x6, 0x3, 0x1, 0x4, 0x1000, 0x10000, 0x6, 0x9, 0x10, 0x818a, 0x400, 0x2, 0x4, 0x5, 0x8, 0x1, 0x2, 0x394e, 0x6, 0x800, 0x9, 0x1, 0xa2e, 0x4, 0x1828, 0x4, 0x5, 0x8, 0x7, 0x7, 0x40, 0xc811, 0xd69c, 0x70e, 0x3, 0x81, 0x1ff, 0x76, 0x2, 0x1, 0x2, 0x1, 0x1ff, 0x4, 0x401, 0xad0, 0xeb45, 0xf5f, 0x5, 0x5, 0x2, 0x2, 0x73e, 0x4, 0x101, 0x5, 0x10001, 0x6, 0x7, 0x3ff, 0xfffff000, 0x8, 0x9, 0xfff, 0x0, 0x400, 0x81, 0x3, 0x8, 0x1, 0x6, 0x50, 0x9, 0x5, 0x5, 0x81, 0x10a2000, 0x2, 0x0, 0x3, 0x2, 0x401, 0x6, 0xc36, 0x0, 0x3, 0x10001, 0x4, 0x1000, 0x3c00000, 0x6, 0xee1a, 0x0, 0x8001, 0x6, 0x5, 0x4, 0x7fffffff, 0xe, 0x8, 0x6, 0x6000, 0x8, 0x1a400000, 0x9, 0xffff8000, 0x100, 0x6, 0x3, 0x4, 0x80000000, 0xfff, 0x8, 0x993d, 0x101, 0xfffffffb, 0x2000000, 0x704, 0x3, 0x9, 0x8, 0xd, 0x7, 0xc, 0x9, 0x7, 0x10, 0x3, 0x5, 0x1, 0x10000, 0x1, 0xc0000000, 0x4, 0x0, 0x36e2, 0x5, 0x8, 0x1, 0x4, 0xffff8000, 0x3, 0x8000, 0x4, 0x5, 0xb9, 0x2, 0x4, 0x4, 0x1, 0x0, 0x5, 0x3, 0x44, 0x9, 0x80000001, 0x86, 0x3, 0x100, 0xf3e4, 0x8, 0x6, 0x100, 0x3, 0x1, 0x6, 0x40, 0xd, 0x3, 0x6, 0x60, 0x58000000, 0x200, 0x3, 0xffff, 0x6, 0x10001, 0x41, 0x0, 0xfffffffb, 0x1, 0x38, 0x6, 0x4, 0x9, 0x1, 0x3ff, 0x9, 0x2, 0x5, 0x1, 0xfffffc01, 0x4, 0x0, 0x1, 0x3, 0x8, 0x1, 0x6, 0x83f8, 0x41, 0x4, 0x5, 0x300, 0x1, 0x2, 0x5, 0x4, 0xc27, 0x4, 0xfffffffd, 0x5, 0x8, 0x87c, 0x3, 0x1, 0xa1e4, 0x7, 0x8001, 0x400, 0x6e, 0x0, 0x9, 0xa, 0x698, 0xfffff000, 0x6081, 0xf, 0x1, 0x3, 0x2ba]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x79e4, 0xc9, 0x6504, 0x0, 0x9, 0x0, 0x6, 0x10000, 0x3, 0x0, 0x81, 0x8, 0x5, 0x0, 0x400, 0x2, 0x200, 0x1, 0xfffffff7, 0x7, 0x9, 0xb, 0x0, 0x7fffffff, 0x8, 0x40, 0x5, 0x1ff, 0x44f, 0x100, 0x5d728188, 0x2, 0x7, 0x400, 0x1, 0x5, 0x2, 0x5, 0xb, 0x4, 0x7def, 0x9, 0x6, 0x9, 0x4, 0x6, 0xed8, 0x5, 0xc22e, 0x4, 0x2, 0x3ff, 0x8, 0x6, 0xb0e, 0x7fff, 0x8000, 0x3ff, 0x9, 0xe837, 0x6, 0xe7c, 0x0, 0x80, 0x8, 0x3ff, 0xf, 0x74ac, 0x7, 0x5, 0x5, 0x3, 0x8000, 0x5, 0x0, 0x1, 0x3, 0x6, 0xfffffffe, 0xfffffffb, 0x6, 0x4, 0x7, 0xa, 0x1, 0x9, 0x6, 0x8, 0x4, 0x9, 0xdb7, 0x3, 0x80000001, 0x8001, 0x1, 0x2, 0xb, 0x9, 0x3, 0x3, 0x7, 0x6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xc223, 0x20c, 0x40, 0x6, 0x52c, 0x4, 0x940, 0x2, 0x3, 0x1000, 0x2, 0x6, 0x6, 0xcc, 0xb, 0x5, 0x7, 0x1, 0xfffffffa, 0x7ff, 0x10000, 0xfffffffe, 0x1ff, 0xfffffffd, 0x5b, 0x7, 0x80, 0xc9be, 0xd, 0x3, 0x6, 0x2a27fa4f, 0x7, 0x1, 0x36f0, 0x6, 0xffff, 0x4, 0x9, 0x5, 0x1, 0xfffffffb, 0xfff, 0x1000, 0x2, 0x4, 0x2, 0x0, 0x9, 0xc00, 0x480000, 0x101, 0x9, 0x9, 0x6, 0xfff, 0x73c3, 0x4, 0x81, 0x6e2b, 0x4, 0x7, 0x8, 0x8, 0x2, 0x7, 0x8, 0x1, 0x7, 0x3, 0x11, 0x8, 0x8, 0x5, 0xffffa4d4, 0xfffffffd, 0x9, 0x7, 0xd, 0x183d, 0x1, 0x1, 0x7fff, 0x4, 0x8000, 0x1ff, 0x5, 0x2, 0x6, 0x3, 0x8, 0x6, 0xea, 0x5, 0x3, 0x1, 0x1, 0x3, 0x8, 0x101, 0x8, 0x400, 0x8, 0xd6, 0x2, 0x40, 0x7, 0xff, 0x3, 0x5, 0x8, 0x10, 0x7, 0x9, 0xfffffff7, 0xfffffff6, 0x101, 0x3684, 0x5, 0x7, 0x6, 0x4, 0x864, 0x1000, 0xffffff80, 0x7a05, 0x7fffffff, 0x7f, 0xb, 0xbe8e, 0x6, 0x7fffffff, 0xd8f, 0x7, 0x7, 0x5, 0x8, 0x9, 0x4, 0x2311, 0x2, 0xfffffff8, 0xa51d, 0xcdeb65ca, 0x7, 0x0, 0x80000001, 0x2, 0xdc0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xe72a, 0x3ce, 0x4, {0x76, 0x2, 0x4, 0x7, 0x3, 0xfffffff8}, {0x6, 0x0, 0x2a, 0x55b, 0x6, 0x4}, 0x16a, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}]}}, @filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfc00, 0x7, 0xa}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x66c}]}, 0x1554}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001b00)={r4}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, 0x1411, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000021}, 0x4800) r6 = syz_open_dev$ndb(&(0x7f0000001c40), 0x0, 0x40) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000001c80)=0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000001cc0)) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000001d00)={0x0, r6, r0, 0x80000001, 0x7fffffffffffffff, '\x00', {0x400, 0x1000, 0x2, 0x80000000, 0xcc1, 0x2, 0x47fd, 0xfffffffeffffffff, {0x6, 0x11}, {0x9, 0xbe4}, {}, 0x3, 0x1, 0x377f841f, 0x0, 0x9, 0x0, 0xfff7, 0x5, 0x1, 0x8, '\x00', 0x9, 0xb9d, 0x5, 0x8}}) r7 = accept4$vsock_stream(r5, &(0x7f0000001dc0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000001e00)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001e40)=0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ec0)=@generic={&(0x7f0000001e80)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001f00)="24d15dc776757ad83d013a8744c2970a350c9e9c2eab9c5f607dd77a0cc4558d794b288a8a70784b72012c985719c9689cb91e70d4d299ee3fb78bae629086825d80d52bb82f00f6e039c5896280b2432ed4ffd7f4a78c77f46a81b8b77a393d6c3d89b01e8e578f1b524d6becbc04fa1a1a361692726cb2255c1a6c18bd8464718c4c1a098d34983fccbcfa35e7efe9a3dc7f8c845ab0e659936f6c2b12a0fcb4d0cb00fb747278548ce25c828d13939b2c1c8ee920442d0fc1589134daab5f7b955f20f005da3b03715e4126517dad949825671df6", 0xd6, 0x1, &(0x7f0000002040)={0x11, 0xc, r8, 0x1, 0xbc, 0x6, @broadcast}, 0x14) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000002080)={'\x00', 0x3, 0xfffff79e, 0x1, 0x7f, 0x1, 0xffffffffffffffff}) kcmp(r9, 0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xf0, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x34}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xc, 0x4}}]}}}]}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000002140)={0xa, 0x6, 0x110, 0x15, 0x0, 0x6, 0xff, 0x4}, 0xb0, &(0x7f0000002180)={0x5, 0xf, 0xb0, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xc7, 0x300, 0x9}, @generic={0x99, 0x10, 0x1, "84b4469b6c2b4cb395530dc7c3b7bd76c1f52caf02c1672fb5399b884ca1291993eb127d43feaef75be716ebae8be27b02fc842fa9cb77c3917bec77f861201b73e4e5261bb1e0b6d51c689e8422e9f8f140f7553d4d95bf126d6c83b0bc6944439200d866c54a2a2efb72aae8a6d2bb9cb94600ad92d7d11b4afe44778ca6b4ca670decf1279c6e590ca6d60a394be4f5e187648259"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x9, 0x7ba1}]}, 0x2, [{0x89, &(0x7f0000002240)=@string={0x89, 0x3, "490d0c8287a26ff65d708aaf63cefda4f7f61ff69019d191f96f625208f0730cd41919b507e444c235ccaed5c3a55d3fea80cf7e8f52cef3584d616775116319b19eb54b11830a5407327fe177ce3be1cc4ad84e2038c8fe1a13678c720688b606b24fed14346a0a591b94cdf8e8ace1c3d966a17bb9b9c406db8392d24bf9e5ade4ec17440e83"}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x804}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400)='./file0\x00', 0x8, 0x3) socket$unix(0x1, 0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002440), 0x494982, 0x0) ioctl$TIOCEXCL(r10, 0x540c) r11 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000002480), 0x80000, 0x0) ioctl$USERFAULTFD_IOC_NEW(r11, 0xaa00) connect$unix(r5, &(0x7f00000024c0)=@file={0x1, './file0\x00'}, 0x6e) 11m28.028231832s ago: executing program 2 (id=8381): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x87a8}}}}}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000001008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 11m27.854408564s ago: executing program 2 (id=8384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0504000000ffffffffff0600000008000301", @ANYRES32=r2, @ANYBLOB="05005300010000000800050002000000"], 0x2c}}, 0x0) 11m27.756419698s ago: executing program 2 (id=8386): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000081ffffffffffffff0000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700"], 0x232) 11m27.447852683s ago: executing program 2 (id=8388): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4031, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c326052d741ec0b177237a853c74186b6abe02c44f6f2c3e11655553e07aebd762483880fef1b8b86e864184a5b35a2e694e7a4b929775843edb67d7cb70d4ac289eedbdb44a8de698678d2a451d760502866737f5bb8018280d74b2b1d5e68f28100064373cf3abfc47a5ea358f3e85a139046feca9fa1d8c0e6fceae6927a7c213ed5f3f1d8a9bf23b150f18c5889b903c19a0b33bb8591375fcd6a9346159bee81030806704760eb34a7426db5dea4c5c9443e64d5"], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xbe0a, 0x0, 0x4, 0x2, 0xbbc, {r0, r1/1000+10000}, {0x0, 0xc, 0x3, 0xd6, 0x2, 0x81, "40cdfe54"}, 0xfffff8ab, 0x3, {&(0x7f0000000080)=[{0x0, 0x8, {0x6}, 0x5}, {0x1, 0x401, {0xf}, 0x5}]}, 0xfffffff8, 0x0, r3}) 11m27.282910677s ago: executing program 2 (id=8391): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @loopback, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1) 11m26.874100142s ago: executing program 2 (id=8392): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000600)={0x80, 0x2, 0xc8, 0x80, 0x6, 0x8}) (async) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m26.446715608s ago: executing program 34 (id=8392): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000600)={0x80, 0x2, 0xc8, 0x80, 0x6, 0x8}) (async) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) syz_ublk_setup_queues(r1, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.369000703s ago: executing program 0 (id=11463): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="87882b8ee4440cb40a78e669c44876a935fcc1eadb526f921fc0b1504bd64ba2386577ab6a2c5c84301dadd6b1077ee79593155f6907d6d6a37d792df86765a3403403348c59e6a9b631931eef2570b2bf851d5cb05c1acd62edde001518e27ef08612b9c149549effe67c", 0xffffffffffffff94, 0x0, 0x0, 0xffffffffffffffd8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='scalable', 0x8) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff0000000000000000fffffffd00000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe80000000000000000000000000009b3c000000000000000a000a00fe8000000000000000000000000000aae0000002000000000000000000000000fe88000000000000000000000000010120010000000000000a0002000a010102000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff000000000000000000000000330100000000000002000a00"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0xf020000, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0xd, 0x4, 0x800000, 0x1, {}, {0x1, 0x0, 0xe0, 0x1, 0x6, 0x7, "96aa0369"}, 0x8, 0x2, {&(0x7f0000000700)=[{0x4000006, 0x10001, {&(0x7f00000000c0)}, 0x7}, {0x3, 0xe49, {&(0x7f0000000440)}}]}, 0x3}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) 4.230676611s ago: executing program 0 (id=11472): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000130001000000000004000000e00000020000000000000000000000000000000000000000000000000100000000000000000000000a000000", @ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4.18834008s ago: executing program 0 (id=11473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000060000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 3.801084271s ago: executing program 0 (id=11475): timer_create(0x3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x75) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) listen(r2, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (fail_nth: 3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) 3.511579506s ago: executing program 6 (id=11477): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x20) 3.206633793s ago: executing program 6 (id=11478): timer_create(0x3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x75) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000006c0)=""/10, 0xa}, {0x0}], 0x2}, 0x0) listen(r2, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet(0xa, 0x4, 0x7991) listen(r6, 0x8) listen(r5, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x7, 0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000000c0)) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) 3.048944865s ago: executing program 0 (id=11479): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x2f}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r3, 0x0, 0x0) unshare(0x24000200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x8010) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 2.546490836s ago: executing program 3 (id=11482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0xfffffff5, 0x4000850}, 0x20040040) 2.512608848s ago: executing program 6 (id=11483): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) 2.488606221s ago: executing program 3 (id=11484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x100f3, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 2.370762967s ago: executing program 6 (id=11486): syz_emit_ethernet(0xda, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xfffffffd, @local, {[@cipso={0x86, 0x26, 0xffffffffffffffff, [{0x0, 0xc, "5e000000ff0000000000"}, {0x0, 0x2}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x5c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2100505c09a0fffffffffffffffe0000"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x12, "00000001000000fb002c3ba1c9ffb6d9"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}, "a815a23d"}}}}}, 0x0) 2.186469465s ago: executing program 6 (id=11488): statfs(&(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002080)=""/101) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADLINK(r0, &(0x7f0000000040)={0xff6, 0x17, 0x1, {0xfed, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0xff6) 2.052285273s ago: executing program 5 (id=11490): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff0200000000000000000080000000014e2000004e300003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004c6330000002001000000000000000000000000000101000000000000001000000000000000040000000000000001800000000000600800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000004000000000000000400000000000000020000000000000008c900008a2627210e0000002bbd7000063500000a0000001000000000000000ff000000021000800800"], 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 1.998487475s ago: executing program 6 (id=11491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r1 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) fstat(r1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@fd={0x0, 0x2, 0x4, 0x1, 0xb, {}, {0x5, 0x1, 0x0, 0x7, 0xf7, 0x5, "426261e1"}, 0x3, 0x4, {}, 0x393}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x5, 0x0, 0xe3]}}, 0x5c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmmsg(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xa}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="61b7", 0x2}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="100000000080"], 0x10}}], 0x2, 0x4040805) 1.847427463s ago: executing program 5 (id=11493): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x3) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)="0eb6c06a3d736419e464e2a2a13ce014777e9c808ef021f96b1f39e621c623d3", 0x20}, 0x68) write$dsp(r0, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000440)={0x0, 0x0, 0x80000a, 0x100080000000006, 0x346a, 0x100000001, 0xfffe000000000001, 0x4, 0x0, 0x2, 0xfffffffd, 0x1}) close(r0) 1.60246239s ago: executing program 7 (id=11496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4003}]}, &(0x7f00000002c0)=0x10) 1.454560624s ago: executing program 7 (id=11497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000f00000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 1.420285834s ago: executing program 7 (id=11498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x4, 0x4) 1.315500082s ago: executing program 7 (id=11499): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffffffffffaf) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000100)='ufs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) set_mempolicy(0x0, &(0x7f0000000000)=0xfefffffffffffffd, 0x10000000000204) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) fchdir(r3) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000060000000202000000000000000000000a0002006000000000000000a400010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00200008ad957b65964f40189fd88c98a3b09ecbd5b9eeb6c9c618b4cfc97232d64fae3bed9473088fa9693f7e6da8737ef7346f025cb9d2b4f66698b085be36c5d57f9f28cf59c15358459a1d8d6f320f4d93fc7dbe3dcad5bff276eb334d8"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00007b9000/0x4000)=nil, 0x4000}, 0x3}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) fcntl$setown(r0, 0x8, 0x0) 1.186765827s ago: executing program 5 (id=11500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x3) socket$inet6(0xa, 0x5, 0x8) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}}, 0x24}}, 0x400c0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x2500, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) close(0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r5, 0x8004af81, &(0x7f0000000000)) 799.625565ms ago: executing program 5 (id=11501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000050a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 790.861451ms ago: executing program 3 (id=11502): r0 = socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x4008810}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002100)}, 0x2000c400) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x2592, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_RANDOM_ADDR={{0xba}, 0x6}}}, 0x7) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) 682.948746ms ago: executing program 5 (id=11503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000100000000000000000000000a000000", @ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 635.694921ms ago: executing program 5 (id=11504): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r2 = syz_usb_connect(0x5, 0x38, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x34, 0xed, 0x45, 0xea9eae119b77cf3d, 0x19d2, 0x1080, 0xed34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x7f, 0xc, 0x80, 0x8, "", [{{0x9, 0x4, 0x41, 0x4, 0x1, 0xff, 0xff, 0xff, 0x5, [@generic={0x2, 0x30}, @hid_hid={0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x1}}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7f, 0x2b}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="070f056400"]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1288, &(0x7f0000000440)={[{0x1000, 0x4e00, "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"}, {0x7, 0x4e00, "308394b44dc0b1"}, {0xd2, 0x4e00, "e0af34e83bed049423e22bcbb2ca3eae04135ea1e31bfcc5790f41e8e1e80887106cd6a93b2cfdd164a6fd45e0846672b3b79559d4f6a713afb9decc9daa7ba22d6613f3dac1fda150ff2025c361675eff630daa9440bdfb4560240d737f06d66e9835d43190b3856fa54ce7c503d6b61492dfaa2187844419bd4faa31525b7c7d1e21ed1920e9940afa6f54ae3ea376897ec5ad74ffc411541e79463f297db094f520016c797abe66b9903205ec934e49325a2d060ab19759cad616594606d78358ec113596a871a2f6278baa2d3c365a05"}, {0x5, 0x4e00, "21022692ff"}, {0xde, 0x4e00, "aa6680a6bb416c16f60137ba2dd0e3cba8a775d9ef6b5db434ce5db760586d6076a6ec4941318cf49ecd3c3f6ad947c667b6b44fab7fb8f8cf66e7143a26c316a042511051215bdeabfecf643c1afadad5ff63e4b8d0bf9af849a4c58de21a4864dcd203d3657090f2e9acd3e2f01dd9fdb24b9e3860a6e6d9a393770b27ed07b5e23356a022ae242b92cf2d186c8e30fb290b251e2af2f6646fa50b32b42c495bef379ef4b7f5c1b5a9f51be546ef99112598380d1feca0ce3964585f9d9c6e0e558e5a3cfd100d90ac67ac1c9b58ea035fe4ffd0f05133ddba880c9fe8"}, {0xe, 0x4e00, "7ddef2ac0be35bc590727f6d2013"}, {}, {0x94, 0x4e00, "c373a959073ab072bc7f9e96fa53dc24bf19c3e603096b2588d46f74455e1d1acb5845bc27c39f436627db23619f0e2bd60378adc592b87803d92141044d6e5a4270035308d0899b95d734dd307513de7a584847defeb01a73d101cf3dc11a319691c971b9f0ce9032e951e23e565363c72880af164b91ec6ceb7b990d5bcb413ab0061006ac162df0dd5676a46a99afce1d7ee8"}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) (async) syz_usb_connect(0x5, 0x38, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x34, 0xed, 0x45, 0xea9eae119b77cf3d, 0x19d2, 0x1080, 0xed34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x7f, 0xc, 0x80, 0x8, "", [{{0x9, 0x4, 0x41, 0x4, 0x1, 0xff, 0xff, 0xff, 0x5, [@generic={0x2, 0x30}, @hid_hid={0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x1}}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7f, 0x2b}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="070f056400"]}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1288, &(0x7f0000000440)={[{0x1000, 0x4e00, "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"}, {0x7, 0x4e00, "308394b44dc0b1"}, {0xd2, 0x4e00, "e0af34e83bed049423e22bcbb2ca3eae04135ea1e31bfcc5790f41e8e1e80887106cd6a93b2cfdd164a6fd45e0846672b3b79559d4f6a713afb9decc9daa7ba22d6613f3dac1fda150ff2025c361675eff630daa9440bdfb4560240d737f06d66e9835d43190b3856fa54ce7c503d6b61492dfaa2187844419bd4faa31525b7c7d1e21ed1920e9940afa6f54ae3ea376897ec5ad74ffc411541e79463f297db094f520016c797abe66b9903205ec934e49325a2d060ab19759cad616594606d78358ec113596a871a2f6278baa2d3c365a05"}, {0x5, 0x4e00, "21022692ff"}, {0xde, 0x4e00, "aa6680a6bb416c16f60137ba2dd0e3cba8a775d9ef6b5db434ce5db760586d6076a6ec4941318cf49ecd3c3f6ad947c667b6b44fab7fb8f8cf66e7143a26c316a042511051215bdeabfecf643c1afadad5ff63e4b8d0bf9af849a4c58de21a4864dcd203d3657090f2e9acd3e2f01dd9fdb24b9e3860a6e6d9a393770b27ed07b5e23356a022ae242b92cf2d186c8e30fb290b251e2af2f6646fa50b32b42c495bef379ef4b7f5c1b5a9f51be546ef99112598380d1feca0ce3964585f9d9c6e0e558e5a3cfd100d90ac67ac1c9b58ea035fe4ffd0f05133ddba880c9fe8"}, {0xe, 0x4e00, "7ddef2ac0be35bc590727f6d2013"}, {}, {0x94, 0x4e00, "c373a959073ab072bc7f9e96fa53dc24bf19c3e603096b2588d46f74455e1d1acb5845bc27c39f436627db23619f0e2bd60378adc592b87803d92141044d6e5a4270035308d0899b95d734dd307513de7a584847defeb01a73d101cf3dc11a319691c971b9f0ce9032e951e23e565363c72880af164b91ec6ceb7b990d5bcb413ab0061006ac162df0dd5676a46a99afce1d7ee8"}]}) (async) 587.179725ms ago: executing program 3 (id=11505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000090000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 402.539414ms ago: executing program 3 (id=11506): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x5d65, &(0x7f0000000040)={0x0, 0x7a22, 0x1000, 0x7, 0x337}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@deltaction={0x1e8, 0x31, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x69}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4478}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x76}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24045001}, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000044) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r10, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 358.488504ms ago: executing program 7 (id=11507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000003e00000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 297.754297ms ago: executing program 7 (id=11508): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_clone(0x640c7600, 0x0, 0x5, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) 194.443817ms ago: executing program 3 (id=11509): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)={0x0, 0xff, 0x1, [0xffff]}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000240)=0x9) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, 0x0, &(0x7f00000004c0)) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b090505"], 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfcfe}, @HCI_OP_WRITE_AUTH_ENABLE={{0x5}, 0xe}}}, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b0400000000000000000200000a6c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c00f3664cf8796c6f61640024000280080004400000005608000340000000a7080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30"], 0xd0}}, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x15}) 0s ago: executing program 0 (id=11510): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) (fail_nth: 1) kernel console output (not intermixed with test programs): L_64_after_hwframe+0x77/0x7f [ 2170.474866][ T7954] do_syscall_64+0x174/0x580 [ 2170.474884][ T7954] ? trace_irq_disable+0x3b/0x140 [ 2170.474912][ T7954] ? clear_bhb_loop+0x40/0x90 [ 2170.474936][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.474955][ T7954] RIP: 0033:0x7f6695d9ce59 [ 2170.474973][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2170.474989][ T7954] RSP: 002b:00007f6696c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2170.475010][ T7954] RAX: ffffffffffffffda RBX: 00007f6696015fa0 RCX: 00007f6695d9ce59 [ 2170.475024][ T7954] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 2170.475037][ T7954] RBP: 00007f6696c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.475049][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.475060][ T7954] R13: 00007f6696016038 R14: 00007f6696015fa0 R15: 00007f669613fa48 [ 2170.475089][ T7954] [ 2171.529132][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.567375][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.201305][ T7974] loop3: detected capacity change from 0 to 895 [ 2172.236934][ T7974] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2172.259324][ T7974] loop3: partition table partially beyond EOD, truncated [ 2172.300659][ T7974] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2172.527485][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.561728][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.854687][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.905454][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.401425][T24434] usb 8-1: USB disconnect, device number 7 [ 2173.793131][ T30] audit: type=1326 audit(1781498757.856:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.5.10889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6695d9ce59 code=0x0 [ 2174.669306][ T6831] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2174.850380][ T6831] usb 6-1: Using ep0 maxpacket: 16 [ 2174.862918][ T6831] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2174.888198][ T6831] usb 6-1: config 0 has no interface number 0 [ 2174.924466][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10898'. [ 2174.942519][ T6831] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2174.972791][ T6831] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2175.016300][ T6831] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2175.049644][ T6831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.071822][ T6831] usb 6-1: Product: syz [ 2175.081673][ T6831] usb 6-1: Manufacturer: syz [ 2175.101401][ T6831] usb 6-1: SerialNumber: syz [ 2175.115245][ T6831] usb 6-1: config 0 descriptor?? [ 2175.137440][ T6831] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2175.176658][ T6831] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 2175.258189][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.281668][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.593568][T24434] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2175.774926][T24434] usb 8-1: config 128 has an invalid interface number: 148 but max is 0 [ 2175.792796][T24434] usb 8-1: config 128 has no interface number 0 [ 2175.807209][T24434] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2175.826364][T24434] usb 8-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2175.846085][T24434] usb 8-1: config 128 interface 148 has no altsetting 0 [ 2175.868327][T24434] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 2175.885871][T24434] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.905667][T24434] usb 8-1: Product: syz [ 2175.920455][T24434] usb 8-1: Manufacturer: syz [ 2175.931284][T24434] usb 8-1: SerialNumber: syz [ 2176.154288][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.181596][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.217192][T24434] usb 8-1: USB disconnect, device number 8 [ 2176.709072][T24434] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2176.888917][T24434] usb 8-1: Using ep0 maxpacket: 8 [ 2176.904991][T24434] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2176.926983][T24434] usb 8-1: config 16 has an invalid interface number: 148 but max is 0 [ 2176.944377][T24434] usb 8-1: config 16 has no interface number 0 [ 2176.958108][T24434] usb 8-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2176.975406][T24434] usb 8-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2176.991772][T24434] usb 8-1: config 16 interface 148 has no altsetting 0 [ 2177.018761][T24434] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2177.038800][T24434] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.330866][T24434] usb 8-1: string descriptor 0 read error: -71 [ 2177.368224][T24434] usb 8-1: USB disconnect, device number 9 [ 2177.525071][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10906'. [ 2177.560875][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10906'. [ 2177.589449][ T8037] netlink: 124 bytes leftover after parsing attributes in process `syz.0.10906'. [ 2177.677774][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10907'. [ 2177.701595][T24439] usb 6-1: USB disconnect, device number 64 [ 2177.728308][T24439] cypress_m8 6-1:0.35: device disconnected [ 2178.168775][T24439] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2178.348724][T24439] usb 6-1: Using ep0 maxpacket: 8 [ 2178.386066][T24439] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2178.416189][T24439] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.454619][T24439] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2178.501481][T24439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2178.572271][T24439] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2178.614107][T24439] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2178.646569][T24439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.700310][T24439] usbtmc 6-1:16.0: bulk endpoints not found [ 2178.850324][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10916'. [ 2179.043479][ T8052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2179.080510][ T8052] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2179.215095][ T8052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2179.228461][ T8052] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2179.470765][ T8052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2179.490624][ T8052] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2179.601129][ T8052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2179.611665][ T8052] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2180.186970][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10918'. [ 2180.204882][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10918'. [ 2180.215646][ T8069] netlink: 124 bytes leftover after parsing attributes in process `syz.6.10918'. [ 2180.785548][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.805017][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.814977][ T6831] usb 6-1: USB disconnect, device number 65 [ 2181.083295][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.123662][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.211459][ T8087] GUP no longer grows the stack in syz.7.10925 (8087): 200000002000-200000006000 (200000001000) [ 2181.245274][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.7.10925 Tainted: G L syzkaller #0 PREEMPT(full) [ 2181.245304][ T8087] Tainted: [L]=SOFTLOCKUP [ 2181.245312][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2181.245325][ T8087] Call Trace: [ 2181.245333][ T8087] [ 2181.245342][ T8087] dump_stack_lvl+0xe8/0x150 [ 2181.245372][ T8087] __get_user_pages+0x238c/0x2720 [ 2181.245422][ T8087] ? down_read_killable+0x1bb/0x340 [ 2181.245454][ T8087] ? __lock_acquire+0x683/0x2cd0 [ 2181.245481][ T8087] __gup_longterm_locked+0xd52/0x15c0 [ 2181.245519][ T8087] ? sanity_check_pinned_pages+0x817/0x8d0 [ 2181.245549][ T8087] gup_fast_fallback+0x1d82/0x20d0 [ 2181.245602][ T8087] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2181.245629][ T8087] ? __lock_acquire+0x683/0x2cd0 [ 2181.245649][ T8087] ? is_valid_gup_args+0x11f/0x200 [ 2181.245674][ T8087] ? pin_user_pages_fast+0x4d/0xb0 [ 2181.245700][ T8087] iov_iter_extract_pages+0x369/0x5f0 [ 2181.245735][ T8087] iov_iter_extract_bvecs+0xb1/0x920 [ 2181.245761][ T8087] ? bio_associate_blkg_from_css+0xaf/0xce0 [ 2181.245865][ T8087] bio_iov_iter_get_pages+0x352/0x940 [ 2181.245922][ T8087] ? bio_init+0x14b/0x2d0 [ 2181.245955][ T8087] blkdev_direct_IO+0x103c/0x17a0 [ 2181.245997][ T8087] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 2181.246033][ T8087] ? aa_file_perm+0x4ed/0x15f0 [ 2181.246065][ T8087] ? __pfx___schedule+0x10/0x10 [ 2181.246099][ T8087] ? __pfx_aa_file_perm+0x10/0x10 [ 2181.246132][ T8087] ? kiocb_write_and_wait+0xad/0x1b0 [ 2181.246165][ T8087] blkdev_read_iter+0x223/0x420 [ 2181.246200][ T8087] do_iter_readv_writev+0x612/0x8c0 [ 2181.246236][ T8087] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2181.246273][ T8087] ? bpf_lsm_file_permission+0x9/0x20 [ 2181.246302][ T8087] ? security_file_permission+0x75/0x260 [ 2181.246328][ T8087] ? rw_verify_area+0x24a/0x4c0 [ 2181.246362][ T8087] vfs_readv+0x28d/0x850 [ 2181.246384][ T8087] ? __pfx_futex_wake+0x10/0x10 [ 2181.246419][ T8087] ? __pfx_vfs_readv+0x10/0x10 [ 2181.246466][ T8087] ? __pfx_do_futex+0x10/0x10 [ 2181.246506][ T8087] __se_sys_preadv2+0x177/0x2a0 [ 2181.246542][ T8087] ? __pfx___se_sys_preadv2+0x10/0x10 [ 2181.246582][ T8087] ? __x64_sys_preadv2+0x20/0xc0 [ 2181.246614][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.246637][ T8087] do_syscall_64+0x174/0x580 [ 2181.246657][ T8087] ? trace_irq_disable+0x3b/0x140 [ 2181.246688][ T8087] ? clear_bhb_loop+0x40/0x90 [ 2181.246719][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.246740][ T8087] RIP: 0033:0x7f20a039ce59 [ 2181.246762][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2181.246780][ T8087] RSP: 002b:00007f20a12cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 2181.246821][ T8087] RAX: ffffffffffffffda RBX: 00007f20a0615fa0 RCX: 00007f20a039ce59 [ 2181.246839][ T8087] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000004 [ 2181.246855][ T8087] RBP: 00007f20a0432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2181.246869][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2181.246883][ T8087] R13: 00007f20a0616038 R14: 00007f20a0615fa0 R15: 00007f20a073fa48 [ 2181.246919][ T8087] [ 2181.582124][ T8091] netlink: 'syz.5.10924': attribute type 10 has an invalid length. [ 2181.907061][ T8104] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10930'. [ 2182.805592][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.825183][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.930824][ T8125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2183.179493][ T8130] netlink: 'syz.5.10939': attribute type 10 has an invalid length. [ 2183.242889][ T8130] bond0: (slave dummy0): Releasing backup interface [ 2183.263155][ T8133] netlink: 'syz.5.10939': attribute type 10 has an invalid length. [ 2183.296231][ T8133] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2184.396649][ T8155] binder: 8153:8155 ioctl c0306201 200000000600 returned -14 [ 2184.481015][ T8159] netlink: 164 bytes leftover after parsing attributes in process `syz.6.10945'. [ 2185.090363][ T8170] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2185.096918][ T8170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2185.163107][ T8170] vhci_hcd vhci_hcd.0: Device attached [ 2185.393222][ T8170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2185.428826][T23173] usb 40-1: SetAddress Request (50) to port 0 [ 2185.437439][T23173] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 2186.055456][ T8182] loop3: detected capacity change from 0 to 2479 [ 2186.194792][ T8182] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2186.310674][ T8182] loop3: partition table partially beyond EOD, truncated [ 2186.370766][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10952'. [ 2186.436643][ T8182] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2186.479048][ T8171] vhci_hcd: connection reset by peer [ 2186.499658][ T4110] vhci_hcd vhci_hcd.3: stop threads [ 2186.562831][ T4110] vhci_hcd vhci_hcd.3: release socket [ 2186.589279][ T4110] vhci_hcd vhci_hcd.3: disconnect device [ 2186.918348][ T7920] udevd[7920]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 2186.979644][T15099] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 2187.161198][T15099] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2187.210279][T15099] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.247680][T15099] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2187.279982][T15099] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2187.304883][T15099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.395325][T15099] usb 8-1: config 0 descriptor?? [ 2187.621530][ T8203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10958'. [ 2187.719817][ T8186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2188.153527][T15099] usbhid 8-1:0.0: can't add hid device: -71 [ 2188.187129][T15099] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2188.214459][T15099] usb 8-1: USB disconnect, device number 10 [ 2188.470631][ T8214] vlan2: entered promiscuous mode [ 2188.475907][ T8214] team0: entered promiscuous mode [ 2188.481575][ T8214] team_slave_0: entered promiscuous mode [ 2188.487590][ T8214] team_slave_1: entered promiscuous mode [ 2188.494438][ T8214] dummy0: entered promiscuous mode [ 2188.677295][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10964'. [ 2188.698438][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10965'. [ 2189.034842][ T8230] netlink: 164 bytes leftover after parsing attributes in process `syz.7.10966'. [ 2189.290399][ T8239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10970'. [ 2189.375674][ T8238] fuse: Unknown parameter 'group_iêUÊÔd' [ 2189.989122][ T6831] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2190.168764][ T6831] usb 6-1: Using ep0 maxpacket: 8 [ 2190.204688][ T6831] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 2190.230768][ T6831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.251368][ T6831] usb 6-1: Product: à š [ 2190.265724][ T6831] usb 6-1: Manufacturer: à Š [ 2190.288928][ T6831] usb 6-1: SerialNumber:  [ 2190.563769][ T6831] usb 6-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 2190.599152][T23173] usb 40-1: device descriptor read/8, error -110 [ 2190.609805][ T6831] usb 6-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 2190.636753][ T6831] usb 6-1: 0:3 : does not exist [ 2190.647782][ T6831] usb 6-1: 0:4 : does not exist [ 2190.655511][ T6831] usb 6-1: 0:5 : does not exist [ 2190.661952][ T6831] usb 6-1: 0:6 : does not exist [ 2190.675910][ T6831] usb 6-1: 0:7 : does not exist [ 2190.691151][ T6831] usb 6-1: 0:8 : does not exist [ 2190.707608][ T6831] usb 6-1: 0:9 : does not exist [ 2190.716331][ T6831] usb 6-1: 0:10 : does not exist [ 2190.723029][ T6831] usb 6-1: 0:11 : does not exist [ 2190.733191][ T6831] usb 6-1: 0:12 : does not exist [ 2190.738356][ T6831] usb 6-1: 0:13 : does not exist [ 2190.747007][ T6831] usb 6-1: 0:14 : does not exist [ 2190.755386][ T6831] usb 6-1: 0:15 : does not exist [ 2190.762971][ T6831] usb 6-1: 0:16 : does not exist [ 2190.768120][ T6831] usb 6-1: 0:17 : does not exist [ 2190.775957][ T6831] usb 6-1: 0:18 : does not exist [ 2190.788946][ T6831] usb 6-1: 0:19 : does not exist [ 2190.802949][ T6831] usb 6-1: 0:20 : does not exist [ 2190.818762][ T6831] usb 6-1: 0:21 : does not exist [ 2190.846962][ T6831] usb 6-1: 0:22 : does not exist [ 2190.870537][ T6831] usb 6-1: 0:23 : does not exist [ 2190.895480][ T6831] usb 6-1: 0:24 : does not exist [ 2190.913468][ T6831] usb 6-1: 0:25 : does not exist [ 2190.930341][ T6831] usb 6-1: 0:26 : does not exist [ 2190.951685][ T6831] usb 6-1: 0:27 : does not exist [ 2190.964189][ T6831] usb 6-1: 0:28 : does not exist [ 2190.985245][ T6831] usb 6-1: 0:29 : does not exist [ 2191.006455][ T6831] usb 6-1: 0:30 : does not exist [ 2191.020047][T23173] usb usb40-port1: attempt power cycle [ 2191.027449][ T6831] usb 6-1: 0:31 : does not exist [ 2191.066395][ T6831] usb 6-1: 0:32 : does not exist [ 2191.094083][ T6831] usb 6-1: 0:33 : does not exist [ 2191.111135][ T8254] binder: 8251:8254 ioctl c0306201 200000000600 returned -14 [ 2191.113249][ T6831] usb 6-1: 0:34 : does not exist [ 2191.159670][ T6831] usb 6-1: 0:35 : does not exist [ 2191.197068][ T6831] usb 6-1: 0:36 : does not exist [ 2191.208961][ T6831] usb 6-1: 0:37 : does not exist [ 2191.232454][ T6831] usb 6-1: 0:38 : does not exist [ 2191.243902][ T6831] usb 6-1: 0:39 : does not exist [ 2191.268148][ T6831] usb 6-1: 0:40 : does not exist [ 2191.280784][ T6831] usb 6-1: 0:41 : does not exist [ 2191.294343][ T6831] usb 6-1: 0:42 : does not exist [ 2191.310703][ T6831] usb 6-1: 0:43 : does not exist [ 2191.327500][ T6831] usb 6-1: 0:44 : does not exist [ 2191.346807][ T6831] usb 6-1: 0:45 : does not exist [ 2191.360540][ T6831] usb 6-1: 0:46 : does not exist [ 2191.376155][ T6831] usb 6-1: 0:47 : does not exist [ 2191.394564][ T6831] usb 6-1: 0:48 : does not exist [ 2191.410547][ T6831] usb 6-1: 0:49 : does not exist [ 2191.415831][ T6831] usb 6-1: 0:50 : does not exist [ 2191.425524][ T6831] usb 6-1: 0:51 : does not exist [ 2191.432967][ T6831] usb 6-1: 0:52 : does not exist [ 2191.438579][ T8257] netlink: 'syz.5.10975': attribute type 1 has an invalid length. [ 2191.447430][ T6831] usb 6-1: 0:53 : does not exist [ 2191.455190][ T6831] usb 6-1: 0:54 : does not exist [ 2191.475109][ T6831] usb 6-1: 0:55 : does not exist [ 2191.485294][ T6831] usb 6-1: 0:56 : does not exist [ 2191.499747][ T6831] usb 6-1: 0:57 : does not exist [ 2191.507700][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10975'. [ 2191.519100][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.528590][ T6831] usb 6-1: 0:58 : does not exist [ 2191.537548][ T6831] usb 6-1: 0:59 : does not exist [ 2191.547790][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.556204][ T6831] usb 6-1: 0:60 : does not exist [ 2191.565399][ T8257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2191.572880][ T6831] usb 6-1: 0:61 : does not exist [ 2191.589899][ T6831] usb 6-1: 0:62 : does not exist [ 2191.603744][T23173] usb usb40-port1: unable to enumerate USB device [ 2191.621635][ T6831] usb 6-1: 0:63 : does not exist [ 2191.643150][ T6831] usb 6-1: 0:64 : does not exist [ 2191.657978][ T6831] usb 6-1: 0:65 : does not exist [ 2191.663469][ T6831] usb 6-1: 0:66 : does not exist [ 2191.668549][ T6831] usb 6-1: 0:67 : does not exist [ 2191.676805][ T6831] usb 6-1: 0:68 : does not exist [ 2191.682292][ T6831] usb 6-1: 0:69 : does not exist [ 2191.687429][ T6831] usb 6-1: 0:70 : does not exist [ 2191.695319][ T6831] usb 6-1: 0:71 : does not exist [ 2191.700744][ T6831] usb 6-1: 0:72 : does not exist [ 2191.705787][ T6831] usb 6-1: 0:73 : does not exist [ 2191.711844][ T6831] usb 6-1: 0:74 : does not exist [ 2191.716963][ T6831] usb 6-1: 0:75 : does not exist [ 2191.722327][ T8261] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2191.726749][ T6831] usb 6-1: 0:76 : does not exist [ 2191.747284][ T6831] usb 6-1: 0:77 : does not exist [ 2191.752876][ T6831] usb 6-1: 0:78 : does not exist [ 2191.758178][ T6831] usb 6-1: 0:79 : does not exist [ 2191.768512][ T6831] usb 6-1: 0:80 : does not exist [ 2191.774060][ T6831] usb 6-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 2191.833057][ T6831] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2191.857411][ T6831] usb 6-1: USB disconnect, device number 66 [ 2191.912739][ T7920] udevd[7920]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2192.178837][ T6831] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2192.339010][ T6831] usb 6-1: Using ep0 maxpacket: 8 [ 2192.359828][ T6831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.374287][ T6831] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2192.391633][ T6831] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 2192.400962][ T6831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.409800][ T6831] usb 6-1: Product: syz [ 2192.414252][ T6831] usb 6-1: Manufacturer: syz [ 2192.419825][ T6831] usb 6-1: SerialNumber: syz [ 2192.449959][ T6831] usb 6-1: config 0 descriptor?? [ 2192.477530][ T6831] radioshark 6-1:0.0: Invalid radioSHARK device [ 2192.498389][ T6831] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 2192.510937][ T6831] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2193.196351][ T6831] usb 6-1: USB disconnect, device number 67 [ 2193.458934][T24439] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2193.658849][T24439] usb 8-1: Using ep0 maxpacket: 8 [ 2193.679243][T24439] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2193.697475][ T8285] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10984'. [ 2193.741233][T24439] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 2193.782946][T24439] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2193.831657][T24439] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2193.883376][T24439] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2193.901531][T24439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.921122][T24439] usb 8-1: Product: syz [ 2193.939855][T24439] usb 8-1: Manufacturer: syz [ 2193.949452][T24439] usb 8-1: SerialNumber: syz [ 2193.994320][ T8279] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 2194.026084][T24439] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 2194.074516][T24439] usbtest 8-1:1.0: Linux user mode ISO test driver [ 2194.109021][T24439] usbtest 8-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 2194.205917][ T8289] misc userio: No port type given on /dev/userio [ 2194.238941][T24416] usb 8-1: USB disconnect, device number 11 [ 2194.599376][ T8296] netlink: 'syz.6.10987': attribute type 10 has an invalid length. [ 2194.659335][ T8296] bond0: (slave dummy0): Releasing backup interface [ 2194.697580][ T8297] netlink: 'syz.6.10987': attribute type 10 has an invalid length. [ 2194.779413][ T8296] dummy0: entered promiscuous mode [ 2194.806638][ T8296] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2194.856516][ T8296] team0: Failed to send options change via netlink (err -105) [ 2194.905574][ T8296] team0: Port device dummy0 added [ 2194.937051][ T8297] dummy0: left promiscuous mode [ 2194.974429][ T8297] team0: Failed to send options change via netlink (err -105) [ 2195.009463][ T8297] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2195.052782][ T8297] team0: Port device dummy0 removed [ 2195.135093][ T8297] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2195.234120][ T8304] binder: 8303:8304 ioctl c0306201 200000000600 returned -14 [ 2195.501963][ T8311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2196.157209][ T8329] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10996'. [ 2196.608980][ T8336] netlink: 'syz.7.10999': attribute type 1 has an invalid length. [ 2196.731599][ T8336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2196.811383][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2196.862661][ T8338] bond2: (slave batadv1): making interface the new active one [ 2196.892242][ T8338] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 2196.981368][ T8339] bond2 (unregistering): (slave batadv1): Releasing active interface [ 2197.019691][ T8339] bond2 (unregistering): Released all slaves [ 2198.158885][T24416] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2198.318883][T24416] usb 8-1: Using ep0 maxpacket: 16 [ 2198.331431][T24416] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2198.361881][T24416] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 2198.391260][T24416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.428067][T24416] usb 8-1: config 0 descriptor?? [ 2198.866136][T24416] hid_parser_main: 7 callbacks suppressed [ 2198.866157][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2198.917121][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2198.935360][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2198.965840][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2198.992375][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.018454][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.018976][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.061598][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.069875][ T8347] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) ! [ 2199.094726][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.133667][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.172067][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.192114][T24416] zeroplus 0003:0C12:0030.0058: unknown main item tag 0x0 [ 2199.205309][T24416] zeroplus 0003:0C12:0030.0058: item fetching failed at offset 12/41 [ 2199.227209][T24416] zeroplus 0003:0C12:0030.0058: parse failed [ 2199.251991][T24416] zeroplus 0003:0C12:0030.0058: probe with driver zeroplus failed with error -22 [ 2199.281645][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.313165][ T8360] binder: BINDER_SET_CONTEXT_MGR already set [ 2199.326189][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.351837][ T8360] binder: 8359:8360 ioctl 4018620d 200000000040 returned -16 [ 2199.396294][ T8362] binder: 8359:8362 ioctl c0306201 2000000003c0 returned -14 [ 2199.405548][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11002'. [ 2199.467331][ T6831] usb 8-1: USB disconnect, device number 12 [ 2199.666910][ T8364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2200.003838][ T8370] netlink: 'syz.6.11010': attribute type 1 has an invalid length. [ 2200.041436][ T8370] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11010'. [ 2200.154037][ T8376] netlink: 84 bytes leftover after parsing attributes in process `syz.7.11012'. [ 2200.261631][ T6831] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2200.398983][ T6831] usb 6-1: device descriptor read/64, error -71 [ 2200.405740][T23173] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 2200.425449][ T8382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2200.431984][ T8382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2200.454319][ T8382] vhci_hcd vhci_hcd.0: Device attached [ 2200.594472][T23173] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 2200.603473][T23173] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.614380][T23173] usb 8-1: config 0 has no interface number 0 [ 2200.621356][T23173] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 2200.633208][T23173] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2200.643487][T23173] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2200.643518][T23173] usb 8-1: config 0 interface 52 has no altsetting 0 [ 2200.647933][T23173] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2200.674820][T23173] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2200.683525][ T6831] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2200.689601][T23173] usb 8-1: Manufacturer: syz [ 2200.703327][T23173] usb 8-1: config 0 descriptor?? [ 2200.717055][T23173] hub 8-1:0.52: bad descriptor, ignoring hub [ 2200.717085][T23173] hub 8-1:0.52: probe with driver hub failed with error -5 [ 2200.728885][T15099] usb 40-1: SetAddress Request (54) to port 0 [ 2200.728939][T15099] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 2200.808916][ T6831] usb 6-1: device descriptor read/64, error -71 [ 2200.919243][ T6831] usb usb6-port1: attempt power cycle [ 2200.945717][T23173] usb 8-1: Can not set alternate setting to 1, error: -71 [ 2200.958243][T23173] synaptics_usb 8-1:0.52: probe with driver synaptics_usb failed with error -71 [ 2200.990754][T23173] usb 8-1: USB disconnect, device number 13 [ 2201.221622][ T8383] vhci_hcd: connection reset by peer [ 2201.233480][T23722] vhci_hcd vhci_hcd.3: stop threads [ 2201.240776][T23722] vhci_hcd vhci_hcd.3: release socket [ 2201.246408][T23722] vhci_hcd vhci_hcd.3: disconnect device [ 2201.268956][ T6831] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2201.299596][ T6831] usb 6-1: device descriptor read/8, error -71 [ 2201.540916][ T6831] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2201.592763][ T6831] usb 6-1: device descriptor read/8, error -71 [ 2201.710608][ T6831] usb usb6-port1: unable to enumerate USB device [ 2201.957941][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.971377][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.175746][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.195279][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.252740][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11023'. [ 2203.403812][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.471467][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.684524][ T8415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2205.320410][ T8444] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11033'. [ 2205.799160][T15099] usb 40-1: device descriptor read/8, error -110 [ 2206.190257][T15099] usb usb40-port1: attempt power cycle [ 2206.679881][ T6831] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 2206.775468][T15099] usb usb40-port1: unable to enumerate USB device [ 2206.859605][ T6831] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 2206.883776][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2206.906712][ T6831] usb 8-1: config 34 has no interface number 0 [ 2206.925451][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2206.947552][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2206.966172][ T6831] usb 8-1: config 34 has no interface number 0 [ 2206.986463][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.009287][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.029022][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.049814][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.074250][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.090422][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.106981][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.131404][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.153140][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.170957][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.193273][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.208960][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.225672][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.243086][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.259983][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.287161][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.306873][ T6831] usb 8-1: config 34 has an invalid interface number: 116 but max is 0 [ 2207.326293][ T6831] usb 8-1: config 34 has no interface number 0 [ 2207.346056][ T6831] usb 8-1: config 34 interface 116 has no altsetting 0 [ 2207.367117][ T6831] usb 8-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 2207.388290][ T6831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.408926][ T6831] usb 8-1: Product: syz [ 2207.419349][ T6831] usb 8-1: Manufacturer: syz [ 2207.435510][ T6831] usb 8-1: SerialNumber: syz [ 2207.746959][ T6831] comedi comedi5: could not set alternate setting 3 in high speed [ 2207.761143][ T6831] usbdux 8-1:34.116: driver 'usbdux' failed to auto-configure device. [ 2207.775927][ T6831] usbdux 8-1:34.116: probe with driver usbdux failed with error -71 [ 2207.802283][ T6831] usb 8-1: USB disconnect, device number 14 [ 2207.882688][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11042'. [ 2207.928871][T15099] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 2208.033118][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11043'. [ 2208.095058][T15099] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2208.128919][T15099] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.149053][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11044'. [ 2208.153281][T15099] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2208.178903][T15099] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2208.198147][T15099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.224642][T15099] usb 6-1: config 0 descriptor?? [ 2208.708512][ T8464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2209.040019][T15099] usbhid 6-1:0.0: can't add hid device: -71 [ 2209.084641][T15099] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2209.155549][T15099] usb 6-1: USB disconnect, device number 72 [ 2209.805763][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.821950][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.237492][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11054'. [ 2210.455248][ T8504] netlink: 'syz.5.11055': attribute type 10 has an invalid length. [ 2210.498251][ T8504] bond0: (slave dummy0): Releasing backup interface [ 2210.535856][ T8502] netlink: 'syz.5.11055': attribute type 10 has an invalid length. [ 2210.603993][ T8502] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2210.936406][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.972187][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.046886][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.090667][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.509029][T24434] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 2211.671410][T24434] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2211.688367][T24434] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2211.710674][T24434] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2211.738097][T24434] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2211.751622][T24434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.782933][T24434] usb 6-1: config 0 descriptor?? [ 2212.244158][ T8520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2212.504007][T24434] usbhid 6-1:0.0: can't add hid device: -71 [ 2212.517228][T24434] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2212.545483][T24434] usb 6-1: USB disconnect, device number 73 [ 2213.244538][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11067'. [ 2213.732126][T15099] IPVS: starting estimator thread 0... [ 2213.796808][ T8542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2213.803360][ T8542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2213.850798][ T8545] IPVS: using max 32 ests per chain, 76800 per kthread [ 2213.864006][ T8542] vhci_hcd vhci_hcd.0: Device attached [ 2213.892788][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2214.048955][T15099] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2214.141927][ T8555] loop3: detected capacity change from 0 to 1159 [ 2214.167343][T23173] usb 46-1: SetAddress Request (42) to port 0 [ 2214.205763][T23173] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 2214.259036][ T8555] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2214.367571][ T8555] loop3: partition table partially beyond EOD, truncated [ 2214.504374][ T8555] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2214.830776][ T8546] vhci_hcd: connection reset by peer [ 2214.847536][ T8674] vhci_hcd vhci_hcd.6: stop threads [ 2214.876638][ T8674] vhci_hcd vhci_hcd.6: release socket [ 2214.909526][ T8674] vhci_hcd vhci_hcd.6: disconnect device [ 2215.343592][ T8562] misc userio: Invalid payload size [ 2216.283085][ T8570] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2216.289636][ T8570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2216.317240][ T8570] vhci_hcd vhci_hcd.0: Device attached [ 2216.402525][ T8570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2216.579073][ T6831] usb 34-1: SetAddress Request (30) to port 0 [ 2216.643248][ T6831] usb 34-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2216.767234][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2216.818306][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2216.980731][ T8583] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2217.114205][ T8571] vhci_hcd: connection reset by peer [ 2217.122627][ T4110] vhci_hcd vhci_hcd.0: stop threads [ 2217.134172][ T8584] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2217.140703][ T8584] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2217.150682][ T4110] vhci_hcd vhci_hcd.0: release socket [ 2217.165006][ T4110] vhci_hcd vhci_hcd.0: disconnect device [ 2217.187095][ T8584] vhci_hcd vhci_hcd.0: Device attached [ 2217.240951][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2217.479044][T24434] usb 48-1: SetAddress Request (18) to port 0 [ 2217.496321][ T8585] vhci_hcd: connection closed [ 2217.496620][ T8674] vhci_hcd vhci_hcd.7: stop threads [ 2217.518943][T24434] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2217.531829][ T8674] vhci_hcd vhci_hcd.7: release socket [ 2217.538900][ T8674] vhci_hcd vhci_hcd.7: disconnect device [ 2217.549172][T24434] usb 48-1: enqueue for inactive port 0 [ 2217.970339][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11078'. [ 2217.982423][T24434] usb usb48-port1: attempt power cycle [ 2218.251402][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.291526][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.338334][ T8592] CIFS: VFS: UNC: path must begin with // or \\ [ 2218.375025][ T8592] CIFS: VFS: Malformed UNC in devname [ 2218.462551][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.486848][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.536977][ T8599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2218.560901][T24434] usb usb48-port1: unable to enumerate USB device [ 2218.866699][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11082'. [ 2218.894450][ T8605] openvswitch: netlink: Invalid VLAN frame [ 2219.318955][T23173] usb 46-1: device descriptor read/8, error -110 [ 2219.481685][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.521236][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.600429][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.655078][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.699624][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11088'. [ 2219.720130][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.733262][T23173] usb usb46-port1: attempt power cycle [ 2219.760169][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.008998][ T6830] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2220.076466][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11090'. [ 2220.178933][ T6830] usb 8-1: Using ep0 maxpacket: 32 [ 2220.200750][ T6830] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2220.227873][ T6830] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.261938][ T6830] usb 8-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 2220.305526][ T6830] usb 8-1: New USB device found, idVendor=249c, idProduct=931c, bcdDevice= 0.40 [ 2220.330108][T23173] usb usb46-port1: unable to enumerate USB device [ 2220.337539][ T6830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.364018][ T6830] usb 8-1: Product: syz [ 2220.393398][ T6830] usb 8-1: Manufacturer: syz [ 2220.405199][ T6830] usb 8-1: SerialNumber: syz [ 2220.658801][ T6830] usb 8-1: USB disconnect, device number 16 [ 2220.960643][ T8631] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20001 [ 2221.372169][ T8638] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 2221.378735][ T8638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2221.404824][ T8638] vhci_hcd vhci_hcd.0: Device attached [ 2221.435667][ T8638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2221.530995][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11099'. [ 2221.573488][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.581688][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.685553][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.699077][T24434] usb 44-1: SetAddress Request (30) to port 0 [ 2221.723338][ T6831] usb 34-1: device descriptor read/8, error -110 [ 2221.741645][T24434] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2221.758193][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.790100][ T8643] vhci_hcd: connection reset by peer [ 2221.809242][T23722] vhci_hcd vhci_hcd.5: stop threads [ 2221.834519][T23722] vhci_hcd vhci_hcd.5: release socket [ 2221.853691][T23722] vhci_hcd vhci_hcd.5: disconnect device [ 2222.130591][ T6831] usb usb34-port1: attempt power cycle [ 2222.246362][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11102'. [ 2222.562542][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11104'. [ 2222.657680][ T6830] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 2222.721168][ T6831] usb usb34-port1: unable to enumerate USB device [ 2222.732986][ T6830] hid-generic 0000:0000:0000.0059: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2223.718867][T24416] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2223.896063][T24416] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2223.926345][T24416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.950141][T24416] usb 6-1: Product: syz [ 2223.965649][T24416] usb 6-1: Manufacturer: syz [ 2223.984275][ T8692] netlink: 164 bytes leftover after parsing attributes in process `syz.7.11112'. [ 2223.986017][T24416] usb 6-1: SerialNumber: syz [ 2224.001295][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.016030][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.303427][T24416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2224.341925][T24416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2224.372443][T24416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2224.401119][T24416] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2224.451946][T24416] usb 6-1: USB disconnect, device number 74 [ 2225.419021][T24416] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2225.492728][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11117'. [ 2225.602428][T24416] usb 6-1: Using ep0 maxpacket: 16 [ 2225.627540][T24416] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2225.658300][T24416] usb 6-1: can't read configurations, error -22 [ 2225.839060][T24416] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2226.000599][T24416] usb 6-1: Using ep0 maxpacket: 16 [ 2226.037063][T24416] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2226.070501][T24416] usb 6-1: can't read configurations, error -22 [ 2226.101692][T24416] usb usb6-port1: attempt power cycle [ 2226.470245][T24416] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2226.523021][T24416] usb 6-1: Using ep0 maxpacket: 16 [ 2226.548497][T24416] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2226.577511][T24416] usb 6-1: can't read configurations, error -22 [ 2226.739011][T24416] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2226.801168][T24416] usb 6-1: Using ep0 maxpacket: 16 [ 2226.830691][T24416] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2226.840970][T24434] usb 44-1: device descriptor read/8, error -110 [ 2226.861101][T24416] usb 6-1: can't read configurations, error -22 [ 2226.883785][T24416] usb usb6-port1: unable to enumerate USB device [ 2227.286228][T24434] usb usb44-port1: attempt power cycle [ 2227.558925][T24416] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2227.767750][T24416] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 2227.779289][T24416] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.822279][T24416] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2227.926163][T24416] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2227.939713][T24434] usb usb44-port1: unable to enumerate USB device [ 2227.967276][T24416] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2228.019166][T24416] usb 8-1: Manufacturer: syz [ 2228.071662][T24416] usb 8-1: config 0 descriptor?? [ 2228.120768][T24416] igorplugusb 8-1:0.0: incorrect number of endpoints [ 2228.175424][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.212000][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.982117][ T8748] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11129'. [ 2229.865098][ T30] audit: type=1800 audit(1781498813.926:3661): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11131" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2230.059654][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.072183][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.462698][T24434] usb 8-1: USB disconnect, device number 17 [ 2230.736469][ T8758] netlink: 'syz.7.11132': attribute type 10 has an invalid length. [ 2230.766273][ T8758] netlink: 'syz.7.11132': attribute type 10 has an invalid length. [ 2230.778483][ T8758] dummy0: left promiscuous mode [ 2230.792977][ T8758] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2230.809082][ T8758] team0: Port device dummy0 removed [ 2230.823278][ T8758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2231.094113][ T8764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2231.431994][ T8771] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 2231.734206][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11136'. [ 2232.003637][ T30] audit: type=1326 audit(1781498816.066:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8761 comm="syz.7.11133" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20a039ce59 code=0x0 [ 2233.272674][ T8795] netlink: 'syz.3.11139': attribute type 10 has an invalid length. [ 2233.325932][ T8792] netlink: 'syz.3.11139': attribute type 10 has an invalid length. [ 2233.364309][ T8795] team0: Failed to send options change via netlink (err -105) [ 2233.388799][ T8795] team0: Port device dummy0 added [ 2233.407374][ T8792] team0: Failed to send options change via netlink (err -105) [ 2233.452227][ T8792] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2233.496289][ T8792] team0: Port device dummy0 removed [ 2233.589480][ T8798] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11140'. [ 2233.609705][ T8792] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2234.348809][T24416] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2234.489690][T24416] usb 6-1: device descriptor read/64, error -71 [ 2234.739154][T24416] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2234.764352][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11148'. [ 2234.888750][T24416] usb 6-1: device descriptor read/64, error -71 [ 2234.952992][ T8827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2235.009590][T24416] usb usb6-port1: attempt power cycle [ 2235.388984][T24416] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2235.439674][T24416] usb 6-1: device descriptor read/8, error -71 [ 2235.701462][T24416] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2235.740875][T24416] usb 6-1: device descriptor read/8, error -71 [ 2235.869296][T24416] usb usb6-port1: unable to enumerate USB device [ 2236.744279][ T8846] netlink: 164 bytes leftover after parsing attributes in process `syz.7.11156'. [ 2236.954963][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11159'. [ 2237.141237][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11160'. [ 2237.206534][ T30] audit: type=1326 audit(1781498821.266:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.5.11161" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6695d9ce59 code=0x0 [ 2237.988814][ T6830] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 2238.163761][ T6830] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2238.188246][ T6830] usb 8-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 2238.225476][ T6830] usb 8-1: config 0 has no interface number 0 [ 2238.250117][ T6830] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2238.285970][ T6830] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2238.286055][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11168'. [ 2238.332074][ T6830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.382231][ T6830] usb 8-1: config 0 descriptor?? [ 2238.768831][ T6830] usb 8-1: string descriptor 0 read error: -71 [ 2238.779000][ T7725] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2238.806179][ T6830] usbhid 8-1:0.1: couldn't find an input interrupt endpoint [ 2238.849399][ T6830] usb 8-1: USB disconnect, device number 18 [ 2238.941259][ T7725] usb 6-1: device descriptor read/64, error -71 [ 2239.199058][ T7725] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2239.265725][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11176'. [ 2239.349878][ T7725] usb 6-1: device descriptor read/64, error -71 [ 2239.479453][ T7725] usb usb6-port1: attempt power cycle [ 2239.829074][ T7725] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2239.869753][ T7725] usb 6-1: device descriptor read/8, error -71 [ 2239.923900][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11179'. [ 2240.093296][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.103962][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.119012][ T7725] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2240.149626][ T7725] usb 6-1: device descriptor read/8, error -71 [ 2240.259211][ T7725] usb usb6-port1: unable to enumerate USB device [ 2240.663452][ T8927] netlink: 'syz.7.11183': attribute type 10 has an invalid length. [ 2240.684854][ T8927] bond0: (slave dummy0): Releasing backup interface [ 2240.703556][ T8927] dummy0: entered promiscuous mode [ 2240.713919][ T8927] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2240.722921][ T8929] netlink: 'syz.7.11183': attribute type 10 has an invalid length. [ 2240.731707][ T8927] team0: Failed to send options change via netlink (err -105) [ 2240.739340][ T8927] team0: Port device dummy0 added [ 2240.750320][ T8929] dummy0: left promiscuous mode [ 2240.761440][ T8929] team0: Failed to send options change via netlink (err -105) [ 2240.770659][ T8929] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2240.781087][ T8929] team0: Port device dummy0 removed [ 2240.791556][ T8929] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2241.950931][ T8946] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2241.957520][ T8946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2241.969603][ T8946] vhci_hcd vhci_hcd.0: Device attached [ 2241.991480][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2242.258999][T24434] usb 48-1: SetAddress Request (22) to port 0 [ 2242.265452][T24434] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 2242.298504][ T8948] vhci_hcd: connection closed [ 2242.300455][T25000] vhci_hcd vhci_hcd.7: stop threads [ 2242.312016][T25000] vhci_hcd vhci_hcd.7: release socket [ 2242.317642][T25000] vhci_hcd vhci_hcd.7: disconnect device [ 2242.690866][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11190'. [ 2245.012707][ T8968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11194'. [ 2245.142759][ T8970] sctp: [Deprecated]: syz.3.11195 (pid 8970) Use of int in max_burst socket option deprecated. [ 2245.142759][ T8970] Use struct sctp_assoc_value instead [ 2245.193112][ T8970] sctp: [Deprecated]: syz.3.11195 (pid 8970) Use of int in maxseg socket option. [ 2245.193112][ T8970] Use struct sctp_assoc_value instead [ 2245.207949][ T8971] sctp: [Deprecated]: syz.3.11195 (pid 8971) Use of int in maxseg socket option. [ 2245.207949][ T8971] Use struct sctp_assoc_value instead [ 2245.238446][ T8970] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11195'. [ 2245.446008][ T8974] netlink: 'syz.3.11196': attribute type 10 has an invalid length. [ 2245.513990][ T8976] netlink: 'syz.3.11196': attribute type 10 has an invalid length. [ 2245.824855][ T8974] bond0: (slave dummy0): Releasing backup interface [ 2245.905113][ T8974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2245.930143][ T8974] team0: Failed to send options change via netlink (err -105) [ 2245.958015][ T8974] team0: Port device dummy0 added [ 2245.984176][ T8976] team0: Failed to send options change via netlink (err -105) [ 2246.016562][ T8976] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2246.050107][ T8976] team0: Port device dummy0 removed [ 2246.089954][ T8976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2246.278430][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11204'. [ 2246.493314][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11207'. [ 2246.742367][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.782930][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.330173][T24434] usb 48-1: device descriptor read/8, error -110 [ 2247.382787][ T9016] binder: 9015:9016 ioctl c0306201 200000000600 returned -14 [ 2247.443243][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2247.464387][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2247.474721][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2247.490792][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2247.502717][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2247.571751][ T3918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2247.584182][ T3918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2247.593502][ T3918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2247.620203][ T3918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2247.631373][ T3918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2247.789783][T24434] usb usb48-port1: attempt power cycle [ 2248.379955][T24434] usb usb48-port1: unable to enumerate USB device [ 2248.388997][ T6830] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2248.513891][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11220'. [ 2248.564742][ T6830] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2248.576497][ T6830] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2248.585084][ T6830] usb 6-1: Product: syz [ 2248.589574][ T6830] usb 6-1: Manufacturer: syz [ 2248.594239][ T6830] usb 6-1: SerialNumber: syz [ 2248.603009][ T6830] usb 6-1: config 0 descriptor?? [ 2248.619453][ T6830] ch341 6-1:0.0: ch341-uart converter detected [ 2248.804784][T20112] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.855818][ T6830] usb 6-1: failed to send control message: -71 [ 2248.872783][ T6830] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2248.939381][ T6830] usb 6-1: USB disconnect, device number 87 [ 2248.945355][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.953198][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.953691][ T9023] bridge_slave_0: entered allmulticast mode [ 2248.984515][ T9023] bridge_slave_0: entered promiscuous mode [ 2249.017200][ T6830] ch341 6-1:0.0: device disconnected [ 2249.050477][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.072116][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.084804][ T9023] bridge_slave_1: entered allmulticast mode [ 2249.093501][ T9023] bridge_slave_1: entered promiscuous mode [ 2249.096777][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2249.126112][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2249.252199][T20112] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.358488][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.407996][ T9064] could not allocate digest TFM handle cmac-aes-neon [ 2249.433134][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.492546][T20112] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.594112][ T9023] team0: Port device team_slave_0 added [ 2249.647097][T20112] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.667052][ T9023] team0: Port device team_slave_1 added [ 2249.719012][ T5627] Bluetooth: hci2: command tx timeout [ 2249.736312][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2249.745554][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2249.805196][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2249.892968][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2249.907242][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2249.958284][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2250.217183][ T9023] hsr_slave_0: entered promiscuous mode [ 2250.233559][ T9023] hsr_slave_1: entered promiscuous mode [ 2250.247212][ T9023] debugfs: 'hsr0' already exists in 'hsr' [ 2250.259254][ T9023] Cannot create hsr debugfs directory [ 2250.282656][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.293562][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.364776][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11224'. [ 2250.515897][T20112] bridge_slave_1: left allmulticast mode [ 2250.521840][T20112] bridge_slave_1: left promiscuous mode [ 2250.527657][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.538944][T20112] bridge_slave_0: left allmulticast mode [ 2250.544807][T20112] bridge_slave_0: left promiscuous mode [ 2250.551777][T20112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.576068][T20112] erspan0: left allmulticast mode [ 2250.581301][T20112] erspan0: left promiscuous mode [ 2250.586419][T20112] bridge6: port 1(erspan0) entered disabled state [ 2250.612907][T20112] dvmrp0: left allmulticast mode [ 2250.825550][T20112] batman_adv: batadv0: Interface deactivated: macvlan2 [ 2250.835707][T20112] batman_adv: batadv0: Removing interface: macvlan2 [ 2251.444888][T20112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.460834][T20112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2251.476407][T20112] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2251.496750][T20112] bond0 (unregistering): Released all slaves [ 2251.517685][T20112] bond1 (unregistering): Released all slaves [ 2251.799926][ T5627] Bluetooth: hci2: command tx timeout [ 2252.040968][T20112] hsr_slave_0: left promiscuous mode [ 2252.075327][T20112] hsr_slave_1: left promiscuous mode [ 2252.092214][T20112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2252.112435][T20112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2252.142760][T20112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2252.158882][T20112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2252.197431][T20112] veth0_to_team: left promiscuous mode [ 2252.217030][T20112] veth1_macvtap: left promiscuous mode [ 2252.242322][T20112] veth0_macvtap: left promiscuous mode [ 2252.259095][T20112] veth1_vlan: left promiscuous mode [ 2252.266536][T20112] veth0_vlan: left promiscuous mode [ 2252.833432][ T9113] binder: 9102:9113 ioctl c0306201 200000000600 returned -14 [ 2253.154186][T20112] team_slave_1 (unregistering): left promiscuous mode [ 2253.168465][T20112] team0 (unregistering): Port device team_slave_1 removed [ 2253.190814][T20112] team_slave_0 (unregistering): left promiscuous mode [ 2253.199314][T20112] team0 (unregistering): Port device team_slave_0 removed [ 2253.385387][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2253.860488][T20112] IPVS: stop unused estimator thread 0... [ 2253.880485][ T5627] Bluetooth: hci2: command tx timeout [ 2254.603232][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11239'. [ 2254.787266][ T9023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2254.834368][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2254.846032][ T9159] netlink: 'syz.0.11240': attribute type 10 has an invalid length. [ 2254.859774][ T9023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2254.886948][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2254.899136][ T9023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2254.914071][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2254.921911][ T9154] netlink: 'syz.0.11240': attribute type 10 has an invalid length. [ 2254.935474][ T9023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2254.970987][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2254.992156][ T9154] dummy0: left promiscuous mode [ 2255.003184][ T9154] team0: Port device dummy0 removed [ 2255.022911][ T9154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2255.286927][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2255.351313][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 2255.386486][T25000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.393687][T25000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2255.457799][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.464979][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2255.666130][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2255.781028][ T9023] veth0_vlan: entered promiscuous mode [ 2255.841898][ T9187] binder: 9186:9187 ioctl c0306201 200000000600 returned -14 [ 2255.854089][ T9023] veth1_vlan: entered promiscuous mode [ 2255.959217][ T5627] Bluetooth: hci2: command tx timeout [ 2255.982145][ T9023] veth0_macvtap: entered promiscuous mode [ 2255.998090][ T9023] veth1_macvtap: entered promiscuous mode [ 2256.067429][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2256.113803][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2256.161003][T20112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.196750][T20112] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.231647][T20112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.287075][T20112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.460226][ T8674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.485234][ T8674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.558551][ T4110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.584589][ T4110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2257.107448][ T9212] loop3: detected capacity change from 0 to 2287 [ 2257.148857][ T9212] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2257.163884][ T9212] loop3: partition table partially beyond EOD, truncated [ 2257.173798][ T9212] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2257.368968][T23173] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 2257.538179][T23173] usb 8-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 2257.569066][T23173] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2257.587255][T23173] usb 8-1: Product: syz [ 2257.598986][T23173] usb 8-1: Manufacturer: syz [ 2257.613257][T23173] usb 8-1: SerialNumber: syz [ 2257.632660][T23173] usb 8-1: config 0 descriptor?? [ 2257.772656][ T4998] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2257.785299][ T4998] loop3: partition table partially beyond EOD, truncated [ 2257.807385][ T4998] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2257.836803][ T9226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11252'. [ 2257.881980][T23173] peak_usb 8-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 2258.085848][T23173] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2258.121777][T23173] peak_usb 8-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 2258.250708][T23173] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 2258.300404][T23173] usb 8-1: USB disconnect, device number 19 [ 2259.105492][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.153753][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.287800][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11267'. [ 2260.337984][ T3918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2260.371171][ T3918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2260.382248][ T3918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2260.400308][ T3918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2260.408216][ T3918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2260.550662][T24434] usb 4-1: USB disconnect, device number 73 [ 2260.568753][ T6831] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2260.738980][ T6831] usb 8-1: Using ep0 maxpacket: 8 [ 2260.772912][ T6831] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2260.801211][ T6831] usb 8-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 2260.826813][ T6831] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2260.864555][ T6831] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2260.930582][ T6831] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2260.962097][ T6831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.988743][ T6831] usb 8-1: Product: syz [ 2260.993183][ T6831] usb 8-1: Manufacturer: syz [ 2260.997898][ T6831] usb 8-1: SerialNumber: syz [ 2262.194544][T20112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.441563][ T3918] Bluetooth: hci0: command tx timeout [ 2262.568305][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.585598][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.618367][ T9279] bridge_slave_0: entered allmulticast mode [ 2262.649858][ T9279] bridge_slave_0: entered promiscuous mode [ 2262.693648][ T9300] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11270'. [ 2262.716439][T20112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.800641][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.823252][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.851687][ T9279] bridge_slave_1: entered allmulticast mode [ 2262.863902][ T9279] bridge_slave_1: entered promiscuous mode [ 2262.913477][T20112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.948209][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.962313][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2263.029493][T20112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.047327][ T9279] team0: Port device team_slave_0 added [ 2263.057744][ T9279] team0: Port device team_slave_1 added [ 2263.092312][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2263.099586][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2263.126027][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.140127][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2263.147160][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2263.179043][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2263.247316][ T9279] hsr_slave_0: entered promiscuous mode [ 2263.254097][ T9279] hsr_slave_1: entered promiscuous mode [ 2263.722995][ T6831] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 2263.754363][ T6831] cdc_ncm 8-1:1.0: bind() failure [ 2263.794098][ T6831] usb 8-1: USB disconnect, device number 20 [ 2263.928272][T20112] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 2263.939098][T20112] ip6gre1 (unregistering): left promiscuous mode [ 2264.064604][T20112] batman_adv: batadv0: Interface deactivated: macvlan2 [ 2264.071716][ T5717] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2264.091306][T20112] batman_adv: batadv0: Removing interface: macvlan2 [ 2264.231777][ T5717] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 2264.248659][ T5717] usb 6-1: config 128 has no interface number 0 [ 2264.260253][ T5717] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2264.278763][ T5717] usb 6-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2264.298809][ T5717] usb 6-1: config 128 interface 148 has no altsetting 0 [ 2264.312208][ T5717] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 2264.323281][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.331631][ T5717] usb 6-1: Product: syz [ 2264.335869][ T5717] usb 6-1: Manufacturer: syz [ 2264.342032][ T5717] usb 6-1: SerialNumber: syz [ 2264.519568][ T3918] Bluetooth: hci0: command tx timeout [ 2264.590998][ T5717] usb 6-1: USB disconnect, device number 90 [ 2264.797333][T20112] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2264.828300][T20112] bond0 (unregistering): Released all slaves [ 2264.861387][T20112] bond1 (unregistering): Released all slaves [ 2264.915046][T20112] bond2 (unregistering): Released all slaves [ 2265.079256][ T5717] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2265.104292][ T9312] pim6reg: entered allmulticast mode [ 2265.134468][ T9314] pim6reg: left allmulticast mode [ 2265.250415][ T5717] usb 6-1: Using ep0 maxpacket: 8 [ 2265.282755][ T5717] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2265.301137][ T5717] usb 6-1: config 16 has an invalid interface number: 148 but max is 0 [ 2265.327245][ T5717] usb 6-1: config 16 has no interface number 0 [ 2265.348826][ T5717] usb 6-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2265.385388][ T5717] usb 6-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2265.428810][ T5717] usb 6-1: config 16 interface 148 has no altsetting 0 [ 2265.437409][ T5717] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2265.466920][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.786178][ T5717] usb 6-1: string descriptor 0 read error: -71 [ 2265.801258][T20112] hsr_slave_0: left promiscuous mode [ 2265.807603][T20112] hsr_slave_1: left promiscuous mode [ 2265.827433][T20112] veth1_macvtap: left promiscuous mode [ 2265.835842][ T5717] usb 6-1: USB disconnect, device number 91 [ 2265.871396][T20112] veth0_macvtap: left promiscuous mode [ 2265.889529][T20112] veth1_vlan: left promiscuous mode [ 2265.910422][T20112] veth0_vlan: left promiscuous mode [ 2266.023906][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11277'. [ 2266.259794][T20112] team0 (unregistering): Port device batadv1 removed [ 2266.600100][ T3918] Bluetooth: hci0: command tx timeout [ 2267.232759][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2268.450032][ T9359] binder: 9358:9359 ioctl c0306201 200000000600 returned -14 [ 2268.493976][ T9279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2268.539767][ T9279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2268.569789][ T9279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2268.609976][ T9279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2268.665515][ T9279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2268.679058][ T3918] Bluetooth: hci0: command tx timeout [ 2268.703337][ T9279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2268.746253][ T9279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2268.777784][ T9279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2268.979837][ T7725] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 2269.069509][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.129204][ T7725] usb 6-1: device descriptor read/64, error -71 [ 2269.139694][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 2269.177921][T25000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.185127][T25000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.228603][T25000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.235784][T25000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.389601][ T7725] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 2269.496063][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2269.548849][ T7725] usb 6-1: device descriptor read/64, error -71 [ 2269.570550][ T9279] veth0_vlan: entered promiscuous mode [ 2269.601477][ T9279] veth1_vlan: entered promiscuous mode [ 2269.670671][ T7725] usb usb6-port1: attempt power cycle [ 2269.684691][ T9279] veth0_macvtap: entered promiscuous mode [ 2269.715723][ T9279] veth1_macvtap: entered promiscuous mode [ 2269.740304][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2269.764262][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2269.778498][T24997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.802700][T24997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.825553][T24997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.848701][T24997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.015812][T20112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2270.034262][T20112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.043606][ T7725] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 2270.100396][ T4110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2270.108440][ T4110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.261649][ T7725] usb 6-1: device not accepting address 94, error -71 [ 2270.273719][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11264'. [ 2270.680765][T24437] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2270.858739][T24437] usb 4-1: Using ep0 maxpacket: 16 [ 2270.865898][T24437] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2270.891340][T24437] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2270.906119][T24437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.927934][T24437] usb 4-1: Product: syz [ 2270.940116][T24437] usb 4-1: Manufacturer: syz [ 2270.953739][T24437] usb 4-1: SerialNumber: syz [ 2270.966811][T24437] usb 4-1: config 0 descriptor?? [ 2270.984695][T24437] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2271.005422][T24437] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2271.177002][ T9415] veth0: entered promiscuous mode [ 2271.202094][ T9415] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2271.411674][ T9414] veth0: left promiscuous mode [ 2271.594205][T24437] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2271.704933][ T9422] binder: 9421:9422 ioctl c0306201 200000000600 returned -14 [ 2272.030747][T24437] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2272.056343][T24437] em28xx 4-1:0.0: board has no eeprom [ 2272.418922][T24437] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2272.449888][T24437] em28xx 4-1:0.0: dvb set to bulk mode. [ 2272.469940][T24439] em28xx 4-1:0.0: Binding DVB extension [ 2272.524388][ T9430] FAULT_INJECTION: forcing a failure. [ 2272.524388][ T9430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.641304][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.5.11300 Tainted: G L syzkaller #0 PREEMPT(full) [ 2272.641334][ T9430] Tainted: [L]=SOFTLOCKUP [ 2272.641341][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2272.641353][ T9430] Call Trace: [ 2272.641361][ T9430] [ 2272.641370][ T9430] dump_stack_lvl+0xe8/0x150 [ 2272.641416][ T9430] should_fail_ex+0x40c/0x560 [ 2272.641445][ T9430] _copy_to_user+0x31/0xb0 [ 2272.641481][ T9430] simple_read_from_buffer+0xe1/0x170 [ 2272.641513][ T9430] proc_fail_nth_read+0x1bb/0x230 [ 2272.641545][ T9430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2272.641575][ T9430] ? rw_verify_area+0x24a/0x4c0 [ 2272.641602][ T9430] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2272.641635][ T9430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2272.641663][ T9430] vfs_read+0x213/0xa80 [ 2272.641696][ T9430] ? __pfx___mutex_lock+0x10/0x10 [ 2272.641717][ T9430] ? __pfx_vfs_read+0x10/0x10 [ 2272.641747][ T9430] ? __fget_files+0x2a/0x420 [ 2272.641785][ T9430] ? __fget_files+0x3a2/0x420 [ 2272.641809][ T9430] ? __fget_files+0x2a/0x420 [ 2272.641840][ T9430] ksys_read+0x150/0x270 [ 2272.641869][ T9430] ? __pfx_ksys_read+0x10/0x10 [ 2272.641904][ T9430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.641925][ T9430] do_syscall_64+0x174/0x580 [ 2272.641944][ T9430] ? trace_irq_disable+0x3b/0x140 [ 2272.641974][ T9430] ? clear_bhb_loop+0x40/0x90 [ 2272.641997][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2272.642016][ T9430] RIP: 0033:0x7f6695d5d68e [ 2272.642034][ T9430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2272.642051][ T9430] RSP: 002b:00007f6696c5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2272.642071][ T9430] RAX: ffffffffffffffda RBX: 00007f6696c5f6c0 RCX: 00007f6695d5d68e [ 2272.642085][ T9430] RDX: 000000000000000f RSI: 00007f6696c5f0a0 RDI: 0000000000000004 [ 2272.642097][ T9430] RBP: 00007f6696c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 2272.642110][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2272.642121][ T9430] R13: 00007f6696016038 R14: 00007f6696015fa0 R15: 00007f669613fa48 [ 2272.642151][ T9430] [ 2272.922498][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.942206][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.163499][ T9436] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 2273.180001][ T9436] PKCS7: Only support pkcs7_signedData type [ 2273.275186][ T9439] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11302'. [ 2274.039884][ T9400] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 2274.071871][ T5717] usb 4-1: USB disconnect, device number 74 [ 2274.086275][ T5717] em28xx 4-1:0.0: Disconnecting em28xx [ 2274.181607][T24439] em28xx 4-1:0.0: Registering input extension [ 2274.197715][ T5717] em28xx 4-1:0.0: Closing input extension [ 2274.332466][ T5717] em28xx 4-1:0.0: Freeing device [ 2275.504597][ T9471] netlink: 61 bytes leftover after parsing attributes in process `syz.0.11312'. [ 2275.743801][ T9477] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2275.804890][ T9477] netlink: 'syz.0.11313': attribute type 10 has an invalid length. [ 2275.932537][ T9477] team_slave_0: left promiscuous mode [ 2276.003124][ T9477] team0 (unregistering): Port device team_slave_0 removed [ 2276.003843][ T9477] team_slave_1: left promiscuous mode [ 2276.018928][ T6831] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2276.051124][ T9477] team0 (unregistering): Port device team_slave_1 removed [ 2276.180457][ T6831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.180490][ T6831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.180527][ T6831] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2276.180550][ T6831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.190248][ T6831] usb 6-1: config 0 descriptor?? [ 2276.547653][ T6831] usbhid 6-1:0.0: can't add hid device: -71 [ 2276.560371][ T9486] binder: 9483:9486 ioctl c0306201 200000000600 returned -14 [ 2276.568110][ T6831] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2276.598340][ T6831] usb 6-1: USB disconnect, device number 96 [ 2277.055177][ T9488] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11317'. [ 2279.732728][ T9532] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2279.739281][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2279.845897][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 2280.118823][ T5717] usb 48-1: SetAddress Request (26) to port 0 [ 2280.128176][ T5717] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2280.172288][ T9540] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11328'. [ 2280.272967][ T9533] vhci_hcd: connection reset by peer [ 2280.288269][ T8674] vhci_hcd vhci_hcd.7: stop threads [ 2280.293920][ T8674] vhci_hcd vhci_hcd.7: release socket [ 2280.302264][ T8674] vhci_hcd vhci_hcd.7: disconnect device [ 2281.532698][ T9552] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11331'. [ 2281.666030][ T9554] Cannot find set identified by id 0 to match [ 2282.798519][ T9584] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11340'. [ 2283.010358][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.016842][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.064243][ T9587] FAULT_INJECTION: forcing a failure. [ 2283.064243][ T9587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2283.102534][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.0.11341 Tainted: G L syzkaller #0 PREEMPT(full) [ 2283.102564][ T9587] Tainted: [L]=SOFTLOCKUP [ 2283.102572][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2283.102584][ T9587] Call Trace: [ 2283.102591][ T9587] [ 2283.102600][ T9587] dump_stack_lvl+0xe8/0x150 [ 2283.102626][ T9587] should_fail_ex+0x40c/0x560 [ 2283.102650][ T9587] _copy_from_user+0x2d/0xb0 [ 2283.102674][ T9587] ___sys_sendmsg+0x1c6/0x360 [ 2283.102721][ T9587] ? __lock_acquire+0x683/0x2cd0 [ 2283.102747][ T9587] ? __pfx____sys_sendmsg+0x10/0x10 [ 2283.102818][ T9587] ? __fget_files+0x2a/0x420 [ 2283.102841][ T9587] ? __fget_files+0x3a2/0x420 [ 2283.102875][ T9587] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2283.102909][ T9587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2283.102948][ T9587] ? __pfx_ksys_write+0x10/0x10 [ 2283.102985][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2283.103006][ T9587] do_syscall_64+0x174/0x580 [ 2283.103025][ T9587] ? trace_irq_disable+0x3b/0x140 [ 2283.103054][ T9587] ? clear_bhb_loop+0x40/0x90 [ 2283.103078][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2283.103098][ T9587] RIP: 0033:0x7fb8c7d9ce59 [ 2283.103117][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2283.103134][ T9587] RSP: 002b:00007fb8c8c34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2283.103155][ T9587] RAX: ffffffffffffffda RBX: 00007fb8c8015fa0 RCX: 00007fb8c7d9ce59 [ 2283.103170][ T9587] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2283.103183][ T9587] RBP: 00007fb8c8c34090 R08: 0000000000000000 R09: 0000000000000000 [ 2283.103195][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.103207][ T9587] R13: 00007fb8c8016038 R14: 00007fb8c8015fa0 R15: 00007fb8c813fa48 [ 2283.103237][ T9587] [ 2283.487356][ T9591] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11343'. [ 2283.692989][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11342'. [ 2283.705799][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11342'. [ 2283.705819][ T9598] netlink: 124 bytes leftover after parsing attributes in process `syz.5.11342'. [ 2283.820120][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11349'. [ 2284.737872][ T9634] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11356'. [ 2285.050970][ T9639] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11358'. [ 2285.238709][ T5717] usb 48-1: device descriptor read/8, error -110 [ 2285.629948][ T5717] usb usb48-port1: attempt power cycle [ 2285.789847][ T9651] kvm: pic: non byte write [ 2286.122282][T24416] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2286.184075][ T9661] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11365'. [ 2286.208885][ T5717] usb usb48-port1: unable to enumerate USB device [ 2286.300673][T24416] usb 4-1: Using ep0 maxpacket: 16 [ 2286.336805][T24416] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 2286.388222][T24416] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2286.424455][T24416] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2286.487347][T24416] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2286.538844][T24416] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2286.579269][T24416] usb 4-1: config 0 has no interface number 0 [ 2286.612840][T24416] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2286.671541][T24416] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2286.720905][T24416] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2286.790786][T24416] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2286.818774][T24416] usb 4-1: config 0 interface 125 has no altsetting 2 [ 2286.835442][T24416] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2286.847455][T24416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.888440][T24416] usb 4-1: Product: syz [ 2286.898687][T24416] usb 4-1: Manufacturer: syz [ 2286.922590][T24416] usb 4-1: SerialNumber: syz [ 2286.953890][T24416] usb 4-1: config 0 descriptor?? [ 2287.002508][T24416] usb 4-1: selecting invalid altsetting 2 [ 2287.030460][T24416] uss720 4-1:0.125: probe with driver uss720 failed with error -22 [ 2287.068001][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11366'. [ 2287.226787][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.254578][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11366'. [ 2287.271556][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.339270][ T9675] loop3: detected capacity change from 0 to 3199 [ 2287.359068][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11369'. [ 2287.399632][ T9675] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2287.428784][ T9675] loop3: partition table partially beyond EOD, truncated [ 2287.476582][ T9675] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2287.493187][ T9666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2287.513752][ T9666] vlan2: left promiscuous mode [ 2287.582616][ T9666] team0: left promiscuous mode [ 2287.696104][ T9666] team_slave_0: left promiscuous mode [ 2287.865161][ T9666] team_slave_1: left promiscuous mode [ 2288.698891][T24416] usb 4-1: USB disconnect, device number 75 [ 2289.308894][ T6831] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2289.471132][ T6831] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 2289.481771][ T6831] usb 4-1: config 128 has no interface number 0 [ 2289.488246][ T6831] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2289.507116][ T6831] usb 4-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2289.531896][ T6831] usb 4-1: config 128 interface 148 has no altsetting 0 [ 2289.554564][ T6831] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 2289.573510][ T6831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.588812][ T6831] usb 4-1: Product: syz [ 2289.594717][ T6831] usb 4-1: Manufacturer: syz [ 2289.601423][ T6831] usb 4-1: SerialNumber: syz [ 2289.771593][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11378'. [ 2289.853143][ T6831] usb 4-1: USB disconnect, device number 76 [ 2290.267634][ T9703] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11381'. [ 2290.348883][ T6831] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2290.490436][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11382'. [ 2290.509350][ T6831] usb 4-1: Using ep0 maxpacket: 8 [ 2290.531716][ T6831] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2290.548697][ T6831] usb 4-1: config 16 has an invalid interface number: 148 but max is 0 [ 2290.566428][ T6831] usb 4-1: config 16 has no interface number 0 [ 2290.582557][ T6831] usb 4-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2290.605889][ T6831] usb 4-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2290.628925][ T6831] usb 4-1: config 16 interface 148 has no altsetting 0 [ 2290.652179][ T6831] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2290.675242][ T6831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.853208][ T9709] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11383'. [ 2290.956077][ T6831] usb 4-1: string descriptor 0 read error: -71 [ 2290.977077][ T6831] usb 4-1: USB disconnect, device number 77 [ 2291.025815][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11384'. [ 2291.265365][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11386'. [ 2291.274711][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11386'. [ 2291.561858][ T9728] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11389'. [ 2291.720732][ T9732] binder: 9730:9732 ioctl c0306201 200000000600 returned -14 [ 2291.879030][ T5717] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2292.038797][ T5717] usb 8-1: Using ep0 maxpacket: 32 [ 2292.056636][ T5717] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2292.075466][ T5717] usb 8-1: config 0 has no interface number 0 [ 2292.088759][ T5717] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.115555][ T5717] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.135780][ T5717] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2292.158350][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.181507][ T5717] usb 8-1: config 0 descriptor?? [ 2293.851479][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2293.901349][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2293.921877][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2293.953723][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2293.969710][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2293.996281][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2294.007731][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11398'. [ 2294.044816][ T9751] bridge3: port 1(erspan0) entered disabled state [ 2294.124007][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.131483][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.177176][ T9757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2294.322790][ T9751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2294.564719][ T9751] batman_adv: batadv0: Interface deactivated: macvlan2 [ 2294.593529][T23722] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.611595][T23722] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.624523][T23722] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.633865][T23722] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.798071][ T5717] usbhid 8-1:0.1: can't add hid device: -71 [ 2294.830864][ T5717] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 2294.855389][ T5717] usb 8-1: USB disconnect, device number 21 [ 2294.981016][ T30] audit: type=1326 audit(1781498879.046:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.029417][ T9770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2295.050453][ T30] audit: type=1326 audit(1781498879.046:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.089163][ T30] audit: type=1326 audit(1781498879.046:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.119209][ T30] audit: type=1326 audit(1781498879.066:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.205515][ T30] audit: type=1326 audit(1781498879.066:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.278136][ T30] audit: type=1326 audit(1781498879.066:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.328860][ T30] audit: type=1326 audit(1781498879.066:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.405311][ T30] audit: type=1326 audit(1781498879.086:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.449754][ T30] audit: type=1326 audit(1781498879.086:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2295.488925][ T30] audit: type=1326 audit(1781498879.086:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.11406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8c7d9ce59 code=0x7ffc0000 [ 2296.431674][ T9795] __nla_validate_parse: 157 callbacks suppressed [ 2296.431689][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11411'. [ 2296.505884][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11411'. [ 2296.940657][ T9389] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2297.122755][ T9389] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 2297.151461][ T9389] usb 6-1: config 128 has no interface number 0 [ 2297.175266][ T9389] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2297.201075][ T9389] usb 6-1: config 128 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2297.228943][T24416] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2297.237712][ T9389] usb 6-1: config 128 interface 148 has no altsetting 0 [ 2297.256546][ T9389] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 2297.280717][ T9389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.298444][ T9389] usb 6-1: Product: syz [ 2297.312172][ T9389] usb 6-1: Manufacturer: syz [ 2297.326254][ T9389] usb 6-1: SerialNumber: syz [ 2297.428926][T24416] usb 8-1: Using ep0 maxpacket: 16 [ 2297.449824][T24416] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2297.493146][T24416] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 2297.509868][T24416] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.518081][T24416] usb 8-1: Product: syz [ 2297.528903][T24416] usb 8-1: Manufacturer: syz [ 2297.572010][T24416] usb 8-1: SerialNumber: syz [ 2297.597750][ T9389] usb 6-1: USB disconnect, device number 97 [ 2297.607902][T24416] usb 8-1: config 0 descriptor?? [ 2297.638352][T24416] hub 8-1:0.0: bad descriptor, ignoring hub [ 2297.663366][T24416] hub 8-1:0.0: probe with driver hub failed with error -5 [ 2297.670282][T23173] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2297.700869][T24416] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2297.830895][T23173] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 2297.848317][T23173] usb 4-1: config 2 has no interface number 0 [ 2297.862254][T23173] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 2297.883448][T24416] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2297.889093][T23173] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 2297.904104][ T9803] sit1: entered promiscuous mode [ 2297.922825][T23173] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2297.968265][T23173] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2297.980268][ T7920] udevd[7920]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2298.012227][T23173] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 2298.035359][T23173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.063674][T23173] usb 4-1: Product: syz [ 2298.072707][T23173] usb 4-1: Manufacturer: syz [ 2298.083496][T23173] usb 4-1: SerialNumber: syz [ 2298.109082][ T9389] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2298.118235][ T9808] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2298.200488][T24416] usb 8-1: USB disconnect, device number 22 [ 2298.278821][ T9389] usb 6-1: Using ep0 maxpacket: 8 [ 2298.295825][ T9389] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2298.311526][ T9389] usb 6-1: config 16 has an invalid interface number: 148 but max is 0 [ 2298.338402][ T9389] usb 6-1: config 16 has no interface number 0 [ 2298.370449][ T9389] usb 6-1: config 16 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2298.410690][ T9389] usb 6-1: config 16 interface 148 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2298.456050][ T9389] usb 6-1: config 16 interface 148 has no altsetting 0 [ 2298.487780][ T9389] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2298.520537][ T9389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.887899][ T9389] usb 6-1: string descriptor 0 read error: -71 [ 2298.980499][ T9389] usb 6-1: USB disconnect, device number 98 [ 2299.739022][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11423'. [ 2299.789293][ T9825] vlan2: entered allmulticast mode [ 2299.794706][ T9825] bridge1: entered allmulticast mode [ 2299.809567][ T9825] bridge1: port 1(erspan0) entered blocking state [ 2299.816546][ T9825] bridge1: port 1(erspan0) entered disabled state [ 2299.825309][ T9825] erspan0: entered allmulticast mode [ 2299.834570][ T9825] erspan0: entered promiscuous mode [ 2299.844492][ T9825] bridge1: port 1(erspan0) entered blocking state [ 2299.851145][ T9825] bridge1: port 1(erspan0) entered forwarding state [ 2300.306518][ T9836] vlan3: entered promiscuous mode [ 2300.322559][ T9836] team0: entered promiscuous mode [ 2300.336673][ T9836] team_slave_0: entered promiscuous mode [ 2300.352116][ T9836] team_slave_1: entered promiscuous mode [ 2300.605178][ T9843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11429'. [ 2300.846706][T23173] usb 4-1: probing VID:PID(0424:012C) [ 2300.875828][T23173] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 2300.895371][T23173] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 2300.956830][T23173] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 2301.002791][T23173] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 2301.080387][T23173] usb 4-1: USB disconnect, device number 78 [ 2301.146514][ T9861] vlan2: entered promiscuous mode [ 2301.189310][ T9861] team0: entered promiscuous mode [ 2301.223671][ T9861] team_slave_0: entered promiscuous mode [ 2301.257222][ T9861] team_slave_1: entered promiscuous mode [ 2301.438892][ T6831] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2301.696686][ T6831] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2301.727346][ T6831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2301.807537][ T6831] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2301.899300][ T6831] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2301.912398][ T6831] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2301.921233][ T6831] usb 6-1: Manufacturer: syz [ 2301.948378][ T6831] usb 6-1: config 0 descriptor?? [ 2302.029092][ T6831] igorplugusb 6-1:0.0: incorrect number of endpoints [ 2302.294750][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11439'. [ 2302.338743][ T6831] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2302.490683][ T6831] usb 4-1: Using ep0 maxpacket: 16 [ 2302.504550][ T6831] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 2302.514484][ T6831] usb 4-1: config 0 has no interface number 0 [ 2302.521208][ T6831] usb 4-1: config 0 interface 23 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.533401][ T6831] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 2302.543111][ T6831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.556738][ T6831] usb 4-1: config 0 descriptor?? [ 2302.740627][ T9879] netlink: 'syz.7.11442': attribute type 10 has an invalid length. [ 2302.766051][ T9879] dummy0: entered promiscuous mode [ 2302.775770][ T9879] team0: Failed to send options change via netlink (err -105) [ 2302.784608][ T9879] team0: Port device dummy0 added [ 2302.801633][ T9879] netlink: 'syz.7.11442': attribute type 10 has an invalid length. [ 2302.811512][ T9879] dummy0: left promiscuous mode [ 2302.823052][ T9879] team0: Failed to send options change via netlink (err -105) [ 2302.833034][ T9879] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2302.845607][ T9879] team0: Port device dummy0 removed [ 2302.857674][ T9879] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2303.005703][ T6831] usbhid 4-1:0.23: can't add hid device: -71 [ 2303.017895][ T6831] usbhid 4-1:0.23: probe with driver usbhid failed with error -71 [ 2303.028292][ T9883] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11443'. [ 2303.044569][ T6831] usb 4-1: USB disconnect, device number 79 [ 2303.172514][ T9885] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11444'. [ 2303.275465][ T9887] FAULT_INJECTION: forcing a failure. [ 2303.275465][ T9887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2303.315162][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: syz.7.11445 Tainted: G L syzkaller #0 PREEMPT(full) [ 2303.315191][ T9887] Tainted: [L]=SOFTLOCKUP [ 2303.315199][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2303.315210][ T9887] Call Trace: [ 2303.315218][ T9887] [ 2303.315230][ T9887] dump_stack_lvl+0xe8/0x150 [ 2303.315251][ T9887] should_fail_ex+0x40c/0x560 [ 2303.315269][ T9887] _copy_from_iter+0x1d3/0x1660 [ 2303.315286][ T9887] ? rcu_is_watching+0x15/0xb0 [ 2303.315335][ T9887] ? __pfx__copy_from_iter+0x10/0x10 [ 2303.315352][ T9887] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 2303.315387][ T9887] ? netlink_sendmsg+0x650/0xb40 [ 2303.315420][ T9887] ? skb_put+0x112/0x210 [ 2303.315441][ T9887] netlink_sendmsg+0x6c0/0xb40 [ 2303.315466][ T9887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2303.315488][ T9887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2303.315509][ T9887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2303.315526][ T9887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2303.315547][ T9887] ____sys_sendmsg+0x9b9/0xa20 [ 2303.315566][ T9887] ? __might_fault+0xaf/0x130 [ 2303.315587][ T9887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2303.315612][ T9887] ? import_iovec+0x73/0xa0 [ 2303.315629][ T9887] ___sys_sendmsg+0x2a5/0x360 [ 2303.315647][ T9887] ? __lock_acquire+0x683/0x2cd0 [ 2303.315663][ T9887] ? __pfx____sys_sendmsg+0x10/0x10 [ 2303.315704][ T9887] ? __fget_files+0x2a/0x420 [ 2303.315719][ T9887] ? __fget_files+0x3a2/0x420 [ 2303.315740][ T9887] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2303.315762][ T9887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2303.315787][ T9887] ? __pfx_ksys_write+0x10/0x10 [ 2303.315811][ T9887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.315827][ T9887] do_syscall_64+0x174/0x580 [ 2303.315840][ T9887] ? trace_irq_disable+0x3b/0x140 [ 2303.315859][ T9887] ? clear_bhb_loop+0x40/0x90 [ 2303.315875][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.315887][ T9887] RIP: 0033:0x7f9149d9ce59 [ 2303.315900][ T9887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.315910][ T9887] RSP: 002b:00007f914accb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.315924][ T9887] RAX: ffffffffffffffda RBX: 00007f914a015fa0 RCX: 00007f9149d9ce59 [ 2303.315934][ T9887] RDX: 0000000000008014 RSI: 0000200000000280 RDI: 0000000000000003 [ 2303.315942][ T9887] RBP: 00007f914accb090 R08: 0000000000000000 R09: 0000000000000000 [ 2303.315950][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.315957][ T9887] R13: 00007f914a016038 R14: 00007f914a015fa0 R15: 00007f914a13fa48 [ 2303.315994][ T9887] [ 2304.126074][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2304.126093][ T30] audit: type=1326 audit(1781498888.186:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.0.11449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8c7d9ce59 code=0x0 [ 2304.187465][ T9899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11450'. [ 2304.247302][ T9900] syzkaller0: entered promiscuous mode [ 2304.253099][ T9900] syzkaller0: entered allmulticast mode [ 2304.275027][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11451'. [ 2304.810127][T24416] usb 6-1: USB disconnect, device number 99 [ 2304.937569][ T9912] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11455'. [ 2305.395812][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11464'. [ 2305.421418][ T9933] binder: 9931:9933 ioctl c0306201 200000000600 returned -14 [ 2305.651753][ T9946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11467'. [ 2306.038770][T24416] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2306.201908][T24416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.223272][T24416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2306.240742][T24416] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 2306.258747][T24416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2306.285366][T24416] usb 4-1: Product: syz [ 2306.292116][T24416] usb 4-1: Manufacturer: syz [ 2306.298373][T24416] usb 4-1: SerialNumber: syz [ 2306.398788][T24439] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2306.463839][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11473'. [ 2306.493220][ T9961] vlan2: entered allmulticast mode [ 2306.498488][ T9961] bridge0: entered allmulticast mode [ 2306.505917][ T9961] bridge0: port 1(erspan0) entered blocking state [ 2306.513025][ T9961] bridge0: port 1(erspan0) entered disabled state [ 2306.519862][ T9961] erspan0: entered allmulticast mode [ 2306.527404][ T9961] erspan0: entered promiscuous mode [ 2306.533000][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11468'. [ 2306.565987][ T9961] bridge0: port 1(erspan0) entered blocking state [ 2306.572617][ T9961] bridge0: port 1(erspan0) entered forwarding state [ 2306.582913][T24439] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 2306.593162][T24439] usb 6-1: config 1 has no interface number 0 [ 2306.599723][T24439] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2306.611666][T24439] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 8 [ 2306.625914][ T9963] FAULT_INJECTION: forcing a failure. [ 2306.625914][ T9963] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.641374][T24439] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2306.649071][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.7.11474 Tainted: G L syzkaller #0 PREEMPT(full) [ 2306.649138][ T9963] Tainted: [L]=SOFTLOCKUP [ 2306.649155][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2306.649190][ T9963] Call Trace: [ 2306.649204][ T9963] [ 2306.649222][ T9963] dump_stack_lvl+0xe8/0x150 [ 2306.649295][ T9963] should_fail_ex+0x40c/0x560 [ 2306.649359][ T9963] should_failslab+0xa8/0x100 [ 2306.649466][ T9963] ? skb_clone+0x212/0x3a0 [ 2306.649517][ T9963] kmem_cache_alloc_noprof+0x87/0x650 [ 2306.649615][ T9963] skb_clone+0x212/0x3a0 [ 2306.649676][ T9963] __netlink_deliver_tap+0x413/0x860 [ 2306.649789][ T9963] ? netlink_deliver_tap+0x2e/0x1b0 [ 2306.649891][ T9963] netlink_deliver_tap+0x19c/0x1b0 [ 2306.649973][ T9963] netlink_unicast+0x77f/0x940 [ 2306.650054][ T9963] netlink_sendmsg+0x813/0xb40 [ 2306.650148][ T9963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.650228][ T9963] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2306.650308][ T9963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2306.650402][ T9963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.650493][ T9963] ____sys_sendmsg+0x9b9/0xa20 [ 2306.650571][ T9963] ? __might_fault+0xaf/0x130 [ 2306.650631][ T9963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2306.650749][ T9963] ? import_iovec+0x73/0xa0 [ 2306.650831][ T9963] ___sys_sendmsg+0x2a5/0x360 [ 2306.650906][ T9963] ? __lock_acquire+0x683/0x2cd0 [ 2306.650982][ T9963] ? __pfx____sys_sendmsg+0x10/0x10 [ 2306.651138][ T9963] ? __fget_files+0x2a/0x420 [ 2306.651197][ T9963] ? __fget_files+0x3a2/0x420 [ 2306.651296][ T9963] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2306.651369][ T9963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2306.651466][ T9963] ? __pfx_ksys_write+0x10/0x10 [ 2306.651562][ T9963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2306.651610][ T9963] do_syscall_64+0x174/0x580 [ 2306.651657][ T9963] ? trace_irq_disable+0x3b/0x140 [ 2306.651730][ T9963] ? clear_bhb_loop+0x40/0x90 [ 2306.651804][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2306.651850][ T9963] RIP: 0033:0x7f9149d9ce59 [ 2306.651897][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2306.651939][ T9963] RSP: 002b:00007f914accb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2306.651987][ T9963] RAX: ffffffffffffffda RBX: 00007f914a015fa0 RCX: 00007f9149d9ce59 [ 2306.652022][ T9963] RDX: 0000000000008014 RSI: 0000200000000280 RDI: 0000000000000003 [ 2306.652056][ T9963] RBP: 00007f914accb090 R08: 0000000000000000 R09: 0000000000000000 [ 2306.652084][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.652126][ T9963] R13: 00007f914a016038 R14: 00007f914a015fa0 R15: 00007f914a13fa48 [ 2306.652205][ T9963] [ 2306.959077][T24439] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2306.968350][T24439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.978358][T24439] usb 6-1: Product: syz [ 2306.986692][T24439] usb 6-1: Manufacturer: syz [ 2306.997140][T24439] usb 6-1: SerialNumber: syz [ 2307.014562][ T30] audit: type=1326 audit(1781498891.076:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.047069][ T9953] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2307.055163][ T30] audit: type=1326 audit(1781498891.116:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.085720][ T30] audit: type=1326 audit(1781498891.116:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.151019][ T30] audit: type=1326 audit(1781498891.146:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.211632][ T30] audit: type=1326 audit(1781498891.146:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.240763][ T30] audit: type=1326 audit(1781498891.146:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.270650][ T30] audit: type=1326 audit(1781498891.146:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.301639][ T9953] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2307.310063][ T30] audit: type=1326 audit(1781498891.146:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.341361][ T30] audit: type=1326 audit(1781498891.146:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.7.11476" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9149d9ce59 code=0x7ffc0000 [ 2307.373191][T24416] usb 4-1: 0:1 : does not exist [ 2307.378156][T24416] usb 4-1: unit 4 not found! [ 2307.431161][T24416] usb 4-1: USB disconnect, device number 80 [ 2307.486507][ T7920] udevd[7920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2307.556496][T24439] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 2307.749867][T24439] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 2307.756946][T24439] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 2307.765274][T24439] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 2307.773672][T24439] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 2307.789629][T24439] usb 6-1: USB disconnect, device number 100 [ 2307.801648][T24439] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 2307.899844][T24439] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2307.955942][ T9982] __nla_validate_parse: 2 callbacks suppressed [ 2307.955961][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11480'. [ 2308.044956][ T9982] geneve2: entered promiscuous mode [ 2308.209629][ T9989] binder: 9988:9989 ioctl c0306201 2000000003c0 returned -14 [ 2308.218255][ T9989] binder: 9988:9989 ioctl c0306201 2000000003c0 returned -14 [ 2308.357796][ T9993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2308.425779][ T9998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11484'. [ 2308.447842][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11487'. [ 2308.885674][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11494'. [ 2308.895214][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11494'. [ 2309.453785][T10029] netlink: 164 bytes leftover after parsing attributes in process `syz.7.11499'. [ 2309.954701][T10044] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11503'. [ 2310.076522][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11505'. [ 2310.103088][T10048] vlan3: entered allmulticast mode [ 2310.108415][T10048] bridge1: entered allmulticast mode [ 2310.115883][T10048] bridge1: port 1(erspan0) entered blocking state [ 2310.123151][T10048] bridge1: port 1(erspan0) entered disabled state [ 2310.130063][T10048] erspan0: entered allmulticast mode [ 2310.137017][T10048] erspan0: entered promiscuous mode [ 2310.143579][T10048] bridge1: port 1(erspan0) entered blocking state [ 2310.150126][T10048] bridge1: port 1(erspan0) entered forwarding state [ 2310.239630][ T6831] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2310.412098][ T6831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2310.444302][ T6831] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2310.463739][ T6831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.485976][ T6831] usb 6-1: config 0 descriptor?? [ 2310.621944][T10055] [ 2310.624319][T10055] ===================================================== [ 2310.631319][T10055] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2310.638807][T10055] syzkaller #0 Tainted: G L [ 2310.644793][T10055] ----------------------------------------------------- [ 2310.651732][T10055] syz.7.11508/10055 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2310.659552][T10055] ffff888055da7948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2310.668285][T10055] [ 2310.668285][T10055] and this task is already holding: [ 2310.675649][T10055] ffff888026302028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 2310.685496][T10055] which would create a new lock dependency: [ 2310.691391][T10055] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2310.699499][T10055] [ 2310.699499][T10055] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2310.708951][T10055] (&dev->event_lock#2){..-.}-{3:3} [ 2310.708980][T10055] [ 2310.708980][T10055] ... which became SOFTIRQ-irq-safe at: [ 2310.721880][T10055] lock_acquire+0x106/0x350 [ 2310.726481][T10055] _raw_spin_lock_irqsave+0x40/0x60 [ 2310.731777][T10055] input_event+0x71/0xc0 [ 2310.736167][T10055] atp_complete_geyser_3_4+0x12b5/0x2220 [ 2310.741893][T10055] __usb_hcd_giveback_urb+0x374/0x530 [ 2310.747387][T10055] dummy_timer+0xac3/0x4b40 [ 2310.751990][T10055] __hrtimer_run_queues+0x3bc/0xa10 [ 2310.757289][T10055] hrtimer_run_softirq+0x17a/0x240 [ 2310.762495][T10055] handle_softirqs+0x225/0x840 [ 2310.767351][T10055] __irq_exit_rcu+0xca/0x220 [ 2310.772078][T10055] irq_exit_rcu+0x9/0x30 [ 2310.776427][T10055] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2310.782175][T10055] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2310.788260][T10055] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2310.793991][T10055] dummy_urb_enqueue+0x587/0x780 [ 2310.799024][T10055] usb_hcd_submit_urb+0x32a/0x1b50 [ 2310.804223][T10055] atp_open+0x60/0x90 [ 2310.808296][T10055] input_open_device+0x1f9/0x3b0 [ 2310.813333][T10055] mousedev_open_device+0xcc/0x150 [ 2310.818550][T10055] mousedev_open+0x2e4/0x480 [ 2310.823240][T10055] chrdev_open+0x4d9/0x600 [ 2310.827748][T10055] do_dentry_open+0x816/0x1380 [ 2310.832603][T10055] vfs_open+0x3b/0x340 [ 2310.836767][T10055] path_openat+0x2e3b/0x3890 [ 2310.841454][T10055] do_file_open+0x23e/0x4a0 [ 2310.846052][T10055] do_sys_openat2+0x113/0x200 [ 2310.850819][T10055] __x64_sys_openat+0x138/0x170 [ 2310.855765][T10055] do_syscall_64+0x174/0x580 [ 2310.860445][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.866426][T10055] [ 2310.866426][T10055] to a SOFTIRQ-irq-unsafe lock: [ 2310.873444][T10055] (tasklist_lock){.+.+}-{3:3} [ 2310.873468][T10055] [ 2310.873468][T10055] ... which became SOFTIRQ-irq-unsafe at: [ 2310.886102][T10055] ... [ 2310.886153][T10055] lock_acquire+0x106/0x350 [ 2310.893338][T10055] _raw_read_lock+0x36/0x50 [ 2310.897939][T10055] __do_wait+0xd9/0x720 [ 2310.902187][T10055] do_wait+0x1e7/0x510 [ 2310.906355][T10055] kernel_wait+0xd6/0x1c0 [ 2310.910778][T10055] call_usermodehelper_exec_work+0xbe/0x230 [ 2310.916767][T10055] process_scheduled_works+0xa8e/0x14e0 [ 2310.922408][T10055] worker_thread+0xa47/0xfb0 [ 2310.927106][T10055] kthread+0x389/0x470 [ 2310.931272][T10055] ret_from_fork+0x514/0xb70 [ 2310.935957][T10055] ret_from_fork_asm+0x1a/0x30 [ 2310.940818][T10055] [ 2310.940818][T10055] other info that might help us debug this: [ 2310.940818][T10055] [ 2310.951047][T10055] Chain exists of: [ 2310.951047][T10055] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2310.951047][T10055] [ 2310.964617][T10055] Possible interrupt unsafe locking scenario: [ 2310.964617][T10055] [ 2310.972938][T10055] CPU0 CPU1 [ 2310.978299][T10055] ---- ---- [ 2310.983668][T10055] lock(tasklist_lock); [ 2310.987925][T10055] local_irq_disable(); [ 2310.994689][T10055] lock(&dev->event_lock#2); [ 2311.001897][T10055] lock(&client->buffer_lock); [ 2311.009284][T10055] [ 2311.012778][T10055] lock(&dev->event_lock#2); [ 2311.017646][T10055] [ 2311.017646][T10055] *** DEADLOCK *** [ 2311.017646][T10055] [ 2311.025791][T10055] 7 locks held by syz.7.11508/10055: [ 2311.031074][T10055] #0: ffff88802c471110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 2311.040226][T10055] #1: ffff88801ffa2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 2311.050336][T10055] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 2311.060005][T10055] #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2311.069603][T10055] #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2311.078742][T10055] #5: ffff888026302028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 2311.088937][T10055] #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2311.098022][T10055] [ 2311.098022][T10055] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2311.108426][T10055] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2311.114084][T10055] IN-SOFTIRQ-W at: [ 2311.118163][T10055] lock_acquire+0x106/0x350 [ 2311.124502][T10055] _raw_spin_lock_irqsave+0x40/0x60 [ 2311.131543][T10055] input_event+0x71/0xc0 [ 2311.137627][T10055] atp_complete_geyser_3_4+0x12b5/0x2220 [ 2311.145099][T10055] __usb_hcd_giveback_urb+0x374/0x530 [ 2311.152302][T10055] dummy_timer+0xac3/0x4b40 [ 2311.158640][T10055] __hrtimer_run_queues+0x3bc/0xa10 [ 2311.165667][T10055] hrtimer_run_softirq+0x17a/0x240 [ 2311.172606][T10055] handle_softirqs+0x225/0x840 [ 2311.179198][T10055] __irq_exit_rcu+0xca/0x220 [ 2311.185616][T10055] irq_exit_rcu+0x9/0x30 [ 2311.191685][T10055] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2311.199164][T10055] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2311.206984][T10055] _raw_spin_unlock_irqrestore+0x47/0x80 [ 2311.214450][T10055] dummy_urb_enqueue+0x587/0x780 [ 2311.221228][T10055] usb_hcd_submit_urb+0x32a/0x1b50 [ 2311.228166][T10055] atp_open+0x60/0x90 [ 2311.233982][T10055] input_open_device+0x1f9/0x3b0 [ 2311.240758][T10055] mousedev_open_device+0xcc/0x150 [ 2311.247708][T10055] mousedev_open+0x2e4/0x480 [ 2311.254136][T10055] chrdev_open+0x4d9/0x600 [ 2311.260408][T10055] do_dentry_open+0x816/0x1380 [ 2311.267011][T10055] vfs_open+0x3b/0x340 [ 2311.272908][T10055] path_openat+0x2e3b/0x3890 [ 2311.279352][T10055] do_file_open+0x23e/0x4a0 [ 2311.285692][T10055] do_sys_openat2+0x113/0x200 [ 2311.292197][T10055] __x64_sys_openat+0x138/0x170 [ 2311.298895][T10055] do_syscall_64+0x174/0x580 [ 2311.305325][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2311.313060][T10055] INITIAL USE at: [ 2311.317103][T10055] lock_acquire+0x106/0x350 [ 2311.323374][T10055] _raw_spin_lock_irqsave+0x40/0x60 [ 2311.330336][T10055] input_inject_event+0xa4/0x330 [ 2311.337029][T10055] kbd_led_trigger_activate+0xbc/0x100 [ 2311.344304][T10055] led_trigger_set+0x525/0x940 [ 2311.350870][T10055] led_trigger_set_default+0x263/0x2a0 [ 2311.358077][T10055] led_classdev_register_ext+0x761/0x9a0 [ 2311.365454][T10055] input_leds_connect+0x4de/0x750 [ 2311.372229][T10055] input_register_device+0xd12/0x1150 [ 2311.379371][T10055] atkbd_connect+0x6fa/0x9f0 [ 2311.385717][T10055] serio_driver_probe+0x82/0xb0 [ 2311.392394][T10055] really_probe+0x254/0xae0 [ 2311.398707][T10055] __driver_probe_device+0x1f5/0x380 [ 2311.405755][T10055] driver_probe_device+0x4f/0x240 [ 2311.412533][T10055] __driver_attach+0x342/0x620 [ 2311.419048][T10055] bus_for_each_dev+0x23b/0x2c0 [ 2311.425650][T10055] serio_handle_event+0x1af/0xfc0 [ 2311.432430][T10055] process_scheduled_works+0xa8e/0x14e0 [ 2311.439732][T10055] worker_thread+0xa47/0xfb0 [ 2311.446077][T10055] kthread+0x389/0x470 [ 2311.451901][T10055] ret_from_fork+0x514/0xb70 [ 2311.458241][T10055] ret_from_fork_asm+0x1a/0x30 [ 2311.464773][T10055] } [ 2311.467374][T10055] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2311.476605][T10055] -> (&client->buffer_lock){....}-{3:3} { [ 2311.482364][T10055] INITIAL USE at: [ 2311.486283][T10055] lock_acquire+0x106/0x350 [ 2311.492395][T10055] _raw_spin_lock+0x2e/0x40 [ 2311.498482][T10055] evdev_pass_values+0xcb/0xc00 [ 2311.504901][T10055] evdev_events+0x1aa/0x340 [ 2311.510982][T10055] input_pass_values+0x1c2/0x890 [ 2311.517505][T10055] input_event_dispose+0x330/0x6b0 [ 2311.524194][T10055] input_inject_event+0x1dd/0x330 [ 2311.530800][T10055] evdev_write+0x325/0x4c0 [ 2311.536782][T10055] vfs_write+0x296/0xba0 [ 2311.542596][T10055] ksys_write+0x150/0x270 [ 2311.548497][T10055] do_syscall_64+0x174/0x580 [ 2311.554658][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2311.562116][T10055] } [ 2311.564636][T10055] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2311.572793][T10055] ... acquired at: [ 2311.576598][T10055] _raw_spin_lock+0x2e/0x40 [ 2311.581290][T10055] evdev_pass_values+0xcb/0xc00 [ 2311.586332][T10055] evdev_events+0x1aa/0x340 [ 2311.591026][T10055] input_pass_values+0x1c2/0x890 [ 2311.596152][T10055] input_event_dispose+0x330/0x6b0 [ 2311.601455][T10055] input_inject_event+0x1dd/0x330 [ 2311.606670][T10055] evdev_write+0x325/0x4c0 [ 2311.611272][T10055] vfs_write+0x296/0xba0 [ 2311.615708][T10055] ksys_write+0x150/0x270 [ 2311.620255][T10055] do_syscall_64+0x174/0x580 [ 2311.625027][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2311.631107][T10055] [ 2311.633433][T10055] [ 2311.633433][T10055] the dependencies between the lock to be acquired [ 2311.633442][T10055] and SOFTIRQ-irq-unsafe lock: [ 2311.646981][T10055] -> (tasklist_lock){.+.+}-{3:3} { [ 2311.652292][T10055] HARDIRQ-ON-R at: [ 2311.656464][T10055] lock_acquire+0x106/0x350 [ 2311.662976][T10055] _raw_read_lock+0x36/0x50 [ 2311.669499][T10055] __do_wait+0xd9/0x720 [ 2311.675664][T10055] do_wait+0x1e7/0x510 [ 2311.681742][T10055] kernel_wait+0xd6/0x1c0 [ 2311.688091][T10055] call_usermodehelper_exec_work+0xbe/0x230 [ 2311.695995][T10055] process_scheduled_works+0xa8e/0x14e0 [ 2311.703543][T10055] worker_thread+0xa47/0xfb0 [ 2311.710138][T10055] kthread+0x389/0x470 [ 2311.716215][T10055] ret_from_fork+0x514/0xb70 [ 2311.722827][T10055] ret_from_fork_asm+0x1a/0x30 [ 2311.729610][T10055] SOFTIRQ-ON-R at: [ 2311.733793][T10055] lock_acquire+0x106/0x350 [ 2311.740307][T10055] _raw_read_lock+0x36/0x50 [ 2311.746825][T10055] __do_wait+0xd9/0x720 [ 2311.752985][T10055] do_wait+0x1e7/0x510 [ 2311.759062][T10055] kernel_wait+0xd6/0x1c0 [ 2311.765444][T10055] call_usermodehelper_exec_work+0xbe/0x230 [ 2311.773356][T10055] process_scheduled_works+0xa8e/0x14e0 [ 2311.780906][T10055] worker_thread+0xa47/0xfb0 [ 2311.787499][T10055] kthread+0x389/0x470 [ 2311.793583][T10055] ret_from_fork+0x514/0xb70 [ 2311.800178][T10055] ret_from_fork_asm+0x1a/0x30 [ 2311.806960][T10055] INITIAL USE at: [ 2311.811048][T10055] lock_acquire+0x106/0x350 [ 2311.817475][T10055] _raw_write_lock_irq+0x3d/0x50 [ 2311.824340][T10055] copy_process+0x29eb/0x4380 [ 2311.830948][T10055] kernel_clone+0x2d7/0x940 [ 2311.837376][T10055] user_mode_thread+0x110/0x180 [ 2311.844162][T10055] rest_init+0x23/0x300 [ 2311.850251][T10055] start_kernel+0x38a/0x3e0 [ 2311.856792][T10055] x86_64_start_reservations+0x24/0x30 [ 2311.864204][T10055] x86_64_start_kernel+0x137/0x1b0 [ 2311.871233][T10055] common_startup_64+0x13e/0x147 [ 2311.878095][T10055] INITIAL READ USE at: [ 2311.882602][T10055] lock_acquire+0x106/0x350 [ 2311.889459][T10055] _raw_read_lock+0x36/0x50 [ 2311.896317][T10055] __do_wait+0xd9/0x720 [ 2311.902825][T10055] do_wait+0x1e7/0x510 [ 2311.909263][T10055] kernel_wait+0xd6/0x1c0 [ 2311.915964][T10055] call_usermodehelper_exec_work+0xbe/0x230 [ 2311.924231][T10055] process_scheduled_works+0xa8e/0x14e0 [ 2311.932141][T10055] worker_thread+0xa47/0xfb0 [ 2311.939091][T10055] kthread+0x389/0x470 [ 2311.945518][T10055] ret_from_fork+0x514/0xb70 [ 2311.952462][T10055] ret_from_fork_asm+0x1a/0x30 [ 2311.959592][T10055] } [ 2311.962285][T10055] ... key at: [] tasklist_lock+0x18/0x40 [ 2311.970282][T10055] ... acquired at: [ 2311.974284][T10055] _raw_read_lock+0x36/0x50 [ 2311.978984][T10055] send_sigurg+0x12b/0x420 [ 2311.983604][T10055] sk_send_sigurg+0x6c/0x2e0 [ 2311.988430][T10055] queue_oob+0x42c/0x4f0 [ 2311.992917][T10055] unix_stream_sendmsg+0xc30/0xde0 [ 2311.998222][T10055] ____sys_sendmsg+0x9b9/0xa20 [ 2312.003185][T10055] ___sys_sendmsg+0x2a5/0x360 [ 2312.008072][T10055] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2312.013215][T10055] do_syscall_64+0x174/0x580 [ 2312.018017][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.024102][T10055] [ 2312.026440][T10055] -> (&f_owner->lock){....}-{3:3} { [ 2312.031777][T10055] INITIAL USE at: [ 2312.035814][T10055] lock_acquire+0x106/0x350 [ 2312.042110][T10055] _raw_write_lock_irq+0x3d/0x50 [ 2312.048813][T10055] __f_setown+0x5f/0x380 [ 2312.054813][T10055] fcntl_dirnotify+0x3fd/0x6a0 [ 2312.061332][T10055] do_fcntl+0x77e/0x1a30 [ 2312.067364][T10055] __se_sys_fcntl+0xc8/0x150 [ 2312.073721][T10055] do_syscall_64+0x174/0x580 [ 2312.080064][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.087715][T10055] INITIAL READ USE at: [ 2312.092142][T10055] lock_acquire+0x106/0x350 [ 2312.098836][T10055] _raw_read_lock_irqsave+0x48/0x60 [ 2312.106230][T10055] send_sigio+0x38/0x370 [ 2312.112662][T10055] dnotify_handle_event+0x169/0x440 [ 2312.120052][T10055] fsnotify+0x1702/0x1b60 [ 2312.126567][T10055] __fsnotify_parent+0x50d/0x620 [ 2312.133702][T10055] __kernel_read+0x714/0x960 [ 2312.140478][T10055] integrity_kernel_read+0x89/0xd0 [ 2312.147774][T10055] ima_calc_file_hash+0x451/0x890 [ 2312.154992][T10055] ima_collect_measurement+0x51b/0xa00 [ 2312.162628][T10055] process_measurement+0x1272/0x1c10 [ 2312.170101][T10055] ima_file_check+0xe1/0x130 [ 2312.176871][T10055] security_file_post_open+0xb3/0x260 [ 2312.184423][T10055] path_openat+0x2e80/0x3890 [ 2312.191200][T10055] do_file_open+0x23e/0x4a0 [ 2312.197888][T10055] do_sys_openat2+0x113/0x200 [ 2312.204748][T10055] __x64_sys_openat+0x138/0x170 [ 2312.211776][T10055] do_syscall_64+0x174/0x580 [ 2312.218541][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.226610][T10055] } [ 2312.229206][T10055] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2312.238213][T10055] ... acquired at: [ 2312.242130][T10055] _raw_read_lock_irqsave+0x48/0x60 [ 2312.247521][T10055] send_sigio+0x38/0x370 [ 2312.251948][T10055] kill_fasync+0x24d/0x4d0 [ 2312.256551][T10055] lease_break_callback+0x26/0x30 [ 2312.261779][T10055] __break_lease+0x80d/0x1e70 [ 2312.266640][T10055] vfs_mkdir+0x506/0x620 [ 2312.271076][T10055] filename_mkdirat+0x285/0x510 [ 2312.276115][T10055] __se_sys_mkdirat+0x35/0x150 [ 2312.281091][T10055] do_syscall_64+0x174/0x580 [ 2312.285857][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.291929][T10055] [ 2312.294263][T10055] -> (&new->fa_lock){....}-{3:3} { [ 2312.299396][T10055] INITIAL USE at: [ 2312.303326][T10055] lock_acquire+0x106/0x350 [ 2312.309395][T10055] _raw_write_lock_irq+0x3d/0x50 [ 2312.315915][T10055] fasync_remove_entry+0xf1/0x1c0 [ 2312.322520][T10055] lease_modify+0x4f7/0x6c0 [ 2312.328611][T10055] locks_remove_file+0x5ed/0xf40 [ 2312.335152][T10055] __fput+0x378/0xa50 [ 2312.340709][T10055] task_work_run+0x1d9/0x270 [ 2312.346874][T10055] get_signal+0x1181/0x12c0 [ 2312.352960][T10055] arch_do_signal_or_restart+0xbb/0x860 [ 2312.360089][T10055] exit_to_user_mode_loop+0xa9/0x6b0 [ 2312.366937][T10055] do_syscall_64+0x353/0x580 [ 2312.373094][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.380555][T10055] INITIAL READ USE at: [ 2312.384892][T10055] lock_acquire+0x106/0x350 [ 2312.391421][T10055] _raw_read_lock_irqsave+0x48/0x60 [ 2312.398641][T10055] kill_fasync+0x199/0x4d0 [ 2312.405082][T10055] lease_break_callback+0x26/0x30 [ 2312.412131][T10055] __break_lease+0x80d/0x1e70 [ 2312.418827][T10055] vfs_mkdir+0x506/0x620 [ 2312.425098][T10055] filename_mkdirat+0x285/0x510 [ 2312.431969][T10055] __se_sys_mkdirat+0x35/0x150 [ 2312.438758][T10055] do_syscall_64+0x174/0x580 [ 2312.445364][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.453268][T10055] } [ 2312.455772][T10055] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2312.464456][T10055] ... acquired at: [ 2312.468267][T10055] _raw_read_lock_irqsave+0x48/0x60 [ 2312.473656][T10055] kill_fasync+0x199/0x4d0 [ 2312.478262][T10055] evdev_pass_values+0x552/0xc00 [ 2312.483541][T10055] evdev_events+0x1e6/0x340 [ 2312.488224][T10055] input_pass_values+0x288/0x890 [ 2312.493347][T10055] input_event_dispose+0x330/0x6b0 [ 2312.498659][T10055] input_inject_event+0x1dd/0x330 [ 2312.503869][T10055] evdev_write+0x325/0x4c0 [ 2312.508465][T10055] vfs_write+0x296/0xba0 [ 2312.512889][T10055] ksys_write+0x150/0x270 [ 2312.517401][T10055] do_syscall_64+0x174/0x580 [ 2312.522178][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.528261][T10055] [ 2312.530593][T10055] [ 2312.530593][T10055] stack backtrace: [ 2312.536487][T10055] CPU: 1 UID: 0 PID: 10055 Comm: syz.7.11508 Tainted: G L syzkaller #0 PREEMPT(full) [ 2312.536510][T10055] Tainted: [L]=SOFTLOCKUP [ 2312.536515][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2312.536526][T10055] Call Trace: [ 2312.536533][T10055] [ 2312.536539][T10055] dump_stack_lvl+0xe8/0x150 [ 2312.536558][T10055] __lock_acquire+0x2a37/0x2cd0 [ 2312.536582][T10055] ? kill_fasync+0x199/0x4d0 [ 2312.536604][T10055] lock_acquire+0x106/0x350 [ 2312.536619][T10055] ? kill_fasync+0x199/0x4d0 [ 2312.536642][T10055] ? do_raw_spin_lock+0x12b/0x2f0 [ 2312.536665][T10055] ? evdev_pass_values+0xcb/0xc00 [ 2312.536681][T10055] _raw_read_lock_irqsave+0x48/0x60 [ 2312.536705][T10055] ? kill_fasync+0x199/0x4d0 [ 2312.536727][T10055] kill_fasync+0x199/0x4d0 [ 2312.536748][T10055] ? kill_fasync+0x53/0x4d0 [ 2312.536771][T10055] evdev_pass_values+0x552/0xc00 [ 2312.536788][T10055] ? evdev_pass_values+0x6a1/0xc00 [ 2312.536805][T10055] evdev_events+0x1e6/0x340 [ 2312.536819][T10055] ? evdev_events+0x79/0x340 [ 2312.536834][T10055] ? input_pass_values+0x8d/0x890 [ 2312.536857][T10055] input_pass_values+0x288/0x890 [ 2312.536883][T10055] ? input_handle_event+0x6fd/0xf10 [ 2312.536904][T10055] input_event_dispose+0x330/0x6b0 [ 2312.536926][T10055] input_inject_event+0x1dd/0x330 [ 2312.536947][T10055] ? input_inject_event+0xb5/0x330 [ 2312.536967][T10055] evdev_write+0x325/0x4c0 [ 2312.536981][T10055] ? __lock_acquire+0x683/0x2cd0 [ 2312.536998][T10055] ? __pfx_evdev_write+0x10/0x10 [ 2312.537013][T10055] ? bpf_lsm_file_permission+0x9/0x20 [ 2312.537036][T10055] ? security_file_permission+0x75/0x260 [ 2312.537056][T10055] ? rw_verify_area+0x203/0x4c0 [ 2312.537078][T10055] ? __pfx_evdev_write+0x10/0x10 [ 2312.537092][T10055] vfs_write+0x296/0xba0 [ 2312.537116][T10055] ? __pfx_vfs_write+0x10/0x10 [ 2312.537138][T10055] ? __fget_files+0x2a/0x420 [ 2312.537162][T10055] ? __fget_files+0x2a/0x420 [ 2312.537180][T10055] ? __fget_files+0x3a2/0x420 [ 2312.537197][T10055] ? __fget_files+0x2a/0x420 [ 2312.537218][T10055] ksys_write+0x150/0x270 [ 2312.537241][T10055] ? __pfx_ksys_write+0x10/0x10 [ 2312.537265][T10055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.537281][T10055] do_syscall_64+0x174/0x580 [ 2312.537297][T10055] ? clear_bhb_loop+0x40/0x90 [ 2312.537314][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2312.537330][T10055] RIP: 0033:0x7f9149d9ce59 [ 2312.537345][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2312.537359][T10055] RSP: 002b:00007f914accb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2312.537376][T10055] RAX: ffffffffffffffda RBX: 00007f914a015fa0 RCX: 00007f9149d9ce59 [ 2312.537389][T10055] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 2312.537399][T10055] RBP: 00007f9149e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2312.537409][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2312.537419][T10055] R13: 00007f914a016038 R14: 00007f914a015fa0 R15: 00007f914a13fa48 [ 2312.537437][T10055] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2312.978101][ T6831] usbhid 6-1:0.0: can't add hid device: -71 [ 2312.987988][ T6831] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2312.997015][ T6831] usb 6-1: USB disconnect, device number 101 [ 2313.494799][T23722] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.577723][T23722] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.598690][T24416] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2313.696359][T23722] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.776464][T23722] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.943070][T23722] bridge_slave_1: left allmulticast mode [ 2313.960153][T23722] bridge_slave_1: left promiscuous mode [ 2313.970086][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2313.991172][T23722] bridge_slave_0: left allmulticast mode [ 2314.003680][T23722] bridge_slave_0: left promiscuous mode [ 2314.009993][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.251089][T23722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2314.261665][T23722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.271524][T23722] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2314.281189][T23722] bond0 (unregistering): Released all slaves [ 2314.289477][T23722] bond1 (unregistering): Released all slaves [ 2314.299991][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2314.563291][T23722] hsr_slave_0: left promiscuous mode [ 2314.569331][T23722] hsr_slave_1: left promiscuous mode [ 2314.575831][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2314.602794][T23722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2314.613959][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2314.622186][T23722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2314.632000][T23722] veth1_macvtap: left promiscuous mode [ 2314.637579][T23722] veth0_macvtap: left promiscuous mode [ 2314.643928][T23722] veth1_vlan: left promiscuous mode [ 2314.650910][T23722] veth0_vlan: left promiscuous mode [ 2314.767468][T23722] team0 (unregistering): Port device team_slave_1 removed [ 2314.783896][T23722] team0 (unregistering): Port device team_slave_0 removed [ 2314.831567][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2315.152858][T23722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.181625][ T5293] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2315.226698][T23722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.301375][T23722] bond0: (slave netdevsim1): Releasing backup interface [ 2315.312096][T23722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.344542][T23722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.431089][T23722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.473882][T23722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.514397][T23722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.531234][ T5293] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2315.555775][T23722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.663159][T23722] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.718080][T23722] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.773954][T23722] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.813555][T23722] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.840086][ T5293] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2316.172819][ T5293] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2316.235598][T23722] erspan0: left allmulticast mode [ 2316.243153][T23722] erspan0: left promiscuous mode [ 2316.251042][T23722] bridge0: port 1(erspan0) entered disabled state [ 2316.262275][T23722] bridge_slave_1: left allmulticast mode [ 2316.267955][T23722] bridge_slave_1: left promiscuous mode [ 2316.275838][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.288214][T23722] bridge_slave_0: left allmulticast mode [ 2316.294411][T23722] bridge_slave_0: left promiscuous mode [ 2316.301849][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.312588][T23722] erspan0: left allmulticast mode [ 2316.317667][T23722] erspan0: left promiscuous mode [ 2316.324288][T23722] bridge1: port 1(erspan0) entered disabled state [ 2316.335416][T23722] bridge_slave_1: left allmulticast mode [ 2316.341281][T23722] bridge_slave_1: left promiscuous mode [ 2316.347000][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.355461][T23722] bridge_slave_0: left allmulticast mode [ 2316.361436][T23722] bridge_slave_0: left promiscuous mode [ 2316.367156][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.376778][T23722] erspan0: left allmulticast mode [ 2316.384160][T23722] erspan0: left promiscuous mode [ 2316.392479][T23722] bridge1: port 1(erspan0) entered disabled state [ 2316.402764][T23722] vlan5: left allmulticast mode [ 2316.407667][T23722] vlan5: left promiscuous mode [ 2316.413826][T23722] bridge0: port 3(vlan5) entered disabled state [ 2316.422429][T23722] bridge_slave_1: left allmulticast mode [ 2316.428121][T23722] bridge_slave_1: left promiscuous mode [ 2316.434995][T23722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.443303][T23722] bridge_slave_0: left allmulticast mode [ 2316.449312][T23722] bridge_slave_0: left promiscuous mode [ 2316.455010][T23722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.465909][T23722] erspan0: left allmulticast mode [ 2316.471744][T23722] erspan0: left promiscuous mode [ 2316.476862][T23722] bridge3: port 1(erspan0) entered disabled state [ 2316.704136][T23722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2316.713983][T23722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2316.723800][T23722] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2316.733535][T23722] bond0 (unregistering): Released all slaves [ 2316.832188][T23722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2316.842821][T23722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2316.852757][T23722] bond0 (unregistering): Released all slaves [ 2316.963154][T23722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2316.973076][T23722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2316.983093][T23722] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2316.991930][T23722] bond0 (unregistering): Released all slaves [ 2317.073546][T23722] bond2 (unregistering): (slave geneve3): Releasing active interface [ 2317.086471][T23722] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2317.100386][T23722] batman_adv: batadv0: Removing interface: macvlan2 [ 2317.402193][T23722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2317.411784][T23722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2317.421424][T23722] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2317.429963][T23722] bond0 (unregistering): Released all slaves [ 2317.438943][T23722] bond1 (unregistering): Released all slaves [ 2317.448532][T23722] bond2 (unregistering): Released all slaves [ 2317.458046][T23722] bond3 (unregistering): Released all slaves [ 2317.468021][ T5293] 8021q: adding VLAN 0 to HW filter on device eth19 [ 2317.623267][T23722] tipc: Left network mode [ 2317.904341][ T5293] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2318.178404][ T5293] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2318.219680][T23722] hsr_slave_0: left promiscuous mode [ 2318.225350][T23722] hsr_slave_1: left promiscuous mode [ 2318.231362][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2318.238984][T23722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2318.246942][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2318.257552][T23722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.267804][T23722] hsr_slave_0: left promiscuous mode [ 2318.273619][T23722] hsr_slave_1: left promiscuous mode [ 2318.279490][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2318.286887][T23722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2318.294835][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2318.302463][T23722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.312539][T23722] hsr_slave_0: left promiscuous mode [ 2318.318211][T23722] hsr_slave_1: left promiscuous mode [ 2318.324044][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2318.331567][T23722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2318.339337][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2318.346728][T23722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.357284][T23722] hsr_slave_0: left promiscuous mode [ 2318.363129][T23722] hsr_slave_1: left promiscuous mode [ 2318.369002][T23722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2318.376508][T23722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2318.389772][T23722] veth1_macvtap: left promiscuous mode [ 2318.395255][T23722] veth0_macvtap: left promiscuous mode [ 2318.400859][T23722] veth1_vlan: left promiscuous mode [ 2318.406105][T23722] veth0_vlan: left promiscuous mode [ 2318.412403][T23722] veth1_macvtap: left promiscuous mode [ 2318.417921][T23722] veth0_macvtap: left promiscuous mode [ 2318.423531][T23722] veth1_vlan: left promiscuous mode [ 2318.428828][T23722] veth0_vlan: left promiscuous mode [ 2318.434723][T23722] veth1_macvtap: left promiscuous mode [ 2318.440666][T23722] veth0_macvtap: left promiscuous mode [ 2318.446178][T23722] veth1_vlan: left promiscuous mode [ 2318.451550][T23722] veth0_vlan: left promiscuous mode [ 2318.767757][T23722] team_slave_1 (unregistering): left promiscuous mode [ 2318.775596][T23722] team0 (unregistering): Port device team_slave_1 removed [ 2318.789758][T23722] team_slave_0 (unregistering): left promiscuous mode [ 2318.797112][T23722] team0 (unregistering): Port device team_slave_0 removed [ 2318.901807][T23722] team_slave_1 (unregistering): left promiscuous mode [ 2318.909144][T23722] team0 (unregistering): Port device team_slave_1 removed [ 2318.919684][T23722] team_slave_0 (unregistering): left promiscuous mode [ 2318.926947][T23722] team0 (unregistering): Port device team_slave_0 removed [ 2319.365381][ T5293] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2319.786385][ T5293] 8021q: adding VLAN 0 to HW filter on device eth23 [ 2320.075780][ T5293] 8021q: adding VLAN 0 to HW filter on device eth24 [ 2320.135616][T23722] IPVS: stop unused estimator thread 0... [ 2320.142282][T23722] IPVS: stop unused estimator thread 0... [ 2320.354199][ T5293] 8021q: adding VLAN 0 to HW filter on device eth25 [ 2320.598124][ T5293] 8021q: adding VLAN 0 to HW filter on device eth26