last executing test programs: 8m13.205069925s ago: executing program 32 (id=96): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (rerun: 32) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)=@l={0x92, 0x63, 0xb0, 0x0, 0x5, 0xb1, 0xbc68}) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x2, 0x3, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsync(0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x4, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @generic="febe017fa2a7dcc51096986a664bc6a27c0a9d1bc3f092fcc589c4cc5feb6f3ccd1bb3783e7933360bb6e01567b1f7b46302cf0f05c6cf262b460b54bd8f4cba828fefef7172026ad0757e630cb7aa2b736951cf3e72d2af934096f7dca577137ba4ae40cf9742f27c46eb2b7e04ff465bd7a4f1d15fd8ac6013cac81036110a30475c071ba5d92006f6c58da7e5b58be8407b2b2091b6aa994deb574ccef1d53ecb6b29a7fe3b8115fdab7c4e73309d4b9acf741afe34f692f8899bfab94f65d442127a5c5a9d924257aac5e5ce2bde8710d9cf8596e6a4bfff760e"]}, 0x16}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m21.25939978s ago: executing program 5 (id=1042): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000540)="1afb1f000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x74e) socket(0x1, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) socket$rxrpc(0x21, 0x2, 0x2) syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x5, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x5}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x2, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f0000000c40)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000800)=""/146, 0x92}], 0x2}, 0xc0000000}, {{&(0x7f0000000640)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/40, 0x28}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f0000000700)=""/26, 0x1a}, {&(0x7f00000009c0)=""/70, 0x46}, {&(0x7f0000000a40)=""/92, 0x5c}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f00000005c0)=""/40, 0x28}], 0x7, &(0x7f0000000bc0)=""/86, 0x56}, 0x2}], 0x2, 0x40000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = semget(0x2, 0x4, 0x200) semtimedop(r10, &(0x7f00000000c0)=[{0x4, 0x7, 0x800}], 0x1, 0x0) socket$kcm(0xa, 0x3, 0x3a) 3m20.102988742s ago: executing program 5 (id=1047): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) 3m19.907426044s ago: executing program 5 (id=1048): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x1000000d}) 3m19.330400993s ago: executing program 5 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x8, 0x4, 0xfb}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) mmap$IORING_OFF_SQ_RING(&(0x7f00002e0000/0x1000)=nil, 0x1000, 0x2800003, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ae", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0x10000, 0xffffffff}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0010"], 0xa0}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r9, 0x93, 0x3) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000002500)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0500007598000000"], 0x0, 0x0}) 3m16.188163784s ago: executing program 4 (id=1062): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff04000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000066531ee3502b5b"], 0xb8}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x86c, 0x1, 0x1, 0xd59f80, 0x400019f2, 0x3, 0xd48b, 0x13, 0x8, 0x2800, 0x5, 0x2, 0xba2, 0xc, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x258, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x6f}}}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb, 0xb, "b4857e1d9682ea"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dab3440ce787"}]}, @NL80211_ATTR_NAN_FUNC={0x34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x193d}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x1d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x1c8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "fe29bcc8e0b56b1214713958a1abc7635f132353f9d96671534c811294650ddd15097f31db384497280f930742412690bb183f1898da334656c527587dde4807822a8fb85534388a711bdb55f4f1eaa5c8afa19c45283ddfa88f6516724cc68666aa1c48707c5addaba990c231ae1c6b274a8363d9bf9612a8882d549c26e6b57d18644dde0d7842b71a765be8c2ba039bc5f5f0362d7edcc273594a0897acd978058bef22fcd3876e1e1cdb592e8b8dad4c1b353dfa0c2f130bf601e0d115c061b36925a3fa320a7154cff5b6168add7dbfa202ec5059afffb851a76cb33d942548e95cde4cd1b12c5e01208b4406aa53a2dcd17a9aba5d1f886c0ec7ab1b"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfe, 0x5, 0x9, 0x4, 0x0, 0x5, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1ff, 0x4fd, 0xfffffffffffffc00}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r8, 0x40086432, &(0x7f0000000780)=0x57) 3m15.951470397s ago: executing program 4 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f210040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local, 0x2}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'pimreg1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x18, "9c5354bc99f3f2f1fa4c50b3c429f247d9cd656e8bb5f5f0"}}) rt_sigpending(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400150000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000eea000000000000000f0000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) getgroups(0x3, &(0x7f0000000200)=[0xee00, 0x0, 0x0]) 3m15.719407831s ago: executing program 5 (id=1064): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x2e, 0x1}, &(0x7f0000000040)) io_uring_setup(0x53fb, &(0x7f00000000c0)={0x0, 0xdad1, 0x1000, 0xfffffffd, 0x15c}) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004c9e58104505808001000102030109021200f300000000090402"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3ee26d7b48241847bf9e343ef4674c45e2a0ec060f11", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m14.107345303s ago: executing program 5 (id=1070): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) fallocate(r0, 0x11, 0x600, 0x40000000007c004) 3m11.966744697s ago: executing program 4 (id=1073): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000914000000102db000"], 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m8.88265653s ago: executing program 4 (id=1086): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x3a16d34d}}, 0xfffffc, 0x31, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r8, 0x2) shutdown(r8, 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r9 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000002c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) getdents64(r4, &(0x7f0000000000)=""/24, 0x18) getdents(r4, &(0x7f0000001180)=""/131, 0x83) 3m7.846322669s ago: executing program 4 (id=1089): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x40, 0x7fff, {0x77359400}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2, 0x0, 0x0, "b9b817681d225b37"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) readahead(r1, 0x9, 0x100) splice(r1, 0x0, r2, 0x0, 0x14, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32=r2, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$dri(0x0, 0x2, 0x98240) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0), 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000001c0)="d9fa27c7e0ec11fe4ee8ec09e3eafb3ec131d2f91d9f23d9254797018863065d6ee51e4e0acd2a5efeaa65609209eaeeedde0160974bfaeb9c0ac6e651c3a9e7c0e2bd43fe48f4dd8fb8135673cdc0fcf20b7c7989735fcb", 0x58, 0x44000084, 0x0, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsopen(0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc800, &(0x7f00000002c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000}, 0x1c) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x0) 3m6.707611404s ago: executing program 33 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f0000000580)=""/206, 0xce}], 0x2}}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "283e54c9360d262f", "998e0d65c033162ad7da6ad9cd0746d5", "8ceaa78f", "3b8e7bbdf62da253"}, 0x28) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f0000000040), 0x44) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x20010, r0, 0xa4701000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x20010, r0, 0xa4701000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="14391e30fb086b23f2187d111d3c902f00000047a84a21eb7bd514eaba181d7308000000db864b2e320bc75329095bd805fec0ab94695a70f2f1f651ba3408e100e2dd9600daf24e3a7f08ffd44aff614d50c1509962f2390cafb926da8348c395d6", @ANYRES16=r1, @ANYBLOB="55b32bbd7000fedbdf25100000005637dbb9581e86c6baa2105f0f4415169d"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x13c) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c9071200f4c20102030109021200f9ff0000cb842f00"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c9071200f4c20102030109021200f9ff0000cb842f00"], 0x0) 3m6.643410189s ago: executing program 4 (id=1094): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x3f9, 0x49}, 0x0, &(0x7f00000000c0)={0x1f, 0x3, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffbff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x884) 3m6.200345605s ago: executing program 34 (id=1094): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x3f9, 0x49}, 0x0, &(0x7f00000000c0)={0x1f, 0x3, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffbff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x884) 2m58.201029079s ago: executing program 35 (id=1070): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) fallocate(r0, 0x11, 0x600, 0x40000000007c004) 2m44.731014255s ago: executing program 1 (id=1126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x80000) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FSSETXATTR(r3, 0x8902, &(0x7f0000000040)={0xe71, 0xe, 0x232, 0x40, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x400) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24040050) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) fallocate(r2, 0x14, 0x6, 0x100000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m44.555013972s ago: executing program 1 (id=1127): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r1, 0x2, 0x1, "fa"}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2m41.205082655s ago: executing program 1 (id=1130): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="6f20eca3e061fe679074fae9211f966adbc2b57b4977fb720f6b56c88e3e7f153266442eee1405af14d7ca38ab161fa0ae21027ecbf9cf72bd6721cb64c6e37626672495f26ae6e5eebda434bd8806098f8fb727c47cec4d0834f1ae45dde425e6015c4e3671b42ca3f646f6c19b4ff7e8cf19b3121fc7e38b7a3095b8aa3a522ac92677ac1fb9ac2dab8bbba032405bf68141751295de915486ace64b87378458fb969721bf41c824bf9432a6ca26ba7757141fc21f3d8b3ed4595350cde4f3d32dbc669807563a7139e101d7c014a6128428c92353efa04dd39b", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m37.795724292s ago: executing program 1 (id=1133): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xd}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x104, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xb, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6b96, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m37.099401807s ago: executing program 1 (id=1134): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async, rerun: 32) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_INIT(r3, &(0x7f0000000100)={0x78}, 0xfeb1) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x22, &(0x7f0000000280)=""/34, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) write$FUSE_INIT(r3, &(0x7f0000003200)={0x50, 0xfffffffffffffffc, 0x0, {0x7, 0x2b, 0x401, 0x4021980, 0x1, 0x647, 0x3, 0x101, 0x0, 0x0, 0x100, 0x3}}, 0x50) (async, rerun: 32) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 32) write$rfkill(r5, 0x0, 0x700) close(r2) 2m36.763443298s ago: executing program 1 (id=1137): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000400)=[0x5, 0xe53, 0x6, 0x7c0], &(0x7f0000000440)=[0x3, 0x100, 0x0, 0x7f, 0x4c, 0x5, 0x1, 0x80, 0x9], &(0x7f0000000140)=[0xffff], &(0x7f0000000180)}) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r7, r5, 0x0, 0x80004700) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000700000410000000004ea7bb7b4cc90ac9996900"/38], 0x1c}, 0x1, 0x0, 0x0, 0x20844}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000001400000011000100"], 0x88}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xfffffffffffffce4, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x29) 2m28.815379754s ago: executing program 8 (id=1155): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x100005}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0xfffffffa, 0x4) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872e"], 0x0) (rerun: 64) madvise(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0xb) 2m28.705249717s ago: executing program 8 (id=1156): syz_usb_connect(0x3, 0xd9b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe9, 0x2c, 0x84, 0xff, 0x12d1, 0xb364, 0x956d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd89, 0x4, 0x1, 0x0, 0x0, 0xc3, [{{0x9, 0x4, 0x44, 0x9, 0x0, 0xff, 0x1, 0x6b, 0x40}}, {{0x9, 0x4, 0x3d, 0x7, 0x3, 0x73, 0xca, 0x5f, 0xc5, [@generic={0x59, 0xb, "b9a0e1e8e5d2048b2bab0beb7c2f81018e299d4e47f4c07e9d479fba15f5cb9b6650f38f2e6e5519f865e9441c797c0ebd81ad659c6adb2a11f302cc7f2d21482b0660431d740c8c089b8325506aa4499d0210433e22c0"}, @generic={0x3, 0x23, "e9"}], [{{0x9, 0x5, 0x6, 0x2, 0x0, 0x7f, 0x7, 0x2, [@generic={0x1d, 0x22, "4445dd8cb45c31490eb8fbb9123f4b4abe01185bdab66f2409d374"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x6a, 0x1, 0xb3}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xc3, 0xe7, 0x9, [@generic={0x7d, 0x1, "d6edeef7373dff69ba319d3ce2187de530df1f5def1874050f9f6c22ee11b6d0fb7e3f437b3dfdb29339295b4598599232791862f0a6a8953bece7a5fb5aa1e6fffc7178e07a556ba891dbeafe56d9b9db4f815cb66062907216a662b08f4a9bacfd2f22e8845c3bbb1fc20ef7fcd33d8283f9208017bb4c6569e5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0x72, 0x7, 0xd, 0x14, 0x4b, 0xc, 0x3, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "be680f"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1, 0xb}, [@ncm={0x6, 0x24, 0x1a, 0xfff3, 0xc}, @mdlm={0x15, 0x24, 0x12, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x1}, @dmm={0x7, 0x24, 0x14, 0x756, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x9, 0x7b, 0xb6}, @obex={0x5, 0x24, 0x15, 0xe}]}, @generic={0x44, 0x30, "707e054cfcec6baaa49946f2cc02e94bae2f39108f2e1543e6889f22ffdb992cebd9e6564331467f31dc3367aaf3dc99ec17b2b46f4a748b302aee83c256e4194af7"}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x80, 0x4, 0xf7}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x3, 0x7, 0x7f}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x2, 0x4, 0x40, [@generic={0xaf, 0x22, "7aa258dd90e9acc8e288f6a8aa3619cbc29defa8007b494e66df1dc1764df76568121453f7224000d4af5c7cc7214deb10e4ead313763e2f45cffbfac30002e7d077bf466d0d212f77489530ae32ea624575b4d95d81fa7f8991e3003265ac6e6ad0b23bd9a15350ba43d181433a3c5b57a06c2ea946115734baae1a00624f1a6c7717c329d0f17abd415a250232e912bd4331287dbc3045ee98472fbeb26afce2938ea863a3a530fe232f78d3"}, @generic={0x24, 0x30, "36d3c0e74bf771bc275a7ae7d91d07cac002a7d9edf24aa1e2ad7a0a48770f2157f8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x4, 0x4, [@generic={0x16, 0x5, "5a61017c30f6922413711f64058636cab9d53ff4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x4, 0x0, 0x5, [@generic={0x102, 0x11, "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"}, @generic={0x67, 0xd, "3ad5efdc2949f8207467ec53648ff0e939f11a5905b4f651c9d3f653bb759f070ca59254dc8af81d4bacb9da5eee1f700d29ce88c92d3b7c8e9702cc6d8f08c9d78e081dee5c837d136f8b978dce94f099f39abee4f61778e2051ce1f198cb91a45cce9ff3"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x9, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xf, 0x0, 0x85}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x0, 0x10, 0x8, [@generic={0x77, 0xc, "ff1599449af29789fb461a643bf25b5841ac69c0e2e486b7284bfc7330318d9880770c9c43521532f59092eb3426ac1618704043cbe93c09a4b569e653bef11ad8c5479cbafe8fcda4d1c52bb1521603a53716bf2708a375c3c7ddc92260dc4af5a39b72d6ab243420f67054ad561cc88d38198984"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x7, 0x0, 0x9, [@generic={0x93, 0x21, "fc35d42951eb8e24d2d98b7f0738bd7271e7cda62e836e37bad82f79b5711b70aa9cf0365d1458bf1aaf028117429ba7bba8ad685ae666b1ace7de9673b3309de2793e4546ce39a6383c97facfb897326be941a5ca60bbf2fd73ea039efe3835d5c10c5bedad0fb6738314a0a639441d862c1a6f65e43e1e5dac87af7f580760579404a9b7904eabb3e85f36794440a6a8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x4, 0x9c, 0x10}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x91, 0x8, [@generic={0x20, 0xb, "10a891a1729bbaa24c2434d2089d3f05d73155e2492bc9d5164bfb76beea"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x8, 0x71, 0x10, [@generic={0xb9, 0xf, "df67e2b2fd1edfc89760c72310cacf1f8b3a55263c5f4c4134bbcdd20f9493c450537288e424bc80d4da8d36784c688b3539fe23fafb1f02ed2db088c0c7eb87f5b8bb4826dda758e4f0c1849b8e6d3824fa0e5b6cc9fc5ac8a25b26c3927c99083aeb3237068cdd9b26dc2e620906c679573521e1ac8a5d9f4e7379accbc1885d41864c2e9ac60c9f2fd1c8ec532df91c992fa3feb7e964f72297a4069a2b4e9cfe8ade5ad58c7d5d4f370c6d26a0d9330d796a5443ba"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x6}]}}]}}, {{0x9, 0x4, 0x78, 0xa, 0xe, 0x4c, 0x19, 0xd4, 0xc6, [], [{{0x9, 0x5, 0x6, 0x8, 0x0, 0x6, 0x7f, 0xe3}}, {{0x9, 0x5, 0x0, 0x17, 0x400, 0x6, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xf}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3f7, 0x7, 0xb, 0x8, [@generic={0x98, 0xf, "7f76dd73994afeff6f7e83ac2b9c89512dcddfc1348a0481c29514b6eea410cbe8517f8f049be49442b25304fd1f57113ee36106b04d44f93183de50a1e320382ddb348caa71530f44b3bd0dae623da4c423775bb898cdb51b4b8b834d60e28cd171b59a4e153ef7d2c5aea700b5c8e327422f62667f1fa4c527cb84a453acdb7af55c4706a7f8a262bf58a5322874e2972722ccab9d"}, @generic={0xda, 0x31, "d948000f6d3f3e9eeb6a590cd1ded10bb8549f54554599b158f24600e2a0ec98c2a7edbb8f09a14ab2b27536351877309bbe84e70147ea89c69c5cfd7d5ce7eb42266c1b9f78f44edc753462318b0986cd47ed10ee71075314def992d5b4792cf627bc12e461e6f0edaf2f0fc2f2d480bdc4ebdfc31ea75517d10f041247fc7f0e1236518a5f960f183af90efda0eb27a234c6e371817d314c6d54099ddaf9b5db9f371c8bb9eba10fc995bff116759bf17ba5f7d88e544ccc79d2d7305615e84e70dccaaf54f7df74fc18255251fda495036e7dfc12399d"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x60, 0x7f, 0x80, 0x5, [@generic={0x76, 0x2, "b3a02afbd5297d8d9a68f8c187439c44c97ed57de0626c4d2528703bedbadd588259d677cc698c2291b04b03e9e6318d9eb6f681ad385407651ac8652d2abe4b8513c14eac04d9a6cb5ec74edac810ae9a72faf8f72305b4bfead3bfa11a45b9e6f4f9a3896c2ff80cd2bc7ecd8d83f3ab91d493"}, @generic={0x83, 0x1, "ee59cabd0b62bcc78f4e117549d7e103cd0cba7837d390ee9bcad771815f9289f6343977dcc65794b0e88439a262ee6e74cfa4d16b1bdf76c054bb6808377e134b70f2826a72d8534c3cf855835cf29f3a7c3dbb8ce4dffb6036912cdb40f60e6f7e55ed0d00ae1e32ca6af7a283565b537af873c8b98a4690836b6e69f6a8c076"}]}}, {{0x9, 0x5, 0x6451982b8a3c3d87, 0x0, 0x0, 0x80, 0x6, 0x7}}, {{0x9, 0x5, 0x8b, 0xc, 0x20, 0x3, 0x0, 0x8, [@generic={0x62, 0x1, "97423d48c452e11830b1de5e13fe686b7f6ca196dbd77deed811e5625130d69290f58b14406e9bff80a65196d06c1198f96b7e25ba4913fd4cdc86450329c37db5f7607b7241cb04f6ec8364ec4b8fd131c3232a3a275af12b226d63d02d09fd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf9, 0x5}, @generic={0xd3, 0x10, "c81b22f3f83659458fcdc76899433562c66e8a31fa8b86d408d29b3931fb8b96842db35a990f25435d85df92993c1ba8039b13d6ff0c0b5a80bc1f8258f0b141250ac04bacf4c817c65a0e8c5edebcd6b16418b61bcc1851ae51f968194d31d70649bc7f2addacabe51d47748648b895bb4f14cd9c8bcc0ce254efc8f69185310681422c8608dca098d16340f3e4331fa1fcc356f148ce9e55fe02cce346f298f1f4d5f773bb22f2fec1e4fc54655647e7c9f4cd8abe9a0b8fdd461a248a3abec6dfc64499883d9217ed99809dec3ae8c2"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x54, 0xb6}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x3, 0xba, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2d, 0x4}, @generic={0x8e, 0x3, "c00aad00a05c02a00c2a1aedcb8d4c9404f2dd0a2f9e12767466233c0561dddcaebebdd42e6dcd0aeabcace386f5f307511dfcdc33a9e3b21237e8e6360ff332a854bc9446a59fbfd3020fae491b15dbc508eb3774c6534582a7061fdc32167c5d6f9d6d073afa72b93add787ce5b1809a3e8e4b9a85feb98fd7caa46fe9937bdc3bebf843ff53dacdcb1305"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x50, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x40}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x5, 0x9, 0x5, [@generic={0x95, 0x21, "801618d76df95205e13e448ac6a3bca5a2ade335c7da30bd19755ef017c852d3bf214213a49622a732928d5d6aaf93f9a4a0dee2298f53abd94f0a5149e9294d40ca155ae53f253e648b7f7e10fe5db8af702da1f688f0fde2f3062915c3ba6fea60313efa176de40cc36fba3ee18f6bda50482acad2531a6c1235f1a6a0f56e5e4407df7862661c82b411795cef35feb6604e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x4, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x74, 0xc263}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x8f, 0x2, 0x80, [@generic={0x97, 0xc, "163e1949cca2515fd9a672a335ef3f664476207eed8e175ea2f517a5824bc4a879551872600b51d69d4cc0969f697cd7a1b33d3d428ee8cbf794c654d7aadee3dd0a999d5a3937df3fc079a94b0c3530e597592d5616b9036e4495384599035ff38d09c4f3d76c0ab6fe9d0096a2c15109f27de061bddd17a69134028ca501d1f003220bcdb8dddf7d88de8cc7efd32f31a9a19919"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x1, 0x5, 0x9, [@generic={0xe3, 0x9, "dbc70c5ee894839a5aa143b6d960e24cf0bc16f9178d841c2314555753008f2a64ffa011a06599b9cf961e4472bb73893e9d911a5534c4e551b3b4743db63b3aba00793bfd5aa6d0fb7b2f1cfb961c020c61a0769cd549e76dad95dc663a4cef23d5380e7754bb52a0a2917297da416b1dfa5af4f6fc2021ea7cec83adc6bf52e96b663082ed6dd1e626463c2263e3837b314ac989db0caed90308047f3fdb2d87f5c597208d44f2a4f1d74f4d77eb96199a43d7e12c0fcc81759f2f111e544c3edfc4a34639f7bd19348016b9cd3fac27ac6788e5b261c359e5182c3a58bf3cc9"}]}}]}}]}}]}}, 0x0) 2m25.312570113s ago: executing program 8 (id=1164): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/40, 0x28) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x35}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f00000001c0)={0x30, 0x0, &(0x7f00000000c0)="691f0c06302f856516158397e607c295960fc18311da05b551a849e5bc35d1bfacddbe3a46a9c18a7c6fb5a6a8a94c7e3d2b92f5bacf4e750b3090eeb1290ac70e05966d74cc9ab748b4fec0c96c7ebfafddf102a0554e0cb9955d2c56c31fff76acae0f4c47a43505b78be6996a65b01c637443943217009a66f185bc69d9f717038d5da219757dfa4048e59d5ea83a74088db2fdb45c1bf4d0a39cac0f1e375e2227f36eea7d3ecf4dc2093a88a0a3f39e236a19f2d992be0fa04403aab8f5a85c8db4137b11ade479e175e9475ce55ccdae713d92b2c6652361c42d54d65ddf", {0x2, 0x3, 0x30323953, 0x3, 0x346, 0x7ff, 0x8, 0x5}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400443, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0xfe, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xa8, 0xab, '5', '\x00', 0x86dd}}}}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000001, 0x932, r2, 0x391e1000) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001040)={0x24, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x31, @string={0x31, 0x3, "639d3fe04ab60df161c487f205abd9c3c76e2058dbcdde17f358df5e74e806c3fee3028d0a4be491c28a919752257f"}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) 2m23.086703661s ago: executing program 8 (id=1170): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x9}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r4, 0x9, 0x2, [0xa, 0x7]}, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3dc13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={r3, 0x7, 0x58, "d2fffee3b6a4741e3919429f00c4c7474c6e4bb3f455f3f607b6b0367f3cfe33e00457aa606aab031a8cc3cb7563368d3ea32a04d8d03205b2bab565efe20bb813710eba5dbc9845045539cbd389086973daeb6a77794a66"}, 0x60) 2m22.528122529s ago: executing program 8 (id=1173): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x7ddfdbdfafa51cdd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m21.012390206s ago: executing program 36 (id=1137): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000400)=[0x5, 0xe53, 0x6, 0x7c0], &(0x7f0000000440)=[0x3, 0x100, 0x0, 0x7f, 0x4c, 0x5, 0x1, 0x80, 0x9], &(0x7f0000000140)=[0xffff], &(0x7f0000000180)}) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r7, r5, 0x0, 0x80004700) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000700000410000000004ea7bb7b4cc90ac9996900"/38], 0x1c}, 0x1, 0x0, 0x0, 0x20844}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000001400000011000100"], 0x88}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xfffffffffffffce4, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x29) 2m20.214805675s ago: executing program 8 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x840, 0x1000, 0x0, 0x2, 0x0, {0x0, 0x9416, 0x3}, {0x350, 0xffffff7d}, {0xf4f0, 0x1000000}, {}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf2501000000000000000141000000180017000000090000010169e23a64756d6d7930000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r10, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setreuid(0x0, 0x0) 2m14.23883463s ago: executing program 6 (id=1186): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x7ddfdbdfafa51cdd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m12.746112325s ago: executing program 6 (id=1189): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x0, 0x1, 0x2, 0x200, 0x8f71}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x1006, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x20000006, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x804}, 0x4}}, 0x10, 0x0}, 0x2400c8e0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000003060102000000000000000003000006050001c08e1c23"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40844) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 2m12.062670162s ago: executing program 6 (id=1190): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) memfd_create(0x0, 0x2) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xc, 0x2, 0xd, 0x5}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4212}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m11.684628931s ago: executing program 6 (id=1191): socket(0x23, 0x3, 0xff) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000340)=0x1, 0x12) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) 2m11.175509154s ago: executing program 6 (id=1193): io_setup(0x2, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async, rerun: 32) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) (async, rerun: 32) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x52}, @call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000440)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x1, 0x5, 0x4}, {0x1, 0x3, 0x4, 0x8}, {0x4, 0x5, 0xd, 0x8}, {0x2, 0x1, 0x8, 0x8}, {0x3, 0x3, 0x6, 0x6}, {0x4, 0x2, 0x6, 0xa}, {0x0, 0x5, 0x1, 0x8}, {0x0, 0x4, 0xe, 0x9}, {0x1, 0x4, 0x1, 0x9}], 0x10, 0x8b11fbb}, 0x94) r6 = syz_io_uring_complete(0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780), 0x10) (async) r8 = eventfd2(0x3, 0x80000) io_submit(r0, 0x4, &(0x7f0000000900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x54, r1, &(0x7f0000000100)="df8fe61e431d79513643aabf69634834f09d37f7cfd603d65026925ab86c2242ac0d38ec757d8475a6082a7cef50514f3c2c562a03a2984f8e0385a95e9884a8f288056e9892e77d739d5cdf4a15bb98b9956295071dde2eff4ba47b2fc919a2ba61fc0373f4cbdf11cdac7f13dd8a1f2e083b0817b4548b8ebf96290ebaaa09f49e5553d920f9a6bda2e9d9f72d9d98028c2f43e80c05dcfd80999b658a11f1f1567afebff7a1d090a51a14be3eff8f9a6fbc431ffa3321fa2e9fc9cd3aeee1883c715c020a78696fcd1373792bd9438131990e618ab63ca86a449a68bdbf89f4", 0xe1, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000280)="5ec7726405242d2f38d5e73fb5fb09b6a302ae56471206ec7b9032bab3e6072a682f0a854dc60b4fd8a19c149f1ae693833e9254cee46e39c64b937711dd9c7846415f5b4efe18b0b681d2fd2b99ebdd712b2fcd444cf3a45e69f9861dbf7467b4de6e61170d2004324a91bee2e8d6398efe0390e88ded0ce9da1e7766d4e06efac843c7ab4173b9a58987b265", 0x8d, 0x8, 0x0, 0x3, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000006c0)="4975e055dfbeab0c44070f02e06068c4d6c871748727576d45ca3a2ca3cc9ab040ce38e18d704485227c64aa39a408cc5a283faf3a45b44be61e486421e1e46938474f142894c7bc64080f231203c4eb892f6472a572769fc9c1df1cb078eedf72ff401100", 0x65, 0xf8, 0x0, 0x3, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0xfff7, r7, &(0x7f00000007c0)="0c7c0e398fcfc7df8735b46fafde43fec08bb024055fe3445d2a519c6e4048e178f461ec154622ce532a555e8cb0eb3e4345e9a9efa79cdceffd4aa014610196ac4b4f3f8d990cbb22a3c84a95f574d9dcbd777f48218e4f4bd57d5616597a95db0a73cba7bb668dc0d901f9a1a0ee20efcc9bb952d4e28a9e4e2040fdfaf1ca567336f66094a9acae90b38eefedcd33734a1fbd3ce73b6e404b41c65bdc83fc899e5386b8c54f869dffb0ff831509b0e1f5774029817dec755ac90839474070b44c56b6d0", 0xc5, 0xb4fe, 0x0, 0x2, r8}]) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x4100, 0x0) io_submit(r0, 0x5, &(0x7f0000000c40)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000980)="9c5ae8e5e1eecba1335296697a48f4551391537fe709776d29ed266f45601fe24a730961230de6088168dc1b9eebe1e735cba6a72e2b0aec4051975407c7b4f6b1842c0e0f2168a307f26a8146e3f35867c7f8e360eb5643129c", 0x5a, 0x6, 0x0, 0x3}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f0000000a40)="c2ddc0f70aa431b5702d1a4b0e2910615f9206", 0x13, 0x7}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x6, 0x40, r6, &(0x7f0000000ac0)="d75daa20660d0f484920", 0xa, 0x5}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f0000000b40)="d11f826ecc8c830cf8", 0x9, 0x3e6, 0x0, 0x1}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x8, 0xb497, r5, &(0x7f0000000bc0)="0df079cc7ed7c4c478dfc7fd0e2f7cb05762f230d0bac0f6a3f8cfdfaa66ed04b403076176614676f33787fa79e0661ce64fe9aa", 0x34, 0xb71, 0x0, 0x1, r4}]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000c80)="e0908f92d1babb171ab975b26c14f5b9", 0x10) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async, rerun: 64) ioctl$TIOCGRS485(r9, 0x542e, &(0x7f0000000cc0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000dc0)={0xffffffffffffffff}, 0x104, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000e40)={0xb, 0x10, 0xfa00, {&(0x7f0000000d00), r10, 0x81}}, 0x18) fcntl$setpipe(r8, 0x407, 0x69a) (async) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r12 = pidfd_getfd(r11, r9, 0x0) syz_open_pts(r12, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'geneve0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r4, r13, 0x25, 0x1, @val=@perf_event={0x7}}, 0x18) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000f40)=0x7) (async) recvmmsg(r3, &(0x7f00000015c0)=[{{&(0x7f0000000f80)=@qipcrtr, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)=""/186, 0xba}, {&(0x7f00000010c0)=""/18, 0x12}], 0x2, &(0x7f0000001140)=""/170, 0xaa}, 0x8}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/118, 0x76}, {&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001400)=""/155, 0x9b}], 0x3, &(0x7f0000001500)=""/130, 0x82}, 0x3}], 0x2, 0xa102, &(0x7f0000001640)={0x77359400}) (async) fstat(r6, &(0x7f0000001680)) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000001700)=0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x13, 0x4, 0x801, 0x70bd2c, 0x25dfdbfc, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044081}, 0x20004000) (async, rerun: 32) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000001840)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x3}) (rerun: 32) 2m10.451748693s ago: executing program 6 (id=1197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0x8, 0x4}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c95c}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0x8, 0x4}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c95c}, 0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 2m5.066037944s ago: executing program 37 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x840, 0x1000, 0x0, 0x2, 0x0, {0x0, 0x9416, 0x3}, {0x350, 0xffffff7d}, {0xf4f0, 0x1000000}, {}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf2501000000000000000141000000180017000000090000010169e23a64756d6d7930000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r10, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setreuid(0x0, 0x0) 1m55.333950114s ago: executing program 38 (id=1197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0x8, 0x4}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c95c}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x10000000, 0x8, 0x4}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c95c}, 0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 42.415407453s ago: executing program 0 (id=1415): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xa) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r4, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x200480c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) write$cgroup_pid(r6, &(0x7f00000000c0)=r7, 0x12) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100007f0000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="080026006c09000008002700010000000800a0006c090000"], 0x34}}, 0x40) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 39.91878756s ago: executing program 0 (id=1425): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000b, 0x13, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x9, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r4 = socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cc}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d8", 0x90}], 0x3}, 0x8001) socket$pppoe(0x18, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r7, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x94) 37.388530982s ago: executing program 0 (id=1436): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x669}, {0x20009, 0xfffffffa, 0xfff, 0x0, 0x8, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x86}}]}]}}]}, 0x5c}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.911265184s ago: executing program 0 (id=1437): prctl$PR_SCHED_CORE(0x3e, 0x8, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYRES8=r3], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x80) r7 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xab47, 0x0, 0x0, 0xb, 0x1c, "fee8b0ab78fc265e4b27fd58ee2400001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad5c11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000f001900", [0xfffffffffffffffd, 0x2000000000002]}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000c90000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 34.515379385s ago: executing program 0 (id=1444): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/packet\x00') pread64(r1, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x3) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000021c0), 0x10) mmap(&(0x7f00002bf000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) fsopen(0x0, 0x1) read$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 31.185091571s ago: executing program 0 (id=1456): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="a35b513008d6b3ef72e0975e873742047ba7722741298e051e5543ca436f7a074eb1ffb06affb763af2aad6a64c1c49aebd24e", 0x33}, {&(0x7f0000001680)="72112e005b99ebdcf287657302ae97cc74c0e9bfb49d631f20e14887f7d72fb68f0982ddcedb3adaa3a42b33236fd8f004", 0x31}, {&(0x7f00000016c0)="2800b1cd5bd67c75ae512fd438a83ea196ca5c66d9f75f7fbcbc44610843a630f191d8a6d9071ed2630bf0056e8b789a1e245ce909deceb204554c58bf31051db03193f067e9f3e6573a028dd7a9684b70882aad7b035651dc04f959f48de1c2b04f5d84d4d56fa1b2e4997dbbd9343df877f5a0770949f95b2778849988421ea34d3878a93a28de9ffa70f57cac6d2218bf0c1564fb6e31226a6aa4518c366a4d8e718a42c65233c3c0ccd69673a1273cd8d8f26e5ff466aca921f3f642feb28c8e8f0d31796f", 0xc7}, {&(0x7f00000017c0)="bd59af0c4beb8cf3169eafe03cad0e867e65ca397c8fdd5348763c6cc133e902194435f6c196020ac5fd3d4a7fa4a446334866653ed7ffa69481d3d155ea24efc8ec5f8a8bc88db616b9c8d8bc4ff7145d5fcf33f82072ed95c9d4b9cb86a9af2da02921", 0x64}], 0x4, 0x0, 0x0, 0x8084}}], 0x1, 0x20004894) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=""/105, 0x69}, 0x4}, {{&(0x7f0000000380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1, &(0x7f0000001500)=""/46, 0x2e}, 0x10001}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x4) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x16, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x3, 0x1, 0x20}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, &(0x7f00000018c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x253, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, {0xa, 0x40, 0x0, @private1, 0x4}, 0xffffffffffffffff, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200200000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 15.574115819s ago: executing program 39 (id=1456): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f00000015c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="a35b513008d6b3ef72e0975e873742047ba7722741298e051e5543ca436f7a074eb1ffb06affb763af2aad6a64c1c49aebd24e", 0x33}, {&(0x7f0000001680)="72112e005b99ebdcf287657302ae97cc74c0e9bfb49d631f20e14887f7d72fb68f0982ddcedb3adaa3a42b33236fd8f004", 0x31}, {&(0x7f00000016c0)="2800b1cd5bd67c75ae512fd438a83ea196ca5c66d9f75f7fbcbc44610843a630f191d8a6d9071ed2630bf0056e8b789a1e245ce909deceb204554c58bf31051db03193f067e9f3e6573a028dd7a9684b70882aad7b035651dc04f959f48de1c2b04f5d84d4d56fa1b2e4997dbbd9343df877f5a0770949f95b2778849988421ea34d3878a93a28de9ffa70f57cac6d2218bf0c1564fb6e31226a6aa4518c366a4d8e718a42c65233c3c0ccd69673a1273cd8d8f26e5ff466aca921f3f642feb28c8e8f0d31796f", 0xc7}, {&(0x7f00000017c0)="bd59af0c4beb8cf3169eafe03cad0e867e65ca397c8fdd5348763c6cc133e902194435f6c196020ac5fd3d4a7fa4a446334866653ed7ffa69481d3d155ea24efc8ec5f8a8bc88db616b9c8d8bc4ff7145d5fcf33f82072ed95c9d4b9cb86a9af2da02921", 0x64}], 0x4, 0x0, 0x0, 0x8084}}], 0x1, 0x20004894) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000300)=""/105, 0x69}, 0x4}, {{&(0x7f0000000380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1, &(0x7f0000001500)=""/46, 0x2e}, 0x10001}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x4) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x16, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x3, 0x1, 0x20}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, &(0x7f00000018c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x253, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, {0xa, 0x40, 0x0, @private1, 0x4}, 0xffffffffffffffff, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200200000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 13.118762437s ago: executing program 3 (id=1503): r0 = socket(0x23, 0x3, 0xff) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x138, 0x98, 0x138, 0x138, 0x98, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2a, 0x40, 0xf2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x88b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x30, 0x6, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x1, 0x7}}]}}}]}}]}}, 0x0) openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@multicast1, @empty, 0xff, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {0xff}, {}, 0x73, 0x2, 0x7}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "f42f", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x6, 0x0, 0x0, 0x7, 0x4], 0x4}, {0x0, [0x4, 0x4, 0x5566da36b70d1d2d, 0x4, 0x0, 0x2], 0x1}}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0x0, 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "50de"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0xfff4, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x9, 0xd, [0x1, 0x1e, 0x20, 0xd, 0x23, 0xc, 0x29, 0x1e, 0x3c, 0xb, 0x25, 0x26, 0x0, 0xe, 0x32, 0x31], 0x0, 0x4, 0xfffffffffffff7f3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000001c0)={r7, 0x401, 0x4}) write$cgroup_int(r6, &(0x7f0000000340)=0x1, 0x12) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0x1) 9.915320925s ago: executing program 3 (id=1507): syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0x2d, 0x3d, 0x6a, 0x8, 0x5c6, 0x9205, 0x29ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4f, 0x9b}}, {{0x9, 0x4, 0xb0, 0x0, 0x0, 0x3a, 0x38, 0x46}}, {{0x9, 0x4, 0x31, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r0 = syz_usb_connect(0x5, 0x62b, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x91, 0xa6, 0xee, 0x10, 0x19d2, 0x1114, 0x59b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x619, 0x3, 0x7, 0xe7, 0x40, 0x5, [{{0x9, 0x4, 0x4f, 0x8, 0x4, 0xff, 0xff, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xa}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0xa, 'T'}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x7b, "25f1e662ab"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x5, "649270"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x5, 0x6, 0x4}]}], [{{0x9, 0x5, 0xb6526f72d73b4709, 0x8, 0x3ff, 0x6, 0x79, 0x2, [@generic={0xa3, 0x6, "6d8c1256744e9f476e64ee234c07f66902a23838f760d5aa7127f90dffb934cc3bb074b198ac7cec470cd0fbadbd82369a8519949993106f464a17d0f7aa243218fc533549fb8daa5a4eb3093748eb6b7bf0e4899ad70808d75872eb2b497367a6b3369553d12d02c3fff3e4e6cdb2d539b15d9f266660f713b64825eee303c041f86c480217e6fa88bcba99ce1e26888783ed2bd3f5da88dfd72b9c335b8cc192"}, @generic={0xf1, 0x23, "163b2b6b3c36508c766562e82a4a328b6e77985e12e84412c84357408f14c2e6b71a922b00903a4f82d4959ddbfc6dfece297ee31c9097e0dae5193f15c37dc8ebc1890a64e128f8161283cb5e801f221307cbd571c41168f35f0ce06c830577107745d018be9b69199704788e1555f64cb2a511bae62d8f9f1abcd430077c632bca6c4d01bd3ff334d4ad15a5155b7c55f7db7a17106049084a8f2e0e721a4964b3825ce4974b4b96b425b17dc88b380be097b330b232b0a95deb2b71e297c2761616a473af337699b0ca8cedd275e217574a5d192dcd702a7f0e44535bcfd68585084da61b200ff55b5b1cb46226"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xe, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x8, 0x0, 0x0, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0xe7}]}}]}}, {{0x9, 0x4, 0xba, 0x3, 0x2, 0x7d, 0x60, 0x63, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "2d43eb"}, {0x5, 0x24, 0x0, 0xff51}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xafd5, 0x6, 0xf}, {0x6, 0x24, 0x1a, 0x5, 0x2}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x0, 0x27, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x60, 0x1ff}, @generic={0x12, 0x31, "024f9b8390f54f7f0ff7a227d6a6ad45"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x6, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4f, 0xd174}, @generic={0xf9, 0xc, "bfb91134e393b0f9a7cc3fb99723c65e81252a32311472faf8f4eeb567c2760f9f0966c2450cb95c3861db76c50018ba2012c566f499e68f300249f3a740018bc30bd8927a9899664517962c7ae154d688be7bedb2ebcdb8ae836107579ead8aa96a62388ae513048083f88a45cd533864cfcf1b60e8f8e40f94db95a0d02b4127f43b231a7c14a5f5447ccab19469fec7a8b3907a03069db89645e71f3033837ef69f783eb763c8ab8203836a8f78c3ab07b2aa80165dc95368f0b60d3a422b9794158f76b359cf13db9b2ccfa9c7e4511f55947caa757dc1ce542529554c818edfc87f57b78b11026136be773bf915038014415b2cb9"}]}}]}}, {{0x9, 0x4, 0xff, 0x3, 0x5, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "531b0823b9c9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x8, 0xac, 0xa}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm_detail={0xc1, 0x24, 0x13, 0x7, "3048e2db74d655f84cb589128877d3e561572194366b62b1494eb71b03d4fd34ab548757e1178ee08c4049f29c87f00fc98dde001c64e062ea2ae734df02def78b37d234ec2998cbcd1317f8a76708e710fd19d32e5f523f1b992102a4e4598d1af3ee94a655df1c1bc449ef6bcddf7a8850b93296ad140171eccb2f9b9e2d556367b2b1b43313ccaa4cdbea64b7b52804983d02d5429f67bffe564e7ce7d63e35cbc077123860a72f0bb7e9fb3de82ff0b0db64db6eda0bc904690637"}, @call_mgmt={0x5, 0x24, 0x1, 0x5aa8effa4e7c7e5f, 0x81}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x0, 0x5, 0x9, 0xfffd, 0x4}]}], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x8, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xff, 0xfd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x21}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x8d, 0x7, 0x6, [@generic={0x36, 0x22, "88d2313ca98e817fa0f333d0bdc5fe020c62d944d28456bdf95891dbb28aad89737ba093b95b5e675ed86a838db071b8e26b2a57"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xbd, 0x7, 0x3, [@generic={0xb5, 0x1, "376bfd03daf4b6b4ba6230e50011cf8c80facdd27301ee1aae9e3b015c6dfec2787d44f185d9db1a7d12439538843db1ae822bcd08d63ebb5a07a2b01f3d729c5b7b3da57428af1c7583629194eda1c43c5bc27e000bb7326a12913f0102c60bed569a599938b7bc1ebb27c0c1f5dcaad3d81e8e566a5f99a51f42f8a20b7a9bcb0c22824b0e26b57bc64299e22b838a838e39be13990b3a42b322526c8deda10c82dd0c3cde319dddae8a4d207c63702615a1"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0xf5, 0x5, [@generic={0x75, 0x8, "7b69ed04f14cebf10b7b6049574ebc4c0fe637ce91092cd88a7339f88be731ffe97d2e6700adcb6513ad72edc49b17df5fce9b72919516c2fd83df9b09bbc3eff39dea52e0c064ed3d668bc4d23b7939d92ea84f0befcc243ec740984790374fc8ce930bc18aaa629dce2c673d25aa9efed5b9"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x9, 0x10, 0x3, 0x40, 0x5}, 0x25, &(0x7f0000000680)={0x5, 0xf, 0x25, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x3, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x7, 0xf, 0x3, [0x30]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000700)=@lang_id={0x0, 0x3, 0x1401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xee, &(0x7f0000000800)=ANY=[@ANYBLOB="ee03f499d32e7c91c289d4aac72862cb0bb9bb030efc86160850ba225e5731e5ffb75687bbaf6b108f2f4a0606e043ab8a9a1aecc1a7df4515ebd3bb5615ba4e93684d636f3e7d0c3c1fcc4c01000000000000004458ffca2f462d928c054cdfe1c2ff552a3603d4515bb86dcb947230a09da2fb3b9b8dc6416c1187204217ae9833151e1cc7b57383ce76301f256e5cc2db2225987cb0d6d358f2e1e45651e14e43821898ad62e4542da2578ee665c5114154e92497bdd6da6a2c3be6dcf7f9f30244c9e11d1f01d68723ae75cc53e6e056995d7c987e7e4bdfb857d6664797bb0ff3f633bb154e9a92a0ce1b60"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x380a}}, {0x8d, &(0x7f0000000940)=@string={0x8d, 0x3, "9366ee22b224dd88be101687b9c2bd3ad77cf330df6793daf3b3cf13364cf581e81eaf2b2393dc6bf2d1da8698b2984aa7926bc1e038ff503fca1aee84f79edfc28e4c101be515ae356af47d76863e7413ab409870d1ca6bdff089e3b6517330caf72d2b48ac5f275c0ecfbc185413ea09f708d0a0cb85913310e0ab7d839137b09fb76f65e0b9590e477f"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000b40)={0x14, &(0x7f0000000a80)={0x40, 0x23, 0x6c, {0x6c, 0x6, "a4fcb450cee888a4a2f897b9227d9de1199e0b50aca46eed8fb7ca7084f5238b70af3f2aa24c2864c42a1f704fbb80745a56bcda99548f1feb86ac7ac42e8d40ed5850da10f5fed9afb446cab733dbaeff56955dc3df8c0440449d5b67d99b8fd4f44bbf682bf8bf2446"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c80)={0x1c, &(0x7f0000000b80)={0x40, 0x11, 0x52, "35ed0d3ab44d68785ba6391a76c93d9a95882ff710925fc329aa511aec3f3d009c8dae03df1cf91f7180700652e9f952497464ca2158189e08a8f0f7187a8fe4b90719f28cb0e42fb7e522b6e5cd04f2540f"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xb}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0x2d, 0x3d, 0x6a, 0x8, 0x5c6, 0x9205, 0x29ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4f, 0x9b}}, {{0x9, 0x4, 0xb0, 0x0, 0x0, 0x3a, 0x38, 0x46}}, {{0x9, 0x4, 0x31, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x62b, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x91, 0xa6, 0xee, 0x10, 0x19d2, 0x1114, 0x59b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x619, 0x3, 0x7, 0xe7, 0x40, 0x5, [{{0x9, 0x4, 0x4f, 0x8, 0x4, 0xff, 0xff, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xa}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0xa, 'T'}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x7b, "25f1e662ab"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x5, "649270"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x5, 0x6, 0x4}]}], [{{0x9, 0x5, 0xb6526f72d73b4709, 0x8, 0x3ff, 0x6, 0x79, 0x2, [@generic={0xa3, 0x6, "6d8c1256744e9f476e64ee234c07f66902a23838f760d5aa7127f90dffb934cc3bb074b198ac7cec470cd0fbadbd82369a8519949993106f464a17d0f7aa243218fc533549fb8daa5a4eb3093748eb6b7bf0e4899ad70808d75872eb2b497367a6b3369553d12d02c3fff3e4e6cdb2d539b15d9f266660f713b64825eee303c041f86c480217e6fa88bcba99ce1e26888783ed2bd3f5da88dfd72b9c335b8cc192"}, @generic={0xf1, 0x23, "163b2b6b3c36508c766562e82a4a328b6e77985e12e84412c84357408f14c2e6b71a922b00903a4f82d4959ddbfc6dfece297ee31c9097e0dae5193f15c37dc8ebc1890a64e128f8161283cb5e801f221307cbd571c41168f35f0ce06c830577107745d018be9b69199704788e1555f64cb2a511bae62d8f9f1abcd430077c632bca6c4d01bd3ff334d4ad15a5155b7c55f7db7a17106049084a8f2e0e721a4964b3825ce4974b4b96b425b17dc88b380be097b330b232b0a95deb2b71e297c2761616a473af337699b0ca8cedd275e217574a5d192dcd702a7f0e44535bcfd68585084da61b200ff55b5b1cb46226"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xe, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x8, 0x0, 0x0, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0xe7}]}}]}}, {{0x9, 0x4, 0xba, 0x3, 0x2, 0x7d, 0x60, 0x63, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "2d43eb"}, {0x5, 0x24, 0x0, 0xff51}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xafd5, 0x6, 0xf}, {0x6, 0x24, 0x1a, 0x5, 0x2}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x0, 0x27, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x60, 0x1ff}, @generic={0x12, 0x31, "024f9b8390f54f7f0ff7a227d6a6ad45"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x6, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4f, 0xd174}, @generic={0xf9, 0xc, "bfb91134e393b0f9a7cc3fb99723c65e81252a32311472faf8f4eeb567c2760f9f0966c2450cb95c3861db76c50018ba2012c566f499e68f300249f3a740018bc30bd8927a9899664517962c7ae154d688be7bedb2ebcdb8ae836107579ead8aa96a62388ae513048083f88a45cd533864cfcf1b60e8f8e40f94db95a0d02b4127f43b231a7c14a5f5447ccab19469fec7a8b3907a03069db89645e71f3033837ef69f783eb763c8ab8203836a8f78c3ab07b2aa80165dc95368f0b60d3a422b9794158f76b359cf13db9b2ccfa9c7e4511f55947caa757dc1ce542529554c818edfc87f57b78b11026136be773bf915038014415b2cb9"}]}}]}}, {{0x9, 0x4, 0xff, 0x3, 0x5, 0xff, 0xff, 0xff, 0x5, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "531b0823b9c9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x8, 0xac, 0xa}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm_detail={0xc1, 0x24, 0x13, 0x7, "3048e2db74d655f84cb589128877d3e561572194366b62b1494eb71b03d4fd34ab548757e1178ee08c4049f29c87f00fc98dde001c64e062ea2ae734df02def78b37d234ec2998cbcd1317f8a76708e710fd19d32e5f523f1b992102a4e4598d1af3ee94a655df1c1bc449ef6bcddf7a8850b93296ad140171eccb2f9b9e2d556367b2b1b43313ccaa4cdbea64b7b52804983d02d5429f67bffe564e7ce7d63e35cbc077123860a72f0bb7e9fb3de82ff0b0db64db6eda0bc904690637"}, @call_mgmt={0x5, 0x24, 0x1, 0x5aa8effa4e7c7e5f, 0x81}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x0, 0x5, 0x9, 0xfffd, 0x4}]}], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x8, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xff, 0xfd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x21}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x8d, 0x7, 0x6, [@generic={0x36, 0x22, "88d2313ca98e817fa0f333d0bdc5fe020c62d944d28456bdf95891dbb28aad89737ba093b95b5e675ed86a838db071b8e26b2a57"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xbd, 0x7, 0x3, [@generic={0xb5, 0x1, "376bfd03daf4b6b4ba6230e50011cf8c80facdd27301ee1aae9e3b015c6dfec2787d44f185d9db1a7d12439538843db1ae822bcd08d63ebb5a07a2b01f3d729c5b7b3da57428af1c7583629194eda1c43c5bc27e000bb7326a12913f0102c60bed569a599938b7bc1ebb27c0c1f5dcaad3d81e8e566a5f99a51f42f8a20b7a9bcb0c22824b0e26b57bc64299e22b838a838e39be13990b3a42b322526c8deda10c82dd0c3cde319dddae8a4d207c63702615a1"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0xf5, 0x5, [@generic={0x75, 0x8, "7b69ed04f14cebf10b7b6049574ebc4c0fe637ce91092cd88a7339f88be731ffe97d2e6700adcb6513ad72edc49b17df5fce9b72919516c2fd83df9b09bbc3eff39dea52e0c064ed3d668bc4d23b7939d92ea84f0befcc243ec740984790374fc8ce930bc18aaa629dce2c673d25aa9efed5b9"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x9, 0x10, 0x3, 0x40, 0x5}, 0x25, &(0x7f0000000680)={0x5, 0xf, 0x25, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x3, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x7, 0xf, 0x3, [0x30]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000700)=@lang_id={0x0, 0x3, 0x1401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xee, &(0x7f0000000800)=ANY=[@ANYBLOB="ee03f499d32e7c91c289d4aac72862cb0bb9bb030efc86160850ba225e5731e5ffb75687bbaf6b108f2f4a0606e043ab8a9a1aecc1a7df4515ebd3bb5615ba4e93684d636f3e7d0c3c1fcc4c01000000000000004458ffca2f462d928c054cdfe1c2ff552a3603d4515bb86dcb947230a09da2fb3b9b8dc6416c1187204217ae9833151e1cc7b57383ce76301f256e5cc2db2225987cb0d6d358f2e1e45651e14e43821898ad62e4542da2578ee665c5114154e92497bdd6da6a2c3be6dcf7f9f30244c9e11d1f01d68723ae75cc53e6e056995d7c987e7e4bdfb857d6664797bb0ff3f633bb154e9a92a0ce1b60"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x380a}}, {0x8d, &(0x7f0000000940)=@string={0x8d, 0x3, "9366ee22b224dd88be101687b9c2bd3ad77cf330df6793daf3b3cf13364cf581e81eaf2b2393dc6bf2d1da8698b2984aa7926bc1e038ff503fca1aee84f79edfc28e4c101be515ae356af47d76863e7413ab409870d1ca6bdff089e3b6517330caf72d2b48ac5f275c0ecfbc185413ea09f708d0a0cb85913310e0ab7d839137b09fb76f65e0b9590e477f"}}]}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000b40)={0x14, &(0x7f0000000a80)={0x40, 0x23, 0x6c, {0x6c, 0x6, "a4fcb450cee888a4a2f897b9227d9de1199e0b50aca46eed8fb7ca7084f5238b70af3f2aa24c2864c42a1f704fbb80745a56bcda99548f1feb86ac7ac42e8d40ed5850da10f5fed9afb446cab733dbaeff56955dc3df8c0440449d5b67d99b8fd4f44bbf682bf8bf2446"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c80)={0x1c, &(0x7f0000000b80)={0x40, 0x11, 0x52, "35ed0d3ab44d68785ba6391a76c93d9a95882ff710925fc329aa511aec3f3d009c8dae03df1cf91f7180700652e9f952497464ca2158189e08a8f0f7187a8fe4b90719f28cb0e42fb7e522b6e5cd04f2540f"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xb}}) (async) 9.068508466s ago: executing program 2 (id=1508): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080007000000000000000000", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYRES32], 0x6c}, 0x1, 0xba01}, 0x0) 8.638737221s ago: executing program 2 (id=1511): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080), 0x0) msgget(0x1, 0xefea72844cf5e2b4) r0 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x8dff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.209537547s ago: executing program 3 (id=1514): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="85cea4bd24acb1dd4424c2931ec96f8ffcb90cef26316046029b376f0df4b90b3697cf18d5dca8abe0d4893a1c525d77a8243b41273e9018b573ad03ffa4e35be9c59d1ece0f6822d4ab30cc8b69ea2bcb49c3eca26984", 0x57}, {&(0x7f0000000300)="6eed2d616f56551ef28c3733912760d6badd804b6bdf33e8855659e3a1cb403f9a5cc4d6ce0fe378993452da31689076589adfd465ce8e436425d6b7c8a2864f173a453ede402cb1248f64a54ffb75fbe9616726c31e0aac2eb286dd42edb8f0299f97132684a43ab09b5d2d0c25a5971e0b2d3847ac4504d65ac07b780d10fd77e4dae8fc62fd45edbbbb823e8f1fb715b1f1d96393275d34b9", 0x9a}, {&(0x7f0000000540)="51bda7e38f6f48604271bc1225c474cab6ac7aa2f6d92a7a376acada80af0ea890ece5c0ab5e721ba6c920b75fc37f8bab9b0962fd3eb95de7cf6120ec2784c78199376dd5a573675d2db242275a2f9f5e2562665c58b819b37a275266327d50e4c98df8c61fd33affe295c476c6d7f44ba13d623acdb4fe356b9cf3f3f43f3f06e5bd222ef4ff2cca6fc4408d76d7e5662b50fb94408059e4bb751c9800203522cee6c5bc29aae4670ced749f4bc51cf564d4abffeb3761e30823e56574446a191f337a3830bdc4c5f32e5502d3fad21774983990cd4a4ab21020e1efe418e52d", 0xe1}], 0x3, 0x8, 0xf90a, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r6 = eventfd2(0x180, 0x0) write$eventfd(r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) 7.635508413s ago: executing program 2 (id=1516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@RTM_NEWMDB={0x12, 0x54, 0x1}, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$alg(r5, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x2}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@mcast2, @local, 0x3, 0x14}}) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb000442009700d6334631569ee51148f49fee82ffd583ad3e971d4c7ce2dbd054f5d173851eb83b1a00e4c7427ebcd02a62d8f500974f799f8391d390d53a004658cbed75db5e3fd490395323d99481456acb4c6df23f78c81b7f0104f90eea4aebedb95e69ac4b0e592bafb0f54cc1cb0219dc24996639ef30baa00206597ed73b344c1e8749f58709380b88a34776bc6b7c1112c99e000000000000"], 0x0) close(0x3) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x3554000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x200, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x8, 0xe, 0x2}, {0x7, 0x1, 0xfffd, 0x7ff, 0x1000}, 0xdfe, 0x8, 0x1d6d}}]}}]}, 0x60}}, 0x40080) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000d2b7da8471dfb3aec51e00040000000010", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000"], 0x0) 6.956421772s ago: executing program 3 (id=1517): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000200)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = open(&(0x7f0000000140)='./bus\x00', 0x10000, 0x115) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x91c9}, {r0, 0x4010}], 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x41, 0x4800003e, r3, 0x0) (async) syz_usb_connect(0x4, 0x62, &(0x7f0000000380)=ANY=[@ANYBLOB="120100c30816040102030109025000010000000029041f0000ff0100000a24010400050201020724070500000508240805040004960d24f4000103020001000e000609246bc9e9e3e69d3275452803050503060581092403060103040505072400000000000000ac9de948a38e7f57ac2461a1ce2c3aafd5e2638f844fe65527cfb1e5bb6bdc2336529d020d17b69effeaa3ec54cf1f5bf7f5333981d04b541b7d74a3d6dc17115e233841764e47c5f8dc2470d500fd150970eed343aff7d733b7470bff7048ce10d895eb517e33e0d0dd6f0f26ed9178579b70a5f6c05ef85978c9e5"], 0x0) (async) r5 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000280)=0x9, 0x4) (async) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e2, 0x4}) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000100)={r8, 0x28}) (async) setpgid(r7, r7) (async) setpgid(0x0, r7) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_LIST(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) accept4$alg(r10, 0x0, 0x0, 0x0) (async) wait4(r7, 0x0, 0x2, 0x0) (async) getpriority(0x0, r7) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.34717853s ago: executing program 9 (id=1518): socket$unix(0x1, 0x1, 0x0) inotify_init1(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x120) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.87555328s ago: executing program 7 (id=1519): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000006c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000000010001"}}) 4.557962519s ago: executing program 7 (id=1520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) clock_gettime(0x4, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8}, {r1, 0x222}, {r1, 0x81}], 0x3, &(0x7f0000000080)={r2, r3+10000000}, 0x0, 0x0) (async) fcntl$setpipe(r1, 0x407, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000400700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000280070002"], 0xe0}}, 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0182030109022400010000100009040002020083ec0009050602000202000a090582020002000110"], 0x0) (async) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) (async) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "04b18b7c"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x40, 0x13, 0x28, "162039a1db8728ccc32171e8cb00603fb7181b0369a729822bcf599dea680baff2ae1a551f6f7000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x0, 0x13, 0xc, "f42732933b1890fe16787e72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.256584355s ago: executing program 7 (id=1521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) getpid() ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e4498571b872"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x4002}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000040)='\x00'/10, 0xa}], 0x3) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000180)=0x4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x110e2b6a, 0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.171303262s ago: executing program 2 (id=1522): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = inotify_init1(0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x2, '\x00', 0x154}) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_io_uring_setup(0x1648, &(0x7f0000000280)={0x0, 0x5dd6, 0x10100, 0x0, 0x3d6}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r8, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @local}, 0x30, {0x2, 0x0, @multicast1}, 'nr0\x00'}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x2a722d3e, 0xa, {0x0}, {0xee00}, 0x76f, 0x7}) syz_open_procfs(r12, &(0x7f0000000340)='net/ip6_tables_matches\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) read$FUSE(r9, &(0x7f0000004340)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000150a000008"], 0x14}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 3.734062545s ago: executing program 3 (id=1523): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x2, 0xf5, &(0x7f00000002c0)="00012c6902088516ff037f291e463626000104004de204540bccb4f03b718f00000000000000019d2ee65deaed1942a9d3b45fed80a1b334ccb227145a2a683beef5e277136ced70f894c1f7adc247a68fb841972a14fc41c4ba5aed2e058f4d7e44b0e9a0f182a4ad149984895e160fb6ad81acf30dd856fec1a28605c9ec474ec5c176907e6472111791fdfd21f3108393e4c0286d6f220023eb1a3e1e8a35410741af7f9a5a1ebc3f27b736bf0dbf7b029563f952553e462a2016c0429242827f13692501a4d149e30bbdec4419bd6160dfc20d9d489a48ba2abee01b16acbfaa783dafcc9b56c11ee245d5097a01f0cfc61dbd") 3.218811056s ago: executing program 7 (id=1524): ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) (async) close(0x3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1308000, 0x1000}, 0x1b) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x40, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r7 = socket(0x10, 0x3, 0x10000000) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRESHEX=0x0, @ANYRESHEX=r8], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0xffff}, {0xb, 0x9}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048020}, 0x4000) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04023904aa04220a547300ff"], 0x3c) (async) r9 = socket$netlink(0x10, 0x3, 0x14) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) dup(r0) 2.923593504s ago: executing program 7 (id=1525): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x19d1, 0x0, &(0x7f0000000080), 0x0) msgget(0x1, 0xefea72844cf5e2b4) r0 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0xf0ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.820018966s ago: executing program 9 (id=1526): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x250080) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x5, &(0x7f0000000380)=""/5) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000040)="c402412d3538000000c441ef196ec866400fe2de0fae41b108c421797ec7f2466ff00fc01ec4e1a5140f63df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000100)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c8008805000500f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x41000004, 0x0) r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0xc84c2, 0x80) write$cgroup_int(r5, &(0x7f0000000040)=0xd54, 0x12) syz_open_procfs(r3, &(0x7f0000000340)='uid_map\x00') syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x30, 0x5b, {0x5b, 0x23, "c08741380a7036de3e1a453e1d499ede9d4491c7037e553475c00e4383900666b0ebf57f70fa75d61788a315d11b8ad0c16272b22cc3bde241d5bb17abdfd19ada3c7fd11343941453277d68d4cb3b2007d825805a84280c57"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x9, 0x94, 0x0, 0x4f8, 0x6, 0x7, 0xb, 0x5, 0xfff, 0xb7}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 2.766753326s ago: executing program 2 (id=1527): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x5000004) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00@', @ANYRES16=r3, @ANYBLOB="010000000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800a80000000000"], 0x3c}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) 1.5595755s ago: executing program 9 (id=1528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x181080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000001b00)=0x9) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2f}}, './file0\x00'}) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)='v', 0x1}], 0x1) fcntl$setstatus(r0, 0x4, 0x40800) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@multicast2}, {@broadcast}, {@dev}, {@private}, {@empty}, {@empty}]}]}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 1.054577983s ago: executing program 9 (id=1529): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000006c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000000000000000fe01"}}) 580.343566ms ago: executing program 9 (id=1530): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8f) 245.446636ms ago: executing program 7 (id=1531): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xbc}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f0000000240)={{}, {0x0, 0x3}, 0x20000000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000280)=0x8000005, 0x4) recvmmsg(r7, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40), 0x58}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)='N', 0x1) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r2, 0xae80, 0x0) 242.975024ms ago: executing program 3 (id=1532): socket(0x23, 0x809, 0xff) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TCSETS(r4, 0x545c, &(0x7f00000002c0)={0x3, 0x0, 0x2, 0x200, 0x7, "1954ffdfe6fd5c3a000052a70300"}) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x5, r7, 0x5}, 0x10) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) inotify_init1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r11 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000340)=0x1, 0x12) 3.822055ms ago: executing program 9 (id=1533): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x15, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x242}], 0x1, &(0x7f00000002c0), 0x0, 0x0) kcmp(r0, 0xffffffffffffffff, 0x5, r1, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00&\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x5f26ca6e2130b06, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x408502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x7, 0x9}, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x73, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000040)=r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000240)) syz_open_procfs(r0, &(0x7f00000001c0)='oom_adj\x00') 0s ago: executing program 2 (id=1534): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff2cad70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c848010000010000200012800b000100697036746e6c000110000280050009002900000004001300080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x8000, &(0x7f0000000040)=0x6, 0x6c27) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8af, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0x2, 0x2c2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="2e7dc858adf0d5ca6699748a8f8f05b62f588ab9c5c8ea1627e55c6f1d5ae233a80a4f70a676a5bfeaec9c6a7a6a506af54054737112faf76164dd5c5131101ae6e65b010ea7876bd54a021b98d552e2bf13f19facc42763c238ac996d17a8bb5b9dd053527936d8fec15b7ab81c85cf41190ffdece3e616ae7994ea5c435658472bc8d61ebbe29777e074bead0fc4de561cac9519cd982ba255b33ebe6560af0e63983c126f0926bc138bebb33a45bb2c1f4767d5c287be", 0xb8, 0x140}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa00000442"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet(0x2, 0x4000000000000001, 0x6) kernel console output (not intermixed with test programs): nc page read [ 476.055686][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.064098][ T5198] ldm_validate_partition_table(): Disk read failed. [ 476.072661][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.084680][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.098776][ T5198] Dev loop6: unable to read RDB block 0 [ 476.107735][ T5198] loop6: unable to read partition table [ 476.116319][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.134187][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.206932][T11496] @: renamed from vlan0 (while UP) [ 476.300840][ T5925] usb 1-1: config 0 descriptor?? [ 476.446937][ T5198] ldm_validate_partition_table(): Disk read failed. [ 476.578610][ T5198] Dev loop6: unable to read RDB block 0 [ 476.623648][ T5198] loop6: unable to read partition table [ 477.151606][ T5925] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 477.201584][ T9450] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 477.369635][ T9450] usb 7-1: Using ep0 maxpacket: 32 [ 477.424900][ T5925] usb 8-1: device descriptor read/64, error -71 [ 477.427152][ T9450] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 477.623026][ T9450] usb 7-1: config 0 has no interface number 0 [ 477.690140][ T5925] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 477.725812][ T9450] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 477.741330][T11500] chnl_net:caif_netlink_parms(): no params data found [ 477.750999][ T9450] usb 7-1: config 0 interface 196 has no altsetting 0 [ 477.776085][ T9450] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 477.803155][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.857074][ T9450] usb 7-1: Product: syz [ 477.908482][ T9450] usb 7-1: Manufacturer: syz [ 477.961751][ T5839] Bluetooth: hci6: command tx timeout [ 477.974140][ T9450] usb 7-1: SerialNumber: syz [ 478.013643][ T5925] usb 8-1: device descriptor read/64, error -71 [ 478.152025][ T5925] usb usb8-port1: attempt power cycle [ 478.234774][ T9450] usb 7-1: config 0 descriptor?? [ 478.334803][T11517] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 478.497094][ T5925] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 478.522407][ T5925] usb 8-1: device descriptor read/8, error -71 [ 478.688392][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.699632][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.718610][T11500] bridge_slave_0: entered allmulticast mode [ 478.742205][T11500] bridge_slave_0: entered promiscuous mode [ 478.761184][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.781042][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.797170][T11500] bridge_slave_1: entered allmulticast mode [ 478.825983][T11500] bridge_slave_1: entered promiscuous mode [ 478.842082][ T5925] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 478.902434][ T5925] usb 8-1: device descriptor read/8, error -71 [ 479.013841][ T5925] usb usb8-port1: unable to enumerate USB device [ 479.058558][ T9447] usb 1-1: USB disconnect, device number 94 [ 479.466496][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.565931][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.671655][ T9458] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 479.695980][T11500] team0: Port device team_slave_0 added [ 479.707438][T11500] team0: Port device team_slave_1 added [ 479.836562][ T9458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.877719][ T9458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.898640][ T9458] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 479.908383][ T9458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.930868][ T9458] usb 1-1: config 0 descriptor?? [ 479.948063][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.041946][ T5839] Bluetooth: hci6: command tx timeout [ 480.046860][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.077106][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.135582][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.153995][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.161219][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.188661][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.197215][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.242010][ T9450] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 480.255237][ T5198] ldm_validate_partition_table(): Disk read failed. [ 480.274126][ T9450] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 480.294307][ T9450] usb 7-1: USB disconnect, device number 8 [ 480.315789][ T5198] Dev loop6: unable to read RDB block 0 [ 480.322866][ T5198] loop6: unable to read partition table [ 480.534460][T11500] hsr_slave_0: entered promiscuous mode [ 480.549947][T11500] hsr_slave_1: entered promiscuous mode [ 480.569189][T11500] debugfs: 'hsr0' already exists in 'hsr' [ 480.583293][T11500] Cannot create hsr debugfs directory [ 480.849042][ T9458] hid-led 0003:27B8:01ED.0010: probe with driver hid-led failed with error -71 [ 480.876305][ T9458] usb 1-1: USB disconnect, device number 95 [ 481.051694][T11500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 481.071862][T11500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 481.119255][T11500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 481.172612][T11500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 481.469794][ T5198] buffer_io_error: 53 callbacks suppressed [ 481.469815][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.539150][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.575809][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.592080][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.600226][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.634780][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.641233][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.656008][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.671782][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.682592][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.683396][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.691832][ T5198] ldm_validate_partition_table(): Disk read failed. [ 481.698972][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.706160][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.721086][ T5198] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.732726][ T5198] Dev loop6: unable to read RDB block 0 [ 481.738928][ T5198] loop6: unable to read partition table [ 481.795326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.802595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.841955][ T9447] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 481.918164][T11500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.048007][ T9447] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 482.065887][ T9447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.091980][ T9447] usb 1-1: Product: syz [ 482.096459][ T9447] usb 1-1: Manufacturer: syz [ 482.101178][ T9447] usb 1-1: SerialNumber: syz [ 482.121836][ T5839] Bluetooth: hci6: command tx timeout [ 482.163496][ T9447] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 482.206586][ T9446] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.229450][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.416508][T11500] veth0_vlan: entered promiscuous mode [ 482.435530][T11500] veth1_vlan: entered promiscuous mode [ 482.619973][T11500] veth0_macvtap: entered promiscuous mode [ 482.708092][T11500] veth1_macvtap: entered promiscuous mode [ 482.829128][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.848452][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.877220][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.915685][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.931952][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.958312][ T5198] ldm_validate_partition_table(): Disk read failed. [ 482.993710][ T5198] Dev loop6: unable to read RDB block 0 [ 483.000055][ T5198] loop6: unable to read partition table [ 483.009133][T10564] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.305612][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.322509][ T9446] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 483.348843][ T9446] ath9k_htc: Failed to initialize the device [ 483.351636][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.400614][ T9446] usb 1-1: ath9k_htc: USB layer deinitialized [ 483.551289][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.588818][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.617859][ T5198] ldm_validate_partition_table(): Disk read failed. [ 483.632134][ T5198] Dev loop6: unable to read RDB block 0 [ 483.650365][ T5198] loop6: unable to read partition table [ 484.040394][ T5198] ldm_validate_partition_table(): Disk read failed. [ 484.111226][ T5198] Dev loop6: unable to read RDB block 0 [ 484.118188][ T5198] loop6: unable to read partition table [ 484.201874][ T5839] Bluetooth: hci6: command tx timeout [ 484.513636][T11602] bond0: entered promiscuous mode [ 484.533946][ T5198] ldm_validate_partition_table(): Disk read failed. [ 484.541277][ T5198] Dev loop6: unable to read RDB block 0 [ 484.545545][T11602] bond_slave_0: entered promiscuous mode [ 484.550285][ T5198] loop6: unable to read partition table [ 484.623228][T11602] bond_slave_1: entered promiscuous mode [ 484.676779][T11602] batadv0: entered promiscuous mode [ 484.684363][T11602] hsr1: entered allmulticast mode [ 484.689658][T11602] bond0: entered allmulticast mode [ 484.695706][ T5925] usb 1-1: USB disconnect, device number 96 [ 484.706584][T11602] bond_slave_0: entered allmulticast mode [ 484.720099][T11602] bond_slave_1: entered allmulticast mode [ 484.726420][T11602] batadv0: entered allmulticast mode [ 484.733516][T11602] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 484.792613][T11602] bond0: left promiscuous mode [ 484.798261][T11602] bond_slave_0: left promiscuous mode [ 484.831977][T11602] bond_slave_1: left promiscuous mode [ 484.894332][T11602] batadv0: left promiscuous mode [ 485.101634][ T5925] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 485.245392][ T5198] ldm_validate_partition_table(): Disk read failed. [ 485.269254][ T5198] Dev loop6: unable to read RDB block 0 [ 485.279950][ T5198] loop6: unable to read partition table [ 485.292144][ T9460] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 485.315029][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.329082][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 485.339848][ T5925] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 485.350450][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.363947][ T5925] usb 1-1: config 0 descriptor?? [ 485.465591][ T9460] usb 8-1: Using ep0 maxpacket: 32 [ 485.474962][ T9460] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.490995][ T9460] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.503909][ T9460] usb 8-1: config 0 interface 0 has no altsetting 0 [ 485.510905][ T9460] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 485.524343][ T9460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.539630][ T9460] usb 8-1: config 0 descriptor?? [ 485.810356][ T5925] Bluetooth: Can't get version to change to load ram patch err [ 485.841222][ T5925] Bluetooth: Loading patch file failed [ 485.857216][ T5925] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 485.900131][ T5925] usb 1-1: USB disconnect, device number 97 [ 485.976837][ T9460] hid-steam 0003:28DE:1205.0011: unknown main item tag 0x0 [ 486.017162][ T9460] hid-steam 0003:28DE:1205.0011: unknown main item tag 0x0 [ 486.055607][ T9460] hid-steam 0003:28DE:1205.0011: unknown main item tag 0x0 [ 486.085937][ T9460] hid-steam 0003:28DE:1205.0011: unknown main item tag 0x0 [ 486.104605][ T9460] hid-steam 0003:28DE:1205.0011: unknown main item tag 0x0 [ 486.122674][ T9460] hid-steam 0003:28DE:1205.0011: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.7-1/input0 [ 486.268259][ T9460] usb 8-1: USB disconnect, device number 6 [ 486.383074][T11627] fido_id[11627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 486.860562][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 486.869881][T11632] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 487.437690][ T9458] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 487.541591][ T9460] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 487.725543][ T9458] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 487.813215][ T9458] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.823647][ T9460] usb 8-1: Using ep0 maxpacket: 32 [ 487.843185][ T9458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.864989][ T9460] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 487.883622][ T9458] usb 10-1: Product: syz [ 487.887989][ T9458] usb 10-1: Manufacturer: syz [ 487.892993][ T9460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 487.904284][ T9458] usb 10-1: SerialNumber: syz [ 487.912554][ T9458] usb 10-1: config 0 descriptor?? [ 487.939473][ T9460] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 488.125306][ T9460] usb 8-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 488.140000][ T9460] usb 8-1: Product: syz [ 488.146862][ T9460] usb 8-1: Manufacturer: syz [ 488.167754][ T9460] usb 8-1: SerialNumber: syz [ 488.202110][ T9460] usb 8-1: config 0 descriptor?? [ 488.336927][ T9460] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 489.427777][ T12] usb 8-1: Failed to submit usb control message: -110 [ 489.435436][ T12] usb 8-1: unable to send the bmi data to the device: -110 [ 489.445554][ T12] usb 8-1: unable to get target info from device [ 489.470877][ T12] usb 8-1: could not get target info (-110) [ 489.477566][ T12] usb 8-1: could not probe fw (-110) [ 490.453740][ T9452] usb 10-1: USB disconnect, device number 2 [ 490.844439][ T9446] usb 8-1: USB disconnect, device number 7 [ 490.980989][ T9452] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 491.174708][ T9452] usb 10-1: Using ep0 maxpacket: 8 [ 491.204444][ T9452] usb 10-1: unable to get BOS descriptor or descriptor too short [ 491.235099][ T9452] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 491.281567][ T9452] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 491.326495][T11657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.362232][ T9452] usb 10-1: config 4 has no interface number 0 [ 491.419327][ T9452] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 491.432145][ T9452] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.460926][ T9452] usb 10-1: Product: syz [ 491.481217][ T9452] usb 10-1: Manufacturer: syz [ 491.488001][ T9452] usb 10-1: SerialNumber: syz [ 491.838254][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.849814][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 491.860309][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 491.870869][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 491.898556][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 492.031669][ T9458] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 492.162098][ T9458] usb 8-1: device descriptor read/64, error -71 [ 492.401831][ T9458] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 492.582554][ T9458] usb 8-1: device descriptor read/64, error -71 [ 492.704020][ T9458] usb usb8-port1: attempt power cycle [ 492.777985][T11676] chnl_net:caif_netlink_parms(): no params data found [ 493.086493][ T9458] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 493.122421][ T9458] usb 8-1: device descriptor read/8, error -71 [ 493.220673][T11686] program syz.0.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.281225][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.300749][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.314548][T11676] bridge_slave_0: entered allmulticast mode [ 493.325757][T11676] bridge_slave_0: entered promiscuous mode [ 493.339994][T11676] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.357085][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.362359][ T9458] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 493.375497][T11676] bridge_slave_1: entered allmulticast mode [ 493.387322][T11676] bridge_slave_1: entered promiscuous mode [ 493.436885][ T9458] usb 8-1: device descriptor read/8, error -71 [ 493.480452][T11676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.509116][T11676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.587346][ T9458] usb usb8-port1: unable to enumerate USB device [ 493.689123][ T9452] uvcvideo 10-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 493.714708][ T9452] uvcvideo 10-1:4.147: No valid video chain found. [ 493.730470][ T9452] usb 10-1: USB disconnect, device number 3 [ 493.789866][T11676] team0: Port device team_slave_0 added [ 493.833491][T11676] team0: Port device team_slave_1 added [ 493.928732][T11676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.941582][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.973289][ T5841] Bluetooth: hci7: command tx timeout [ 493.982060][T11676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.037325][T11676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.051586][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.079646][T11676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.311337][T11676] hsr_slave_0: entered promiscuous mode [ 494.329056][T11676] hsr_slave_1: entered promiscuous mode [ 494.369235][T11676] debugfs: 'hsr0' already exists in 'hsr' [ 494.377065][T11676] Cannot create hsr debugfs directory [ 495.009433][T11708] input: syz1 as /devices/virtual/input/input36 [ 495.101690][ T9452] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 495.259980][T11708] netlink: 'syz.7.1217': attribute type 1 has an invalid length. [ 495.312740][ T9452] usb 10-1: device descriptor read/64, error -71 [ 495.687618][ T9452] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 495.872127][ T9452] usb 10-1: device descriptor read/64, error -71 [ 495.883036][T11711] gretap1: entered allmulticast mode [ 495.984797][T11711] bond1: (slave gretap1): making interface the new active one [ 495.992983][ T9452] usb usb10-port1: attempt power cycle [ 495.999941][T11711] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 496.042658][ T5841] Bluetooth: hci7: command tx timeout [ 496.391597][ T9452] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 496.437581][ T9452] usb 10-1: device descriptor read/8, error -71 [ 496.762063][ T9452] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 496.793223][ T9452] usb 10-1: device descriptor read/8, error -71 [ 496.941015][ T9452] usb usb10-port1: unable to enumerate USB device [ 498.131646][ T5841] Bluetooth: hci7: command tx timeout [ 498.167296][T11676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 498.307135][T11676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 498.419848][T11676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 498.518692][T11676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 498.537020][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1221'. [ 498.555204][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1221'. [ 498.922268][T11751] bond1: Removing last arp target with arp_interval on [ 499.041610][T11751] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 499.067605][T11751] bond1 (unregistering): Released all slaves [ 499.153640][ T9458] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 499.658130][T11676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.707532][T11676] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.740113][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.747473][T10566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.865543][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.872805][T10566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.118374][T11676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.202021][ T5841] Bluetooth: hci7: command tx timeout [ 500.253650][T11676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.444178][T11676] veth0_vlan: entered promiscuous mode [ 500.539705][T11676] veth1_vlan: entered promiscuous mode [ 500.724795][T11676] veth0_macvtap: entered promiscuous mode [ 500.768937][T11676] veth1_macvtap: entered promiscuous mode [ 500.834890][T11676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.917145][T11676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.994962][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.069384][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.117383][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.131924][ T5841] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 501.152269][ T981] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 501.315083][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.365690][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 501.418388][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.435660][ T981] usb 1-1: unable to get BOS descriptor or descriptor too short [ 501.445543][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.469661][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 501.483873][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 501.486573][ T981] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 501.500518][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 501.519552][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 501.529436][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 501.540563][ T981] usb 1-1: config 5 has no interface number 0 [ 501.575758][ T981] usb 1-1: config 5 interface 215 has no altsetting 0 [ 501.596245][ T981] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 501.607893][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.641868][ T9452] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 501.647165][ T981] usb 1-1: Product: syz [ 501.703242][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.722442][ T981] usb 1-1: Manufacturer: syz [ 501.730546][ T981] usb 1-1: SerialNumber: syz [ 501.763432][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.835008][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.850923][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.925228][ T9452] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.965202][T11828] trusted_key: encrypted_key: insufficient parameters specified [ 501.984878][ T9452] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 502.010172][ T9452] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.036415][ T9452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.075289][ T9452] usb 8-1: Product: syz [ 502.099989][ T9452] usb 8-1: Manufacturer: syz [ 502.346001][ T9452] usb 8-1: SerialNumber: syz [ 502.410271][ T9452] cdc_mbim 8-1:1.0: skipping garbage [ 502.619256][ T9452] cdc_mbim 8-1:1.0: bind() failure [ 502.632254][ T9452] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 502.639567][ T9452] cdc_ncm 8-1:1.1: bind() failure [ 502.651418][ T9452] usb 8-1: USB disconnect, device number 13 [ 503.557933][T11826] chnl_net:caif_netlink_parms(): no params data found [ 503.642039][ T5839] Bluetooth: hci8: command tx timeout [ 503.756902][ T9458] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 503.958119][ T9458] usb 10-1: Invalid ep0 maxpacket: 64 [ 504.133229][ T9458] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 504.381854][T11867] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 504.384805][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.388996][T11867] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 504.413257][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.420838][T11826] bridge_slave_0: entered allmulticast mode [ 504.431224][ T9458] usb 10-1: Invalid ep0 maxpacket: 64 [ 504.433407][T11826] bridge_slave_0: entered promiscuous mode [ 504.451905][ T9458] usb usb10-port1: attempt power cycle [ 504.505256][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.513394][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.517380][T11867] vhci_hcd vhci_hcd.0: Device attached [ 504.520989][T11826] bridge_slave_1: entered allmulticast mode [ 504.538836][T11826] bridge_slave_1: entered promiscuous mode [ 504.692729][T11867] vhci_hcd vhci_hcd.0: port 0 already used [ 504.743635][ T981] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 504.751860][T11868] vhci_hcd: connection closed [ 504.769407][ T981] earthmate ttyUSB0: required endpoint is missing [ 504.792409][ T981] usb 1-1: USB disconnect, device number 98 [ 504.799315][ T13] vhci_hcd: stop threads [ 504.811571][ T9458] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 504.811772][ T9449] usb 48-1: SetAddress Request (2) to port 0 [ 504.842466][ T981] cypress_m8 1-1:5.215: device disconnected [ 504.861031][ T13] vhci_hcd: release socket [ 504.870367][ T13] vhci_hcd: disconnect device [ 504.876777][ T9449] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 504.901693][ T9449] usb 48-1: enqueue for inactive port 0 [ 504.940237][ T9458] usb 10-1: Invalid ep0 maxpacket: 64 [ 504.947406][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.090053][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.131836][ T9458] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 505.232677][ T9458] usb 10-1: Invalid ep0 maxpacket: 64 [ 505.251898][ T9458] usb usb10-port1: unable to enumerate USB device [ 505.316769][ T9449] usb usb48-port1: attempt power cycle [ 505.526327][T11826] team0: Port device team_slave_0 added [ 505.544788][T11826] team0: Port device team_slave_1 added [ 505.723272][ T5839] Bluetooth: hci8: command tx timeout [ 505.923462][ T9449] usb usb48-port1: unable to enumerate USB device [ 506.027802][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.075989][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.162884][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.176266][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.183575][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.214085][ T9446] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 506.224147][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.419667][ T9446] usb 4-1: Using ep0 maxpacket: 16 [ 506.429161][ T9446] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 506.443360][ T9446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.455481][ T9446] usb 4-1: config 0 descriptor?? [ 506.474808][ T9446] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 506.630807][T11826] hsr_slave_0: entered promiscuous mode [ 506.639809][T11826] hsr_slave_1: entered promiscuous mode [ 506.648325][T11826] debugfs: 'hsr0' already exists in 'hsr' [ 506.654982][T11826] Cannot create hsr debugfs directory [ 506.845830][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.848725][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 506.848747][ T30] audit: type=1326 audit(1761627263.681:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 506.852584][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.908416][ T30] audit: type=1326 audit(1761627263.681:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 506.987871][ T9446] gspca_sonixj: reg_r err -71 [ 507.023526][ T30] audit: type=1326 audit(1761627263.681:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.051572][ T30] audit: type=1326 audit(1761627263.681:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.085294][ T30] audit: type=1326 audit(1761627263.681:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.108156][ T30] audit: type=1326 audit(1761627263.681:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.127538][ T9446] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 507.146766][ T30] audit: type=1326 audit(1761627263.681:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.201986][ T9446] usb 4-1: USB disconnect, device number 9 [ 507.245992][ T30] audit: type=1326 audit(1761627263.681:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.311593][ T30] audit: type=1326 audit(1761627263.681:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.344024][ T30] audit: type=1326 audit(1761627263.681:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ed858efc9 code=0x7ffc0000 [ 507.811820][ T5839] Bluetooth: hci8: command tx timeout [ 507.821630][ T9458] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 508.021829][ T9458] usb 8-1: Using ep0 maxpacket: 8 [ 508.193847][ T9458] usb 8-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 508.213185][ T9458] usb 8-1: config 0 has an invalid interface number: 150 but max is 64 [ 508.231558][ T9458] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.251564][ T9458] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 508.268485][ T9458] usb 8-1: config 0 has no interface number 0 [ 508.274908][ T9458] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.283614][ T9446] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 508.298400][ T9458] usb 8-1: config 0 interface 150 has no altsetting 0 [ 508.305747][ T9458] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 508.322821][ T9458] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.374661][ T9458] usb 8-1: config 0 descriptor?? [ 508.493245][ T9446] usb 1-1: Using ep0 maxpacket: 16 [ 508.512639][ T9446] usb 1-1: config 0 has an invalid interface number: 236 but max is 0 [ 508.548534][ T9446] usb 1-1: config 0 has no interface number 0 [ 508.568895][ T9446] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 508.590190][ T9446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.605556][ T9446] usb 1-1: Product: syz [ 508.609823][ T9446] usb 1-1: Manufacturer: syz [ 508.746244][ T9446] usb 1-1: SerialNumber: syz [ 508.835473][ T9446] usb 1-1: config 0 descriptor?? [ 508.867465][ T9446] usb-storage 1-1:0.236: USB Mass Storage device detected [ 508.960257][ T9446] usb-storage 1-1:0.236: device ignored [ 509.501652][ T9459] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 509.741658][ T9459] usb 4-1: Using ep0 maxpacket: 16 [ 509.876420][ T9459] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 509.894247][ T9459] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.901549][ T5839] Bluetooth: hci8: command tx timeout [ 509.914472][ T9459] usb 4-1: config 0 has no interface number 0 [ 509.938359][ T9459] usb 4-1: config 0 interface 223 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.058379][ T9459] usb 4-1: config 0 interface 223 has no altsetting 0 [ 510.095996][ T9459] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 510.112981][ T9459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.128192][ T9459] usb 4-1: Product: syz [ 510.132698][ T9459] usb 4-1: Manufacturer: syz [ 510.138085][ T9459] usb 4-1: SerialNumber: syz [ 510.172983][ T9459] usb 4-1: config 0 descriptor?? [ 510.543204][ T9459] usb 4-1: Can not set alternate setting to 1, error: -71 [ 510.560769][ T9459] synaptics_usb 4-1:0.223: probe with driver synaptics_usb failed with error -71 [ 510.645297][ T9459] usb 4-1: USB disconnect, device number 10 [ 510.698006][T11826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.790146][T11826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.944105][T11826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.965763][ T9458] usb 8-1: USB disconnect, device number 14 [ 511.051238][T11826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.463076][ T9446] usb 1-1: USB disconnect, device number 99 [ 511.917241][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.118205][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.187603][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.194891][T10566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.325100][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.332364][T10566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.985540][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.027334][T11826] veth0_vlan: entered promiscuous mode [ 513.156637][T11826] veth1_vlan: entered promiscuous mode [ 513.456097][T11826] veth0_macvtap: entered promiscuous mode [ 513.490407][T11826] veth1_macvtap: entered promiscuous mode [ 513.600243][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.755051][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.853859][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.071604][ T981] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 514.227563][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.301565][ T981] usb 10-1: Using ep0 maxpacket: 16 [ 514.311352][ T981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 514.337165][ T981] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.364414][ T981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.393977][ T981] usb 10-1: Product: syz [ 514.398064][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.409244][ T981] usb 10-1: Manufacturer: syz [ 514.416204][ T981] usb 10-1: SerialNumber: syz [ 514.425650][ T981] usb 10-1: config 0 descriptor?? [ 514.501015][ T981] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.561706][ T981] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 514.738541][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.194484][ T981] em28xx 10-1:0.0: chip ID is em2765 [ 515.605510][T10566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.669222][T10566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.805358][ T981] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 515.816139][ T981] em28xx 10-1:0.0: board has no eeprom [ 515.856363][T10566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.909398][T10566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.925562][T12008] em28xx 10-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 516.981575][ T981] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 517.006775][ T981] em28xx 10-1:0.0: dvb set to bulk mode. [ 517.016220][ T9459] em28xx 10-1:0.0: Binding DVB extension [ 517.191578][ T9449] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 517.200179][ T9446] usb 10-1: USB disconnect, device number 12 [ 517.215412][ T9446] em28xx 10-1:0.0: Disconnecting em28xx [ 517.373221][ T9449] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 517.387603][ T9449] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.447538][ T9449] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.473859][ T9459] em28xx 10-1:0.0: Registering input extension [ 517.512212][ T9449] usb 3-1: config 0 interface 0 has no altsetting 0 [ 517.543443][ T9446] em28xx 10-1:0.0: Closing input extension [ 517.581369][ T9449] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 517.643663][ T9449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.670787][ T9449] usb 3-1: Product: syz [ 517.683223][ T9449] usb 3-1: Manufacturer: syz [ 517.695963][ T9446] em28xx 10-1:0.0: Freeing device [ 517.701181][ T9449] usb 3-1: SerialNumber: syz [ 517.827234][ T9449] usb 3-1: config 0 descriptor?? [ 517.887233][T12047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.894369][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1271'. [ 520.048259][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1270'. [ 520.288907][ T9452] usb 3-1: USB disconnect, device number 64 [ 520.306283][T12095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.194815][ T9458] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 521.418991][ T9458] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 521.480647][ T9458] usb 1-1: config 0 has no interface number 0 [ 521.532804][ T9458] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 521.552891][ T9458] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 521.577712][ T9458] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7 [ 521.589078][ T9458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.598019][ T9458] usb 1-1: Product: syz [ 521.602986][ T9458] usb 1-1: Manufacturer: syz [ 521.608027][ T9458] usb 1-1: SerialNumber: syz [ 521.629721][T12117] netlink: 'syz.9.1276': attribute type 39 has an invalid length. [ 521.656424][ T9458] usb 1-1: config 0 descriptor?? [ 521.699278][ T9458] usb 1-1: Error in usbnet_get_endpoints (-22) [ 521.905398][ T9458] usb 1-1: USB disconnect, device number 100 [ 522.162009][ T9449] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 522.342333][ T9449] usb 3-1: Using ep0 maxpacket: 16 [ 522.387575][ T9449] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.446151][ T9449] usb 3-1: config 0 interface 0 has no altsetting 0 [ 522.462375][ T9449] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 522.471734][ T9449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.486420][ T9449] usb 3-1: config 0 descriptor?? [ 522.909781][ T9449] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 525.686114][ T9458] usb 3-1: USB disconnect, device number 65 [ 526.121399][T12174] team0: Device ipip0 is of different type [ 526.371755][ T9452] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 526.546580][ T9452] usb 1-1: Using ep0 maxpacket: 8 [ 526.555989][ T9452] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 526.566198][ T9452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.575425][ T9452] usb 1-1: Product: syz [ 526.581218][ T9452] usb 1-1: Manufacturer: syz [ 526.587008][T12189] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1286'. [ 526.629027][T12189] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1286'. [ 526.639862][ T9452] usb 1-1: SerialNumber: syz [ 526.828521][T12189] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1286'. [ 526.888935][ T9452] usb 1-1: config 0 descriptor?? [ 526.977395][ T9452] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 527.069976][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 527.069998][ T30] audit: type=1326 audit(1761627283.931:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799338efc9 code=0x7ffc0000 [ 527.178150][ T30] audit: type=1326 audit(1761627283.971:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799338efc9 code=0x7ffc0000 [ 527.204530][ T30] audit: type=1326 audit(1761627283.971:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f799338efc9 code=0x7ffc0000 [ 527.228754][ T30] audit: type=1326 audit(1761627283.971:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799338efc9 code=0x7ffc0000 [ 527.253735][ T30] audit: type=1326 audit(1761627283.971:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799338efc9 code=0x7ffc0000 [ 528.209443][ T9452] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 528.226762][ T9452] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 529.162036][T12192] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 529.172006][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 529.472334][T12192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.505293][T12192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.527551][T12192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.563293][T12192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.615704][T12192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.666522][T12192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.686661][T12192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.722787][T12192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.767266][T12192] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 529.790630][T12192] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 529.825282][T12192] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 529.844220][T12192] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 529.861909][T12192] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 529.911452][T12192] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 529.978986][T12192] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 530.006976][T12192] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 530.050901][T12192] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 530.088925][T12192] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 530.114040][T12192] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 530.176449][T12192] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 530.319303][ T9449] usb 1-1: USB disconnect, device number 101 [ 530.841766][ T5925] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 530.895327][ T9449] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 531.025341][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 531.075106][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.100828][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.117207][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.137220][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.148576][ T5925] usb 4-1: Product: syz [ 531.148656][ T9449] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 531.153102][ T5925] usb 4-1: Manufacturer: syz [ 531.169421][ T5925] usb 4-1: SerialNumber: syz [ 531.241733][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 531.341149][ T9449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.384003][ T9449] usb 1-1: Product: syz [ 531.393009][ T9449] usb 1-1: Manufacturer: syz [ 531.397695][ T9449] usb 1-1: SerialNumber: syz [ 531.419514][ T9449] usb 1-1: config 0 descriptor?? [ 531.428164][ T9449] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 531.456763][ T5925] usb 4-1: invalid UAC_HEADER (v1) [ 531.561700][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 531.567992][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 531.587498][ T5925] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 531.651083][ T5925] usb 4-1: USB disconnect, device number 11 [ 531.727142][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 531.745847][ T9885] udevd[9885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.803310][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 531.883312][ T5839] Bluetooth: hci6: command 0x0c1a tx timeout [ 532.043777][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout [ 532.121766][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout [ 532.742628][ T9449] gspca_sunplus: reg_r err -110 [ 532.747675][ T9449] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 532.845658][ T9449] usb 1-1: USB disconnect, device number 102 [ 533.641931][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 533.810617][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 533.883157][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 533.964622][ T5839] Bluetooth: hci6: command 0x0c1a tx timeout [ 534.121829][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout [ 534.201702][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout [ 534.616473][ T9446] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 535.028554][ T9446] usb 10-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 535.051615][ T9446] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.063200][ T9446] usb 10-1: config 0 descriptor?? [ 535.321281][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 535.731875][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 535.886166][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 535.965878][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 535.978713][T12321] ÿ: renamed from bond_slave_0 (while UP) [ 536.047898][ T5839] Bluetooth: hci6: command 0x0c1a tx timeout [ 536.213532][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout [ 536.291772][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout [ 536.435468][ T9452] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 536.520477][T12337] program syz.3.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.681643][ T9452] usb 8-1: Using ep0 maxpacket: 32 [ 536.689603][ T9452] usb 8-1: unable to get BOS descriptor or descriptor too short [ 536.700675][ T9452] usb 8-1: config 125 has an invalid interface number: 27 but max is 0 [ 536.713718][ T9452] usb 8-1: config 125 has no interface number 0 [ 536.726912][ T9452] usb 8-1: config 125 interface 27 has no altsetting 0 [ 536.740536][ T9452] usb 8-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 536.785034][ T9452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.922755][ T9452] usb 8-1: Product: syz [ 536.927211][ T9452] usb 8-1: Manufacturer: syz [ 536.969833][ T9452] usb 8-1: SerialNumber: syz [ 537.193166][T12328] FAULT_INJECTION: forcing a failure. [ 537.193166][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 537.221595][T12328] CPU: 0 UID: 0 PID: 12328 Comm: syz.7.1307 Not tainted syzkaller #0 PREEMPT(full) [ 537.221625][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.221641][T12328] Call Trace: [ 537.221655][T12328] [ 537.221665][T12328] dump_stack_lvl+0x189/0x250 [ 537.221702][T12328] ? __pfx____ratelimit+0x10/0x10 [ 537.221731][T12328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.221761][T12328] ? __pfx__printk+0x10/0x10 [ 537.221791][T12328] ? __pfx___might_resched+0x10/0x10 [ 537.221814][T12328] ? fs_reclaim_acquire+0x7d/0x100 [ 537.221854][T12328] should_fail_ex+0x414/0x560 [ 537.221894][T12328] should_failslab+0xa8/0x100 [ 537.221919][T12328] kmem_cache_alloc_node_noprof+0x77/0x710 [ 537.221950][T12328] ? __alloc_skb+0x112/0x2d0 [ 537.221991][T12328] __alloc_skb+0x112/0x2d0 [ 537.222028][T12328] tcp_stream_alloc_skb+0x3d/0x340 [ 537.222064][T12328] tcp_sendmsg_locked+0x1c7f/0x5540 [ 537.222160][T12328] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 537.222191][T12328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 537.222219][T12328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 537.222258][T12328] tcp_sendmsg+0x2f/0x50 [ 537.222290][T12328] __sock_sendmsg+0x19c/0x270 [ 537.222323][T12328] ____sys_sendmsg+0x52d/0x830 [ 537.222354][T12328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.222388][T12328] ? import_iovec+0x74/0xa0 [ 537.222421][T12328] ___sys_sendmsg+0x21f/0x2a0 [ 537.222447][T12328] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.222510][T12328] ? __fget_files+0x2a/0x420 [ 537.222530][T12328] ? __fget_files+0x3a0/0x420 [ 537.222563][T12328] __sys_sendmmsg+0x227/0x430 [ 537.222593][T12328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 537.222627][T12328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.222677][T12328] ? ksys_write+0x22a/0x250 [ 537.222710][T12328] ? __pfx_ksys_write+0x10/0x10 [ 537.222746][T12328] __x64_sys_sendmmsg+0xa0/0xc0 [ 537.222773][T12328] do_syscall_64+0xfa/0xfa0 [ 537.222802][T12328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.222823][T12328] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.222846][T12328] ? clear_bhb_loop+0x60/0xb0 [ 537.222873][T12328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.222895][T12328] RIP: 0033:0x7f573918efc9 [ 537.222916][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.222936][T12328] RSP: 002b:00007f573a0ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 537.222960][T12328] RAX: ffffffffffffffda RBX: 00007f57393e5fa0 RCX: 00007f573918efc9 [ 537.222977][T12328] RDX: 0000000000000003 RSI: 0000200000002c00 RDI: 0000000000000003 [ 537.222991][T12328] RBP: 00007f573a0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 537.223005][T12328] R10: 00000000000400c0 R11: 0000000000000246 R12: 0000000000000001 [ 537.223019][T12328] R13: 00007f57393e6038 R14: 00007f57393e5fa0 R15: 00007f573950fa28 [ 537.223056][T12328] [ 537.229449][ T9452] hub 8-1:125.27: bad descriptor, ignoring hub [ 537.564799][ T9452] hub 8-1:125.27: probe with driver hub failed with error -5 [ 537.575654][ T9452] sierra 8-1:125.27: Sierra USB modem converter detected [ 537.596986][ T9452] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 537.654700][ T9452] usb 8-1: USB disconnect, device number 15 [ 537.665251][ T9452] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 537.681168][ T9452] sierra 8-1:125.27: device disconnected [ 538.710828][ T9446] usbhid 10-1:0.0: can't add hid device: -71 [ 538.757572][ T9446] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 538.883580][ T9446] usb 10-1: USB disconnect, device number 13 [ 539.154893][T12378] netlink: 'syz.9.1317': attribute type 1 has an invalid length. [ 539.237744][T12378] vlan2: entered allmulticast mode [ 539.267316][T12378] bridge0: entered allmulticast mode [ 539.299409][ T5925] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 539.301582][ T9452] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 539.485007][ T9452] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 539.523121][ T9452] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 539.534314][ T5925] usb 8-1: Using ep0 maxpacket: 32 [ 539.551707][ T9452] usb 4-1: config 8 has no interface number 0 [ 539.590104][ T9452] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.598001][ T5925] usb 8-1: unable to get BOS descriptor or descriptor too short [ 539.631392][ T5925] usb 8-1: config 125 has an invalid interface number: 27 but max is 0 [ 539.654677][ T5925] usb 8-1: config 125 has no interface number 0 [ 539.662417][ T5925] usb 8-1: config 125 interface 27 has no altsetting 0 [ 539.678292][ T5925] usb 8-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 539.700502][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.710060][ T9452] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 539.748529][ T9452] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 539.769082][ T9452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.770095][ T5925] usb 8-1: Product: syz [ 539.791293][ T5925] usb 8-1: Manufacturer: syz [ 539.796552][ T5925] usb 8-1: SerialNumber: syz [ 539.845586][T12374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 539.913097][ T9452] usb 4-1: NFC: intf ffff888024902000 id ffffffff8e9086e0 [ 540.076497][ T5925] hub 8-1:125.27: bad descriptor, ignoring hub [ 540.111089][ T5925] hub 8-1:125.27: probe with driver hub failed with error -5 [ 540.129618][ T5925] sierra 8-1:125.27: Sierra USB modem converter detected [ 540.141238][ T5925] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 540.213947][ T5925] usb 8-1: USB disconnect, device number 16 [ 540.223190][ T9446] usb 4-1: USB disconnect, device number 12 [ 540.292470][ T5925] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 540.311749][ T9452] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 540.313881][ T5925] sierra 8-1:125.27: device disconnected [ 540.513658][ T9452] usb 1-1: Using ep0 maxpacket: 32 [ 540.552768][ T9452] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.589665][ T9452] usb 1-1: config 125 has an invalid interface number: 27 but max is 0 [ 540.622996][ T9452] usb 1-1: config 125 has no interface number 0 [ 540.637937][ T9452] usb 1-1: config 125 interface 27 has no altsetting 0 [ 540.648540][ T9452] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 540.663121][ T9452] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.678391][ T9452] usb 1-1: Product: syz [ 540.684955][ T9452] usb 1-1: Manufacturer: syz [ 540.689691][ T9452] usb 1-1: SerialNumber: syz [ 540.702983][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.710794][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.938474][T12400] FAULT_INJECTION: forcing a failure. [ 540.938474][T12400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.968220][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT(full) [ 540.968253][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.968268][T12400] Call Trace: [ 540.968278][T12400] [ 540.968289][T12400] dump_stack_lvl+0x189/0x250 [ 540.968326][T12400] ? __pfx____ratelimit+0x10/0x10 [ 540.968354][T12400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.968383][T12400] ? __pfx__printk+0x10/0x10 [ 540.968406][T12400] ? __might_fault+0xb0/0x130 [ 540.968460][T12400] should_fail_ex+0x414/0x560 [ 540.968498][T12400] _copy_from_user+0x2d/0xb0 [ 540.968528][T12400] kstrtouint_from_user+0xc4/0x170 [ 540.968554][T12400] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 540.968597][T12400] proc_fail_nth_write+0x88/0x200 [ 540.968626][T12400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 540.968661][T12400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 540.968691][T12400] vfs_write+0x27e/0xb30 [ 540.968734][T12400] ? __pfx_vfs_write+0x10/0x10 [ 540.968768][T12400] ? __fget_files+0x2a/0x420 [ 540.968794][T12400] ? __fget_files+0x3a0/0x420 [ 540.968814][T12400] ? __fget_files+0x2a/0x420 [ 540.968847][T12400] ksys_write+0x145/0x250 [ 540.968882][T12400] ? __pfx_ksys_write+0x10/0x10 [ 540.968918][T12400] ? do_syscall_64+0xbe/0xfa0 [ 540.968951][T12400] do_syscall_64+0xfa/0xfa0 [ 540.968982][T12400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.969003][T12400] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 540.969026][T12400] ? clear_bhb_loop+0x60/0xb0 [ 540.969054][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.969076][T12400] RIP: 0033:0x7f4ed858da7f [ 540.969096][T12400] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 540.969116][T12400] RSP: 002b:00007f4ed941f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 540.969141][T12400] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4ed858da7f [ 540.969158][T12400] RDX: 0000000000000001 RSI: 00007f4ed941f0a0 RDI: 0000000000000005 [ 540.969172][T12400] RBP: 00007f4ed941f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.969186][T12400] R10: 00000000000400c0 R11: 0000000000000293 R12: 0000000000000001 [ 540.969200][T12400] R13: 00007f4ed87e6038 R14: 00007f4ed87e5fa0 R15: 00007f4ed890fa28 [ 540.969237][T12400] [ 541.340643][ T9452] hub 1-1:125.27: bad descriptor, ignoring hub [ 541.423735][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.437721][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.507149][ T9452] hub 1-1:125.27: probe with driver hub failed with error -5 [ 541.538587][ T9452] sierra 1-1:125.27: Sierra USB modem converter detected [ 541.647220][ T9452] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 541.685968][ T9452] usb 1-1: USB disconnect, device number 103 [ 541.785281][ T9452] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 541.852424][T12428] fuse: Bad value for 'fd' [ 541.859310][ T9452] sierra 1-1:125.27: device disconnected [ 541.970261][T12429] fuse: Bad value for 'fd' [ 542.454037][T12439] fuse: Unknown parameter 'ð.×[%Ðåiallow_other' [ 542.534899][ T1018] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.587113][ T1018] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.963142][ T1018] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.003821][ T1018] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.373120][ T5925] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 543.401641][ T9446] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 543.570021][ T9446] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 543.590172][ T9446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.604212][ T9446] usb 3-1: Product: syz [ 543.608445][ T9446] usb 3-1: Manufacturer: syz [ 543.617477][ T9446] usb 3-1: SerialNumber: syz [ 543.622908][T12459] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 543.636084][ T5925] usb 10-1: unable to get BOS descriptor or descriptor too short [ 543.647331][ T9446] usb 3-1: config 0 descriptor?? [ 543.672200][ T9446] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 543.702449][ T5925] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 543.715438][ T9458] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 543.736372][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 543.799408][ T9459] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 543.842428][ T5925] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.870613][T12461] bond3: (slave veth3): Enslaving as an active interface with a down link [ 543.888773][T12459] bond3 (unregistering): (slave veth3): Releasing active interface [ 543.911723][ T9446] gspca_sunplus: reg_r err -71 [ 543.937580][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 543.946702][T12459] bond3 (unregistering): Released all slaves [ 543.954801][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 543.974841][ T5925] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 543.982700][ T9458] usb 4-1: Using ep0 maxpacket: 8 [ 543.990187][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.003067][ T9459] usb 8-1: Using ep0 maxpacket: 16 [ 544.009794][ T5925] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.010192][ T9458] usb 4-1: config 0 has no interfaces? [ 544.031392][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.047917][ T9458] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.053931][ T9446] usb 3-1: USB disconnect, device number 66 [ 544.057978][ T9459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.101843][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 544.123524][ T9458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.132231][ T9459] usb 8-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 544.143567][ T5925] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 544.151139][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.166062][ T9459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.177970][ T9458] usb 4-1: config 0 descriptor?? [ 544.187090][ T5925] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.204925][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.217436][ T5925] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 544.240219][ T9459] usb 8-1: config 0 descriptor?? [ 544.245779][ T5925] usb 10-1: language id specifier not provided by device, defaulting to English [ 544.535787][ T9459] wacom 0003:056A:006B.0013: item fetching failed at offset 3/5 [ 544.568559][ T9459] wacom 0003:056A:006B.0013: parse failed [ 544.591711][ T9459] wacom 0003:056A:006B.0013: probe with driver wacom failed with error -22 [ 545.041614][ T9449] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 545.132391][ T9452] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 545.202696][ T9449] usb 1-1: Using ep0 maxpacket: 32 [ 545.228193][ T9449] usb 1-1: unable to get BOS descriptor or descriptor too short [ 545.238400][ T9449] usb 1-1: config 125 has an invalid interface number: 27 but max is 0 [ 545.259367][ T9449] usb 1-1: config 125 has no interface number 0 [ 545.300501][ T9449] usb 1-1: config 125 interface 27 has no altsetting 0 [ 545.337567][ T9452] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 545.350957][ T9452] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 545.367498][ T9449] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 545.391315][ T9449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.404525][ T9452] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 545.456554][ T9449] usb 1-1: Product: syz [ 545.465801][ T9452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.487891][ T9449] usb 1-1: Manufacturer: syz [ 545.516616][ T9449] usb 1-1: SerialNumber: syz [ 545.531615][T12477] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 545.546618][ T9459] usb 4-1: USB disconnect, device number 13 [ 545.604146][T12477] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 545.629044][ T9452] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.769297][ T9449] hub 1-1:125.27: bad descriptor, ignoring hub [ 545.808562][ T9449] hub 1-1:125.27: probe with driver hub failed with error -5 [ 545.873352][ T9449] sierra 1-1:125.27: Sierra USB modem converter detected [ 545.908845][ T9459] usb 3-1: USB disconnect, device number 67 [ 545.932783][ T9449] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 546.006197][ T9449] usb 1-1: USB disconnect, device number 104 [ 546.054652][ T9449] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 546.109801][ T9449] sierra 1-1:125.27: device disconnected [ 546.275297][ T5925] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 546.312491][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.397484][ T5925] usb 10-1: can't set config #168, error -71 [ 546.473905][ T5925] usb 10-1: USB disconnect, device number 14 [ 546.634236][ T9459] usb 8-1: USB disconnect, device number 17 [ 547.354081][T12512] program syz.7.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.592373][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1343'. [ 547.847358][ T9459] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 548.271606][ T9452] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 548.365742][ T9459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.397934][ T9459] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.419091][ T9459] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.428029][ T9459] usb 8-1: Product: syz [ 548.435349][ T9459] usb 8-1: Manufacturer: syz [ 548.498599][ T9459] usb 8-1: SerialNumber: syz [ 548.641991][ T9459] usb 8-1: config 0 descriptor?? [ 549.592441][ T9452] usb 3-1: unable to get BOS descriptor or descriptor too short [ 549.749874][ T9452] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 549.780425][ T9452] usb 3-1: can't read configurations, error -71 [ 550.461703][ T9452] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 550.624424][ T9452] usb 3-1: device descriptor read/64, error -71 [ 550.772235][ T9452] usb usb3-port1: attempt power cycle [ 551.026345][ T9446] usb 8-1: USB disconnect, device number 18 [ 551.167389][ T9452] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 551.275211][ T9452] usb 3-1: device descriptor read/8, error -71 [ 551.571735][ T9452] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 551.693233][ T9452] usb 3-1: device descriptor read/8, error -71 [ 551.700106][ T9446] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 551.821947][ T9452] usb usb3-port1: unable to enumerate USB device [ 551.892987][ T9446] usb 4-1: Using ep0 maxpacket: 16 [ 552.051010][T12566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.686299][T12592] pim6reg: entered allmulticast mode [ 552.699801][T12592] pim6reg: left allmulticast mode [ 554.399836][ T9446] usb 4-1: unable to get BOS descriptor or descriptor too short [ 554.419047][ T9446] usb 4-1: too many configurations: 44, using maximum allowed: 8 [ 554.441878][ T9446] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 554.450300][ T9446] usb 4-1: can't read configurations, error -71 [ 555.086592][ T9446] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 555.296162][ T9446] usb 4-1: Using ep0 maxpacket: 8 [ 555.321665][ T9446] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 555.356430][ T9446] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 555.403093][ T9446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.464427][ T9446] usb 4-1: Product: syz [ 555.513249][ T9446] usb 4-1: Manufacturer: syz [ 555.524418][ T9446] usb 4-1: SerialNumber: syz [ 555.552192][ T9446] usb 4-1: config 0 descriptor?? [ 555.671284][T12642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 555.711397][ T9446] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 555.812199][ T9446] usb 4-1: setting power ON [ 555.817286][ T9446] dvb-usb: bulk message failed: -22 (2/0) [ 555.853953][ T9446] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 555.999421][T12629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.010758][T12629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.033087][T12629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.049995][T12629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.057520][ T9446] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 556.060296][T12629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.074468][ T9446] usb 4-1: media controller created [ 556.145978][ T9446] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.190914][ T9446] usb 4-1: selecting invalid altsetting 6 [ 556.198095][ T9446] usb 4-1: digital interface selection failed (-22) [ 556.205104][ T9446] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 556.216287][T12629] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 556.224375][ T9446] usb 4-1: setting power OFF [ 556.349725][T12629] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 556.349960][ T9446] dvb-usb: bulk message failed: -22 (2/0) [ 556.364483][ T9446] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 556.411883][T12629] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 556.423173][T12629] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 556.481228][ T9446] (NULL device *): no alternate interface [ 556.722047][ T9460] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 556.902455][ T9449] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 556.946928][ T9460] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 556.955447][ T9459] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 556.974400][ T9460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.995870][ T9460] usb 1-1: config 0 has no interface number 0 [ 557.017580][ T9460] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 557.037028][ T9460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.062241][ T9460] usb 1-1: Product: syz [ 557.067488][ T9460] usb 1-1: Manufacturer: syz [ 557.072844][ T9460] usb 1-1: SerialNumber: syz [ 557.084412][ T9449] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 557.096689][ T9460] usb 1-1: config 0 descriptor?? [ 557.104626][ T9460] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 557.122054][ T9459] usb 8-1: device descriptor read/64, error -71 [ 557.125381][ T9446] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 557.169191][ T9449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.233894][ T9446] usb 4-1: USB disconnect, device number 15 [ 557.255377][ T9449] usb 3-1: config 0 descriptor?? [ 557.278044][ T9449] cp210x 3-1:0.0: cp210x converter detected [ 557.317014][T12643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.322922][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 557.363633][ T9459] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 557.389935][T12643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.543690][ T9459] usb 8-1: device descriptor read/64, error -71 [ 557.555301][ T9446] usb 1-1: USB disconnect, device number 105 [ 557.667741][ T9459] usb usb8-port1: attempt power cycle [ 557.669688][ T9449] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 557.694735][ T9449] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 557.735856][ T9449] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 557.765344][ T9449] usb 3-1: cp210x converter now attached to ttyUSB0 [ 557.789926][ T9449] usb 3-1: USB disconnect, device number 72 [ 557.818004][ T9449] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 557.846003][ T9449] cp210x 3-1:0.0: device disconnected [ 558.031660][ T9459] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 558.046217][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.046229][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 558.064784][ T9459] usb 8-1: device descriptor read/8, error -71 [ 558.122216][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.128360][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 558.243577][ T9460] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 558.284090][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout [ 558.333565][ T9459] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 558.361684][ T5841] Bluetooth: hci6: command 0x0c1a tx timeout [ 558.382345][ T9459] usb 8-1: device descriptor read/8, error -71 [ 558.413925][ T9460] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 558.431639][ T9460] usb 4-1: config 0 has no interface number 0 [ 558.441125][ T9460] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 558.451948][ T5841] Bluetooth: hci8: command 0x0c1a tx timeout [ 558.451966][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout [ 558.462803][ T9460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.482979][ T9460] usb 4-1: Product: syz [ 558.487218][ T9460] usb 4-1: Manufacturer: syz [ 558.505002][ T9460] usb 4-1: SerialNumber: syz [ 558.515230][ T9459] usb usb8-port1: unable to enumerate USB device [ 558.529133][ T9460] usb 4-1: config 0 descriptor?? [ 558.568760][ T9460] hub 4-1:0.132: bad descriptor, ignoring hub [ 558.588928][ T9460] hub 4-1:0.132: probe with driver hub failed with error -5 [ 558.608241][ T9460] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input40 [ 558.878876][T12679] can: request_module (can-proto-5) failed. [ 561.939447][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 562.000498][T12707] netlink: 'syz.0.1383': attribute type 2 has an invalid length. [ 562.165006][T12707] ip6gretap0: entered promiscuous mode [ 562.192277][T12707] ip6gretap0: left promiscuous mode [ 562.234722][ T9449] usb 4-1: USB disconnect, device number 16 [ 562.551591][ T9449] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 562.760449][ T9449] usb 4-1: device descriptor read/64, error -71 [ 562.792168][ T9452] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 562.836973][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1388'. [ 562.933254][T12723] xt_TPROXY: Can be used only with -p tcp or -p udp [ 562.982955][ T9452] usb 8-1: Using ep0 maxpacket: 8 [ 562.999351][ T9452] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.028264][ T9452] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.044836][ T9449] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 563.100281][ T9452] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.111742][ T9460] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 563.113779][ T9452] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.138176][ T9452] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.150494][ T9452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.211729][ T9449] usb 4-1: device descriptor read/64, error -71 [ 563.323535][ T9449] usb usb4-port1: attempt power cycle [ 563.351568][ T5925] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 563.373221][ T9452] usb 8-1: GET_CAPABILITIES returned 0 [ 563.378901][ T9452] usbtmc 8-1:16.0: can't read capabilities [ 563.386149][ T9460] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 563.460101][ T9460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.496675][ T981] usb 8-1: USB disconnect, device number 23 [ 563.520736][ T9460] usb 1-1: Product: syz [ 563.541632][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 563.565308][ T9460] usb 1-1: Manufacturer: syz [ 563.602093][ T9460] usb 1-1: SerialNumber: syz [ 563.715609][ T5925] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 563.730395][ T9449] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 563.744366][ T5925] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 563.762593][ T9460] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 563.772980][ T5925] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 563.775637][ T9449] usb 4-1: device descriptor read/8, error -71 [ 563.808648][ T5925] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 563.853511][ T9459] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 563.873190][ T5925] usb 10-1: config 0 interface 0 has no altsetting 0 [ 563.887287][ T5925] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 563.897170][ T5925] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 563.910124][ T5925] usb 10-1: Product: syz [ 563.917475][ T5925] usb 10-1: Manufacturer: syz [ 563.927646][ T5925] usb 10-1: SerialNumber: syz [ 563.952195][ T5925] usb 10-1: config 0 descriptor?? [ 563.967440][ T5925] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 563.983515][ T5925] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 564.061620][ T9449] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 564.113963][ T9449] usb 4-1: device descriptor read/8, error -71 [ 564.155216][ T5925] usb 1-1: USB disconnect, device number 106 [ 564.199648][ T9452] usb 10-1: USB disconnect, device number 15 [ 564.206297][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 564.237565][ T9452] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 564.253166][ T9449] usb usb4-port1: unable to enumerate USB device [ 564.930745][ T9459] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 564.963370][ T9459] ath9k_htc: Failed to initialize the device [ 565.031683][ T5925] usb 1-1: ath9k_htc: USB layer deinitialized [ 565.162396][ T9452] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 565.374483][ T9452] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 565.494482][ T9452] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 565.494545][ T9452] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.494572][ T9452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.529284][T12746] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 565.529392][T12746] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 565.539480][ T9452] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.811871][ T5925] usb 3-1: USB disconnect, device number 73 [ 566.901686][ T9452] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 567.133114][ T9452] usb 8-1: Using ep0 maxpacket: 16 [ 567.170751][ T9452] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 567.234092][ T9452] usb 8-1: config 0 has no interface number 0 [ 567.264535][ T9452] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 567.278816][ T9452] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 567.298996][ T9452] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 567.307592][ T9452] usb 8-1: Manufacturer: syz [ 567.312303][ T9452] usb 8-1: SerialNumber: syz [ 567.326816][ T9452] usb 8-1: config 0 descriptor?? [ 567.558223][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.588332][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.672459][ T5925] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 567.749681][ T9452] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 567.765670][ T9452] usb 8-1: USB disconnect, device number 24 [ 567.885674][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 567.895971][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 567.905310][ T5925] usb 3-1: can't read configurations, error -71 [ 567.944067][ T9446] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 568.113272][ T9446] usb 4-1: Using ep0 maxpacket: 32 [ 568.127267][ T9446] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 568.159618][ T9446] usb 4-1: config 0 has no interface number 0 [ 568.167842][ T9446] usb 4-1: config 0 interface 143 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 568.185269][ T9446] usb 4-1: config 0 interface 143 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 568.198128][ T9446] usb 4-1: config 0 interface 143 has no altsetting 0 [ 568.217596][ T9446] usb 4-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=dd.34 [ 568.228210][ T9446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.236880][ T9446] usb 4-1: Product: syz [ 568.242876][ T9446] usb 4-1: Manufacturer: syz [ 568.247862][ T9446] usb 4-1: SerialNumber: syz [ 568.281318][ T9446] usb 4-1: config 0 descriptor?? [ 568.296891][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.296959][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.334682][ T9446] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 569.068393][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1406'. [ 569.402612][ T9459] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 569.511594][ T9446] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 569.625469][ T9459] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.655315][ T9459] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.669945][ T9459] usb 8-1: Product: syz [ 569.674567][ T9459] usb 8-1: Manufacturer: syz [ 569.682056][ T9459] usb 8-1: SerialNumber: syz [ 569.697985][ T9459] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 569.753441][ T9446] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 569.784276][ T9446] usb 3-1: config 0 has no interface number 0 [ 569.788707][ T5925] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 569.792336][ T9446] usb 3-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 569.824829][ T9446] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 569.834504][ T9446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.846670][ T9446] usb 3-1: Product: syz [ 569.850920][ T9446] usb 3-1: Manufacturer: syz [ 569.862496][ T9446] usb 3-1: SerialNumber: syz [ 569.894713][ T9446] usb 3-1: config 0 descriptor?? [ 569.954974][T12808] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 569.965523][ T9446] kvaser_usb 3-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 569.996461][ T30] audit: type=1326 audit(1761627326.851:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12813 comm="syz.9.1411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5b7b8efc9 code=0x0 [ 570.225437][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1411'. [ 570.738692][ T9446] usb 8-1: USB disconnect, device number 25 [ 570.870953][ T9459] usb 4-1: USB disconnect, device number 21 [ 571.015721][ T5925] usb 8-1: Service connection timeout for: 256 [ 571.051366][ T5925] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 571.106347][ T5925] ath9k_htc: Failed to initialize the device [ 571.292039][ T9446] usb 8-1: ath9k_htc: USB layer deinitialized [ 572.082103][ T5925] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 572.307642][ T5925] usb 8-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 572.325195][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.469037][ T5925] usb 8-1: Product: syz [ 572.476549][ T5925] usb 8-1: Manufacturer: syz [ 572.493135][ T5925] usb 8-1: SerialNumber: syz [ 572.515086][ T5925] usb 8-1: config 0 descriptor?? [ 572.741530][ T5925] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 572.962098][ T5925] asix 8-1:0.0: probe with driver asix failed with error -71 [ 573.006951][ T5925] usb 8-1: USB disconnect, device number 26 [ 573.475844][T12840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 574.064639][ T981] usb 3-1: USB disconnect, device number 76 [ 574.356932][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1416'. [ 574.667207][T12854] xt_TPROXY: Can be used only with -p tcp or -p udp [ 574.960147][ T30] audit: type=1800 audit(1761627331.811:342): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1420" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 576.912985][T12883] sg_write: data in/out 4055/98 bytes for SCSI command 0x0-- guessing data in; [ 576.912985][T12883] program syz.2.1428 not setting count and/or reply_len properly [ 577.782804][T12891] binder: 12890:12891 ioctl c00c620f 200000002940 returned -22 [ 578.335943][ T9446] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 578.517201][ T9446] usb 3-1: Using ep0 maxpacket: 16 [ 578.559977][ T9446] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 578.609558][ T9446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.638461][ T9446] usb 3-1: Product: syz [ 578.655523][ T9446] usb 3-1: Manufacturer: syz [ 578.682687][ T9446] usb 3-1: SerialNumber: syz [ 578.784208][T12907] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1433'. [ 578.824349][ T9446] usb 3-1: config 0 descriptor?? [ 578.909443][ T9446] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 579.276170][T12897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.285833][ T9446] usb 3-1: clie_3_5_startup: get interface number failed: -32 [ 579.302202][T12897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.304146][ T9446] visor 3-1:0.0: probe with driver visor failed with error -32 [ 579.376871][T12917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 579.455216][ T9446] usb 3-1: USB disconnect, device number 77 [ 580.184647][T12919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1439'. [ 580.941559][ T9446] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 581.167701][ T9446] usb 8-1: Using ep0 maxpacket: 8 [ 581.179773][ T9446] usb 8-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 581.199273][ T9446] usb 8-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.251055][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 581.271664][ T9446] usb 8-1: config 0 interface 0 has no altsetting 0 [ 581.309953][ T9446] usb 8-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 581.332241][ T9446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.347952][ T9446] usb 8-1: config 0 descriptor?? [ 581.358463][ T9446] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 581.436380][T12930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.469533][T12932] bond_slave_0: entered promiscuous mode [ 581.476382][T12932] bond_slave_1: entered promiscuous mode [ 581.498572][T12932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 581.538691][T12932] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 581.653148][T12944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 581.722609][ T9446] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 581.859160][T12947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1447'. [ 581.891921][ T9446] usb 1-1: device descriptor read/64, error -71 [ 582.169341][ T9446] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 582.362117][ T9446] usb 1-1: device descriptor read/64, error -71 [ 582.493539][ T9446] usb usb1-port1: attempt power cycle [ 582.881677][ T9446] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 582.914471][ T9446] usb 1-1: device descriptor read/8, error -71 [ 582.976955][T12964] tc_dump_action: action bad kind [ 583.191907][ T9446] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 583.232609][ T9446] usb 1-1: device descriptor read/8, error -71 [ 583.419631][ T9446] usb usb1-port1: unable to enumerate USB device [ 583.450236][T12976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 583.633289][ T9459] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 583.741149][ T5925] usb 8-1: USB disconnect, device number 27 [ 583.894018][ T9459] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 583.902574][ T9459] usb 10-1: can't read configurations, error -61 [ 584.095772][ T5925] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 584.131784][ T9459] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 584.348665][ T5925] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 584.365024][ T9459] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 584.401730][ T9459] usb 10-1: can't read configurations, error -61 [ 584.409412][ T5925] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 584.435655][ T9459] usb usb10-port1: attempt power cycle [ 584.444262][ T5925] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.454044][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.465926][T12980] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 584.552787][T12980] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 584.647770][ T5925] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 584.806678][ T9459] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 584.876554][ T5925] usb 8-1: USB disconnect, device number 28 [ 584.907042][ T9459] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 584.924004][ T9459] usb 10-1: can't read configurations, error -61 [ 585.062237][ T9459] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 585.369768][ T9459] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 585.382536][ T9459] usb 10-1: can't read configurations, error -61 [ 585.389680][ T9459] usb usb10-port1: unable to enumerate USB device [ 585.403440][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 585.607274][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 585.634124][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 585.682544][ T5925] usb 4-1: can't read configurations, error -61 [ 585.861627][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 586.043759][ T9452] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 586.083077][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 586.108904][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 586.129367][ T5925] usb 4-1: can't read configurations, error -61 [ 586.197918][ T5925] usb usb4-port1: attempt power cycle [ 586.238778][ T9452] usb 8-1: unable to get BOS descriptor or descriptor too short [ 586.267386][ T9452] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 586.311766][ T9452] usb 8-1: can't read configurations, error -71 [ 586.571672][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 586.600001][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 586.669461][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 586.678706][ T5925] usb 4-1: can't read configurations, error -61 [ 586.862034][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 586.983733][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 587.000958][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 587.016688][ T5925] usb 4-1: can't read configurations, error -61 [ 587.026300][ T5925] usb usb4-port1: unable to enumerate USB device [ 587.628881][ T9452] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0 [ 587.667068][T13011] netlink: 'syz.7.1463': attribute type 1 has an invalid length. [ 587.698082][ T9452] hid-generic 0000:0003:0001.0014: unknown main item tag 0x0 [ 587.727292][ T9452] hid-generic 0000:0003:0001.0014: hidraw0: HID v0.03 Device [syz0] on syz1 [ 587.883991][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1463'. [ 587.959859][T13013] fido_id[13013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 588.130048][ T30] audit: type=1800 audit(1761627344.981:343): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1463" name="memory.events" dev="tmpfs" ino=374 res=0 errno=0 [ 588.779508][ T9446] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 588.992553][ T9446] usb 3-1: Using ep0 maxpacket: 32 [ 589.038715][ T9446] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 589.056566][ T9446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.252218][ T9446] usb 3-1: Product: syz [ 589.259106][ T9446] usb 3-1: Manufacturer: syz [ 589.266757][ T9446] usb 3-1: SerialNumber: syz [ 589.479107][ T9446] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 589.481839][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 589.544161][ T9446] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 589.581411][T13037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.674352][ T9446] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 589.711654][ T9452] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 589.743892][ T9446] usb 3-1: USB disconnect, device number 78 [ 589.754342][ T9446] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 589.786983][ T9446] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 589.828581][ T9446] visor 3-1:1.0: device disconnected [ 589.844964][ T9452] usb 8-1: device descriptor read/64, error -71 [ 590.112353][ T9452] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 590.197961][T13042] tipc: Started in network mode [ 590.203819][T13042] tipc: Node identity 02386ff3550e, cluster identity 4711 [ 590.213287][T13042] tipc: Enabled bearer , priority 0 [ 590.223838][T13042] syzkaller0: entered promiscuous mode [ 590.229818][T13042] syzkaller0: entered allmulticast mode [ 590.332920][ T9452] usb 8-1: device descriptor read/64, error -71 [ 590.443790][ T9452] usb usb8-port1: attempt power cycle [ 590.807185][ T9452] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 590.866270][ T9452] usb 8-1: device descriptor read/8, error -71 [ 591.034157][T13044] ptrace attach of "./syz-executor exec"[11826] was attempted by "\x09   €–˜ [ 591.131728][ T9452] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 591.263193][ T9452] usb 8-1: device descriptor read/8, error -71 [ 591.336101][ T9459] tipc: Node number set to 1463185395 [ 591.408726][ T9452] usb usb8-port1: unable to enumerate USB device [ 591.788031][T13042] tipc: Resetting bearer [ 591.903335][T13042] tipc: Disabling bearer [ 592.251648][ T5925] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 592.504903][ T5925] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 592.520967][ T5925] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 592.545634][ T5925] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.556978][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.583997][T13048] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 592.607806][T13048] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 592.677953][ T5925] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.025552][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 593.114019][ T5925] usb 10-1: USB disconnect, device number 20 [ 593.653943][ T9447] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 593.861806][ T9447] usb 4-1: Using ep0 maxpacket: 8 [ 593.896453][ T9447] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 593.978711][ T9447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.051841][ T9447] usb 4-1: Product: syz [ 594.065249][ T9447] usb 4-1: Manufacturer: syz [ 594.121300][ T9447] usb 4-1: SerialNumber: syz [ 594.535370][ T9447] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 594.554828][ T9447] usb 4-1: USB disconnect, device number 26 [ 594.586826][ T9447] usblp0: removed [ 594.961958][ T981] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 595.047154][T13076] IPv6: addrconf: prefix option has invalid lifetime [ 595.054356][T13076] IPv6: addrconf: prefix option has invalid lifetime [ 595.175599][ T981] usb 10-1: unable to get BOS descriptor or descriptor too short [ 595.195542][ T981] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 595.212048][ T981] usb 10-1: can't read configurations, error -71 [ 595.481929][ T9447] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 595.642418][ T9447] usb 8-1: device descriptor read/64, error -71 [ 595.927084][ T9447] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 596.151040][ T9447] usb 8-1: device descriptor read/64, error -71 [ 596.310041][ T9447] usb usb8-port1: attempt power cycle [ 596.644848][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1487'. [ 596.654134][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1487'. [ 596.731569][ T9447] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 596.752284][ T9447] usb 8-1: device descriptor read/8, error -71 [ 596.920890][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1487'. [ 596.941744][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1487'. [ 596.955844][ T9450] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 596.997633][ T9447] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 597.032322][ T9447] usb 8-1: device descriptor read/8, error -71 [ 597.151811][ T9450] usb 3-1: Using ep0 maxpacket: 16 [ 597.158023][ T9447] usb usb8-port1: unable to enumerate USB device [ 597.168002][ T9450] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.300184][ T9450] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 597.312430][ T9450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.322153][ T9446] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 597.332273][ T9450] usb 3-1: Product: syz [ 597.344159][ T9450] usb 3-1: Manufacturer: syz [ 597.350072][ T9450] usb 3-1: SerialNumber: syz [ 597.394007][ T9450] usb 3-1: config 0 descriptor?? [ 597.405159][ T9450] mcba_usb 3-1:0.0: Can't find endpoints [ 597.552604][ T9446] usb 4-1: Using ep0 maxpacket: 8 [ 597.583074][ T9446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.633567][ T9446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.646539][ T9450] usb 3-1: USB disconnect, device number 79 [ 597.714835][ T9446] usb 4-1: Product: syz [ 597.729548][ T9446] usb 4-1: Manufacturer: syz [ 597.735722][ T9446] usb 4-1: SerialNumber: syz [ 598.036241][ T9446] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 598.143336][ T9446] usb 4-1: USB disconnect, device number 27 [ 598.191209][ T9446] usblp0: removed [ 598.573628][T13127] vivid-004: disconnect [ 598.903718][ T9452] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 599.201592][ T981] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 599.290080][ T9452] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.340461][ T9452] usb 3-1: config 0 interface 0 has no altsetting 0 [ 599.411546][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 599.433549][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 599.447573][ T981] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 599.518636][ T9452] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 599.521525][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.528013][ T9452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.567313][ T981] usb 4-1: Product: syz [ 599.574291][ T981] usb 4-1: Manufacturer: syz [ 599.579204][ T981] usb 4-1: SerialNumber: syz [ 599.595715][ T9452] usb 3-1: Product: syz [ 599.605575][ T981] usb 4-1: config 0 descriptor?? [ 599.613742][ T9446] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 599.629477][ T9452] usb 3-1: Manufacturer: syz [ 599.637178][ T9452] usb 3-1: SerialNumber: syz [ 599.649068][ T9452] usb 3-1: config 0 descriptor?? [ 599.664109][ T9452] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 599.707861][T13123] vivid-004: reconnect [ 599.717446][ T9452] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.734672][ T9452] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 599.791942][ T9452] usb 3-1: media controller created [ 599.814635][ T9446] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 599.923562][ T9446] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 599.994643][ T9452] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.011572][ T9446] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.028939][ T9446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.055118][T13136] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 600.055208][T13133] netlink: 'syz.3.1494': attribute type 9 has an invalid length. [ 600.094382][T13136] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 600.163596][ T9446] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.192401][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 600.215684][ T981] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 600.292119][T13142] trusted_key: encrypted_key: master key parameter 'ˆßØÒFßÌŽuܵRmJdefault' is invalid [ 600.379989][ T9452] DVB: Unable to find symbol tda10046_attach() [ 600.394431][ T9452] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 600.420576][ T981] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 600.423768][ T9446] usb 8-1: USB disconnect, device number 39 [ 600.449006][ T9452] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 600.487243][ T981] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 600.527745][ T981] usb 4-1: USB disconnect, device number 28 [ 600.611989][ T9459] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 600.772913][ T9459] usb 10-1: Using ep0 maxpacket: 8 [ 600.898741][ T9459] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 600.931840][ T9459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 600.942460][ T9459] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.957276][ T9459] usb 10-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 600.982608][ T9459] usb 10-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 601.020327][ T9459] usb 10-1: Product: syz [ 601.198769][ T9459] usb 10-1: Manufacturer: syz [ 601.301969][ T9459] usb 10-1: SerialNumber: syz [ 601.317372][ T9459] usb 10-1: config 0 descriptor?? [ 601.333518][ T9459] smsusb:smsusb_probe: board id=2, interface number 0 [ 601.341790][ T9459] smsusb:smsusb_probe: Device initialized with return code -19 [ 601.547578][ T9459] usb 10-1: USB disconnect, device number 23 [ 601.918095][ T9452] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 601.976559][ T9452] usb 3-1: USB disconnect, device number 80 [ 602.095530][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 602.110176][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 602.120787][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 602.131368][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 602.139201][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 602.158260][T13153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1500'. [ 602.161691][ T981] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 602.222377][T13153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1500'. [ 602.235781][T13153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1500'. [ 602.373253][ T981] usb 8-1: unable to get BOS descriptor or descriptor too short [ 602.432153][ T981] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 602.450686][T13160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 602.454008][ T981] usb 8-1: can't read configurations, error -71 [ 602.481584][ T9460] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 602.651963][ T9460] usb 10-1: Using ep0 maxpacket: 32 [ 602.667201][ T9460] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.678982][ T9460] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.691745][ T9460] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 602.702135][ T9460] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.719349][ T9460] usb 10-1: config 0 descriptor?? [ 602.749317][ T9460] hub 10-1:0.0: USB hub found [ 602.948583][ T9460] hub 10-1:0.0: 1 port detected [ 603.775341][ T981] hub 10-1:0.0: activate --> -90 [ 604.122038][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.201923][ T5839] Bluetooth: hci9: command tx timeout [ 604.521654][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.531912][T13153] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 605.039970][T13153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.059434][T13153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.078458][T13153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.091544][T13153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.098226][T13153] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 605.108098][T13153] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 605.124195][T13153] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 605.131336][T13153] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 605.140408][T13153] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 605.148559][T13153] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 605.161186][T13153] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 605.169191][ T981] usb 10-1-port1: cannot disable (err = -32) [ 605.179518][ T981] hub 10-1:0.0: hub_ext_port_status failed (err = -32) [ 605.187604][ T981] usb 10-1-port1: connect-debounce failed [ 605.197572][ T981] usb 10-1-port1: cannot disable (err = -32) [ 605.402727][ T9450] usb 10-1: USB disconnect, device number 24 [ 605.471578][ T9460] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 605.491697][ T5925] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 605.601137][T13158] chnl_net:caif_netlink_parms(): no params data found [ 605.664087][ T9460] usb 4-1: Using ep0 maxpacket: 32 [ 605.669632][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 605.688965][ T5925] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 605.711243][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.720167][ T9460] usb 4-1: device descriptor read/all, error -71 [ 605.736016][ T5925] usb 8-1: Product: syz [ 605.740346][ T5925] usb 8-1: Manufacturer: syz [ 605.790275][ T5925] usb 8-1: SerialNumber: syz [ 606.056850][ T5925] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 606.096344][ T5925] usb 8-1: USB disconnect, device number 42 [ 606.115978][ T5925] usblp0: removed [ 606.184703][ T9460] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 606.193218][T13178] warning: `syz.2.1506' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 606.232838][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.240824][T13158] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.249674][T13158] bridge_slave_0: entered allmulticast mode [ 606.263298][T13158] bridge_slave_0: entered promiscuous mode [ 606.291059][T13158] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.319612][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.330023][T13158] bridge_slave_1: entered allmulticast mode [ 606.342432][T13158] bridge_slave_1: entered promiscuous mode [ 606.353147][ T9460] usb 4-1: Using ep0 maxpacket: 8 [ 606.371915][ T9460] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 606.380669][ T9460] usb 4-1: config 0 has an invalid interface number: 49 but max is 2 [ 606.392910][ T9460] usb 4-1: config 0 has no interface number 1 [ 606.401203][ T9460] usb 4-1: config 0 has no interface number 2 [ 606.409232][ T9460] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 606.418631][ T9460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.434313][ T9460] usb 4-1: config 0 descriptor?? [ 606.456149][ T9460] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 606.562523][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.580699][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.601736][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 606.645518][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.681331][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.746053][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.778353][T13192] openvswitch: netlink: Unknown nsh attribute 0 [ 606.798956][T13192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.821990][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.839047][T13192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1508'. [ 606.852895][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.865353][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.890068][ T9460] usb 4-1: Could not set interface, error -71 [ 606.911271][ T30] audit: type=1326 audit(1761627363.771:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13194 comm="syz.7.1510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f573918efc9 code=0x0 [ 606.933188][ T9460] usb 4-1: USB disconnect, device number 30 [ 606.984681][T13158] team0: Port device team_slave_0 added [ 607.008311][T13158] team0: Port device team_slave_1 added [ 607.084047][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 607.090256][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 607.161812][ T5839] Bluetooth: hci9: command 0x040f tx timeout [ 607.161999][ T5841] Bluetooth: hci8: command 0x0c1a tx timeout [ 607.171218][ T52] Bluetooth: hci7: command 0x0c1a tx timeout [ 607.175509][ T5841] Bluetooth: hci6: command 0x0c1a tx timeout [ 607.182103][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 607.188187][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.258984][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.268094][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.298699][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.312191][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.319394][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.357731][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.482038][ T9446] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 607.581114][T13158] hsr_slave_0: entered promiscuous mode [ 607.591567][T13158] hsr_slave_1: entered promiscuous mode [ 607.599819][T13158] debugfs: 'hsr0' already exists in 'hsr' [ 607.607342][T13158] Cannot create hsr debugfs directory [ 607.663832][ T9446] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 607.663986][T13207] xt_TPROXY: Can be used only with -p tcp or -p udp [ 607.681566][ T9446] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 607.697448][ T9446] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.737380][ T9446] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.818363][T13202] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 607.836662][T13202] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 607.853530][ T9446] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.082050][ T9446] usb 10-1: USB disconnect, device number 25 [ 608.982064][ T9458] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 609.229759][ T9458] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.252957][T13200] Bluetooth: hci9: command 0x040f tx timeout [ 609.282244][ T9458] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 609.291697][ T9458] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 609.321966][ T9458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.342736][ T9458] usb 3-1: config 0 descriptor?? [ 609.347041][ T9446] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 609.566673][ T9446] usb 10-1: unable to get BOS descriptor or descriptor too short [ 609.647175][ T9446] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 609.735687][ T9446] usb 10-1: can't read configurations, error -71 [ 611.031950][ T9446] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 611.193012][ T9446] usb 10-1: Using ep0 maxpacket: 8 [ 611.259033][T13158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 611.261559][ T9446] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 611.298345][ T9446] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.319390][ T9446] usb 10-1: Product: syz [ 611.328962][T13200] Bluetooth: hci9: command 0x040f tx timeout [ 611.349236][ T9446] usb 10-1: Manufacturer: syz [ 611.354183][T13158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 611.368876][ T9446] usb 10-1: SerialNumber: syz [ 611.381072][ T9458] usb 3-1: USB disconnect, device number 81 [ 611.394681][T13158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 611.536746][T13158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 611.932762][T13268] tipc: Started in network mode [ 611.951647][T13268] tipc: Node identity 9e670433ea82, cluster identity 4711 [ 611.966861][T13268] tipc: Enabled bearer , priority 0 [ 612.006396][ T30] audit: type=1326 audit(1761627368.871:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.008346][T13273] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 612.108271][T13271] syzkaller0: entered promiscuous mode [ 612.135814][ T30] audit: type=1326 audit(1761627368.871:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.198362][ T30] audit: type=1326 audit(1761627368.871:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.233375][ T30] audit: type=1326 audit(1761627368.871:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.254471][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 612.258917][ T30] audit: type=1326 audit(1761627368.951:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.291924][ T9446] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 612.309869][ T30] audit: type=1326 audit(1761627368.951:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.314041][ T9446] usb 10-1: USB disconnect, device number 28 [ 612.336575][ T30] audit: type=1326 audit(1761627369.011:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 612.424673][ T9446] usblp0: removed [ 612.730867][T13158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.817688][T13158] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.857333][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.866107][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.993530][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.001076][ T5989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.093835][ T9458] tipc: Node number set to 1961165875 [ 613.412149][T13200] Bluetooth: hci9: command 0x040f tx timeout [ 613.701728][ T30] audit: type=1326 audit(1761627370.421:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 613.881690][ T30] audit: type=1326 audit(1761627370.421:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 614.010180][ T30] audit: type=1326 audit(1761627370.421:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13295 comm="syz.2.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1140d8efc9 code=0x7ffc0000 [ 614.417861][T13158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.760397][T13158] veth0_vlan: entered promiscuous mode [ 614.870664][T13158] veth1_vlan: entered promiscuous mode [ 615.023386][T13158] veth0_macvtap: entered promiscuous mode [ 615.102585][T13158] veth1_macvtap: entered promiscuous mode [ 615.185825][T13158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.286918][T13158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.411995][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.467367][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.481976][T13200] Bluetooth: hci9: command 0x040f tx timeout [ 615.495928][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.526967][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.641879][ T31] INFO: task kworker/u8:3:50 blocked for more than 143 seconds. [ 615.649761][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.721873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.730894][ T31] task:kworker/u8:3 state:D stack:22280 pid:50 tgid:50 ppid:2 task_flags:0x4388060 flags:0x00080000 [ 615.788675][ T31] Workqueue: loop6 loop_workfn [ 615.806917][ T31] Call Trace: [ 615.810310][ T31] [ 615.837804][ T31] __schedule+0x1798/0x4cc0 [ 615.854529][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 615.875224][ T31] ? __pfx___schedule+0x10/0x10 [ 615.942080][ T31] ? schedule+0x91/0x360 [ 615.946622][ T31] schedule+0x165/0x360 [ 615.950952][ T31] schedule_preempt_disabled+0x13/0x30 [ 616.035812][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 616.064342][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 616.070934][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 616.078419][T13333] binder_alloc: 13332: binder_alloc_buf size 1024 failed, no address space [ 616.110618][ T31] ? blkdev_write_iter+0x50b/0x710 [ 616.121502][ T31] down_read+0x98/0x2e0 [ 616.125851][ T31] blkdev_write_iter+0x50b/0x710 [ 616.127919][T13333] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 616.146988][ T31] lo_rw_aio+0xcfa/0xfa0 [ 616.151522][ T31] ? __pfx_lo_rw_aio+0x10/0x10 [ 616.158104][ T31] ? kthread_associate_blkcg+0x491/0x600 [ 616.166330][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.173455][ T31] loop_process_work+0x835/0xf90 [ 616.181767][ T31] ? __pfx_loop_process_work+0x10/0x10 [ 616.187570][ T31] ? __lock_acquire+0xab9/0xd20 [ 616.193684][ T31] ? do_raw_spin_lock+0x121/0x290 [ 616.199056][ T31] ? look_up_lock_class+0x74/0x170 [ 616.210059][ T31] ? register_lock_class+0x51/0x320 [ 616.218479][ T31] ? __lock_acquire+0xab9/0xd20 [ 616.226299][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 616.236448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.251513][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 616.259676][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 616.276608][ T31] process_scheduled_works+0xae1/0x17b0 [ 616.290396][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.304722][ T31] worker_thread+0x8a0/0xda0 [ 616.313963][ T31] kthread+0x711/0x8a0 [ 616.320451][ T31] ? __pfx_worker_thread+0x10/0x10 [ 616.330158][ T31] ? __pfx_kthread+0x10/0x10 [ 616.352514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.362263][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.367844][ T31] ? __pfx_kthread+0x10/0x10 [ 616.380201][ T31] ret_from_fork+0x4bc/0x870 [ 616.389485][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 616.396532][ T31] ? __switch_to_asm+0x39/0x70 [ 616.401968][ T31] ? __switch_to_asm+0x33/0x70 [ 616.408405][ T31] ? __pfx_kthread+0x10/0x10 [ 616.415867][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.423099][ T31] [ 616.426428][ T31] [ 616.426428][ T31] Showing all locks held in the system: [ 616.444201][ T31] 1 lock held by khungtaskd/31: [ 616.449221][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 616.460461][ T31] 3 locks held by kworker/u8:3/50: [ 616.467089][ T31] #0: ffff88806addc148 ((wq_completion)loop6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.479641][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.513467][ T31] #2: ffff8880250f9328 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 616.623104][ T31] 2 locks held by getty/5592: [ 616.627864][ T31] #0: ffff88814d2a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 616.700135][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 616.718757][ T31] 3 locks held by kworker/1:16/9460: [ 616.725940][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 616.743102][ T31] #1: ffffc9001a63fba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 616.756991][ T31] #2: ffff888051bdf240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 616.767601][ T31] 3 locks held by syz.5.1070/10835: [ 616.779401][ T31] 1 lock held by dhcpcd/11323: [ 616.784700][ T31] #0: ffff888058b2f508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 616.797248][ T31] 1 lock held by syz.8.1177/11496: [ 616.802816][ T31] #0: ffff8880250f94c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 616.814078][ T31] 1 lock held by syz.6.1197/11618: [ 616.820578][ T31] #0: ffff8880250f94c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 616.847876][ T31] 1 lock held by syz.6.1197/11619: [ 616.853484][ T31] #0: ffff8880250f94c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 616.866127][ T31] 1 lock held by syz.0.1456/12989: [ 616.871954][ T31] #0: ffff8880250f94c8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 616.883442][ T31] 1 lock held by syz-executor/13158: [ 616.888879][ T31] #0: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 616.901824][ T31] 3 locks held by syz.7.1531/13328: [ 616.907377][ T31] #0: ffff8880589f5288 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 616.921576][ T31] #1: ffff8880333fa260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 616.951480][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 616.975371][ T31] 1 lock held by sed/13351: [ 616.980030][ T31] [ 617.051851][ T31] ============================================= [ 617.051851][ T31] [ 617.060608][ T31] NMI backtrace for cpu 0 [ 617.060630][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 617.060655][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 617.060669][ T31] Call Trace: [ 617.060678][ T31] [ 617.060687][ T31] dump_stack_lvl+0x189/0x250 [ 617.060726][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.060755][ T31] ? __pfx__printk+0x10/0x10 [ 617.060791][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 617.060817][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 617.060843][ T31] ? __pfx__printk+0x10/0x10 [ 617.060870][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 617.060909][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 617.060936][ T31] watchdog+0xf60/0xfa0 [ 617.060964][ T31] ? watchdog+0x1e2/0xfa0 [ 617.060993][ T31] kthread+0x711/0x8a0 [ 617.061027][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.061049][ T31] ? __pfx_kthread+0x10/0x10 [ 617.061080][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.061107][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.061133][ T31] ? __pfx_kthread+0x10/0x10 [ 617.061164][ T31] ret_from_fork+0x4bc/0x870 [ 617.061190][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.061221][ T31] ? __switch_to_asm+0x39/0x70 [ 617.061239][ T31] ? __switch_to_asm+0x33/0x70 [ 617.061257][ T31] ? __pfx_kthread+0x10/0x10 [ 617.061288][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.061325][ T31] [ 617.061334][ T31] Sending NMI from CPU 0 to CPUs 1: [ 617.220170][ C1] NMI backtrace for cpu 1 [ 617.220189][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 617.220210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 617.220224][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 617.220252][ C1] RIP: 0010:mark_lock+0x3c/0x190 [ 617.220274][ C1] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 64 51 d8 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 30 d3 16 93 eb 48 83 3d cb e0 [ 617.220292][ C1] RSP: 0018:ffffc90000ac77c0 EFLAGS: 00000003 [ 617.220307][ C1] RAX: 00000000000007f7 RBX: 0000000000000006 RCX: 0000000000000006 [ 617.220319][ C1] RDX: 0000000000000006 RSI: ffff88801e2fe618 RDI: ffff88801e2fdac0 [ 617.220332][ C1] RBP: 0000000000000040 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 617.220345][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff88801e2fe690 [ 617.220360][ C1] R13: 0000000000000000 R14: ffff88801e2fe618 R15: 0000000000000001 [ 617.220372][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 617.220388][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.220400][ C1] CR2: 000055b55fced950 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 617.220417][ C1] Call Trace: [ 617.220425][ C1] [ 617.220435][ C1] lockdep_hardirqs_on_prepare+0x191/0x2a0 [ 617.220455][ C1] trace_hardirqs_on+0x28/0x40 [ 617.220473][ C1] kasan_quarantine_put+0xdd/0x220 [ 617.220500][ C1] ? skb_release_data+0x62d/0x7c0 [ 617.220518][ C1] kfree+0x19a/0x6d0 [ 617.220552][ C1] skb_release_data+0x62d/0x7c0 [ 617.220574][ C1] consume_skb+0x9e/0xf0 [ 617.220590][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 617.220618][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 617.220639][ C1] process_scheduled_works+0xae1/0x17b0 [ 617.220670][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 617.220697][ C1] worker_thread+0x8a0/0xda0 [ 617.220728][ C1] kthread+0x711/0x8a0 [ 617.220753][ C1] ? __pfx_worker_thread+0x10/0x10 [ 617.220772][ C1] ? __pfx_kthread+0x10/0x10 [ 617.220796][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.220817][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.220840][ C1] ? __pfx_kthread+0x10/0x10 [ 617.220863][ C1] ret_from_fork+0x4bc/0x870 [ 617.220883][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 617.220904][ C1] ? __switch_to_asm+0x39/0x70 [ 617.220920][ C1] ? __switch_to_asm+0x33/0x70 [ 617.220934][ C1] ? __pfx_kthread+0x10/0x10 [ 617.220959][ C1] ret_from_fork_asm+0x1a/0x30 [ 617.220981][ C1] [ 618.568528][ T5989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.834461][ T5989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.039568][ T5989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.159691][ T5989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.442116][ T5989] bridge_slave_1: left allmulticast mode [ 619.448346][ T5989] bridge_slave_1: left promiscuous mode [ 619.472884][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.490428][ T5989] bridge_slave_0: left allmulticast mode [ 619.507369][ T5989] bridge_slave_0: left promiscuous mode [ 619.515154][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.462130][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.475788][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.488383][ T5989] bond0 (unregistering): Released all slaves [ 620.666724][ T5989] hsr_slave_0: left promiscuous mode [ 620.689206][ T5989] hsr_slave_1: left promiscuous mode [ 620.702981][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.710708][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.726991][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.741356][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.792332][ T5989] veth1_macvtap: left promiscuous mode [ 620.797956][ T5989] veth0_macvtap: left promiscuous mode [ 620.817754][ T5989] veth1_vlan: left promiscuous mode [ 620.825962][ T5989] veth0_vlan: left promiscuous mode [ 622.132996][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 622.268050][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 623.999360][ T5989] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.134300][ T5989] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.282978][ T5989] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.440410][ T5989] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.607891][ T43] kworker/1:1 (43) used greatest stack depth: 13048 bytes left [ 624.784641][ T5989] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.947823][ T5989] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.070071][ T5989] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.160580][ T5989] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.526722][ T5989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0