last executing test programs: 18m36.124441368s ago: executing program 4 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a4000000670000002000000095d56aa76300000000004000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 18m35.903697689s ago: executing program 4 (id=1259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6a7", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44ef", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dba", 0x4}], 0x1}, 0x4000}], 0x2, 0x0) 18m35.711553287s ago: executing program 4 (id=1261): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x4000000000000, 0x8000}, 0x0) 18m35.519489887s ago: executing program 4 (id=1263): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000540)='lm', 0x2, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x44080, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="c9", 0x1, 0x44065, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a0000000840000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 18m34.556251623s ago: executing program 4 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a4000000670000002000000095d56aa76300000000000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 18m34.437994121s ago: executing program 4 (id=1272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(0x0, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="180000006a00010028bd7000fd2b16250000000000000000c9"], 0x18}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x10000a, 0x0, 0x80000}, 0x20) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r4, 0x30}) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000041408002abd7000ffdbdf25080001000000000008000100010022000800010001000000080001000200000008000100020000000800010001000000080001000100000008000100000000000cd914dfb6ee9ef0cdb98e60dc08b92ad85ac7d0029644cff9546ad57579719eee809a3480a9695b"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20008800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000840)={&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="891de09c46b692b7a6ab90a7ccf6e2900082bbe527346d999676172bcd00378c8690e1df840ad12dbbfce73bdd52074a0afcf4ef662a7ffdad05a2014d77dd302d9958b81113824c24ac2b9aa72487daa8474ce3a534044503aa4f3554aa53d6e19026a46ae38a559971cc65521ed73928400230ddf457be726ad40f27c21076a69da0fdb8770cd25462702c808d86edc0898336175e88e64c4686ded9897fe96e9b02c8d931e4d26f3134585de36f637bc1447b66cd3d4b82ca", 0xba}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f0000000980)=[{0x4400, 0x1e, 0x0, 0x9}]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x34, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x400000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f00000008c0)=0x1) 18m33.697963001s ago: executing program 32 (id=1272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(0x0, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="180000006a00010028bd7000fd2b16250000000000000000c9"], 0x18}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004800) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x10000a, 0x0, 0x80000}, 0x20) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r4, 0x30}) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000041408002abd7000ffdbdf25080001000000000008000100010022000800010001000000080001000200000008000100020000000800010001000000080001000100000008000100000000000cd914dfb6ee9ef0cdb98e60dc08b92ad85ac7d0029644cff9546ad57579719eee809a3480a9695b"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20008800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000840)={&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="891de09c46b692b7a6ab90a7ccf6e2900082bbe527346d999676172bcd00378c8690e1df840ad12dbbfce73bdd52074a0afcf4ef662a7ffdad05a2014d77dd302d9958b81113824c24ac2b9aa72487daa8474ce3a534044503aa4f3554aa53d6e19026a46ae38a559971cc65521ed73928400230ddf457be726ad40f27c21076a69da0fdb8770cd25462702c808d86edc0898336175e88e64c4686ded9897fe96e9b02c8d931e4d26f3134585de36f637bc1447b66cd3d4b82ca", 0xba}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f0000000980)=[{0x4400, 0x1e, 0x0, 0x9}]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x34, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x400000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f00000008c0)=0x1) 14m33.563789698s ago: executing program 5 (id=2248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6a7", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44ef", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dba", 0x4}], 0x1}}], 0x2, 0x300000000000000) 14m33.146651099s ago: executing program 5 (id=2251): r0 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x208, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x7b3cff8cb4c3b1bc}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffff8001}]}}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x53}]}}}]}]}, @NFT_MSG_NEWCHAIN={0xb4, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6659d6bf}]}, @NFTA_CHAIN_USERDATA={0x5a, 0xc, "bd7dc8fa1edab245402de5177172f8924f8b2644b6d68f9371134fb99ce5ad26b4a38dc2170530c1f386b4818d7a0ab771e5057821cf360a8c1eedd0f5c61fc3cb5ce3efbfbb3b83b66e37960ca8e8eb4eb3b8421dce"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x88, 0x16, 0xa, 0x804, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async) getsockopt$inet6_udp_int(r0, 0x11, 0x60, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r0, &(0x7f0000000680)="409e88ee640d5fa13f2b9f904ff48423c9b28941b0d6128d226784491b9b4556236981", &(0x7f00000006c0)=@tcp6=r0, 0x1}, 0x20) (async) r2 = socket$inet(0x2, 0x100001, 0x81) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x9, 0x4, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x1, 0x10}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xb6, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x6, 0xd08, {{0x31, 0x4, 0x1, 0x13, 0xc4, 0x68, 0x0, 0xfe, 0x4, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0xe, [{@empty, 0x8}]}, @noop, @lsrr={0x83, 0x1f, 0x87, [@multicast2, @multicast1, @multicast1, @loopback, @loopback, @multicast2, @multicast2]}, @generic={0x82, 0xe, "0e092b9c5bcc19d2f6e44fcb"}, @ssrr={0x89, 0x23, 0x68, [@private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @broadcast, @rand_addr=0x64010101, @multicast2, @broadcast]}, @cipso={0x86, 0x36, 0x3, [{0x1, 0x2}, {0x7, 0x9, "c7b6806fb9badc"}, {0x5, 0xb, "0cbcc482eec88e4121"}, {0x6, 0xe, "e951d9c6cfb0bc9bd272809b"}, {0x1, 0xc, "8082fbcea75dc90b258e"}]}, @timestamp={0x44, 0x1c, 0x1c, 0x0, 0x3, [0x3, 0x401, 0x9f, 0x1, 0xfffffff9, 0x10]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000f80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x23c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "e37586c6448b20e1277a6b1e242fe981d3339eeec96af73462679fba3d692360396fbaa4f9440f6ff7c5cffdaa0de19dd8cb0194c75937dddf1f038fa3e6ed04db209d1538332581e6b0e350b6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x2b, 0x3, "644cb1f0dd4f0090862d66d650110a46bb60d13edea524b321f896275acd2a6fcf412e6f7eb483"}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_SOPASS={0xa4, 0x3, "ef7e46c6fc10d02eaa2805d46b88cf4b262a4560cad2e387b129a416e2e25465b893338fc79e6ea86002bf7d156b95b32560e7e9d7268ca473a4095125bf381006fdd74e2ea495b173dbece52eda687c97bcea9a95e8a058f1bb087c61787e81828fe44349f77f15dd1a0c6a7b997c9375f71ad1e6836f29926be959470a47bbc2c3c50c7eee0dac4b0eb2d1a01800f305ff28ec3479b2e1c9ad9b6297c34068"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0x32, 0x3, "fa2fcc1647e903d725ca8c5e29aca975e54052d1cae5f915d9212a453d0af6f3b38861b84a108492abeb1ff87caf"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) (async) close(r3) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'ip6_vti0\x00', r7, 0x4, 0x4, 0x7, 0xfffffffa, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x40, 0x9, 0xfffffffd}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'ip6tnl0\x00', r6, 0x29, 0xd3, 0x0, 0xeed3, 0xe, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xebd9, 0x40}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000001440)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x170, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1b84e2e891731fcb}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001480)={0xc56, 0x2, 0x5, 0x5}, 0x8) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r8) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001540)={0x354, r11, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f54c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30f8000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3623}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb2}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1478}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "26824385c8cc3650c544af6ba846b7c974c9d4b07b5ad8d5b9bd5bd4d631f6fb125985"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ID={0xa, 0x3, "aad04ee2d0d2"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x804}, 0x1) (async) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000001940)={0x100000001, 0x8, 0x0, 0x8, 0x4, 0x0, [{0x101, 0x80000001, 0x0, '\x00', 0x40f}, {0x8, 0x101, 0x71f8ec3c, '\x00', 0x200}, {0x9, 0xfffffffffffffff9, 0x7f, '\x00', 0x1008}, {0xff, 0x9, 0x2d2, '\x00', 0x2301}]}) r12 = syz_open_dev$audion(&(0x7f0000001a40), 0x40, 0x101000) (async) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), r8) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r12, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, r13, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4080d16aeed7bc1d) setsockopt$IP_VS_SO_SET_DELDEST(r12, 0x0, 0x488, &(0x7f0000001c00)={{0x21, @multicast1, 0x4e24, 0x1, 'sh\x00', 0x0, 0x5, 0x4e}, {@remote, 0x4e20, 0x2000, 0xffffffff, 0x9, 0x8}}, 0x44) (async) sendmsg$xdp(r0, &(0x7f0000001e00)={&(0x7f0000001c80)={0x2c, 0xb, r7, 0x2d}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="59f4587f7dd2820447d1f372645d6d9538cde10e4e92ab7c323b1a1481ea58b0a76cac13fd8d110e8c19c14760580e892b806c97160007560c3b6523a8d5fd3dcc442df0242f423cf66311f81efe6b228fd43b157766416fab89b294944c38fc24d12e7ced9d16377191e3d8e89ecbc03a5225f65e112954aa19e16612b4a1338286a200a18b845f85faa93027aaa3e818c77fb1c076d0eb7331fb742767d096328f4169a5a86e4bc48006c3e3482349907cddb19819f4f41eda544e079a4ccf4f96bf2c55da016a811c62f63e9179f846b2e633298a56f4b6b97aa80cdd10", 0xdf}], 0x1, 0x0, 0x0, 0x10}, 0x4000801) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0x148, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x4}, @NFQA_EXP={0xe0, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2063}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xe1af}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000080}, 0x240088d4) 14m32.772122333s ago: executing program 5 (id=2254): prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@nat={'nat\x00', 0x19, 0x4, 0x136, [0x200000000740, 0x0, 0x0, 0x200000000770, 0x200000000a44], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x1ae) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x1a, 0x28, 0x30, 0x8, 0x499, 0x13b3, 0xf0d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x1, 0x1, 0xff, 0x86, 0x94, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}]}}]}}]}}, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x1231, 0x2, 0x0, 0x1, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x2}, {0x3, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x8, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}], 0x8}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x9586730c31f01255) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0xf49a6c9507e3d698, 0x2, 0x10000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x2, &(0x7f00000002c0)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x80001, 0x28) bind$isdn(r8, &(0x7f0000000240)={0x22, 0x6, 0x0, 0xe, 0x8}, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xfffa, 0xfd, 0xa, 0xa52}, {0x3, 0x6c, 0x56, 0x4}, {0xd, 0xab, 0x8, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000180)) 14m31.063282701s ago: executing program 5 (id=2264): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x6c, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x36, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x1, 0x10, 0x0, [@private1, @empty, @remote, @private2, @local]}], {0x2100, 0x0, 0x2e, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea4"}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180), 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000080)={0x0, 0x0, r0}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 14m29.32395013s ago: executing program 5 (id=2271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r1, 0xfffff000, &(0x7f0000000000)) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000040)={0x980902, 0x0, @name="a13c67a9121fb71a1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"}) (async) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {0x6c}], 0x0, 0x0, 0x16, 0x1, 0x1}}) 14m27.367768617s ago: executing program 5 (id=2275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000019e0000001000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x40044) 14m26.313141921s ago: executing program 33 (id=2275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000019e0000001000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000080ff000000000400000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000000100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000fe8000000000000000000000000000bb000004d43c00000002000000fc0000000000000000000000000000010000000001"], 0x23c}}, 0x40044) 10m19.135756248s ago: executing program 2 (id=3318): unshare(0x20000400) r0 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f00000000c0), 0x0, 0x3) 10m18.808236399s ago: executing program 2 (id=3321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) (async) clock_settime(0x17, &(0x7f0000000240)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x80, 0x6, 0x10000007, {{0x32, 0x4, 0x1, 0x2, 0xc8, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x8, 0xbd, 0x0, 0xf, [0x5]}, @generic={0x7, 0xc, "4d2f890ca26865793268"}, @rr={0x7, 0xb, 0x6d, [@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xfffffffffffffe30, 0x2, [{0x2, 0x8, "829672e648a6"}]}, @cipso={0x86, 0x3e, 0x1, [{0x6, 0x2}, {0x6, 0x12, "d3c8027d486edec9f9dd0582c4a27068"}, {0x1, 0x9, "10dd9adf12f289"}, {0x5, 0x6, "e3b3b6b1"}, {0x7, 0x4, "221c"}, {0x2, 0x11, "74a02e03dbcf248e3447918905429e"}]}, @timestamp={0x44, 0x8, 0xf, 0x0, 0x0, [0x1]}, @rr={0x7, 0xb, 0x4b, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x5}, {@empty, 0x100}, {@remote, 0x9}, {@private=0xa010102, 0x9}, {@local, 0x7}]}]}}}}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0xfffffffffffffffe, 0x7, 0x5, 0x8}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) poll(0x0, 0x0, 0x9) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) (async) prlimit64(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8800) (async) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0xe503, 0x0) 10m18.540856371s ago: executing program 2 (id=3323): r0 = syz_open_dev$evdev(0x0, 0x2, 0x860b81) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 10m17.94726455s ago: executing program 2 (id=3325): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() sync() getrusage(0xffffffffffffffff, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) futex(&(0x7f0000000000)=0x2, 0x5, 0x1000, 0x0, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5048b, 0x21401}, [@IFLA_MAP={0x24, 0xe, {0x400, 0x7fff, 0x6, 0x4, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 10m17.599891989s ago: executing program 2 (id=3327): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x20000054) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd700005dbdf2501000000000000000841000000140018000000087564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) socket(0x10, 0x803, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2}) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0x3b19, 0x100, 0x1, 0x40000333}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x2000000, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000002c0)="460f005dcbc7442400e4000000c744240208000000c7442406000000000f0114240f06c744240063000000c744240200000000ff2c24f2420f3048b800000000000000000f23d80f21f835400000500f23f8f67159362e650f01c8b91c090000b800100000ba000000000f3064420f8dcdf09d10", 0x74}], 0x1, 0x1, &(0x7f00000001c0), 0x0) 10m17.323191388s ago: executing program 2 (id=3329): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007cc0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20840, 0x191) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) 10m16.908714187s ago: executing program 34 (id=3329): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007cc0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20840, 0x191) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) 4m55.171522516s ago: executing program 7 (id=4691): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x1, 0x7, 0x80000001, 0x37f, 0xfffffffffffffe00, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x2, 0x0, 0x0, r7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r9 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x10000000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) tkill(r10, 0x1f) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, 0x8, r0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket(0x1, 0x5, 0xfffffffd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x6c}}, 0x8001002) 4m52.798470629s ago: executing program 7 (id=4697): r0 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x55, '\x00', r4, @fallback=0x2f, r3}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 4m51.995824377s ago: executing program 7 (id=4700): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0xfffffffe}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x48, 0x40400) fchmod(r1, 0x129) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182f973a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_io_uring_setup(0x7998, 0x0, &(0x7f0000000240), 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x80000) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f00000001c0)=""/35) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4m51.69108043s ago: executing program 7 (id=4705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x3) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f000089b000/0x1000)=nil, 0x1000, 0x0, 0x28011, r3, 0x0) ftruncate(r3, 0x5) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 4m50.38976467s ago: executing program 7 (id=4710): r0 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x55, '\x00', r4, @fallback=0x2f, r3}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 4m49.489440722s ago: executing program 7 (id=4713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m48.699375911s ago: executing program 35 (id=4713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m43.808850468s ago: executing program 0 (id=5196): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r0) write$tun(r0, &(0x7f0000000540)={@void, @void, @x25={0x0, 0x2, 0x0, "5d6db8b404af7f38023e62221a6d53a904b242997fdf68b70d0f1dec18f223391f820bee884867ddfabd76737d0b8d91cd4b9b89382d38648b524e6397becf38acd132fb7d88b2599da4a5facf27c4302f795a3d7122c3c68b0afa8bb58776be65871dec86ad55b3f3ee0ffae954dd37a4"}}, 0x74) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, r0, 0x19, 0x4008, 0x0, @void, @value=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x5) read$dsp(r1, &(0x7f0000001300)=""/4096, 0x1000) (fail_nth: 3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r2, &(0x7f0000000200)={@void, @val={0x0, 0x83, 0x5, 0xe057, 0x0, 0x9}, @x25={0x3, 0x3, 0x536f5bfc9339548f}}, 0xd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 2m42.693893395s ago: executing program 0 (id=5199): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f500000000000000000000020000000000000000ffffffff00008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2m42.375340138s ago: executing program 0 (id=5204): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cbe53e", 0x8, 0x3a, 0xff, @dev, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x2, 0x3}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235000100000f303e440f01f5c4a1f9d1d1c4a1e5740cce360f01c466ba4100ec66baf80cb81475b58aef66bafc0ced45dbd30f09dfdd", 0x3d}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7fff, 0x259}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x627, 0xc104effd, 0x43, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfc, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x4, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.465556914s ago: executing program 0 (id=5209): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000a00000084000000080000002001"], 0x38, 0x4855}, 0x24000052) 2m41.084372462s ago: executing program 0 (id=5211): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r8, 0xa3d2, 0x0) 2m37.479625854s ago: executing program 0 (id=5230): r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000000)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2G\x85h\x8a\x05\xd9\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\x81\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xffff, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x9e, "7075b4b331c14455b3869018c12d9ab0473c2e214f138f0ead3d9b78c78be486b49d39e16a32fc027e1e954c6feaf9bcb14157af58dd9d6d6badf3b022efd4d45a7ccbbe1a3d5c90fa0a4c7b0d6bfbcaeac7f12c6963c19e7aaa2a2fdd910d185c71fa6883eed7da06daa56b403e8fb9fe15bfd8f91f67910d95b6fd89750b55ca33b2f8aaf030653b9a71bdefe2ed1e740a01323b4b866f0420e0dd295c"}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x3, 0x7, 0x2, 0x4, 0x0}) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) mq_notify(r5, &(0x7f0000000100)={0x0, 0x17}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r6) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0xe, 0x80000000, 0x1, 0x2, 0x7, r4}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) 2m22.199800226s ago: executing program 36 (id=5230): r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000000)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2G\x85h\x8a\x05\xd9\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\x81\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xffff, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x9e, "7075b4b331c14455b3869018c12d9ab0473c2e214f138f0ead3d9b78c78be486b49d39e16a32fc027e1e954c6feaf9bcb14157af58dd9d6d6badf3b022efd4d45a7ccbbe1a3d5c90fa0a4c7b0d6bfbcaeac7f12c6963c19e7aaa2a2fdd910d185c71fa6883eed7da06daa56b403e8fb9fe15bfd8f91f67910d95b6fd89750b55ca33b2f8aaf030653b9a71bdefe2ed1e740a01323b4b866f0420e0dd295c"}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x3, 0x7, 0x2, 0x4, 0x0}) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) mq_notify(r5, &(0x7f0000000100)={0x0, 0x17}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r6) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0xe, 0x80000000, 0x1, 0x2, 0x7, r4}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) 8.928944589s ago: executing program 6 (id=5567): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x4005) syz_io_uring_setup(0x10f, &(0x7f0000000280)={0x0, 0x211d, 0x400, 0x40205, 0x11e}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 8.164167497s ago: executing program 8 (id=5571): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) (async) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) (async) shutdown(r2, 0x1) (async) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, 0x0, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x12) (async) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) r4 = io_uring_setup(0x67bb, &(0x7f00000025c0)={0x0, 0x1999, 0x80, 0x1, 0x6e}) close(r4) (async) landlock_restrict_self(r3, 0xe) 7.932360428s ago: executing program 8 (id=5574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0xff40) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000180)=0x5, 0x4) write$ppp(r2, &(0x7f0000000140)="bc72d975fc9e12cb3121750e4ded6bd28544660b8cc1297d5f51636b2b6e663c8bd9", 0x22) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1}}, {{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000000480)=""/242, 0xf2}], 0x3, &(0x7f00000005c0)=""/9, 0x9}, 0xfffff061}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000740)=""/146, 0x92}], 0x3, &(0x7f0000000880)=""/102, 0x66}, 0xffff}, {{&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/25, 0x19}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/130, 0x82}], 0x3, &(0x7f0000000b40)=""/167, 0xa7}, 0x3}, {{&(0x7f0000000c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/101, 0x65}, {&(0x7f0000000d00)=""/116, 0x74}, {&(0x7f0000000d80)=""/191, 0xbf}], 0x3, &(0x7f0000000e80)=""/66, 0x42}, 0x4}], 0x5, 0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x0, 0x2, 0x3, "8c8ee811ddd396f06db560b6396e471eeee6f7c1e1dc7c61b76dd45128573ea3", 0x20363159}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x4, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000b) 6.537730618s ago: executing program 8 (id=5579): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='id_resolver\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) recvmmsg(r5, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x3}, 0x80000000}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f0000000700)=""/161, 0xa1}], 0x5, &(0x7f00000005c0)=""/35, 0x23}, 0x19c00000}, {{&(0x7f0000000840)=@ax25={{0x3, @null}, [@default, @null, @remote, @default, @null, @remote, @null, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000008c0)}], 0x2, &(0x7f0000000940)=""/107, 0x6b}, 0x7}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a40)=""/148, 0x94}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/127, 0x7f}, {&(0x7f0000000d00)=""/233, 0xe9}], 0x6, &(0x7f0000000e80)=""/3, 0x3}, 0x3}, {{&(0x7f0000000ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/132, 0x84}], 0x1, &(0x7f0000001040)=""/22, 0x16}, 0xfe6}, {{&(0x7f0000001080)=@qipcrtr, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/197, 0xc5}, {&(0x7f0000001280)=""/149, 0x95}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000001540)=""/56, 0x38}, {&(0x7f0000001580)=""/36, 0x24}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/93, 0x5d}, {&(0x7f0000003900)=""/4096, 0x1000}], 0xa, &(0x7f0000004900)=""/100, 0x64}, 0x7}, {{&(0x7f0000006840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005140)=[{&(0x7f00000017c0)=""/50, 0x32}, {&(0x7f0000004a00)=""/233, 0xe9}, {&(0x7f0000004b00)=""/153, 0x99}, {&(0x7f0000004bc0)=""/233, 0xe9}, {&(0x7f0000004cc0)=""/229, 0xe5}, {&(0x7f0000004dc0)=""/159, 0x9f}, {&(0x7f0000004e80)=""/199, 0xc7}, {&(0x7f0000004f80)=""/150, 0x96}, {&(0x7f0000005040)=""/186, 0xba}, {&(0x7f0000005100)}], 0xa}, 0x6}, {{&(0x7f0000005200)=@x25, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005280)=""/35, 0x23}], 0x1, &(0x7f0000005300)=""/98, 0x62}, 0xb}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000055c0)=""/4085, 0xff5}, 0x5}], 0x9, 0x100, &(0x7f0000006800)={0x0, 0x989680}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 5.933754605s ago: executing program 8 (id=5580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = dup(r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x5e, @local, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="a1e8e7cd0f1020d2", 0x8}, {&(0x7f00000002c0)="ba9d927d1792398c0c99f2284b0ddf6b8d4daa2edd8443c209e0948cefc78a89aeb177", 0x23}, {&(0x7f0000000300)="415a936e4e7336acd06f", 0xa}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000340)="28564bbadd04c91d1431f1fdf5826aa28ffd56677c0b918c276abc6cbbaa42fa0abf5355c93d95c0de8908a2df1eaf77fbac20a8edd407f4916afba4c0ce17ee5f8ef43deb26b50da708235f32b72e4208d1d3db9223daf1968d7fd3180a4f183283e9f7c250b0147acb891e8a3ce13596c4030a681e7482d606fe", 0x7b}], 0x5, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x800}}], 0x18}}], 0x1, 0x4048080) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) 5.699735711s ago: executing program 6 (id=5582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x44000160) r7 = dup(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_rm_watch(r7, r6) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000280)) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r10, 0x0, 0x80000000, &(0x7f0000001c00)) fcntl$setown(r9, 0x8, r10) 4.661222914s ago: executing program 1 (id=5586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000004c010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) 4.583047879s ago: executing program 8 (id=5587): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x45e41cac}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x4004811) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="047380f3e5d97a72fc6a5ea22e0fb8d2a99f61c18775da9c1bc76f35a59cb9b812c29ede2df3223336155a839ee74c3cc8b87e30c1ce22e1c9b662b9e34995184aec2a4519fdbe08340ee3bc57a2f7ac17ca", 0x52, 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) ioctl$TCGETA(r0, 0x5405, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d4, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_IE={0x135, 0x2a, [@mic={0x8c, 0x10, {0x3e7, "aac4b108c082", @short="91a8412dc587679e"}}, @fast_bss_trans={0x37, 0xdf, {0x9, 0x6, "945e761e83625bd3eef7baf2ac8f6602", "c43eb39393ed8ca3c9d76c0af5b4d2a67c597ac6a22718503e60a8af1eee08a9", "43f74a0a82a7255dfa64d31ff2dbb7d8670343f7f821a978e93f81ba278dd3ed", [{0x4, 0x2, "3ffd"}, {0x2, 0x9, "acd899d5247a46b2bb"}, {0x3, 0x23, "6b56609a08719834f0dfba4c6195acdce8e121ad6b2ad3ff662daf8e0a485a1f9029fd"}, {0x1, 0x15, "a6b3ef036418f010edb6fa73aea2ef2b0f3e09bb83"}, {0x1, 0x18, "a12a4a38d0208ce2e6f49ece915c1a6e54560e9e4e9567ac"}, {0x3, 0x26, "f3c3413583571f465807a79fb7f132625014778d010b8170f964491dd4113d54e96ea043f31f"}]}}, @peer_mgmt={0x75, 0x18, {0x1, 0xe, @val=0x7, @val=0x30, @val="d02fa131dcd21b2f8de511d3f8508af6"}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @prep={0x83, 0x1f, {{}, 0x4, 0x7f, @device_b, 0x8000, @void, 0x8, 0x9, @device_b, 0x9}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xab2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x57}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5a}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x7, 0x3, 0x12, 0x3}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="915f46ce06eb", @device_a, @device_b}}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x9, 0xb}}, @dsss={0x3, 0x1, 0x84}, @ibss={0x6, 0x2, 0x5}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @challenge={0x10, 0x1, 0x66}, @cf={0x4, 0x6, {0x8, 0x1, 0xab4, 0x2}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000640)={0xd, 0x7}) syz_usb_connect$uac1(0x1, 0xb1, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x9a, 0x60, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x4, 0x0, 0x8, 0x9, 0xe7}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x3, 0x5, 0x6, 0x0, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x3, 0x94b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9, '1AR'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xbdf5, 0x5, 0x6, "9bd8ccce5815de"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x48, 0x2, 0x2, 0x1a, "ef3b49", "0f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf7, 0x6, 0x97, {0x7, 0x25, 0x1, 0x80, 0x1, 0x3}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x7, 0x9, 0xab, 0x20, 0x6}, 0x70, &(0x7f0000000780)={0x5, 0xf, 0x70, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa2, 0x8, 0x2, 0x9}, @generic={0x4f, 0x10, 0x3, "f1ccdb5098f93183248fcfd009a68abb16791682dbde704d3e5badf1ef348fd39a54fa403c9aa068e0725fd16fe6d013eef56fd686ac8d41372469c6ae6381eb5ab9a5d102c999daf9c658f6"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x9, 0x4}]}, 0x6, [{0x2a, &(0x7f0000000800)=@string={0x2a, 0x3, "dfec0b423baddeddf698ebdb85afccb6068cc4f1173dc31176f7bd98854f09e365d873dfa34d9e4a"}}, {0x64, &(0x7f0000000840)=@string={0x64, 0x3, "a5f0959cd0091369715fc0cc0d0a08d033bf1ea5efb1352b306040f77f4e0f7c456ff51478a14626377b8ed1be77f40fa90c4d1bd0157075933f36ca4768d4d466d17c46ebe0750fe1db6b4d6bc72344bfa5e09a628a9a0fdc4f991019bcf0dfcb86"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x445}}, {0x4b, &(0x7f0000000940)=@string={0x4b, 0x3, "abbba38ca5baba866f8ca0a6192b46d622205080feb85f9468f6acfe8e462eca86f5b7f9014d2bf675a59b119d5541c825904c0cad0243d9dc7d772010c2baecf1cc5d930e4016c36a"}}, {0xe9, &(0x7f00000009c0)=@string={0xe9, 0x3, "44c90c662413b1a528f2acedc3423f22ca070f398b2f8cbb69badd12b6cb63588bab1e3156d49c9ab1dabc6eedbe84b767e0ce291af395f86efc71a83810070e7db3abfdd5950f6b9c60788f3affdf584c54e0f76be2df37ca759fb997349d5bbbb51030ba882769b960dc96fb42c573b80d0582ab367103c76aca1a487a3a1f15b63027c582a1e9c05ff5b66613262dcd95efacc25b6325b4238cf734cb0cb731d0637d06232d1786666bf8a09a4436692f0008f8f72c26c0268a145291e5e9816d2ba03d5027d342b76bbec8343f8f5dde65bef5271c250013ac7b6fc9a98c30c78eaa2c7717"}}]}) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000c80)={0x35, 0x16, 0x8, 0x11, 0x3, 0xaa2, 0x0, 0x114, 0x1}) add_key$user(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, &(0x7f0000000d40)="bf2ccdc2e68031960004ffccd6d6bf15b232548e577ee5ba071cdfb42b7da8a14f1e2fa7b592e40109623af2369d3d4010b3e3670a0dfed3929c9a110ba4c945330409f8904d7f739eb4884f6dcb2a19443b5466725bd1e18c04c7151e42786a68919581f1fff3a7ef5ff109673d459924fcd3640ec6253fef733469b9ac5609c1f4b00d9a075fdc451c72517d09912eef0bec4978a0e5db9b3c4d4451e8e3a68e6044722f1d0054a7188a7137012bdc3fe0e4865b3d8cc4831b934a3750c33ff9bd731c0dadfb572af6de9293353895c4eca9000a1199908db9e993f2f3ccf8f00e90e6e0041de785f7385972f8e7b3bd0abbe23285e79b", 0xf8, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000e40)={0x0, 0x0}) getpriority(0x0, r5) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000f00)=0x5) keyctl$instantiate(0xc, r2, 0x0, 0x0, r1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001000)={{{0xc, 0x1}}, 0xbd, 0xe5, &(0x7f0000000f40)="a607e537009e3d0ad72ab2bfe27deef6ed8bda2206a0f3ae50ecb91cfc2d9982f5e9693b1ffa86e5cca6fd1d80f091b937a7c313853cf489824ea8612d0b2b4234e26ed5404a9b39889042abe54c757e391f64d169bd8a25af3d4248b8f1a4ba582ea28e873b247b529e2920a4129483322c30d57a33945eb3f4bbec037537c1bf72ef971f11478f59d3e4355524027971d3e0e3bde8fb8761ef5fb9565bfa75174cf63635740860fa468784cc370acb6c94f2d1bd832c14d39fd08cd1"}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000001040)=0xeeee8000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x4) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000001180)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000011c0)={0x0, 0x0, @pic={0x6, 0x5, 0x5e, 0x9, 0x1, 0x9, 0x2, 0x5, 0x8, 0x5d, 0xff, 0x2, 0xff, 0x2, 0x8, 0xd}}) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{&(0x7f0000001400)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x8e}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000001440)="98a0d3727ad8e67f33d05576e708879d05357af8f2c84353f8cceee95ee7b77462694bd63936e643fc9a4acf85f04dcb4aec40d9b448364080b756b56cb438c4b1094edf6af28734aea55b9358d534222b30c898d6a39eb3be294f99b8311d7ce12233572c85b331fd622895b81182bfe08fb9a09733e118621df656aba7e465c4cd0478d4f951facc4f940369520222893504b9ce7b77ff0d0dfdf3b55b4d7e3edd1c3eb44445f32b658bee4c239ea05611ebd2247f7100", 0xb8}, {&(0x7f0000001500)="e201c356f867e62261b563e199623f45f83191c7c8ce7011177cc612c32f4dff86a8b266f49f419fb427a2dc076f53c64d4d1d2a11ca57b6e25cd7daf6f48688d74aa2922459e553e7bec3f5f5b341e9af90a8f19f252c93a430fe05fb53d2a0e148f5fc9855758e8a363f7c880b3544307a3dcdb2d7f369f62fecd042d15820b17e73b1e85adb28aec140c654e9f47fd6c5218926fb7fbd2702853f9fbfbde569c96939d37365067397765dbf35ed686507fb561576dc8f8ceafe057c409ca2fa", 0xc1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)}, {&(0x7f0000002640)="19b8b83b306e4f282d23fde706bb9a2df7a15539b5f1224a62e494df09d8568abdbd822970656a2d2645a59c74acd7e33624144ba526b55abb5e152c4f312d1add146be7745287989a09cf45a0be5e4733b152f08dcfadfd99107dbae02ef6663d908fc2b4b4b8", 0x67}], 0x5, &(0x7f0000002740)=[@flowinfo={{0x14, 0x29, 0xb, 0x20000000}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x48}}, {{&(0x7f00000027c0)={0xa, 0x4e21, 0x864, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000002800)="3ca4daf1de42ff94699f1eefc03eb377b9e6c75986b3d3f7ca55f57736bda716c93b75e58ca66363874533db0d3eb84ced6cf126eaec6e3de353cc7d9d4137d452fb0a92d228f938ac95d941271128073c207807e18407260afaca6b791b49235a3d0ea83c63bf01e0f0ca490b70730a10b82109d558d0f811f9629048632f57e10c4e19e238f955bcd7ee97e87cd1c49f7945a65c5f23ec955df53da1277d8317657c91ac9cdbaf39ee010ea437c68e8411962bb41d612ad7aad2e716eb99b6362fd0d3c26d2718ec090222a13b456e4ba04ef9d3677f255a9b6fbee4149f4e0694383ead5d97978e6a922cf7c947e2be4e5bc206baa1c7", 0xf8}, {&(0x7f0000002900)="56e2619d26c9bfb9dfd02b6986f69f1eb6aa3315ebf6e516ab7d8dfa6e0141f369e7af3d8a198897a9714051a4e93f6a86024cfabf42b271436077db3ae32245352352baaccca4cd249ac462aeb195f32ec05b610f51e396541b4554387e174cceaf0e64f51c4b1dbfb31cba53846b70690c5c190c5181a41e5882cf7664adb83b2a0c1a3900b05e9074d6adf5054e7d92b78a8f34d0134d412b779a9979afb63e45caaaaac3b472e9ec6af6acad3eb1ecbb9e225e81caadd8bb60d60965e50f3d3d0b517e46c041047add4a8427bfb18d8144e33a0c6fe5", 0xd8}, {&(0x7f0000002a00)="cf0cadcc13db792bf902f075", 0xc}], 0x3, &(0x7f0000002b00)=[@flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x33, 0x8, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x5, [0x9, 0x5e, 0x100, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x2, 0x0, 0x0, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast2, @mcast1, @mcast1]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x67}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0xb, 0x7, [0x8, 0x3, 0x480000000000000, 0x8, 0x0, 0x120]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x1e0}}, {{&(0x7f0000002d00)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="ad199602cb7453034ab0bcc3dd8abd703c8c0d42dbc8000797c62d17f14301e6213c87b5a7d0cff3273a5ea09c7f86738b3ebc9bd60b7d5e6b2810dee5ff6ecddd8903e81412", 0x46}, {&(0x7f0000003dc0)="705ef0c67e4e71957debbeae6ec1b5990ddbd2d43ac6053ba93bad6f2498bc406dfcc92e38ca6c50d37dd515c0c38c03be6edd58e07afdb0ac5239d6caa3b723d09bcfda86be1b9ba73bd20623c85c56ec0047dae7afeb67d6de1859bd958bbab2207f5d413146efe4565e596add43e0b5b36dbf46f999b70425", 0x7a}], 0x3, &(0x7f0000003e80)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x1d8, 0x29, 0x36, {0x0, 0x37, '\x00', [@generic={0x3, 0x90, "b53629d3d43afac2756e68039aee36526da1e0b6a500479dc7f1f1c6c3e958774528dafc584928c5dc7db513b78396ce3c743ce4e7b6caf7d17f7218d217b1e66dc4f613ff33c5b35ff8ad9124335ddac09a432c02d8cec7f2024a6588f844eb114ae8aadbb8c40a84faf4dd6b135569bcb48e2b1bfc19de6426fe4b043d8a813f4b87c7084e7126cef2df4d0920430c"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x200, [0x39]}}, @generic={0x3, 0xaa, "58e53e7346e848d9c696bafa13bc0a7477fc9c246f1dc1f2d2a35fa65117d9fb41e448ffb41884cbbe6c70af1fd272080f0df0be8aae090afbf5492ab718cbd927498b41ea8683b2859c9cf02f9d396c503ee771fda96f04859245f8a4221b9a996816e2623d1292defa7fbbc35ca35d7959411d4de8586fe3be6d5d2310b753307b4e8eac404cd06bdbdb7780dd1c8c1b3fe545613867976ce3bb7e14dd53d2a59900d154b38a0c5349"}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x6, 0x57, "d1f9da60939c56727b276a376a103cee9a470a75afacb9f94b76dc4892ae9562aa327466f2739e07883a3e03291185798afe3411cda84d10b70a3a95a3048030eadb1acff3415d4422f216fb9a1172698cd9146e5d10ed"}, @hao={0xc9, 0x10, @private1}]}}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x2c, 0x21, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x2, 0x1a, "d4eede8a0768a81e1f436a2e487d09baedc278755bcf731e4078"}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xf, 0xd5, "c7f940f19020d9b64c84678aa02cce17ffc8ea78f185695dbd4aedfdf9b5d9971581f22e172b7ac17a8e199f5ec814cbb68eeefb33e52fbc4ef33ae5876f00a56dacaa04b59fba637009b1c63972dbff4d45eb4b635ad02aa528ed84cec9b8ef220f01ec439737564f650e4bf499ebcb275686aee9c14f4534c25965b477c4c089672f50c788eb192d796460597cb1e67fc58a50eef6ff341728454a2ce9f7e1a2f2dcabeb78a57dc1a6dc4ff8dcdd65347c39a130343dfea576c9367310d4094cc92342a7d335854874426ff41b7698ee14635c89"}]}}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @pad1, @pad1]}}}], 0x360}}], 0x3, 0x804) 4.311532762s ago: executing program 1 (id=5588): syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[], 0x0) 3.984459862s ago: executing program 3 (id=5590): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='id_resolver\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) recvmmsg(r5, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x3}, 0x80000000}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f0000000700)=""/161, 0xa1}], 0x5, &(0x7f00000005c0)=""/35, 0x23}, 0x19c00000}, {{&(0x7f0000000840)=@ax25={{0x3, @null}, [@default, @null, @remote, @default, @null, @remote, @null, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000008c0)}], 0x2, &(0x7f0000000940)=""/107, 0x6b}, 0x7}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a40)=""/148, 0x94}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/127, 0x7f}, {&(0x7f0000000d00)=""/233, 0xe9}], 0x6, &(0x7f0000000e80)=""/3, 0x3}, 0x3}, {{&(0x7f0000000ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/132, 0x84}], 0x1, &(0x7f0000001040)=""/22, 0x16}, 0xfe6}, {{&(0x7f0000001080)=@qipcrtr, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/74, 0x4a}, {&(0x7f0000001180)=""/197, 0xc5}, {&(0x7f0000001280)=""/149, 0x95}, {&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000001540)=""/56, 0x38}, {&(0x7f0000001580)=""/36, 0x24}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/93, 0x5d}, {&(0x7f0000003900)=""/4096, 0x1000}], 0xa, &(0x7f0000004900)=""/100, 0x64}, 0x7}, {{&(0x7f0000006840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005140)=[{&(0x7f00000017c0)=""/50, 0x32}, {&(0x7f0000004a00)=""/233, 0xe9}, {&(0x7f0000004b00)=""/153, 0x99}, {&(0x7f0000004bc0)=""/233, 0xe9}, {&(0x7f0000004cc0)=""/229, 0xe5}, {&(0x7f0000004dc0)=""/159, 0x9f}, {&(0x7f0000004e80)=""/199, 0xc7}, {&(0x7f0000004f80)=""/150, 0x96}, {&(0x7f0000005040)=""/186, 0xba}, {&(0x7f0000005100)}], 0xa}, 0x6}, {{&(0x7f0000005200)=@x25, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005280)=""/35, 0x23}], 0x1, &(0x7f0000005300)=""/98, 0x62}, 0xb}, {{0x0, 0x0, &(0x7f0000005580), 0x0, &(0x7f00000055c0)=""/4085, 0xff5}, 0x5}], 0x9, 0x100, &(0x7f0000006800)={0x0, 0x989680}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 3.711643036s ago: executing program 9 (id=5591): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000009010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 3.614789515s ago: executing program 6 (id=5592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.502396676s ago: executing program 6 (id=5593): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1b5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.3895446s ago: executing program 6 (id=5594): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000013010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 2.910265987s ago: executing program 3 (id=5595): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020800020010000000000000000000850000000f000700000000002a00000095000000000000002f7bed1da450b787a4ebd5d87053b6a7d1dcf4e2667f00"/75], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) read(r4, 0x0, 0x0) (async) read(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRES16=r2, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r3, @ANYBLOB="0800db"], 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00002a0000/0x4000)=nil, 0x4000}, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x5a) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x0, 0x0, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb) (async) write$vga_arbiter(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20044080}, 0x44040) write$vga_arbiter(r8, &(0x7f0000000340), 0xf) 2.20249823s ago: executing program 9 (id=5596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffdf1, 0x20000004, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x6c, r2, 0x700, 0x70bd2b, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7}, @broadcast, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x7}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x8}}, 0x36, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000340)='wg1\x00', 0x4) execve(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 1.983650801s ago: executing program 3 (id=5597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = dup(r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x5e, @local, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="a1e8e7cd0f1020d2", 0x8}, {&(0x7f00000002c0)="ba9d927d1792398c0c99f2284b0ddf6b8d4daa2edd8443c209e0948cefc78a89aeb177", 0x23}, {&(0x7f0000000300)="415a936e4e7336acd06f", 0xa}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000340)="28564bbadd04c91d1431f1fdf5826aa28ffd56677c0b918c276abc6cbbaa42fa0abf5355c93d95c0de8908a2df1eaf77fbac20a8edd407f4916afba4c0ce17ee5f8ef43deb26b50da708235f32b72e4208d1d3db9223daf1968d7fd3180a4f183283e9f7c250b0147acb891e8a3ce13596c4030a681e7482d606fe", 0x7b}], 0x5, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x800}}], 0x18}}], 0x1, 0x4048080) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) 1.424633999s ago: executing program 8 (id=5598): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000480)={'gretap0\x00', {0x2, 0x4e21, @remote}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(r2, 0xf26873250142477, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000054a49500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000004000040"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1) 1.237241894s ago: executing program 9 (id=5599): io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x110, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ec8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0xc001) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.139593148s ago: executing program 1 (id=5600): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000005000000670000004000000095d56aa76300000001010000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 1.032725643s ago: executing program 1 (id=5601): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012804b000100697036746e6c00003800028008000100", @ANYRES32=0x0, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fe800000000000000000000000000030"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 1.007003937s ago: executing program 3 (id=5602): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) pwrite64(r0, &(0x7f0000000040)="e9befe", 0x3, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 719.688764ms ago: executing program 9 (id=5603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 676.064541ms ago: executing program 1 (id=5604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1b5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 579.583823ms ago: executing program 3 (id=5605): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000009000"/100}}}}}}, 0x0) 522.041566ms ago: executing program 9 (id=5606): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000120000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x2404c800) 283.683034ms ago: executing program 3 (id=5607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1003ae6977f1f0787de342df58a8fe1c"]}]}) syz_usb_control_io(r3, &(0x7f0000000800)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0xa5, {0xa5, 0x10, "7aaaa2857ec2044664df5aca4e076c5455a30094eec72d7e34fb347da8a9285304c3b83aad1e65ee009f480d6bc26acf86104a555dc96a42320361dea173f4bf512d810537b3a0e0c24f5c5080f4892685217a5895bd09adf3141c6846ec8352ef5a1ea525b52f76f0acc73c5ea71a3d2da417f1de1999b6cf737554609c18c93be1302ba75ebd6c0acf684b7f44d934bde38b8f7d298c847d02327a7747109253b685"}}, &(0x7f0000000180)={0x0, 0x3, 0x42, @string={0x42, 0x3, "548410340d20c56b1c76373173d6476c8d09b249619263c0e30ed8d85c7961d41e970955dc913d3802ed26e04298399d5e13c06352b056b9927713edc67fe6d8"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f31000000050f3100040bf4010280000305010003141004076786832f183b67f0ba401e64e5abb94503100b0a100302000001080100"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa4, 0x81, 0x5, 0x5, "cda5772f", "1ce5f82d"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x4, 0x9, 0x5, 0x1, 0x50}}}, &(0x7f0000000900)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="2014db000000a0f385424ba0838608d16e8f6b8823fb9965738bc0d9ad10a162f88d84011f7ed3df4f908292ffffffffffffff7fa866a0902b43e01401fe33f854abcf6b75f6fa14dc9a854f7dfd1b2d038b0612564baedd13592972df5afb445a193a3f549e01010000efac2d76feee98871bb32bd7539d75cc78de4cc99b2699e8b7510819d0e9be315a6ad60ee803818b877adc976a29b1713eacdf11ea949ee9f3656e54467f18cd167dd3f9419a6297731b2a97c459783febfd7749905882e2b1aba486b39a32bb46f8dbd4f5672791b762933f00"/225], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000580)={0x40, 0xb, 0x2, "de3d"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "2804"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0xfffffff9, 0x8, 0x7, 0x6804, 0x0, 0xffffffff], [0x1, 0x20000ea, 0x0, 0x2], [0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9, 0x4}, {0x4, 0x1}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x301}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x0, 0x5800, 0x4e, &(0x7f0000000100)="53ec6252b7148220a6adad7f309abdbdc2c189d44ebbb2e92251152103a2db41a47023614f4f4f37d1e80d9fa47c2943f25c60bad96ab61461536e230902ed29baf71b66c4d868e62a43b8caebae"}], 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6d2d00, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) socket$packet(0x11, 0x3, 0x300) 126.999485ms ago: executing program 6 (id=5608): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000f5ffffff0084000000080000002001"], 0x38, 0x4855}, 0x24000052) 77.395543ms ago: executing program 9 (id=5609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20045000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000005380)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4041) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b000100001000"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000a40000001200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff46, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x32}]}, &(0x7f0000002100)=0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="dd6d1afe3d26b09a1c3df92ead1a84f9", @ANYRESDEC=r7], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) 0s ago: executing program 1 (id=5610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x8084) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@assoc={0x18, 0x117, 0x4, 0xeb7}, @iv={0x1018, 0x117, 0x2, 0x1000, "973fd0691963c5e2a40ceadbd8f0233a669a8b639b3c3b3259f66e79913134f758d237b4c86b52d7921b6a19fe13275493779e1c1fc5dd7402158c624053560bc37ad526000087780cf3dddbf928f17498ca6be8bc562188e720c2c00dcfc1629b5d9316dd7cc937116c6bc91136165e38eb247fdd41ab444eafbf96209946add591260b1a128666a57ead39f9c3772adfcf8549e6011593ca2626e077fb60a284505ba77d9e6b8f0f3d2d7427fd93dda33adfc4bcba59f7d06d921352e61a4d291c3e446f603140ab5cb95769364112a920723bc0c13286907163183f50e22ffc558075e393df49271d757966b12461b01a964a49624ae95bce8b57d03fee08af9733dba58c97d58ee81c54affd356d0712711e337c5c07109ec89c2badc333d3b064147d56a07c751ce5cd923e81481f68e88502fe6c7bdc8ee32a09418dfbb36e75aacfb701ff7096a04ca6cf5efdec29d0abf6c62c77e74fe6538a051c0e7c824b64bea5e7c8f745581411496d6322b4ffb4c8e2dcb206c81e2de3bb8ae3766e42b032dacdea12653a09b473e58b060a1c4cbfd86633b0c304f8b2e1b71cc1e5236e958cdac2b4451086e55380f58a309e7cfc34e02ec7e2a0e4d3ee952601746de305462ee3f3081c23e592d1b03bf604070a743c1259baf3d82fab0da618b21b46e9fd202aafb7e615eda8934826b2f43d421d4d8d667c0ed93b93b4291a382cb6219dbaa30d73779257af94a130f42136c28f8ea0a70fdbe16587ac072d0d6b57e2481d55c21fed73d363dd5fa2d5874390a1f1a2512ac8b4070a4c44bfa9b95af67eec4a3c6b3c09e67988030aac0cef8c5167f37b261fecfe510ff63dbc93ea0fbca9d184d22bbe44ae4083a908e5e6a0fad741be65bfea454540c6365969c7201aba6ecd71e21c400b0f1d5a158a6176104fcfff9fc87b5d0b7ea805dc301d4d465172278e9efd21a3564fe72dcde0c4b615c1e277051d56a7b51c521e467cf8c56cf19a32acb11bea4cce1125f44a25b08b7d92b39f3dbd2b3fa74161011f1990dae29007f4ed9ca6d5ed759dfc0247ff90eb50d6985e104e4a1899825972dbadac5cca94f135d6cf705864f9fce9717a948a109f87ca7972fcbdbe6f389196f4cf3afc61664518a79a56289f492b1815cfaec725382dc3b593d9b5234b6ad76feb18c0c7a42e652c6bfd5e55f303bc41684719c7c30d49d582389b3e88b17c2426f5dc977bceea34bf1709afdbc6666bc4b96f4c6e566c08e114330d1c633c40764d5da4335128c78e602e1edf6cc68c9696fdb19cec5ecd06c38bcfbf5919770fbf66a0eb6f4bbc096ad2d58827e37abe38c10de229033eb2d2d232918c85ac7f0c073b8b1667c30ad8d151d30e5ed47772bab860906ca5cdc33c54d52624f39a9ee3cdbd54b0a2b746b15eadc1f77fc48ba59500a6ce54c297d3990c928e22c14530615c7db19144d54938fe55a6bbdc733f6b78c5246cf571ccd1dd02309f5e88932dc36d5c4a2237b3c3764306d30729f4f03a95f0264db30843e6322938407e66ad3b25d557feb98caa608d8724fc5295cea0dfc2195585358b0c14a076e475bb915a1abcdd77b32cbd744b400bc4ce05b879e156963bec247406bd0f84c186d95cbf42b9496784e9ba51ac042de3c87725583b5b740b4d09e778d5ebb2d7d2023abb8365e6d1117097be4caa816a8be6858deac05ab2472765bf97e48d4b420aeccc27d744c15bdab81831865ced3e72c625d15ca78941323a19f329194345e49cd5a19b7cc328d8c7b54b3674c29a3dab481b5f2f4bbc22e27bfa0849f2eb1a4493214924a4a9c4a179d148a3e4a3bd357fb22467ad96f48fb4f71b13ad76a6ec1c94af703a0797c01b02b3bb1cf13c326b80999cf16399b5e290d4e1b59730e9ddd73bc513c35005462e31ba239054fe0b4c74206f973ce61c3c3b3381c7e6860477ae3271ba7e32757d8f3501f415435bd38db99b3622654f0b3f1045c12f6bfd9189f0ec638c6da01fd3de3388ac118983f74c231da73524281cef46a38f1c54bd67c7726aa3fdeb351653faf09ac5470458e81f6c4ff8493b70d17747226154771e8071bbf6022c2602a846ba8f7843382fb959f569f71b5471fda94ae2a6184d98ea08b75f11a7df7fbfaf40f68088336fa1404ef79720cfc24633293b281a93d7699a1e92aa0a5f74c681b3f9fd6d975ffcf776dc552efe7dc7b0ebdf484ce6752f3f7ee8c79e13cc9385672e077c89397d33775b6ce640f54d59ffbef9871b2350e3a3c24776da0f986d5b2d318fac2bfe5ce75c5d97d450f3ff54f1b17cbdddb8f6b9d03b3cc3f717a7c1325f4c29e4a4a43d8b5b34a51deebe9422d8b0b81eaff04ff999a955de463939b26901edb7d6a3f5a773a0ca58135d9936e7375fdbf606afc708c2ac4d1842db7230fc16d7bd4da7f6b0128bacfbc9b681f5e004e2d09b4b29c4438a46359f7cff9c43ab0e5a6c9630fcc03babc42e20174fbafc82973e43b0baa41f8254c521703ae174c2a438129fd8e793925692b27bb103ee1a40b3b0e6b6e4cb502dd119afc913dbee89b0c1845141eeecc0098ba0c62445db2158d22ff487b55b6a0523b2041aa88eff7071b801bbc82c0fd86a0404a81706fda50b3f11b71db4b8e896aa0615e74a6e0c05863e417e23018488a0c052d9d1d0a82188d62ee0783497bc8a7064a1248a4eeb48843257d6a58d4ead4ff3fb9a1fab3bfea75ee7603adffac68d5949550f138a04dc297d3794de6a2390413db3cb99f4fbeda1d2847ca4b1984134ab804b8e4395e344fde0cfe0286277a8aa494977ccda6c2ea2c1adf0def9ddc96dbd7d06beb178cf839a8bf6cfe8fc2ecc9bfbbef903d11c941ade4dda31a1d2b249a5b4e578d5e2c00fc8f8543ec4f8493b340fdc108a0dfee78d472c77c2b65cd639ad03a930f2549cc775f47b0341315b6045a7c4b0784497337b9904e4fe54ff3516c1c94a49f9b205b5e8c9ca52b39396b6d08360e13a88dc50cfea8c3717b9464b9da35fe17a64e8e124bfc59aec50e48c9eb0919db645a5b57d850d57b2d6c8468476b6d5aca729207605d756dad1630837b2e797ffeb5c0cbc552ad92d79ce9707a8e5e75435ba399df44da97c9938b3d5d17ab73916a4f00b9bb23c6c3c0fb2f65292c2f2c583d0956315fe116376045e7fd1a73c1488901387aea08c4eee8703270f114b907f4112b7aa96e71caeccff575aceaec9d3c5a938e9eae5a33ff0666ca49b74a7777883c26801ada850557bee3a8130d951a46a843adbd00789dc068d2216b9f9b043c92157c6982c7285d6c7edba38893c437490bfae508cc7f675a485eb2309c55392e8bfe181eb3d78c77b6e6acb4e77272523ab3e1458cba855a86bf473911a8ecb81ee7b52586df73254882b31a8350190eed2a0897601a610f0f27f8a774f305643aa5333d32e9a7579fd6c3017ad4cd27a207fe4d942d5c1386eb0c40ec4c610c0fe42df2a1fdad61860029c0c1e51e4a40934f4eba63e391313f9db3b9a2c90cbed8c0d3ce4313bcc81723b275c405b06c7b7239cb2624de2b1297de1a2d63e627aaa3aacfa2985aa86f77286707a089f10f4ebf72f38d1dc81d70543a83ee8397a279db13d34eb530d761ff04c2911c5f61381f93694eb5f323862ffb97a07e12ce524197e55b772bbc5d766e98f3da6eac584163330364f977054c3800b2c71be8b4a4b4ac1fa47c019060256a08534ba722b27a023f09c5e2e7a9446cc65e91cf47a4967a8b8e0b669db00d947058e384a518b0570a16246dcc8f91e2a7d942f04fbe9bba86bc1683617bef2e8353a42fe5368eaef64c0c2f61e36cc95169dccd3137b901259221aa938a05e93b09df815fb2676bd7e36f9db6784ee4310aa3ff685d97844eecab1ca3f80f118b29e23a062d68369a7f2a12d1a6447d245325da28886a5e914347ab014d9ee5f2c683ba824084301d26a92da2d2cc00d6e56498d8d23aa05094c93baeea934b3d99a76e663ad6333867e16003ca3c0e28c26c40876f8fd9513bc066e4dea8fcd01b681b93412a0827dc684075657a7fc46e83cd2e132e33388911e463a28882a44155ba42f8a3cb02d9fe234c17d7bda62ed35681a7b7d1c112b1e8e08cb39b050a0c4ecfb03266e35dbf66f628c44a2695d55d177c411dc388e1d7f66053d92ba3c437f90c3e0314cf1ad8b40dc1184d0f41cc4ea90e0b16ad22a8e44965ef1b8c1dce12bde23e5bbc4168d3b522e2a159e184b6d691ea81206622b839d867f31e34ac86c86808834e04a3c418eb1475c5cf256739071f9e3a55ed244c8b11a4d66b2427bca5c662283e43ebfd89ffe1f2aaa1bd243e2191a326d2ee74b7ea4b2788b3d783462e3191c456ff688d6c47fc727842347de9fff07f1522798e31be854dee7a4295a4a78c5e68450f0c0ce2f7c60bb652f3c252c03bef68dc6d1af9b57dc28c9116ab40f09692389e2667163be3cf9556cbe28043a1502240da68c9f5901b7625110687b4464808ec24641927d85e9057a59dde0f0a0ced64c1b82495322d9e7aaf4482bd0ff7142e710690479c78ecbdb84db780d0bb38e967c97b98b6647ec8ab4d14ec901a4238b62c4dbd5b6572b9386dcc6712df18e149934b84de96ad673d9bf0b59e32a24a1c7031461e845b2282feb4a9d1761fa3376e6829f5a45bf5e7fd6baa59c7d08105dc7b81a39c5bd0bddb6893c2c1cde1e6c509c1840a6424801604f140dd5b2d58e8f4ff16e1016f07850aecbe685efe7a18863a267895aa7b18691a0340cb66f6b294d46f6666e49126f7ff276fb5d3e4fed366b2485c4a9300e90bedeeb234dd43f06e5e46a4c73177400a3c457cdbd963f0cdaa5a0a6b99f45a61b3a52a5e5ef33b3636178af5fe7232582b3b16a1d8f48f71337bafca6fcd6a465f8f7257e48626a8626040bcade7dd94a163a9acb11547f601df618078cb17a5b41cd300970df84eef481c369a6c6fd6c5709705d3cb364a0c1b25b5102bcb7bce1907dd3b702910e1e612ee84f124e28d8492f6234823f58e1790992597cddf729583e0cb847da9e6444d6a010eaa8e434e1136602168994fc65a4e1f1987a9fca676f0d4881efb563ae0f60f11366b24090723855c07299bada979679ad31f9072813a02ffee455f9db1acca1942bf07279d4688ab99000897231cab034f2633135d3fd3d6f17e187f7c8a6c34b40feedc536a2f286b891225c9eae5730914612bbe0a3821506335ec9e884599e4c986d62ea8901d888914a06a109aa5fe80b0603a12bebbec558cf9de939cc29da625c85bdf72ee4b946aeef15767fed87436da01c003c7513bb597363d72f91ec905d66dbd795103885a556d3d3d1220a61ece5cbb69ece30ea8ac72cb42fe3ac588ab7dd99550056b4e7060c23307be24d9a1a3140cb39fb07e6ac548d6dd289e8abb7eebba371d240e650cf8a725eb3aa89586c752bddeb3fec27f92bbdb70aa891597b094101cfd91f3a21e920fd6c49dc6532393c69215adf6c02c682c34b495a015b8a86b19d3f9bb8399aa25b3ac86d7b89323042d3c9c5467e0f8039711e801054404eda875787c940ca0613604ed3a09bc531417826a1384d17ff05fb77cb01a2812ce6b76ebdb970990aea3f81a524d156b34f1f7ff8b950b37829515f066442f118222ae9dd94461a485ce8b84e7fd3913734c99eb0fb622cea7f904c9a3b5eb340484fb85b002d021cd6ac27e2034bcb0b49739afd54b6baf7f6a5be1357035aff95e268a4866d298ad448"}], 0x1030, 0x40}, 0x0) write$binfmt_script(r7, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'veth1\x00', {0x2}, 0x7}) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) kernel console output (not intermixed with test programs): veth0_to_bond) entered blocking state [ 1408.047311][T25704] bridge8: port 1(veth0_to_bond) entered disabled state [ 1408.085440][T25704] veth0_to_bond: entered allmulticast mode [ 1408.171687][T25704] veth0_to_bond: entered promiscuous mode [ 1408.192935][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.214920][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.224135][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.233275][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.242431][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.305573][ T5829] Bluetooth: hci2: command tx timeout [ 1408.316668][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.325817][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.334958][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.344090][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.353216][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.362365][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.610667][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.619929][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.629065][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.719018][T25628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.802935][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.812167][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1408.874096][T25628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.977603][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.985099][T18342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.049777][T18347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.057007][T18347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.827288][T16466] usb 4-1: USB disconnect, device number 88 [ 1409.846603][T25628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.068146][T25628] veth0_vlan: entered promiscuous mode [ 1410.109529][T25628] veth1_vlan: entered promiscuous mode [ 1410.236192][T25628] veth0_macvtap: entered promiscuous mode [ 1410.290205][T25628] veth1_macvtap: entered promiscuous mode [ 1410.366170][T25628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.831864][T25741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1410.987651][T25628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.038086][T25741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1411.058317][ T154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.085227][ T154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.169557][T23760] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.298293][T23760] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.428298][T16466] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1411.688546][T18341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.715448][T18341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.780346][T16466] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1412.019111][T16466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.059671][T16466] usb 4-1: Product: syz [ 1412.071801][T16466] usb 4-1: Manufacturer: syz [ 1412.088064][T16466] usb 4-1: SerialNumber: syz [ 1412.170777][T16466] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1412.206360][T18341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.350828][T15464] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1412.395539][T18341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.086503][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1413.086524][ T30] audit: type=1326 audit(1771824818.021:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1413.177076][ T30] audit: type=1326 audit(1771824818.021:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1413.258391][T19246] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1413.289134][ T30] audit: type=1326 audit(1771824818.021:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1413.368068][ T9710] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1413.409127][T15464] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1413.435500][T19246] usb 9-1: Using ep0 maxpacket: 32 [ 1413.468630][T15464] ath9k_htc: Failed to initialize the device [ 1413.495509][T19246] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1413.516099][ T30] audit: type=1326 audit(1771824818.021:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1413.556525][T19246] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.656673][ T9710] usb 10-1: Using ep0 maxpacket: 16 [ 1413.734262][T19246] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1413.746168][ T9710] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1413.782996][ T9710] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1413.793984][T19246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.808646][ T30] audit: type=1326 audit(1771824818.021:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1413.813822][T15464] usb 4-1: ath9k_htc: USB layer deinitialized [ 1413.934962][ T9710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.943444][T19246] usb 9-1: Product: syz [ 1413.963770][T19246] usb 9-1: Manufacturer: syz [ 1414.002878][ T9710] usb 10-1: config 0 descriptor?? [ 1414.016373][T19246] usb 9-1: SerialNumber: syz [ 1414.097180][T19246] usb 9-1: config 0 descriptor?? [ 1414.117412][ T30] audit: type=1326 audit(1771824818.021:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1414.244518][ T30] audit: type=1326 audit(1771824818.021:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1414.319460][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1414.394819][ T30] audit: type=1326 audit(1771824818.021:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1414.538754][T25778] veth0_to_bond: left allmulticast mode [ 1414.567412][ T30] audit: type=1326 audit(1771824818.021:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1414.598257][T25778] veth0_to_bond: left promiscuous mode [ 1414.709471][T25778] bridge8: port 1(veth0_to_bond) entered disabled state [ 1414.732934][ T30] audit: type=1326 audit(1771824818.021:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.9.5265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1414.879545][T25778] bridge9: port 1(veth0_to_bond) entered blocking state [ 1414.894428][T25778] bridge9: port 1(veth0_to_bond) entered disabled state [ 1414.942178][T25778] veth0_to_bond: entered allmulticast mode [ 1415.001731][T19246] usb 9-1: USB disconnect, device number 16 [ 1415.028185][T25778] veth0_to_bond: entered promiscuous mode [ 1415.215386][ T9729] usb 4-1: USB disconnect, device number 89 [ 1415.705487][T25782] program syz.1.5309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1415.813872][T25790] program syz.1.5309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1415.996633][T25794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.474402][ T9710] usbhid 10-1:0.0: can't add hid device: -71 [ 1417.519886][ T9710] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1417.550268][ T9710] usb 10-1: USB disconnect, device number 2 [ 1418.068217][T16466] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1418.399172][T16466] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1418.408904][T16466] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1418.530066][T16466] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.721969][T16466] usb 10-1: config 220 has no interface number 2 [ 1418.779753][T16466] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1418.835712][T16466] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1418.865760][T16466] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1418.878059][ T9729] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1418.927768][T16466] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1418.953439][T16466] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1419.043132][T16466] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.068109][ T9729] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1419.094574][ T9729] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1419.107036][T16466] usb 10-1: Product: syz [ 1419.127143][T16466] usb 10-1: Manufacturer: syz [ 1419.148919][ T9729] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1419.160425][T16466] usb 10-1: SerialNumber: syz [ 1419.220088][ T9729] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1419.262624][ T9729] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1419.320461][ T9729] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1419.352910][ T9729] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1419.388769][ T9729] usb 9-1: Product: syz [ 1419.410281][ T9729] usb 9-1: Manufacturer: syz [ 1419.427007][T16466] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1419.472422][ T9729] cdc_wdm 9-1:1.0: skipping garbage [ 1419.477855][T16466] uvcvideo 10-1:220.0: No valid video chain found. [ 1419.501665][T16466] usb 10-1: selecting invalid altsetting 0 [ 1419.517829][ T9729] cdc_wdm 9-1:1.0: skipping garbage [ 1419.590394][ T9729] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1419.596545][ T9729] cdc_wdm 9-1:1.0: Unknown control protocol [ 1419.610867][T16466] usb 10-1: selecting invalid altsetting 0 [ 1419.622244][T16466] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1419.687983][T15464] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1419.700274][T16466] usb 10-1: USB disconnect, device number 3 [ 1419.882409][T15464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1419.891735][T15464] usb 4-1: not running at top speed; connect to a high speed hub [ 1419.936740][T19245] usb 9-1: USB disconnect, device number 17 [ 1420.046446][T15464] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 1420.103870][T15464] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1420.167070][T15464] usb 4-1: can't read configurations, error -22 [ 1420.338176][T15464] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1420.500297][T15464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1420.516278][T25834] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5325'. [ 1420.538860][T15464] usb 4-1: not running at top speed; connect to a high speed hub [ 1420.560306][T15464] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 1420.596301][T15464] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1420.625097][T15464] usb 4-1: can't read configurations, error -22 [ 1420.665214][T15464] usb usb4-port1: attempt power cycle [ 1420.698124][ T9729] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1420.859788][ T9729] usb 2-1: Using ep0 maxpacket: 32 [ 1420.880350][ T9729] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1420.916282][ T9729] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1420.948860][ T9729] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1420.969536][ T9729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.988039][ T9729] usb 2-1: Product: syz [ 1420.992544][ T9729] usb 2-1: Manufacturer: syz [ 1421.012241][ T9729] usb 2-1: SerialNumber: syz [ 1421.033989][ T9729] usb 2-1: config 0 descriptor?? [ 1421.039750][T15464] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1421.072587][T15464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1421.102718][T15464] usb 4-1: not running at top speed; connect to a high speed hub [ 1421.135074][T15464] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 1421.153475][T15464] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1421.172722][T15464] usb 4-1: can't read configurations, error -22 [ 1421.226171][T25844] binder: 25841:25844 ioctl 400c620e 200000000100 returned -22 [ 1421.303926][T25844] batadv_slave_1: entered promiscuous mode [ 1421.408214][T15464] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1421.469260][T15464] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1421.488204][T15464] usb 4-1: not running at top speed; connect to a high speed hub [ 1421.496488][T15464] usb 4-1: too many configurations: 224, using maximum allowed: 8 [ 1421.568313][T15464] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1421.591199][T15464] usb 4-1: can't read configurations, error -22 [ 1421.620773][T15464] usb usb4-port1: unable to enumerate USB device [ 1421.660736][T15464] usb 2-1: USB disconnect, device number 110 [ 1422.040929][T25849] program syz.9.5330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.144797][T25854] program syz.9.5330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.253138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.259777][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.601841][T25871] bond0: entered promiscuous mode [ 1423.624263][T25871] bond_slave_0: entered promiscuous mode [ 1423.644530][T25871] bond_slave_1: entered promiscuous mode [ 1423.693099][T25871] bond0: left promiscuous mode [ 1423.708134][T25871] bond_slave_0: left promiscuous mode [ 1423.730908][T25871] bond_slave_1: left promiscuous mode [ 1424.910524][T25885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1425.039055][T25888] FAULT_INJECTION: forcing a failure. [ 1425.039055][T25888] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.067454][T25888] CPU: 0 UID: 0 PID: 25888 Comm: syz.9.5342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.067481][T25888] Tainted: [L]=SOFTLOCKUP [ 1425.067487][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.067498][T25888] Call Trace: [ 1425.067504][T25888] [ 1425.067511][T25888] dump_stack_lvl+0xe8/0x150 [ 1425.067539][T25888] should_fail_ex+0x412/0x560 [ 1425.067561][T25888] should_failslab+0xa8/0x100 [ 1425.067582][T25888] __kmalloc_noprof+0xe8/0x760 [ 1425.067599][T25888] ? io_cache_alloc_new+0x40/0x100 [ 1425.067621][T25888] io_cache_alloc_new+0x40/0x100 [ 1425.067641][T25888] io_msg_alloc_async+0x212/0x380 [ 1425.067661][T25888] io_bind_prep+0x152/0x250 [ 1425.067681][T25888] io_submit_sqes+0xb35/0x2370 [ 1425.067725][T25888] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 1425.067749][T25888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1425.067778][T25888] ? __fget_files+0x3a0/0x420 [ 1425.067803][T25888] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1425.067824][T25888] ? fput+0xa0/0xd0 [ 1425.067846][T25888] ? ksys_write+0x242/0x270 [ 1425.067864][T25888] ? __pfx_ksys_write+0x10/0x10 [ 1425.067924][T25888] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1425.067955][T25888] do_syscall_64+0x14d/0xf80 [ 1425.067985][T25888] ? trace_irq_disable+0x3b/0x150 [ 1425.068015][T25888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.068037][T25888] ? clear_bhb_loop+0x40/0x90 [ 1425.068063][T25888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.068084][T25888] RIP: 0033:0x7fc4ff39c629 [ 1425.068104][T25888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.068123][T25888] RSP: 002b:00007fc500324028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1425.068146][T25888] RAX: ffffffffffffffda RBX: 00007fc4ff615fa0 RCX: 00007fc4ff39c629 [ 1425.068161][T25888] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1425.068175][T25888] RBP: 00007fc500324090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.068172][T16466] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1425.068189][T25888] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1425.068202][T25888] R13: 00007fc4ff616038 R14: 00007fc4ff615fa0 R15: 00007fc4ff73fa48 [ 1425.068290][T25888] [ 1426.024809][T16466] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 1426.064344][T16466] usb 4-1: config 0 has no interface number 0 [ 1426.078204][T16466] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1426.110378][T16466] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1426.171205][T16466] usb 4-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1426.195395][T16466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.208000][T19245] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1426.229285][T16466] usb 4-1: Product: syz [ 1426.252791][T16466] usb 4-1: Manufacturer: syz [ 1426.278662][T16466] usb 4-1: SerialNumber: syz [ 1426.315237][T16466] usb 4-1: config 0 descriptor?? [ 1426.348473][T16466] spcp8x5 4-1:0.201: SPCP8x5 converter detected [ 1426.364199][T16466] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1426.387589][T19245] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1426.419477][T19245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.458357][T15464] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1426.474425][T19245] usb 10-1: config 0 descriptor?? [ 1426.528554][T19245] cp210x 10-1:0.0: cp210x converter detected [ 1426.608258][T15464] usb 2-1: Using ep0 maxpacket: 32 [ 1426.616032][T15464] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1426.689420][T15464] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1426.739419][T15464] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1426.749401][T15464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.779257][T15464] usb 2-1: Product: syz [ 1426.797632][T19245] usb 10-1: cp210x converter now attached to ttyUSB1 [ 1426.802213][T15464] usb 2-1: Manufacturer: syz [ 1426.834001][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5348'. [ 1426.851404][T15464] usb 2-1: SerialNumber: syz [ 1426.882241][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5348'. [ 1426.898246][T15464] usb 2-1: config 0 descriptor?? [ 1427.493465][ T9710] usb 2-1: USB disconnect, device number 111 [ 1427.850955][T15464] usb 10-1: USB disconnect, device number 4 [ 1427.877252][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1427.877276][ T30] audit: type=1326 audit(1771824832.751:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1427.994460][T15464] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1428.026400][T15464] cp210x 10-1:0.0: device disconnected [ 1428.083394][ T30] audit: type=1326 audit(1771824832.771:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1428.225808][ T30] audit: type=1326 audit(1771824832.821:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1428.384871][ T30] audit: type=1326 audit(1771824832.821:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1428.541901][ T30] audit: type=1326 audit(1771824832.871:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1428.898231][ T30] audit: type=1326 audit(1771824832.871:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1429.017481][ T30] audit: type=1326 audit(1771824832.871:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1429.111972][ T30] audit: type=1326 audit(1771824832.871:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1429.267129][ T30] audit: type=1326 audit(1771824832.871:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1429.295790][ T9710] usb 4-1: USB disconnect, device number 94 [ 1429.396225][ T9710] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1429.448477][ T9710] spcp8x5 4-1:0.201: device disconnected [ 1429.478269][ T30] audit: type=1326 audit(1771824832.871:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25918 comm="syz.6.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f3b9c629 code=0x7ffc0000 [ 1429.945664][T25933] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5355'. [ 1430.058030][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5355'. [ 1430.714552][T25933] syzkaller0: entered promiscuous mode [ 1430.741720][T25933] syzkaller0: entered allmulticast mode [ 1431.508365][ T9710] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1431.552740][ T9729] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1431.699040][ T9710] usb 2-1: Using ep0 maxpacket: 16 [ 1431.710751][ T9710] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1431.722194][ T9710] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1431.758279][ T9710] usb 2-1: Product: syz [ 1431.768394][ T9710] usb 2-1: Manufacturer: syz [ 1431.776302][ T9710] usb 2-1: SerialNumber: syz [ 1431.790084][ T9729] usb 4-1: config 0 has no interfaces? [ 1431.898169][ T9729] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1431.936414][ T9729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.967023][ T9710] usb 2-1: config 0 descriptor?? [ 1432.018364][ T9729] usb 4-1: Product: syz [ 1432.070935][ T9729] usb 4-1: Manufacturer: syz [ 1432.076712][ T9729] usb 4-1: SerialNumber: syz [ 1432.303522][ T9729] usb 4-1: config 0 descriptor?? [ 1432.534452][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5365'. [ 1433.971444][ T9729] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1434.168104][ T9729] usb 10-1: Using ep0 maxpacket: 32 [ 1434.198016][ T9729] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1434.234773][ T9729] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1434.281682][ T9729] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1434.402346][ T9729] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.441161][ T9729] usb 10-1: Product: syz [ 1434.446236][ T9729] usb 10-1: Manufacturer: syz [ 1434.468192][ T9729] usb 10-1: SerialNumber: syz [ 1434.491004][ T9729] usb 10-1: config 0 descriptor?? [ 1434.963256][T19246] usb 10-1: USB disconnect, device number 5 [ 1439.912056][T16466] usb 2-1: USB disconnect, device number 112 [ 1440.175076][T19245] usb 4-1: USB disconnect, device number 95 [ 1440.438075][T15464] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1440.748039][T21363] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1440.781952][T15464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1440.802183][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5381'. [ 1440.818125][T15464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1440.834129][T26024] IPVS: starting estimator thread 0... [ 1440.857271][T15464] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1440.886013][T15464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.917081][T15464] usb 2-1: Product: syz [ 1440.927215][T15464] usb 2-1: Manufacturer: syz [ 1440.932299][T21363] usb 9-1: Using ep0 maxpacket: 32 [ 1440.943778][T26031] IPVS: using max 29 ests per chain, 69600 per kthread [ 1440.944531][T21363] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1440.965924][T15464] usb 2-1: SerialNumber: syz [ 1440.984394][T15464] usb 2-1: config 0 descriptor?? [ 1440.998491][T19246] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1441.006483][T21363] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1441.186527][T21363] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1441.197754][T21363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.206439][T21363] usb 9-1: Product: syz [ 1441.224337][T21363] usb 9-1: Manufacturer: syz [ 1441.238691][T21363] usb 9-1: SerialNumber: syz [ 1441.262480][T21363] usb 9-1: config 0 descriptor?? [ 1441.385524][T21363] usb 2-1: USB disconnect, device number 113 [ 1441.406596][T19246] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 1441.421266][T19246] usb 4-1: config 0 has no interface number 0 [ 1441.450546][T19246] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1441.500658][T26015] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5378'. [ 1441.508136][T19246] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1441.565378][T19246] usb 4-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1441.591408][T19246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.618644][T19246] usb 4-1: Product: syz [ 1441.628255][T19246] usb 4-1: Manufacturer: syz [ 1441.637022][T19246] usb 4-1: SerialNumber: syz [ 1441.654246][T19246] usb 4-1: config 0 descriptor?? [ 1441.703705][T26024] usb 9-1: USB disconnect, device number 18 [ 1441.714725][T19246] spcp8x5 4-1:0.201: SPCP8x5 converter detected [ 1441.744670][T19246] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1441.885418][T26038] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5384'. [ 1443.981640][T15464] usb 4-1: USB disconnect, device number 96 [ 1444.046739][T15464] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1444.097259][T15464] spcp8x5 4-1:0.201: device disconnected [ 1444.628044][T15464] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1444.863242][T15464] usb 4-1: device descriptor read/64, error -71 [ 1445.176068][T15464] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1445.258027][ T9710] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1445.290260][T26087] program syz.9.5399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.317999][T15464] usb 4-1: device descriptor read/64, error -71 [ 1445.339921][T26088] program syz.9.5399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.438595][T15464] usb usb4-port1: attempt power cycle [ 1445.468190][ T9710] usb 9-1: Using ep0 maxpacket: 32 [ 1445.508192][ T9710] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1445.538523][ T9710] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1445.632440][ T9710] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1445.643134][ T9710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.670723][ T9710] usb 9-1: Product: syz [ 1445.686721][ T9710] usb 9-1: Manufacturer: syz [ 1445.706383][ T9710] usb 9-1: SerialNumber: syz [ 1445.778434][ T9710] usb 9-1: config 0 descriptor?? [ 1445.784597][T15464] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1445.811736][T15464] usb 4-1: device descriptor read/8, error -71 [ 1446.033622][T26082] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5398'. [ 1446.057990][T15464] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1446.207165][T15464] usb 4-1: device descriptor read/8, error -71 [ 1446.304521][T26024] usb 9-1: USB disconnect, device number 19 [ 1446.358633][T15464] usb usb4-port1: unable to enumerate USB device [ 1447.526671][T26106] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1447.569695][T26106] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1448.114691][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1448.114715][ T30] audit: type=1326 audit(1771824853.061:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1448.145924][ T9710] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1448.272087][ T30] audit: type=1326 audit(1771824853.061:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1448.323773][ T9710] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 1448.353920][ T9710] usb 4-1: config 0 has no interface number 0 [ 1448.375742][ T9710] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1448.448289][ T9710] usb 4-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1448.491674][T19245] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1448.575414][ T30] audit: type=1326 audit(1771824853.061:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1448.628119][ T9710] usb 4-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1448.649411][ T9710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.665557][ T30] audit: type=1326 audit(1771824853.061:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1448.703157][ T9710] usb 4-1: Product: syz [ 1448.707416][ T9710] usb 4-1: Manufacturer: syz [ 1448.728016][T19245] usb 10-1: Using ep0 maxpacket: 16 [ 1448.780711][ T9710] usb 4-1: SerialNumber: syz [ 1448.793017][T19245] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1448.823190][ T9710] usb 4-1: config 0 descriptor?? [ 1448.829458][T19245] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1448.838801][ T30] audit: type=1326 audit(1771824853.061:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1448.871061][T26130] macsec0: entered promiscuous mode [ 1448.883618][ T9710] spcp8x5 4-1:0.201: SPCP8x5 converter detected [ 1448.895121][T19245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.911702][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5411'. [ 1448.931390][ T9710] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1448.945851][T19245] usb 10-1: config 0 descriptor?? [ 1448.956867][ T30] audit: type=1326 audit(1771824853.061:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1449.026702][ T30] audit: type=1326 audit(1771824853.061:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1449.060677][T26129] veth1_macvtap: left promiscuous mode [ 1449.211308][T26129] macsec0 (unregistering): left promiscuous mode [ 1449.288630][ T30] audit: type=1326 audit(1771824853.061:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1449.374645][ T30] audit: type=1326 audit(1771824853.061:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1449.430858][T26135] program syz.8.5413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.507101][T26137] program syz.8.5413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.518919][ T30] audit: type=1326 audit(1771824853.061:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26113 comm="syz.9.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1451.656968][T19245] usbhid 10-1:0.0: can't add hid device: -71 [ 1451.664749][T19245] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1451.755907][T19245] usb 10-1: USB disconnect, device number 6 [ 1451.796630][T15464] usb 4-1: USB disconnect, device number 101 [ 1451.865601][T15464] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1451.928734][T15464] spcp8x5 4-1:0.201: device disconnected [ 1452.394477][T15464] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1452.724916][T15464] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 1452.742181][T15464] usb 4-1: config 0 has no interface number 0 [ 1452.867090][T15464] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=2c.18 [ 1452.898133][T15464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.931816][T15464] usb 4-1: Product: syz [ 1452.936247][T15464] usb 4-1: Manufacturer: syz [ 1453.127851][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1453.144953][T15464] usb 4-1: SerialNumber: syz [ 1453.173091][T15464] usb 4-1: config 0 descriptor?? [ 1453.178299][ T30] audit: type=1326 audit(1771824858.021:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.8.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000299c629 code=0x7ffc0000 [ 1453.178434][ T30] audit: type=1326 audit(1771824858.031:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.8.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f000299c629 code=0x7ffc0000 [ 1453.178490][ T30] audit: type=1326 audit(1771824858.031:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.8.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000299c629 code=0x7ffc0000 [ 1453.388275][T15464] usb 4-1: Expected 3 endpoints, found: 0 [ 1453.413794][T21363] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1453.545359][ T30] audit: type=1326 audit(1771824858.031:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26166 comm="syz.8.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000299c629 code=0x7ffc0000 [ 1453.601473][T21363] usb 9-1: Using ep0 maxpacket: 16 [ 1453.624596][T21363] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1453.632367][T21363] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1453.668239][T21363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.714580][T21363] usb 9-1: config 0 descriptor?? [ 1453.998895][T26171] syzkaller0: entered promiscuous mode [ 1454.015586][T26171] syzkaller0: entered allmulticast mode [ 1454.794822][T26177] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.5425'. [ 1454.865038][T26177] netlink: ct family unspecified [ 1456.977167][T21363] usbhid 9-1:0.0: can't add hid device: -71 [ 1456.996920][T21363] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1457.059063][T21363] usb 9-1: USB disconnect, device number 20 [ 1457.250548][T26204] program syz.9.5432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1457.313124][T26206] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5431'. [ 1457.329086][T26205] program syz.9.5432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1458.838282][T21363] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1459.068981][T21363] usb 10-1: config 0 has an invalid interface number: 201 but max is 0 [ 1459.077320][T21363] usb 10-1: config 0 has no interface number 0 [ 1459.093263][T21363] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1459.123796][T21363] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1459.163384][T21363] usb 10-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1459.172745][T21363] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.183563][T21363] usb 10-1: Product: syz [ 1459.193436][T21363] usb 10-1: Manufacturer: syz [ 1459.198460][T21363] usb 10-1: SerialNumber: syz [ 1459.216739][T21363] usb 10-1: config 0 descriptor?? [ 1459.284189][T21363] spcp8x5 10-1:0.201: SPCP8x5 converter detected [ 1459.303304][T21363] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 1461.252919][T26024] usb 10-1: USB disconnect, device number 7 [ 1461.268401][T26024] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1461.329115][T26024] spcp8x5 10-1:0.201: device disconnected [ 1462.446124][T26217] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1462.543261][T26024] usb 4-1: USB disconnect, device number 102 [ 1462.816251][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5438'. [ 1463.074910][T26236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5442'. [ 1463.180341][T26236] veth0_to_bond: left allmulticast mode [ 1463.208064][T26236] veth0_to_bond: left promiscuous mode [ 1463.227082][T26236] bridge9: port 1(veth0_to_bond) entered disabled state [ 1463.261863][T26236] bridge10: port 1(veth0_to_bond) entered blocking state [ 1463.274732][T26236] bridge10: port 1(veth0_to_bond) entered disabled state [ 1463.300902][T26236] veth0_to_bond: entered allmulticast mode [ 1463.326099][T26236] veth0_to_bond: entered promiscuous mode [ 1463.388928][T21363] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1463.706606][T21363] usb 4-1: Using ep0 maxpacket: 16 [ 1463.722052][T21363] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.754752][T21363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1463.871375][T21363] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1463.910445][T21363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.972414][T21363] usb 4-1: config 0 descriptor?? [ 1464.468153][ T5918] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1464.655455][T21363] steelseries 0003:1038:12C2.002A: unknown main item tag 0x0 [ 1464.673311][T21363] steelseries 0003:1038:12C2.002A: unknown main item tag 0x0 [ 1464.898233][ T30] audit: type=1326 audit(1771824869.721:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26251 comm="syz.8.5446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f000299c629 code=0x0 [ 1464.983352][T21363] steelseries 0003:1038:12C2.002A: unknown main item tag 0x0 [ 1465.016813][ T5918] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 1465.047213][T21363] steelseries 0003:1038:12C2.002A: unknown main item tag 0x0 [ 1465.077725][T21363] steelseries 0003:1038:12C2.002A: unknown main item tag 0x0 [ 1465.130118][ T5918] usb 2-1: config 0 has no interface number 0 [ 1465.136396][ T5918] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1465.196034][ T5918] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1465.271535][ T5918] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1465.285222][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.311570][ T5918] usb 2-1: Product: syz [ 1465.328198][ T5918] usb 2-1: Manufacturer: syz [ 1465.359426][ T5918] usb 2-1: SerialNumber: syz [ 1465.411203][ T5918] usb 2-1: config 0 descriptor?? [ 1465.459704][ T5918] spcp8x5 2-1:0.201: SPCP8x5 converter detected [ 1465.696554][ T5918] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1466.518031][T16467] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1466.668001][T16467] usb 9-1: Using ep0 maxpacket: 16 [ 1466.682292][T16467] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1466.734735][T16467] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1466.748565][T26271] veth1_to_bond: entered allmulticast mode [ 1466.764548][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1466.905972][T16467] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1466.954673][T16467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.990711][T16467] usb 9-1: Product: syz [ 1467.003328][T16467] usb 9-1: Manufacturer: syz [ 1467.066937][T16467] usb 9-1: SerialNumber: syz [ 1467.103169][T16467] usb 9-1: config 0 descriptor?? [ 1467.204162][T16467] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1467.239257][T16467] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1467.424433][ T5918] usb 2-1: USB disconnect, device number 114 [ 1467.465767][ T5918] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1467.546449][ T5918] spcp8x5 2-1:0.201: device disconnected [ 1467.905321][T16467] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1467.967138][T16467] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1468.518522][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5454'. [ 1468.629427][ T9710] usb 4-1: USB disconnect, device number 103 [ 1468.786880][T16467] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1468.882860][T16467] em28xx 9-1:0.0: No AC97 audio processor [ 1469.000156][T26024] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1469.208322][T26024] usb 2-1: Using ep0 maxpacket: 32 [ 1469.262106][T26024] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1469.357395][T26024] usb 2-1: config 0 has no interface number 0 [ 1469.388780][T26024] usb 2-1: too many endpoints for config 0 interface 47 altsetting 24: 59, using maximum allowed: 30 [ 1469.681733][T26024] usb 2-1: config 0 interface 47 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 1469.850042][T26024] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1469.961200][T26024] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1469.997629][T26024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.036977][T26024] usb 2-1: Product: syz [ 1470.070431][T26024] usb 2-1: Manufacturer: syz [ 1470.090340][T26024] usb 2-1: SerialNumber: syz [ 1470.127796][T26024] usb 2-1: config 0 descriptor?? [ 1470.206838][T21363] usb 9-1: USB disconnect, device number 21 [ 1470.217388][T21363] em28xx 9-1:0.0: Disconnecting em28xx [ 1470.303292][T21363] em28xx 9-1:0.0: Freeing device [ 1470.436466][T26294] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1470.505479][T26024] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1470.535361][T26024] dvb-usb: bulk message failed: -22 (2/0) [ 1470.582341][T26024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1470.624474][T26024] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1470.655591][T26024] usb 2-1: media controller created [ 1470.767800][T26024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.909885][T26024] cxusb: set interface failed [ 1470.930615][T26024] dvb-usb: bulk message failed: -22 (1/0) [ 1471.293174][T26024] DVB: Unable to find symbol lgdt330x_attach() [ 1471.324320][T26024] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1471.368393][T15464] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1471.548173][T15464] usb 9-1: Invalid ep0 maxpacket: 64 [ 1471.722344][T26024] rc_core: IR keymap rc-dvico-portable not found [ 1471.736463][T26024] Registered IR keymap rc-empty [ 1471.749693][T15464] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1471.787080][T26024] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1471.805087][T26267] veth1_to_bond: left allmulticast mode [ 1471.879654][T26024] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input54 [ 1471.965933][T26024] dvb-usb: schedule remote query interval to 100 msecs. [ 1471.998502][T26024] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1472.006803][T26301] FAULT_INJECTION: forcing a failure. [ 1472.006803][T26301] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.028025][T15464] usb 9-1: Invalid ep0 maxpacket: 64 [ 1472.039080][T15464] usb usb9-port1: attempt power cycle [ 1472.058311][T26024] usb 2-1: USB disconnect, device number 115 [ 1472.071871][T26301] CPU: 0 UID: 0 PID: 26301 Comm: syz.9.5460 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.071908][T26301] Tainted: [L]=SOFTLOCKUP [ 1472.071917][T26301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1472.071932][T26301] Call Trace: [ 1472.071940][T26301] [ 1472.071951][T26301] dump_stack_lvl+0xe8/0x150 [ 1472.071987][T26301] should_fail_ex+0x412/0x560 [ 1472.072018][T26301] should_failslab+0xa8/0x100 [ 1472.072046][T26301] __kmalloc_cache_noprof+0x88/0x660 [ 1472.072068][T26301] ? __pfx_stack_trace_save+0x10/0x10 [ 1472.072092][T26301] ? rtnl_newlink+0x136/0x1be0 [ 1472.072125][T26301] rtnl_newlink+0x136/0x1be0 [ 1472.072153][T26301] ? kasan_save_track+0x4f/0x80 [ 1472.072173][T26301] ? kasan_save_track+0x3e/0x80 [ 1472.072192][T26301] ? kasan_save_free_info+0x46/0x50 [ 1472.072220][T26301] ? __kasan_slab_free+0x5c/0x80 [ 1472.072241][T26301] ? kmem_cache_free+0x187/0x630 [ 1472.072264][T26301] ? __dev_queue_xmit+0x168f/0x38a0 [ 1472.072305][T26301] ? __netlink_deliver_tap+0x5ad/0x850 [ 1472.072331][T26301] ? netlink_deliver_tap+0x19c/0x1b0 [ 1472.072354][T26301] ? netlink_unicast+0x7e3/0x9b0 [ 1472.072374][T26301] ? netlink_sendmsg+0x813/0xb40 [ 1472.072401][T26301] ? __pfx_rtnl_newlink+0x10/0x10 [ 1472.072426][T26301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.072489][T26301] ? kasan_quarantine_put+0xbb/0x1f0 [ 1472.072510][T26301] ? lockdep_hardirqs_on+0x7a/0x110 [ 1472.072553][T26301] ? kmem_cache_free+0x187/0x630 [ 1472.072576][T26301] ? nlmon_xmit+0xb0/0x100 [ 1472.072618][T26301] ? __lock_acquire+0x6b5/0x2cf0 [ 1472.072652][T26301] ? __local_bh_enable_ip+0xd0/0x130 [ 1472.072680][T26301] ? lockdep_hardirqs_on+0x7a/0x110 [ 1472.072711][T26301] ? __dev_queue_xmit+0x274/0x38a0 [ 1472.072742][T26301] ? __local_bh_enable_ip+0xd0/0x130 [ 1472.072768][T26301] ? __dev_queue_xmit+0x274/0x38a0 [ 1472.072827][T26301] ? __pfx_rtnl_newlink+0x10/0x10 [ 1472.072854][T26301] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1472.072885][T26301] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1472.072911][T26301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1472.072944][T26301] ? ref_tracker_free+0x693/0x840 [ 1472.072968][T26301] ? __copy_skb_header+0xa3/0x4a0 [ 1472.073001][T26301] ? __pfx_ref_tracker_free+0x10/0x10 [ 1472.073038][T26301] netlink_rcv_skb+0x232/0x4b0 [ 1472.073066][T26301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1472.073094][T26301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1472.073131][T26301] ? netlink_deliver_tap+0x2e/0x1b0 [ 1472.073166][T26301] netlink_unicast+0x80f/0x9b0 [ 1472.073197][T26301] ? __pfx_netlink_unicast+0x10/0x10 [ 1472.073222][T26301] ? netlink_sendmsg+0x650/0xb40 [ 1472.073247][T26301] ? skb_put+0x11b/0x210 [ 1472.073279][T26301] netlink_sendmsg+0x813/0xb40 [ 1472.073321][T26301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.073352][T26301] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1472.073380][T26301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1472.073406][T26301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.073430][T26301] ____sys_sendmsg+0xa68/0xad0 [ 1472.073471][T26301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1472.073512][T26301] ? import_iovec+0x73/0xa0 [ 1472.073545][T26301] ___sys_sendmsg+0x2a5/0x360 [ 1472.073581][T26301] ? __pfx____sys_sendmsg+0x10/0x10 [ 1472.073649][T26301] ? __fget_files+0x2a/0x420 [ 1472.073678][T26301] ? __fget_files+0x3a0/0x420 [ 1472.073719][T26301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1472.073754][T26301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1472.073795][T26301] ? __pfx_ksys_write+0x10/0x10 [ 1472.073829][T26301] do_syscall_64+0x14d/0xf80 [ 1472.073861][T26301] ? trace_irq_disable+0x3b/0x150 [ 1472.073891][T26301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.073913][T26301] ? clear_bhb_loop+0x40/0x90 [ 1472.073941][T26301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.073963][T26301] RIP: 0033:0x7fc4ff39c629 [ 1472.073984][T26301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.074002][T26301] RSP: 002b:00007fc500324028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1472.074026][T26301] RAX: ffffffffffffffda RBX: 00007fc4ff615fa0 RCX: 00007fc4ff39c629 [ 1472.074043][T26301] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1472.074057][T26301] RBP: 00007fc500324090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.074071][T26301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.074084][T26301] R13: 00007fc4ff616038 R14: 00007fc4ff615fa0 R15: 00007fc4ff73fa48 [ 1472.074118][T26301] [ 1472.849133][T15464] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1472.893694][T26024] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1472.938802][T15464] usb 9-1: Invalid ep0 maxpacket: 64 [ 1473.078163][T15464] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1473.163347][T15464] usb 9-1: Invalid ep0 maxpacket: 64 [ 1473.181515][T15464] usb usb9-port1: unable to enumerate USB device [ 1473.578082][T15464] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1473.742484][T15464] usb 10-1: config 0 has an invalid interface number: 201 but max is 0 [ 1473.770226][T15464] usb 10-1: config 0 has no interface number 0 [ 1473.792623][T15464] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1473.867992][T15464] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1473.891807][T15464] usb 10-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1473.902064][T15464] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.913061][T15464] usb 10-1: Product: syz [ 1473.917491][T15464] usb 10-1: Manufacturer: syz [ 1473.973776][T15464] usb 10-1: SerialNumber: syz [ 1473.994048][T15464] usb 10-1: config 0 descriptor?? [ 1474.032650][T15464] spcp8x5 10-1:0.201: SPCP8x5 converter detected [ 1474.095281][T15464] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 1474.286995][ T30] audit: type=1326 audit(1771824879.231:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.539845][ T30] audit: type=1326 audit(1771824879.241:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.601460][ T30] audit: type=1326 audit(1771824879.241:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.625197][ T30] audit: type=1326 audit(1771824879.241:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.673139][ T30] audit: type=1326 audit(1771824879.241:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.791759][ T30] audit: type=1326 audit(1771824879.281:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1474.828289][ T5918] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1474.954480][ T30] audit: type=1326 audit(1771824879.281:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1475.068336][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1475.079801][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.086784][ T5918] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1475.097356][ T9710] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1475.124148][ T30] audit: type=1326 audit(1771824879.291:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1475.158403][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.223619][ T5918] usb 4-1: config 0 descriptor?? [ 1475.282529][T26330] input: syz1 as /devices/virtual/input/input55 [ 1475.301686][ T30] audit: type=1326 audit(1771824879.291:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1475.304417][ T9710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.518968][ T30] audit: type=1326 audit(1771824879.291:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.3.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1475.552890][ T9710] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1475.658152][ T9710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.805314][ T9710] usb 2-1: config 0 descriptor?? [ 1475.838392][T16466] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1476.019831][T16466] usb 9-1: Using ep0 maxpacket: 8 [ 1476.136821][T16466] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1476.154382][ T9710] usbhid 2-1:0.0: can't add hid device: -22 [ 1476.183921][T16466] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1476.273738][T16466] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1476.334738][ T9710] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1476.404166][T16466] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1476.437041][T16467] usb 10-1: USB disconnect, device number 8 [ 1476.512917][T16466] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.536825][T16467] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1476.609309][T16467] spcp8x5 10-1:0.201: device disconnected [ 1476.635364][T16466] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1476.727937][T16466] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.098292][T16466] usb 9-1: usb_control_msg returned -32 [ 1477.153834][T16466] usbtmc 9-1:16.0: can't read capabilities [ 1477.492758][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 1477.503801][T19246] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1477.560265][T26334] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 1477.715510][T19246] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1478.649312][T23875] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1478.842459][T23875] usb 10-1: Using ep0 maxpacket: 16 [ 1478.907478][T23875] usb 10-1: config 8 has an invalid interface number: 59 but max is 2 [ 1478.926329][T23875] usb 10-1: config 8 has an invalid interface number: 116 but max is 2 [ 1478.998099][T23875] usb 10-1: config 8 has an invalid interface number: 43 but max is 2 [ 1479.049836][T23875] usb 10-1: config 8 has an invalid interface number: 130 but max is 2 [ 1479.092524][T23875] usb 10-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1479.118108][T23875] usb 10-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1479.175591][T23875] usb 10-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 1479.209441][T23875] usb 10-1: config 8 has no interface number 0 [ 1479.215751][T23875] usb 10-1: config 8 has no interface number 1 [ 1479.239319][T23875] usb 10-1: config 8 has no interface number 2 [ 1479.290337][T23875] usb 10-1: config 8 has no interface number 3 [ 1479.297058][T23875] usb 10-1: config 8 interface 59 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1479.370792][T23875] usb 10-1: config 8 interface 116 altsetting 137 bulk endpoint 0xC has invalid maxpacket 1023 [ 1479.388983][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5478'. [ 1479.408008][T23875] usb 10-1: config 8 interface 116 altsetting 137 endpoint 0x5 has an invalid bInterval 185, changing to 7 [ 1479.430409][T23875] usb 10-1: config 8 interface 116 altsetting 137 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1479.493684][T23875] usb 10-1: config 8 interface 116 altsetting 137 has an invalid descriptor for endpoint zero, skipping [ 1479.518701][T23875] usb 10-1: config 8 interface 116 altsetting 137 has 6 endpoint descriptors, different from the interface descriptor's value: 18 [ 1479.554034][T23875] usb 10-1: config 8 interface 43 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1479.576372][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 1479.584448][ T9710] usb 9-1: USB disconnect, device number 26 [ 1479.621971][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1479.633492][T23875] usb 10-1: config 8 interface 43 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1479.669413][ T5918] usb 4-1: USB disconnect, device number 104 [ 1479.677625][T23875] usb 10-1: config 8 interface 43 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1479.726290][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1479.770469][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1479.809303][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0x8D, skipping [ 1479.862870][T23875] usb 10-1: config 8 interface 130 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1479.918333][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1479.991143][T23875] usb 10-1: config 8 interface 130 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1480.018506][T23868] usb 2-1: USB disconnect, device number 116 [ 1480.040397][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1480.106287][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1480.147485][T23875] usb 10-1: config 8 interface 130 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1480.194500][T23875] usb 10-1: config 8 interface 130 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 11 [ 1480.235610][T23875] usb 10-1: config 8 interface 59 has no altsetting 0 [ 1480.250854][T23875] usb 10-1: config 8 interface 116 has no altsetting 0 [ 1480.261482][T23875] usb 10-1: config 8 interface 43 has no altsetting 0 [ 1480.271796][T23875] usb 10-1: config 8 interface 130 has no altsetting 0 [ 1480.297823][T23875] usb 10-1: New USB device found, idVendor=05d1, idProduct=5001, bcdDevice=6f.dc [ 1480.448589][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 1480.510045][T19246] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1480.566154][T19246] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1480.582608][T23875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.633552][T23875] usb 10-1: Product: syz [ 1480.694757][T23875] usb 10-1: Manufacturer: syz [ 1480.758791][T23875] usb 10-1: SerialNumber: syz [ 1480.838895][T26382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1481.070648][T26383] veth0_to_bond: left allmulticast mode [ 1481.108078][T26383] veth0_to_bond: left promiscuous mode [ 1481.144873][T26383] bridge10: port 1(veth0_to_bond) entered disabled state [ 1481.190890][T26383] bridge11: port 1(veth0_to_bond) entered blocking state [ 1481.217706][T26383] bridge11: port 1(veth0_to_bond) entered disabled state [ 1481.243538][T26383] veth0_to_bond: entered allmulticast mode [ 1481.285159][T26383] veth0_to_bond: entered promiscuous mode [ 1483.008009][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 1483.016485][T19246] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1483.023559][T19246] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1484.693728][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.700355][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.181106][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 1485.187571][T19246] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1485.194142][T19246] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1485.901730][T23875] ftdi_sio 10-1:8.59: FTDI USB Serial Device converter detected [ 1485.931875][T23875] ftdi_sio ttyUSB0: unknown device type: 0x6fdc [ 1485.947037][T23875] ftdi_sio 10-1:8.116: FTDI USB Serial Device converter detected [ 1485.963175][T23875] ftdi_sio ttyUSB1: unknown device type: 0x6fdc [ 1485.979945][T23875] ftdi_sio 10-1:8.43: FTDI USB Serial Device converter detected [ 1485.990379][T23875] ftdi_sio ttyUSB2: unknown device type: 0x6fdc [ 1486.005966][T23875] ftdi_sio 10-1:8.130: FTDI USB Serial Device converter detected [ 1486.015188][T23875] ftdi_sio ttyUSB3: unknown device type: 0x6fdc [ 1487.328134][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 1487.335763][T19246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1487.342087][T19246] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1489.408137][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 1489.415837][T19246] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1489.422167][T19246] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1489.520307][T17082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1489.531765][T17082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1489.557372][T17082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1489.565923][T19246] usb 10-1: USB disconnect, device number 9 [ 1489.574453][T19246] ftdi_sio 10-1:8.59: device disconnected [ 1489.618557][T17082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1489.629182][T17082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1489.646171][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1489.684038][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1489.695167][T19246] ftdi_sio 10-1:8.116: device disconnected [ 1489.702637][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1489.727074][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1489.740566][T19246] ftdi_sio 10-1:8.43: device disconnected [ 1489.748213][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1489.758622][T19246] ftdi_sio 10-1:8.130: device disconnected [ 1490.338107][T26415] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 1490.347345][T26415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1490.400870][T26415] vhci_hcd vhci_hcd.0: Device attached [ 1490.498018][T16467] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1490.569133][T26416] vhci_hcd: connection closed [ 1490.569446][T18347] vhci_hcd vhci_hcd.9: stop threads [ 1490.651085][T18347] vhci_hcd vhci_hcd.9: release socket [ 1490.656982][T23762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.681917][T18347] vhci_hcd vhci_hcd.9: disconnect device [ 1490.688547][T16466] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1490.696559][T23875] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 1490.728566][T16467] usb 2-1: Using ep0 maxpacket: 32 [ 1490.739651][T16467] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1490.768234][T26024] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 1490.793214][T16467] usb 2-1: config 0 has no interface number 0 [ 1490.808066][T16467] usb 2-1: too many endpoints for config 0 interface 47 altsetting 24: 59, using maximum allowed: 30 [ 1490.838098][T16467] usb 2-1: config 0 interface 47 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 1490.878110][T16466] usb 4-1: Using ep0 maxpacket: 16 [ 1490.898441][T16467] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1490.920797][T16466] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1490.931417][T16466] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1490.952998][T16467] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1490.962478][T26024] usb 9-1: config 0 has no interfaces? [ 1491.009292][T26024] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1491.028054][T16466] usb 4-1: config 13 has no interface number 0 [ 1491.037982][T16467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.046436][T23762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.048467][T16466] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1491.090150][T26024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.100543][T16467] usb 2-1: Product: syz [ 1491.105521][T16467] usb 2-1: Manufacturer: syz [ 1491.112652][T16467] usb 2-1: SerialNumber: syz [ 1491.118296][T16466] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1491.129415][T16466] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1491.148134][T16466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.162635][T26024] usb 9-1: config 0 descriptor?? [ 1491.202047][T16467] usb 2-1: config 0 descriptor?? [ 1491.218128][T16466] usb 4-1: Product: syz [ 1491.231963][T16466] usb 4-1: Manufacturer: syz [ 1491.236907][T16466] usb 4-1: SerialNumber: syz [ 1491.248942][T26404] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1491.469489][T23762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.491235][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5491'. [ 1491.503932][T26404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1491.692322][T16467] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1491.768569][T16467] dvb-usb: bulk message failed: -22 (2/0) [ 1491.791356][T16467] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1491.804066][T16467] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1491.818135][T17082] Bluetooth: hci1: command tx timeout [ 1491.827691][T16467] usb 2-1: media controller created [ 1491.921183][T16467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.930373][T23762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.049328][T16467] cxusb: set interface failed [ 1492.078533][T16467] dvb-usb: bulk message failed: -22 (1/0) [ 1492.275334][T16466] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1492.293431][T16466] usb 4-1: MIDIStreaming interface descriptor not found [ 1492.361540][T16467] DVB: Unable to find symbol lgdt330x_attach() [ 1492.402626][T16467] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1492.602341][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1492.602363][ T30] audit: type=1326 audit(1771824897.551:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1492.671347][T16466] usb 4-1: USB disconnect, device number 105 [ 1492.717656][ T30] audit: type=1326 audit(1771824897.551:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1492.742802][T16467] rc_core: IR keymap rc-dvico-portable not found [ 1492.762345][T16467] Registered IR keymap rc-empty [ 1492.783881][T16467] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1492.807391][T26445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.817160][ T30] audit: type=1326 audit(1771824897.551:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1492.961433][T16467] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input56 [ 1492.982755][T26446] program syz.3.5496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.011058][ T30] audit: type=1326 audit(1771824897.551:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011120][ T30] audit: type=1326 audit(1771824897.551:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011175][ T30] audit: type=1326 audit(1771824897.561:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011220][ T30] audit: type=1326 audit(1771824897.561:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011268][ T30] audit: type=1326 audit(1771824897.561:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011316][ T30] audit: type=1326 audit(1771824897.561:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.011360][ T30] audit: type=1326 audit(1771824897.561:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26439 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1493.016729][T16467] dvb-usb: schedule remote query interval to 100 msecs. [ 1493.016750][T16467] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1493.044003][T16467] usb 2-1: USB disconnect, device number 117 [ 1493.064187][T26400] chnl_net:caif_netlink_parms(): no params data found [ 1493.114435][T25657] udevd[25657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1493.265922][T23868] usb 9-1: USB disconnect, device number 27 [ 1493.484579][T16467] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1493.899532][T17082] Bluetooth: hci1: command tx timeout [ 1494.498161][T16467] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1494.638768][T23762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.672069][T16467] usb 9-1: config 0 has an invalid interface number: 201 but max is 0 [ 1494.692836][T23762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.703488][T16467] usb 9-1: config 0 has no interface number 0 [ 1494.718238][T16467] usb 9-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1494.731257][T23762] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1494.739997][T16467] usb 9-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1494.774582][T16467] usb 9-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1494.784139][T23762] bond0 (unregistering): Released all slaves [ 1494.801417][T16467] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.835102][T16467] usb 9-1: Product: syz [ 1494.852437][T16467] usb 9-1: Manufacturer: syz [ 1494.859984][T16467] usb 9-1: SerialNumber: syz [ 1494.921138][T16467] usb 9-1: config 0 descriptor?? [ 1494.959537][T16467] spcp8x5 9-1:0.201: SPCP8x5 converter detected [ 1494.998408][T26467] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1495.051954][T23762] tipc: Left network mode [ 1495.075688][T16467] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 1495.222795][T26400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.258997][T26400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.266532][T26400] bridge_slave_0: entered allmulticast mode [ 1495.489936][T26400] bridge_slave_0: entered promiscuous mode [ 1495.734528][T26400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.742084][T26400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.771259][T26400] bridge_slave_1: entered allmulticast mode [ 1495.797569][T26400] bridge_slave_1: entered promiscuous mode [ 1495.838082][T23875] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1495.985056][T16467] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1496.025519][T17082] Bluetooth: hci1: command tx timeout [ 1496.099453][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5505'. [ 1496.108884][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5505'. [ 1496.118164][T26496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5505'. [ 1496.278219][T16467] usb 2-1: Using ep0 maxpacket: 32 [ 1496.333622][T26400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.361762][T26400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1496.455931][T16467] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1496.524356][T16467] usb 2-1: config 0 has no interface number 0 [ 1496.537609][T26400] team0: Port device team_slave_0 added [ 1496.565672][T16467] usb 2-1: too many endpoints for config 0 interface 47 altsetting 24: 59, using maximum allowed: 30 [ 1496.582795][T26400] team0: Port device team_slave_1 added [ 1496.604371][T23762] hsr_slave_0: left promiscuous mode [ 1496.615767][T16467] usb 2-1: config 0 interface 47 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 1496.634788][T23762] hsr_slave_1: left promiscuous mode [ 1496.664723][T16467] usb 2-1: config 0 interface 47 has no altsetting 0 [ 1496.680395][T23762] veth1_macvtap: left promiscuous mode [ 1496.704123][T23762] veth0_macvtap: left promiscuous mode [ 1496.716762][T16467] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1496.738082][T19246] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1496.762714][T16467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.786268][T16467] usb 2-1: Product: syz [ 1496.796957][T16467] usb 2-1: Manufacturer: syz [ 1496.912610][T16467] usb 2-1: SerialNumber: syz [ 1496.934609][T19246] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1496.953740][T19246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.986908][T16467] usb 2-1: config 0 descriptor?? [ 1496.992707][T19246] usb 4-1: Product: syz [ 1496.992735][T19246] usb 4-1: Manufacturer: syz [ 1496.992754][T19246] usb 4-1: SerialNumber: syz [ 1497.045132][T23875] usb 9-1: USB disconnect, device number 28 [ 1497.070176][T23875] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1497.120386][T19246] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1497.132293][T23875] spcp8x5 9-1:0.201: device disconnected [ 1497.150293][ T5918] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1497.563496][T26502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.573237][T26502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.128347][T17082] Bluetooth: hci1: command tx timeout [ 1498.218843][ T5918] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1498.226159][ T5918] ath9k_htc: Failed to initialize the device [ 1498.446071][ T5918] usb 4-1: ath9k_htc: USB layer deinitialized [ 1498.541435][T23762] team0 (unregistering): Port device team_slave_1 removed [ 1498.644841][T23762] team0 (unregistering): Port device team_slave_0 removed [ 1498.965607][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5509'. [ 1500.113376][T26400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.152264][T16466] usb 4-1: USB disconnect, device number 106 [ 1500.158875][T26400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.358024][T26400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.477962][T26400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.507503][T26400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.631667][T26400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.894494][T16467] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1500.906792][T16467] dvb-usb: bulk message failed: -22 (2/0) [ 1500.974215][T16467] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1501.018414][T16467] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1501.026572][T16467] usb 2-1: media controller created [ 1501.144803][T26400] hsr_slave_0: entered promiscuous mode [ 1501.149664][T16467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.228237][T26400] hsr_slave_1: entered promiscuous mode [ 1501.260359][T26400] debugfs: 'hsr0' already exists in 'hsr' [ 1501.262036][T16467] cxusb: set interface failed [ 1501.307985][T26400] Cannot create hsr debugfs directory [ 1501.319844][T16467] dvb-usb: bulk message failed: -22 (1/0) [ 1501.393144][T26524] syzkaller0: entered promiscuous mode [ 1501.399499][T26524] syzkaller0: entered allmulticast mode [ 1501.455702][T26531] netlink: 'syz.1.5511': attribute type 10 has an invalid length. [ 1501.477448][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1501.477463][ T30] audit: type=1326 audit(1771824906.411:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1501.681402][ T30] audit: type=1326 audit(1771824906.411:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1501.717102][T16467] DVB: Unable to find symbol lgdt330x_attach() [ 1501.744172][T16467] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1501.767598][ T30] audit: type=1326 audit(1771824906.411:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1501.877557][ T30] audit: type=1326 audit(1771824906.411:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1501.966481][T16467] rc_core: IR keymap rc-dvico-portable not found [ 1501.976044][T16467] Registered IR keymap rc-empty [ 1502.003485][T16467] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1502.017138][T26531] batman_adv: batadv0: Adding interface: netdevsim0 [ 1502.024172][T26531] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.053576][T23762] IPVS: stop unused estimator thread 0... [ 1502.079973][ T30] audit: type=1326 audit(1771824906.411:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1502.119442][T16467] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input57 [ 1502.134699][ T30] audit: type=1326 audit(1771824906.411:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1502.158554][T16467] dvb-usb: schedule remote query interval to 100 msecs. [ 1502.165659][T16467] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1502.176908][ T30] audit: type=1326 audit(1771824906.411:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1502.206048][T26531] batman_adv: batadv0: Interface activated: netdevsim0 [ 1502.218897][ T30] audit: type=1326 audit(1771824906.411:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f76b939c629 code=0x7ffc0000 [ 1502.255149][T16467] usb 2-1: USB disconnect, device number 118 [ 1502.324908][T26024] dvb-usb: bulk message failed: -22 (1/0) [ 1502.396143][ T30] audit: type=1326 audit(1771824906.471:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76b935cece code=0x7ffc0000 [ 1502.728848][ T30] audit: type=1326 audit(1771824906.471:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26521 comm="syz.1.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76b935cece code=0x7ffc0000 [ 1502.855212][T16467] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1502.922345][T21363] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1502.998084][T26549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1503.089359][T21363] usb 9-1: Using ep0 maxpacket: 16 [ 1503.102785][T21363] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.137373][T21363] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1503.152581][T21363] usb 9-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1503.171930][T23762] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.186787][T21363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.200360][T23762] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.214155][T21363] usb 9-1: config 0 descriptor?? [ 1503.331743][T26551] veth0_to_bond: left allmulticast mode [ 1503.337641][T26551] veth0_to_bond: left promiscuous mode [ 1503.357699][T26551] bridge10: port 1(veth0_to_bond) entered disabled state [ 1503.389005][T26551] bridge11: port 1(veth0_to_bond) entered blocking state [ 1503.410376][T26551] bridge11: port 1(veth0_to_bond) entered disabled state [ 1503.437346][T26551] veth0_to_bond: entered allmulticast mode [ 1503.456928][T26551] veth0_to_bond: entered promiscuous mode [ 1503.586160][T23762] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.621446][T23762] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.640884][T21363] steelseries 0003:1038:12C2.002B: unknown main item tag 0x0 [ 1503.655593][T26557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5517'. [ 1503.659897][T21363] steelseries 0003:1038:12C2.002B: unknown main item tag 0x0 [ 1503.683394][T21363] steelseries 0003:1038:12C2.002B: unknown main item tag 0x0 [ 1503.694435][T21363] steelseries 0003:1038:12C2.002B: unknown main item tag 0x0 [ 1503.704737][T21363] steelseries 0003:1038:12C2.002B: unknown main item tag 0x0 [ 1503.897112][T23762] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.912894][T23762] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.139417][T23762] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.168231][T23762] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.351779][T26571] syzkaller0: entered promiscuous mode [ 1504.360381][T26571] syzkaller0: entered allmulticast mode [ 1504.443473][T26579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1506.152570][T21363] usb 9-1: USB disconnect, device number 29 [ 1506.868100][T16466] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1506.978302][T26024] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1507.068290][T16466] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1507.119781][T16466] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1507.141934][T16466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1507.175423][T26605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5527'. [ 1507.188986][T16466] usb 9-1: Product: syz [ 1507.193892][T16466] usb 9-1: Manufacturer: syz [ 1507.200123][T26024] usb 4-1: config 0 has no interfaces? [ 1507.205978][T16466] usb 9-1: SerialNumber: syz [ 1507.229619][T26024] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1507.239864][T26024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.253834][T26024] usb 4-1: Product: syz [ 1507.258300][T26024] usb 4-1: Manufacturer: syz [ 1507.276187][T26024] usb 4-1: SerialNumber: syz [ 1507.298404][T26024] usb 4-1: config 0 descriptor?? [ 1507.465040][T16466] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1507.522381][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1507.781390][ C0] usblp0: nonzero write bulk status received: -71 [ 1507.801875][T23875] usb 9-1: USB disconnect, device number 30 [ 1507.829715][T23875] usblp0: removed [ 1508.647626][T19246] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1508.834431][T19246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1508.845890][T19246] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1508.855559][T19246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.881144][T19246] usb 9-1: config 0 descriptor?? [ 1509.095810][T19246] usb 9-1: USB disconnect, device number 31 [ 1509.694271][T26613] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5529'. [ 1510.044370][T26619] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5530'. [ 1510.068506][T26619] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5530'. [ 1510.077617][T26619] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5530'. [ 1510.368117][T26024] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1510.449318][T26606] bridge1: port 1(veth0_to_bond) entered blocking state [ 1510.468745][T26606] bridge1: port 1(veth0_to_bond) entered disabled state [ 1510.478356][T26606] veth0_to_bond: entered allmulticast mode [ 1510.485756][T26606] veth0_to_bond: entered promiscuous mode [ 1510.499128][T26606] bridge1: port 1(veth0_to_bond) entered blocking state [ 1510.506367][T26606] bridge1: port 1(veth0_to_bond) entered forwarding state [ 1510.534277][T26024] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1510.544254][T26024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.569534][T26024] usb 9-1: Product: syz [ 1510.573878][T26024] usb 9-1: Manufacturer: syz [ 1510.598162][T26024] usb 9-1: SerialNumber: syz [ 1510.626140][T26024] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1510.654607][T21363] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1510.822446][T23762] bridge_slave_1: left allmulticast mode [ 1510.842404][T26621] loop5: detected capacity change from 0 to 7 [ 1510.851703][T23762] bridge_slave_1: left promiscuous mode [ 1510.881371][T23762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.888989][T26621] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1510.900434][T26621] loop5: p1 start 771753728 is beyond EOD, truncated [ 1510.909429][T23762] bridge_slave_0: left allmulticast mode [ 1510.915246][T23762] bridge_slave_0: left promiscuous mode [ 1510.923100][T26621] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1510.939983][T23762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.950448][T26621] loop5: p3 start 1764718181 is beyond EOD, truncated [ 1510.967342][T26621] loop5: p4 size 2863267840 extends beyond EOD, truncated [ 1511.003025][T26621] loop5: p5 start 1009845767 is beyond EOD, truncated [ 1511.014414][T26621] loop5: p6 start 3875569436 is beyond EOD, truncated [ 1511.176830][T23762] veth0_to_bond: left allmulticast mode [ 1511.194296][T23762] veth0_to_bond: left promiscuous mode [ 1511.206837][T23762] bridge15: port 1(veth0_to_bond) entered disabled state [ 1511.282104][T25609] udevd[25609]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1511.710800][T26630] fuse: Bad value for 'fd' [ 1511.728392][T21363] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1511.737121][T21363] ath9k_htc: Failed to initialize the device [ 1511.793169][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1511.793190][ T30] audit: type=1326 audit(1771824916.741:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1511.831746][T21363] usb 9-1: ath9k_htc: USB layer deinitialized [ 1511.976827][ T30] audit: type=1326 audit(1771824916.741:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.057393][ T30] audit: type=1326 audit(1771824916.741:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.080127][T23868] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1512.132130][ T30] audit: type=1326 audit(1771824916.741:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.227113][ T30] audit: type=1326 audit(1771824916.741:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.275095][T23868] usb 10-1: Using ep0 maxpacket: 16 [ 1512.300751][T23868] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1512.309554][T23868] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1512.347047][T23868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.358108][ T30] audit: type=1326 audit(1771824916.741:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.386070][ T30] audit: type=1326 audit(1771824916.741:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.419243][T23868] usb 10-1: config 0 descriptor?? [ 1512.505845][ T30] audit: type=1326 audit(1771824916.741:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.576507][ T30] audit: type=1326 audit(1771824916.741:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.615819][T23762] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1512.631154][T23762] geneve2 (unregistering): left allmulticast mode [ 1512.718239][ T30] audit: type=1326 audit(1771824916.741:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26626 comm="syz.9.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x7ffc0000 [ 1512.868380][T16466] usb 9-1: USB disconnect, device number 32 [ 1513.129695][T26634] trusted_key: encrypted_key: insufficient parameters specified [ 1513.142367][T26634] trusted_key: encrypted_key: insufficient parameters specified [ 1513.685492][T23762] bond0 (unregistering): Released all slaves [ 1513.747662][T26623] xfrm1: entered allmulticast mode [ 1514.254697][T23762] tipc: Left network mode [ 1514.978501][ T5918] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1515.168241][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 1515.187408][ T5918] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.238030][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1515.253847][T23868] usbhid 10-1:0.0: can't add hid device: -71 [ 1515.264169][ T5918] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1515.273998][T23868] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1515.317983][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.357631][T23868] usb 10-1: USB disconnect, device number 11 [ 1515.383950][ T5918] usb 2-1: config 0 descriptor?? [ 1515.490407][T23875] usb 4-1: USB disconnect, device number 107 [ 1515.584174][T23762] hsr_slave_0: left promiscuous mode [ 1515.603873][T23762] hsr_slave_1: left promiscuous mode [ 1515.627299][T23762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.635405][T23762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.824028][ T5918] steelseries 0003:1038:12C2.002C: unknown main item tag 0x0 [ 1515.831861][ T5918] steelseries 0003:1038:12C2.002C: unknown main item tag 0x0 [ 1515.839615][ T5918] steelseries 0003:1038:12C2.002C: unknown main item tag 0x0 [ 1515.859518][T23762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.867042][T23762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.887244][ T5918] steelseries 0003:1038:12C2.002C: unknown main item tag 0x0 [ 1516.084898][T23762] batman_adv: batadv0: Interface deactivated: vlan1 [ 1516.094267][ T5918] steelseries 0003:1038:12C2.002C: unknown main item tag 0x0 [ 1516.103885][T23762] batman_adv: batadv0: Removing interface: vlan1 [ 1516.108384][T26024] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1516.257028][T23762] batadv_slave_1: left promiscuous mode [ 1516.263217][T23762] veth0_macvtap: left promiscuous mode [ 1516.398939][T26024] usb 4-1: Using ep0 maxpacket: 16 [ 1516.464910][T26024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1516.596537][T26024] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1516.704953][T26024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.793942][T26024] usb 4-1: config 0 descriptor?? [ 1516.842509][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 1516.842530][ T30] audit: type=1326 audit(1771824921.801:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373db9c2bb code=0x7ffc0000 [ 1516.950724][ T30] audit: type=1326 audit(1771824921.831:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373db9c2bb code=0x7ffc0000 [ 1517.122382][ T30] audit: type=1326 audit(1771824921.831:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373db9c2bb code=0x7ffc0000 [ 1517.207668][ T30] audit: type=1326 audit(1771824921.831:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373db9c2bb code=0x7ffc0000 [ 1517.294759][T26670] binder: 26666:26670 ioctl c0306201 200000000640 returned -22 [ 1517.313091][ T30] audit: type=1326 audit(1771824921.831:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f373db5cece code=0x7ffc0000 [ 1517.485242][ T30] audit: type=1326 audit(1771824922.031:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1517.627401][ T30] audit: type=1326 audit(1771824922.031:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26648 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373db9c629 code=0x7ffc0000 [ 1517.771988][T26675] program syz.8.5542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.835743][T23762] team_slave_1 (unregistering): left promiscuous mode [ 1517.853300][T26677] program syz.8.5542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.903426][T23762] team0 (unregistering): Port device team_slave_1 removed [ 1518.045663][T23762] team_slave_0 (unregistering): left promiscuous mode [ 1518.105330][T23762] team0 (unregistering): Port device team_slave_0 removed [ 1518.215398][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5543'. [ 1518.630270][T23762] dummy0 (unregistering): left promiscuous mode [ 1518.890840][T23762] team0 (unregistering): Port device dummy0 removed [ 1518.992265][T21363] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1519.065865][T26400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1519.186263][T26400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1519.204818][T21363] usb 10-1: config 0 has an invalid interface number: 201 but max is 0 [ 1519.220277][T21363] usb 10-1: config 0 has no interface number 0 [ 1519.245001][T21363] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1519.286270][T26400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1519.313243][T21363] usb 10-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1519.360307][T21363] usb 10-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 1519.386199][T21363] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.417246][T21363] usb 10-1: Product: syz [ 1519.442282][T21363] usb 10-1: Manufacturer: syz [ 1519.468382][T21363] usb 10-1: SerialNumber: syz [ 1519.471808][T26400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1519.519032][T23875] usb 2-1: USB disconnect, device number 119 [ 1519.526295][T21363] usb 10-1: config 0 descriptor?? [ 1519.561649][T21363] spcp8x5 10-1:0.201: SPCP8x5 converter detected [ 1519.598713][T21363] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 1520.050668][T26693] bond3: option resend_igmp: invalid value (18345) [ 1520.078283][T26693] bond3: option resend_igmp: allowed values 0 - 255 [ 1520.099967][T26693] bond3 (unregistering): Released all slaves [ 1520.351763][T26024] usbhid 4-1:0.0: can't add hid device: -71 [ 1520.358381][T26024] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1520.385729][T26024] usb 4-1: USB disconnect, device number 108 [ 1520.563546][T26400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.659474][T26400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.737426][T23875] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1520.803360][T26710] loop3: detected capacity change from 0 to 7 [ 1520.840461][T23760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.847730][T23760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.864710][T26710] Dev loop3: unable to read RDB block 7 [ 1520.871952][T26710] loop3: unable to read partition table [ 1520.897382][T23760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.904597][T23760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.970072][T26710] loop3: partition table beyond EOD, truncated [ 1520.976395][T26710] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1520.998170][T23875] usb 9-1: Using ep0 maxpacket: 16 [ 1521.107946][T23875] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1521.133201][T23875] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1521.155170][T23875] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1521.169828][T23875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.186234][T23875] usb 9-1: Product: syz [ 1521.193104][T23875] usb 9-1: Manufacturer: syz [ 1521.202539][T23875] usb 9-1: SerialNumber: syz [ 1521.224787][T23875] usb 9-1: config 0 descriptor?? [ 1521.343038][T26707] syzkaller0: entered promiscuous mode [ 1521.387176][T26707] syzkaller0: entered allmulticast mode [ 1521.458905][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1521.512455][T23875] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input58 [ 1521.557274][T26024] usb 10-1: USB disconnect, device number 12 [ 1521.574504][T26400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1521.646728][T26024] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1521.659749][T26024] spcp8x5 10-1:0.201: device disconnected [ 1521.706322][T26400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.789426][T23875] imon:send_packet: packet tx failed (-71) [ 1521.904613][T26400] veth0_vlan: entered promiscuous mode [ 1521.943220][T23875] imon 9-1:0.0: panel buttons/knobs setup failed [ 1522.283060][T23875] rc_core: IR keymap rc-imon-pad not found [ 1522.308406][T23875] Registered IR keymap rc-empty [ 1522.321065][T23875] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1522.348075][T23875] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1522.374510][T23875] imon:send_packet: packet tx failed (-71) [ 1522.427263][T23875] imon 9-1:0.0: remote input dev register failed [ 1522.447331][T23875] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1522.573789][T23875] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1522.580536][T23875] imon:imon_probe: failed to initialize context! [ 1522.624438][T23875] imon 9-1:0.0: unable to register, err -19 [ 1522.663669][T23875] usb 9-1: USB disconnect, device number 33 [ 1523.005031][T26724] loop5: detected capacity change from 0 to 7 [ 1523.067963][T23875] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1523.172544][T26724] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1523.208716][T26724] loop5: p1 start 771753728 is beyond EOD, truncated [ 1523.219552][T26724] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1523.229065][T26724] loop5: p3 start 1764718181 is beyond EOD, truncated [ 1523.230876][ T30] audit: type=1326 audit(1771824928.191:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26725 comm="syz.9.5552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4ff39c629 code=0x0 [ 1523.236076][T26724] loop5: p4 size 2863267840 extends beyond EOD, [ 1523.298027][T23875] usb 9-1: Using ep0 maxpacket: 16 [ 1523.329989][T26724] truncated [ 1523.331834][T23875] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1523.344276][T23875] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1523.360494][T23875] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1523.369750][T26724] loop5: p5 start 1009845767 is beyond EOD, truncated [ 1523.370259][T23875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.399635][T26724] loop5: p6 start 3875569436 is beyond EOD, truncated [ 1523.440198][T23875] usb 9-1: Product: syz [ 1523.444440][T23875] usb 9-1: Manufacturer: syz [ 1523.478222][T23875] usb 9-1: SerialNumber: syz [ 1523.529046][T23875] usb 9-1: config 0 descriptor?? [ 1523.538440][T23875] usb 9-1: can't set config #0, error -71 [ 1523.579088][T23875] usb 9-1: USB disconnect, device number 34 [ 1523.592874][T25609] udevd[25609]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1524.088047][T23875] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1524.517981][T23875] usb 9-1: Using ep0 maxpacket: 16 [ 1524.587407][T23875] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.623142][T23875] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1524.638048][T23875] usb 9-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1524.652686][T23875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.691042][T23875] usb 9-1: config 0 descriptor?? [ 1525.221694][T23875] steelseries 0003:1038:12C2.002D: unknown main item tag 0x0 [ 1525.257611][T23875] steelseries 0003:1038:12C2.002D: unknown main item tag 0x0 [ 1525.283905][T23875] steelseries 0003:1038:12C2.002D: unknown main item tag 0x0 [ 1525.298322][T23875] steelseries 0003:1038:12C2.002D: unknown main item tag 0x0 [ 1525.323591][T23875] steelseries 0003:1038:12C2.002D: unknown main item tag 0x0 [ 1527.617608][T16466] usb 9-1: USB disconnect, device number 35 [ 1528.398006][T16466] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1528.574118][T16466] usb 9-1: Using ep0 maxpacket: 16 [ 1528.583737][T16466] usb 9-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1528.595853][T16466] usb 9-1: config 0 has no interfaces? [ 1528.613778][T16466] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1528.623462][T16466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.656116][T16466] usb 9-1: Product: syz [ 1528.662552][T16466] usb 9-1: Manufacturer: syz [ 1528.667398][T16466] usb 9-1: SerialNumber: syz [ 1528.679795][T16466] usb 9-1: config 0 descriptor?? [ 1529.403277][T26739] ip6tnl0: entered promiscuous mode [ 1529.426793][T26739] ip6tnl0: entered allmulticast mode [ 1529.480918][T26400] veth1_vlan: entered promiscuous mode [ 1529.486020][T23762] IPVS: stop unused estimator thread 0... [ 1529.623729][T26400] veth0_macvtap: entered promiscuous mode [ 1529.676610][T26400] veth1_macvtap: entered promiscuous mode [ 1529.710003][T26400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.732947][T26400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.763639][T11160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.790289][T11160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.077616][T11160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.343440][ T136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.683391][T11158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.702077][T11158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.839648][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.875001][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.196142][T16466] usb 9-1: USB disconnect, device number 36 [ 1531.486760][T26773] program syz.8.5562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.586232][T26776] program syz.8.5562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.729954][T16466] IPVS: starting estimator thread 0... [ 1531.888017][T26780] IPVS: using max 39 ests per chain, 93600 per kthread [ 1532.524718][ T9710] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1532.599334][T26786] loop3: detected capacity change from 0 to 7 [ 1532.618867][T26786] loop3: [POWERTEC] p1 p2 p3 p4 p5 [ 1532.627291][T26786] loop3: p1 size 65545 extends beyond EOD, truncated [ 1532.659619][T26786] loop3: p2 start 50399747 is beyond EOD, truncated [ 1532.666322][T26786] loop3: p3 start 196617 is beyond EOD, truncated [ 1532.701312][T26786] loop3: p4 size 3219128316 extends beyond EOD, truncated [ 1532.740850][ T9710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.765144][ T9710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.828102][ T9710] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1532.898875][ T9710] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1532.927155][T26401] udevd[26401]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1532.949821][T26405] udevd[26405]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1532.970004][T25609] udevd[25609]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1532.979596][ T9710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.041044][ T9710] usb 10-1: config 0 descriptor?? [ 1533.114474][ T30] audit: type=1326 audit(1771824938.071:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26794 comm="syz.1.5569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76b939c629 code=0x0 [ 1533.475155][ T9710] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1533.492394][T26766] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1533.648101][T26766] usb 2-1: device descriptor read/64, error -71 [ 1533.758525][T26815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1533.838767][T26815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.869385][T26815] bond_slave_0: left allmulticast mode [ 1533.884378][T26815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.895148][T26815] bond_slave_1: left allmulticast mode [ 1533.902868][T26815] bond0 (unregistering): Released all slaves [ 1533.909350][T26766] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1533.964947][T15464] usb 10-1: USB disconnect, device number 13 [ 1534.058186][T26766] usb 2-1: device descriptor read/64, error -71 [ 1534.178582][T26766] usb usb2-port1: attempt power cycle [ 1534.538003][T26766] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1534.613137][T26766] usb 2-1: device descriptor read/8, error -71 [ 1534.878520][T26766] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1534.916064][T26766] usb 2-1: device descriptor read/8, error -71 [ 1535.046976][T26766] usb usb2-port1: unable to enumerate USB device [ 1535.054464][T26024] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1535.078124][T16466] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1535.088963][T26024] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1535.448157][T16466] usb 10-1: device descriptor read/64, error -71 [ 1535.688121][T16466] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1535.744041][T26850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1535.828198][T16466] usb 10-1: device descriptor read/64, error -71 [ 1536.002112][T16466] usb usb10-port1: attempt power cycle [ 1536.275479][T26868] [U]  [ 1536.278990][T26868] [U] K{ [ 1536.282102][T26868] [U] t 1ŠFfˊ`GJgo/mC [ 1536.289060][T26868] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1536.305117][T26868] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1536.315645][T26868] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1536.352034][T26868] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1536.375958][T26868] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1536.387967][T26868] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1536.399642][T26868] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1536.535734][T26868] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1536.545199][T26868] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1536.559076][T26868] [U] 22Ʃx?0;3u [ 1536.563278][T26868] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1536.588926][T26868] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1536.598366][T26868] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1536.607001][T26868] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1536.613220][T26868] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1536.625840][T26868] [U] ec [ 1536.628989][T26868] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1536.684770][T16466] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1536.768576][T16466] usb 10-1: device descriptor read/8, error -71 [ 1537.022225][T16466] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1537.034850][T26875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5586'. [ 1537.068747][T16466] usb 10-1: device descriptor read/8, error -71 [ 1537.132653][T26864] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1537.180534][T16466] usb usb10-port1: unable to enumerate USB device [ 1537.438038][T16466] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 1537.528020][T26362] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1537.568082][T16466] usb 9-1: device descriptor read/64, error -71 [ 1537.710009][T26362] usb 2-1: device descriptor read/64, error -71 [ 1537.818070][T16466] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 1537.958027][T26362] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1537.958111][T16466] usb 9-1: device descriptor read/64, error -71 [ 1538.098701][T16466] usb usb9-port1: attempt power cycle [ 1538.109072][T26362] usb 2-1: device descriptor read/64, error -71 [ 1538.161830][T26715] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1538.219334][T26362] usb usb2-port1: attempt power cycle [ 1538.324823][T26715] usb 10-1: config 0 has no interfaces? [ 1538.346890][T26715] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1538.377117][T26715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.390930][T26715] usb 10-1: Product: syz [ 1538.395347][T26715] usb 10-1: Manufacturer: syz [ 1538.400806][T26715] usb 10-1: SerialNumber: syz [ 1538.415161][T26715] usb 10-1: config 0 descriptor?? [ 1538.468103][T16466] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 1538.509198][T16466] usb 9-1: device descriptor read/8, error -71 [ 1538.578026][T26362] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1538.626600][T26362] usb 2-1: device descriptor read/8, error -71 [ 1538.681309][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5591'. [ 1538.693242][T26715] usb 10-1: USB disconnect, device number 18 [ 1538.784035][T16466] usb 9-1: new low-speed USB device number 40 using dummy_hcd [ 1538.836509][T16466] usb 9-1: device descriptor read/8, error -71 [ 1538.858079][T26024] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1538.897983][T26362] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1538.918795][T26362] usb 2-1: device descriptor read/8, error -71 [ 1538.948237][T16466] usb usb9-port1: unable to enumerate USB device [ 1539.018043][T26024] usb 4-1: Using ep0 maxpacket: 32 [ 1539.028399][T26024] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1539.028751][T26362] usb usb2-port1: unable to enumerate USB device [ 1539.039421][T26024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.055486][T26024] usb 4-1: Product: syz [ 1539.061643][T26024] usb 4-1: Manufacturer: syz [ 1539.066360][T26024] usb 4-1: SerialNumber: syz [ 1539.074479][T26024] usb 4-1: config 0 descriptor?? [ 1539.083220][T26024] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1539.092163][T26024] dvb-usb: bulk message failed: -22 (4/0) [ 1539.098049][T26024] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1539.108594][T26024] dvb-usb: bulk message failed: -22 (5/0) [ 1539.114341][T26024] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1539.128640][T26024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1539.138910][T26024] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1539.147071][T26024] usb 4-1: media controller created [ 1539.166747][T26024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1539.187218][T26024] usb 4-1: selecting invalid altsetting 3 [ 1539.193195][T26024] ttusb2: set interface to alts=3 failed [ 1539.233029][T26024] DVB: Unable to find symbol tda10086_attach() [ 1539.242721][T26024] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1539.251952][T26024] dvb-usb: bulk message failed: -22 (4/0) [ 1539.270438][T26024] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1539.283086][T26902] dvb-usb: bulk message failed: -22 (7/0) [ 1539.294092][T26902] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1539.309940][T26902] ttusb2: i2c transfer failed. [ 1539.322988][T26024] dvb-usb: bulk message failed: -22 (5/0) [ 1539.329332][T26024] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1539.343188][T26901] dvb-usb: bulk message failed: -22 (7/0) [ 1539.351311][T26024] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1539.363599][T26901] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1539.383080][T26901] ttusb2: i2c transfer failed. [ 1539.436216][T26024] usb 4-1: USB disconnect, device number 109 [ 1539.546973][T26910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1539.557429][T26024] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1540.205318][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5598'. [ 1540.214975][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5598'. [ 1540.224332][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5598'. [ 1540.406448][T26921] loop5: detected capacity change from 0 to 7 [ 1540.415413][T26921] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1540.423200][T26921] loop5: p1 start 771753728 is beyond EOD, truncated [ 1540.436360][T26921] loop5: p2 start 1818846767 is beyond EOD, truncated [ 1540.498643][T26921] loop5: p3 start 1764718181 is beyond EOD, truncated [ 1540.528069][T26921] loop5: p4 size 2863267840 extends beyond EOD, truncated [ 1540.567477][T26921] loop5: p5 start 1009845767 is beyond EOD, truncated [ 1540.574923][T26766] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1540.611818][T26921] loop5: p6 start 3875569436 is beyond EOD, truncated [ 1540.663772][T26928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1540.768162][T26766] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1540.797800][T26766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.849997][T26766] usb 9-1: Product: syz [ 1540.857555][T26766] usb 9-1: Manufacturer: syz [ 1540.887361][T26766] usb 9-1: SerialNumber: syz [ 1540.917577][T25609] udevd[25609]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1541.012976][T26766] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1541.042375][T15464] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1541.877940][ C0] [ 1541.880360][ C0] ================================ [ 1541.885654][ C0] WARNING: inconsistent lock state [ 1541.890913][ C0] syzkaller #0 Tainted: G L [ 1541.897025][ C0] -------------------------------- [ 1541.902289][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1541.909176][ C0] kworker/u8:5/23762 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 1541.915826][ C0] ffff8880828ab760 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1541.925170][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1541.930897][ C0] lock_acquire+0xf0/0x2e0 [ 1541.935516][ C0] lock_sock_nested+0x48/0x100 [ 1541.940505][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 1541.945922][ C0] rds_tcp_listen_init+0x168/0x410 [ 1541.951164][ C0] rds_tcp_init_net+0x154/0x380 [ 1541.956333][ C0] ops_init+0x35c/0x5c0 [ 1541.960691][ C0] register_pernet_operations+0x343/0x830 [ 1541.966545][ C0] register_pernet_device+0x2a/0x80 [ 1541.972125][ C0] rds_tcp_init+0xcf/0x170 [ 1541.976753][ C0] do_one_initcall+0x250/0x8d0 [ 1541.981701][ C0] do_initcall_level+0x104/0x190 [ 1541.987171][ C0] do_initcalls+0x59/0xa0 [ 1541.991986][ C0] kernel_init_freeable+0x2a6/0x3e0 [ 1541.997483][ C0] kernel_init+0x1d/0x1d0 [ 1542.001913][ C0] ret_from_fork+0x51e/0xb90 [ 1542.006708][ C0] ret_from_fork_asm+0x1a/0x30 [ 1542.011588][ C0] irq event stamp: 2183190 [ 1542.016027][ C0] hardirqs last enabled at (2183190): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1542.026632][ C0] hardirqs last disabled at (2183189): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 1542.036813][ C0] softirqs last enabled at (2183102): [] __dev_queue_xmit+0x274/0x38a0 [ 1542.046818][ C0] softirqs last disabled at (2183103): [] do_softirq+0x76/0xd0 [ 1542.056160][ C0] [ 1542.056160][ C0] other info that might help us debug this: [ 1542.064464][ C0] Possible unsafe locking scenario: [ 1542.064464][ C0] [ 1542.072029][ C0] CPU0 [ 1542.075335][ C0] ---- [ 1542.078627][ C0] lock(k-sk_lock-AF_INET6); [ 1542.083345][ C0] [ 1542.086859][ C0] lock(k-sk_lock-AF_INET6); [ 1542.091910][ C0] [ 1542.091910][ C0] *** DEADLOCK *** [ 1542.091910][ C0] [ 1542.100083][ C0] 12 locks held by kworker/u8:5/23762: [ 1542.105690][ C0] #0: ffff88807e036148 ((wq_completion)krds_cp_wq#1/0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1542.117594][ C0] #1: ffffc900039a7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1542.130615][ C0] #2: ffff888033d3d1e0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1542.140675][ C0] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 1542.150124][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 1542.159138][ C0] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1542.168228][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 1542.177882][ C0] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50 [ 1542.187623][ C0] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1542.196405][ C0] #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 1542.205404][ C0] #10: ffff8880828ab6e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 1542.215186][ C0] #11: ffff8880828ab908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 1542.225478][ C0] [ 1542.225478][ C0] stack backtrace: [ 1542.232435][ C0] CPU: 0 UID: 0 PID: 23762 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.232463][ C0] Tainted: [L]=SOFTLOCKUP [ 1542.232470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1542.232488][ C0] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 1542.232518][ C0] Call Trace: [ 1542.232527][ C0] [ 1542.232536][ C0] dump_stack_lvl+0xe8/0x150 [ 1542.232561][ C0] print_usage_bug+0x28b/0x2e0 [ 1542.232595][ C0] mark_lock_irq+0x410/0x420 [ 1542.232621][ C0] mark_lock+0x115/0x190 [ 1542.232644][ C0] __lock_acquire+0x689/0x2cf0 [ 1542.232667][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1542.232694][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1542.232721][ C0] lock_acquire+0xf0/0x2e0 [ 1542.232741][ C0] ? inet6_getname+0x15d/0x650 [ 1542.232763][ C0] lock_sock_nested+0x48/0x100 [ 1542.232782][ C0] ? inet6_getname+0x15d/0x650 [ 1542.232799][ C0] inet6_getname+0x15d/0x650 [ 1542.232815][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1542.232834][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1542.232855][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1542.232880][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1542.232911][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1542.232930][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1542.232948][ C0] ? NF_HOOK+0x336/0x3c0 [ 1542.232970][ C0] ? ip6_input+0x16a/0x270 [ 1542.232992][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 1542.233008][ C0] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 1542.233027][ C0] ? __napi_poll+0xae/0x340 [ 1542.233043][ C0] ? net_rx_action+0x627/0xf70 [ 1542.233062][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1542.233080][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 1542.233104][ C0] ? ip6_xmit+0x1149/0x1980 [ 1542.233122][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 1542.233144][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1542.233164][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1542.233179][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 1542.233197][ C0] ? process_scheduled_works+0xb02/0x1830 [ 1542.233217][ C0] ? worker_thread+0xa50/0xfc0 [ 1542.233236][ C0] ? kthread+0x388/0x470 [ 1542.233249][ C0] ? ret_from_fork+0x51e/0xb90 [ 1542.233269][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1542.233291][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1542.233309][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1542.233333][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1542.233357][ C0] __tcp_read_sock+0x196/0x970 [ 1542.233373][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1542.233391][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1542.233408][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1542.233425][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1542.233442][ C0] ? tcp_grow_window+0x4fc/0xc50 [ 1542.233462][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 1542.233492][ C0] ? tcp_urg+0x106/0x410 [ 1542.233514][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1542.233537][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1542.233558][ C0] ? ktime_get+0x45/0x200 [ 1542.233576][ C0] ? seqcount_lockdep_reader_access+0x40/0x100 [ 1542.233592][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1542.233618][ C0] tcp_rcv_established+0xf45/0x2740 [ 1542.233651][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1542.233675][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1542.233692][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1542.233710][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1542.233728][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1542.233747][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1542.233773][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1542.233787][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1542.233804][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1542.233819][ C0] ? raw6_local_deliver+0x116/0x950 [ 1542.233843][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1542.233857][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1542.233890][ C0] ip6_input_finish+0x191/0x370 [ 1542.233914][ C0] NF_HOOK+0x336/0x3c0 [ 1542.233936][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1542.233953][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1542.233976][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1542.233997][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1542.234020][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1542.234047][ C0] ip6_input+0x16a/0x270 [ 1542.234069][ C0] ? ip6_input+0x23/0x270 [ 1542.234091][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1542.234112][ C0] ip_sabotage_in+0x1e1/0x270 [ 1542.234129][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1542.234145][ C0] nf_hook_slow+0xc5/0x220 [ 1542.234166][ C0] NF_HOOK+0x21f/0x3c0 [ 1542.234187][ C0] ? skb_orphan+0xaf/0xd0 [ 1542.234210][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1542.234232][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1542.234253][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1542.234275][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1542.234299][ C0] ? netif_receive_skb+0x102/0xc50 [ 1542.234315][ C0] netif_receive_skb+0x278/0xc50 [ 1542.234333][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1542.234351][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1542.234370][ C0] NF_HOOK+0xa4/0x3a0 [ 1542.234386][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1542.234403][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1542.234419][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1542.234436][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1542.234455][ C0] ? br_pass_frame_up+0x275/0x420 [ 1542.234473][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 1542.234490][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1542.234514][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1542.234535][ C0] ? ip6t_do_table+0x173/0x1560 [ 1542.234555][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1542.234581][ C0] ? nf_hook_slow+0x176/0x220 [ 1542.234600][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1542.234617][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1542.234636][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1542.234653][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1542.234670][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1542.234689][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1542.234708][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1542.234728][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1542.234747][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1542.234764][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1542.234784][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1542.234802][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1542.234820][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1542.234836][ C0] br_handle_frame+0x1277/0x1510 [ 1542.234856][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1542.234874][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1542.234894][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1542.234911][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 1542.234935][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1542.234955][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1542.234979][ C0] ? lock_acquire+0xf0/0x2e0 [ 1542.234999][ C0] ? process_backlog+0x3eb/0x1950 [ 1542.235018][ C0] ? process_backlog+0x3eb/0x1950 [ 1542.235036][ C0] ? process_backlog+0x3eb/0x1950 [ 1542.235055][ C0] process_backlog+0x76d/0x1950 [ 1542.235080][ C0] __napi_poll+0xae/0x340 [ 1542.235096][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1542.235115][ C0] net_rx_action+0x627/0xf70 [ 1542.235139][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1542.235163][ C0] ? sched_clock+0x3f/0x60 [ 1542.235183][ C0] handle_softirqs+0x22a/0x870 [ 1542.235204][ C0] ? do_softirq+0x76/0xd0 [ 1542.235224][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1542.235248][ C0] do_softirq+0x76/0xd0 [ 1542.235267][ C0] [ 1542.235273][ C0] [ 1542.235279][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1542.235298][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1542.235321][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1542.235349][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1542.235373][ C0] ? irqentry_exit+0x59e/0x620 [ 1542.235396][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1542.235419][ C0] ? irqentry_exit+0x59e/0x620 [ 1542.235441][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1542.235467][ C0] ? eth_header+0x11b/0x200 [ 1542.235489][ C0] ? __asan_memcpy+0x40/0x70 [ 1542.235519][ C0] ? ip6_output+0x126/0x550 [ 1542.235537][ C0] ip6_output+0x340/0x550 [ 1542.235557][ C0] ip6_xmit+0x1149/0x1980 [ 1542.235584][ C0] ? ip6_xmit+0x283/0x1980 [ 1542.235604][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1542.235626][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1542.235646][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1542.235661][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1542.235674][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1542.235688][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1542.235718][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1542.235744][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1542.235765][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1542.235801][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1542.235822][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1542.235837][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1542.235856][ C0] rds_send_xmit+0x207e/0x28d0 [ 1542.235888][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1542.235910][ C0] rds_send_worker+0x7d/0x2e0 [ 1542.235930][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1542.235950][ C0] process_scheduled_works+0xb02/0x1830 [ 1542.235979][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1542.236000][ C0] ? assign_work+0x3d5/0x5e0 [ 1542.236021][ C0] worker_thread+0xa50/0xfc0 [ 1542.236049][ C0] kthread+0x388/0x470 [ 1542.236063][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1542.236083][ C0] ? __pfx_kthread+0x10/0x10 [ 1542.236097][ C0] ret_from_fork+0x51e/0xb90 [ 1542.236118][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1542.236136][ C0] ? __switch_to+0xc7d/0x1450 [ 1542.236154][ C0] ? __pfx_kthread+0x10/0x10 [ 1542.236168][ C0] ret_from_fork_asm+0x1a/0x30 [ 1542.236196][ C0] [ 1543.180347][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1543.189250][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23762, name: kworker/u8:5 [ 1543.198679][ C0] preempt_count: 303, expected: 0 [ 1543.203923][ C0] RCU nest depth: 7, expected: 0 [ 1543.208887][ C0] INFO: lockdep is turned off. [ 1543.213686][ C0] Preemption disabled at: [ 1543.213697][ C0] [] __dev_queue_xmit+0x281/0x38a0 [ 1543.225066][ C0] CPU: 0 UID: 0 PID: 23762 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.225090][ C0] Tainted: [L]=SOFTLOCKUP [ 1543.225097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1543.225108][ C0] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 1543.225134][ C0] Call Trace: [ 1543.225142][ C0] [ 1543.225155][ C0] dump_stack_lvl+0xe8/0x150 [ 1543.225177][ C0] __might_resched+0x378/0x4d0 [ 1543.225199][ C0] ? __dev_queue_xmit+0x281/0x38a0 [ 1543.225224][ C0] lock_sock_nested+0x5d/0x100 [ 1543.225242][ C0] inet6_getname+0x15d/0x650 [ 1543.225258][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1543.225275][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1543.225294][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1543.225317][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1543.225338][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1543.225356][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1543.225374][ C0] ? NF_HOOK+0x336/0x3c0 [ 1543.225395][ C0] ? ip6_input+0x16a/0x270 [ 1543.225416][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 1543.225433][ C0] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 1543.225452][ C0] ? __napi_poll+0xae/0x340 [ 1543.225468][ C0] ? net_rx_action+0x627/0xf70 [ 1543.225486][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1543.225504][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 1543.225528][ C0] ? ip6_xmit+0x1149/0x1980 [ 1543.225545][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 1543.225567][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1543.225587][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1543.225602][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 1543.225620][ C0] ? process_scheduled_works+0xb02/0x1830 [ 1543.225640][ C0] ? worker_thread+0xa50/0xfc0 [ 1543.225659][ C0] ? kthread+0x388/0x470 [ 1543.225672][ C0] ? ret_from_fork+0x51e/0xb90 [ 1543.225693][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1543.225715][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1543.225734][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1543.225757][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1543.225780][ C0] __tcp_read_sock+0x196/0x970 [ 1543.225797][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1543.225815][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1543.225832][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1543.225848][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1543.225866][ C0] ? tcp_grow_window+0x4fc/0xc50 [ 1543.225885][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 1543.225915][ C0] ? tcp_urg+0x106/0x410 [ 1543.225937][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1543.225960][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1543.225981][ C0] ? ktime_get+0x45/0x200 [ 1543.225994][ C0] ? seqcount_lockdep_reader_access+0x40/0x100 [ 1543.226009][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1543.226035][ C0] tcp_rcv_established+0xf45/0x2740 [ 1543.226063][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1543.226086][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1543.226104][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1543.226121][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1543.226140][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1543.226163][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1543.226190][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1543.226204][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1543.226221][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1543.226237][ C0] ? raw6_local_deliver+0x116/0x950 [ 1543.226261][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1543.226275][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1543.226307][ C0] ip6_input_finish+0x191/0x370 [ 1543.226332][ C0] NF_HOOK+0x336/0x3c0 [ 1543.226354][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1543.226371][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1543.226394][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1543.226415][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1543.226438][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1543.226465][ C0] ip6_input+0x16a/0x270 [ 1543.226487][ C0] ? ip6_input+0x23/0x270 [ 1543.226509][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1543.226531][ C0] ip_sabotage_in+0x1e1/0x270 [ 1543.226547][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1543.226564][ C0] nf_hook_slow+0xc5/0x220 [ 1543.226585][ C0] NF_HOOK+0x21f/0x3c0 [ 1543.226606][ C0] ? skb_orphan+0xaf/0xd0 [ 1543.226629][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1543.226651][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1543.226673][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1543.226695][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1543.226719][ C0] ? netif_receive_skb+0x102/0xc50 [ 1543.226735][ C0] netif_receive_skb+0x278/0xc50 [ 1543.226753][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1543.226771][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1543.226790][ C0] NF_HOOK+0xa4/0x3a0 [ 1543.226806][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1543.226823][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1543.226839][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1543.226856][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1543.226876][ C0] ? br_pass_frame_up+0x275/0x420 [ 1543.226894][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 1543.226911][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1543.226935][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1543.226955][ C0] ? ip6t_do_table+0x173/0x1560 [ 1543.226976][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1543.226995][ C0] ? nf_hook_slow+0x176/0x220 [ 1543.227015][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1543.227032][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1543.227051][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1543.227067][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1543.227084][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1543.227103][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1543.227122][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1543.227147][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1543.227165][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1543.227183][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1543.227202][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1543.227220][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1543.227239][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1543.227254][ C0] br_handle_frame+0x1277/0x1510 [ 1543.227274][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1543.227292][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1543.227313][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1543.227329][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 1543.227353][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1543.227373][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1543.227397][ C0] ? lock_acquire+0xf0/0x2e0 [ 1543.227417][ C0] ? process_backlog+0x3eb/0x1950 [ 1543.227436][ C0] ? process_backlog+0x3eb/0x1950 [ 1543.227455][ C0] ? process_backlog+0x3eb/0x1950 [ 1543.227473][ C0] process_backlog+0x76d/0x1950 [ 1543.227499][ C0] __napi_poll+0xae/0x340 [ 1543.227515][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1543.227533][ C0] net_rx_action+0x627/0xf70 [ 1543.227557][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1543.227581][ C0] ? sched_clock+0x3f/0x60 [ 1543.227601][ C0] handle_softirqs+0x22a/0x870 [ 1543.227622][ C0] ? do_softirq+0x76/0xd0 [ 1543.227642][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1543.227666][ C0] do_softirq+0x76/0xd0 [ 1543.227685][ C0] [ 1543.227690][ C0] [ 1543.227695][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1543.227715][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1543.227738][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1543.227766][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1543.227790][ C0] ? irqentry_exit+0x59e/0x620 [ 1543.227813][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1543.227873][ C0] ? irqentry_exit+0x59e/0x620 [ 1543.227899][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1543.227928][ C0] ? eth_header+0x11b/0x200 [ 1543.227950][ C0] ? __asan_memcpy+0x40/0x70 [ 1543.227983][ C0] ? ip6_output+0x126/0x550 [ 1543.228003][ C0] ip6_output+0x340/0x550 [ 1543.228025][ C0] ip6_xmit+0x1149/0x1980 [ 1543.228049][ C0] ? ip6_xmit+0x283/0x1980 [ 1543.228070][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1543.228095][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1543.228117][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1543.228133][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1543.228154][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1543.228169][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1543.228202][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1543.228231][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1543.228255][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1543.228294][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1543.228318][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1543.228334][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1543.228355][ C0] rds_send_xmit+0x207e/0x28d0 [ 1543.228388][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1543.228415][ C0] rds_send_worker+0x7d/0x2e0 [ 1543.228437][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1543.228459][ C0] process_scheduled_works+0xb02/0x1830 [ 1543.228490][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1543.228513][ C0] ? assign_work+0x3d5/0x5e0 [ 1543.228535][ C0] worker_thread+0xa50/0xfc0 [ 1543.228567][ C0] kthread+0x388/0x470 [ 1543.228583][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1543.228604][ C0] ? __pfx_kthread+0x10/0x10 [ 1543.228619][ C0] ret_from_fork+0x51e/0xb90 [ 1543.228642][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1543.228662][ C0] ? __switch_to+0xc7d/0x1450 [ 1543.228682][ C0] ? __pfx_kthread+0x10/0x10 [ 1543.228698][ C0] ret_from_fork_asm+0x1a/0x30 [ 1543.228728][ C0]