last executing test programs: 6m24.336453968s ago: executing program 1 (id=314): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) r2 = openat(r0, &(0x7f000000c380)='.\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, &(0x7f0000006100)={0x2020}, 0x2020) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r3}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x8, 0x2, "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", 0x6, 0x7, 0x1, 0x1, 0x9, 0xd, 0x6}, r5}}, 0x120) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x338f}}, './file0\x00'}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000cc0)="e1", 0x2a}], 0x1) 6m24.090727101s ago: executing program 1 (id=316): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x2, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x66, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x94, &(0x7f0000000480)=ANY=[]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0xe2, &(0x7f0000000200)=@string={0xe2, 0x3, "e0e88cbeee99ed224f7f4c0c56721b1131a51f8e9c6ed79e6b87042365278f59af67dea5e37598e8bb097842183b18f7c79840993941627645afccd5bb498b33eaa4ce91cfe8f9a845bed2b3c52bad5f44f390c17233b3663b6d53491605814efc5dd4158ce4b8e47620d8e5f6d15f7bfa816993f464f1dae04419075420a1d8b296bdb41fb6bde588efd744e250d1e9d166da4dc94a25fd0e3cddd9061cde951b189b5bba6a4a275ec86337ab2fea413204fe02806ac1ada500e1dc77992a1217f5323360bf12e19620bf3d11d886364cafd72022f1c03c35860cf9bea10749"}}, {0x5, &(0x7f0000000300)=@string={0x5, 0x3, "c106bf"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x425}}]}) open$dir(&(0x7f0000000400)='./file0\x00', 0x40, 0x117) setresuid(0x0, 0x0, 0xffffffffffffffff) timer_delete(r0) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#(:.', 0x0) 6m22.219479641s ago: executing program 1 (id=324): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "e9a4cf4bc558b45342ab11f71b0e5d2d8e4f03870d04cb9d131f23a7a719f7a5", "6577f1577223239877d558e312d8415d278a2e4016104179d285e26678216ada", "31641585443573e6250aac49b236d968b29b37e17447121008f8fb2860c82cb6", "8dddfac386f57fb7dff4e697f7b769dd97d01c89d92769c6b84b67cd46fa594a", "4b288cee646dbd25b795e3326f2a6bdac402e6b4eef54a62ca6504605752582f", "31f14371a63b77775bfdc28f", 0x36, 0x4, 0x6, 0xa7bc, 0x5}}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000001200", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m21.746648699s ago: executing program 1 (id=325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000071c0)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0xd8}, {{&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000500)=""/50, 0x32}], 0x3, &(0x7f0000000580)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001580)=""/110, 0x6e}, {&(0x7f0000001600)=""/238, 0xee}, {&(0x7f0000001700)=""/127, 0x7f}, {&(0x7f0000001780)=""/53, 0x35}], 0x4, &(0x7f0000001800)=""/167, 0xa7}, 0x4ba8}, {{&(0x7f00000018c0)=@ax25={{0x3, @rose}, [@null, @rose, @rose, @remote, @null, @bcast, @remote, @rose]}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001940)=""/132, 0x84}, {&(0x7f0000001a00)=""/20, 0x14}, {&(0x7f0000001a40)=""/189, 0xbd}, {&(0x7f0000001b00)=""/49, 0x31}, {&(0x7f0000001b40)=""/101, 0x65}, {&(0x7f0000001bc0)=""/85, 0x55}, {&(0x7f0000001c40)=""/235, 0xeb}], 0x7, &(0x7f0000001dc0)=""/235, 0xeb}, 0x8}, {{&(0x7f0000001ec0)=@xdp, 0x80, &(0x7f0000004140)=[{&(0x7f0000001f40)=""/107, 0x6b}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/36, 0x24}, {&(0x7f0000004000)=""/206, 0xce}, {&(0x7f0000004100)=""/55, 0x37}], 0x6, &(0x7f00000041c0)=""/229, 0xe5}, 0x3}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000004900)=[{&(0x7f0000004340)=""/11, 0xb}, {&(0x7f0000004380)=""/231, 0xe7}, {&(0x7f0000004480)=""/67, 0x43}, {&(0x7f0000004500)=""/105, 0x69}, {&(0x7f0000004580)=""/150, 0x96}, {&(0x7f0000004640)=""/125, 0x7d}, {&(0x7f00000046c0)=""/7, 0x7}, {&(0x7f0000004700)=""/140, 0x8c}, {&(0x7f00000047c0)=""/119, 0x77}, {&(0x7f0000004840)=""/158, 0x9e}], 0xa, &(0x7f00000049c0)=""/4096, 0x1000}, 0xcf7}, {{&(0x7f00000059c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005a40)=""/180, 0xb4}, {&(0x7f0000005b00)=""/77, 0x4d}], 0x2, &(0x7f0000005bc0)=""/120, 0x78}, 0xaf9a}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000005c40)=""/165, 0xa5}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/87, 0x57}, {&(0x7f0000006d80)=""/201, 0xc9}, {&(0x7f0000006e80)=""/160, 0xa0}, {&(0x7f0000006f40)=""/204, 0xcc}], 0x6, &(0x7f00000070c0)=""/249, 0xf9}, 0x5}], 0x8, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f00000073c0)='./file0/../file0/../file0/../file0/file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000001ff0)={0x1d, r8}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000440)={0x4, 0x4, 0x26000, 0x2000, &(0x7f0000014000/0x2000)=nil, 0x100000000, r11}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x80000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x800000, r11}) sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 6m18.116332061s ago: executing program 1 (id=337): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000b24de0f300000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000001000000000b910000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc0200000000000000000000b3000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000020000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m17.580860091s ago: executing program 1 (id=338): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r6, 0xda90) (async) accept4(r6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000300)={0xffffffffffffff40, 0xa5ad, 0x5, 0xf, 0xfffffffffffffff8, 0x0, 0x1, 0x4, 0xba36}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0xc36, {0x7, 0x2b, 0x10001, 0xffffffffc0010425, 0x1, 0x1ff, 0xae, 0xf38b68, 0x0, 0x0, 0x10, 0x2}}, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x8f}}, &(0x7f00000003c0)={0x18, 0x4df60775bc85ec92, 0x2, {0x400}}, &(0x7f00000014c0)={0x18, 0xffffffffffffffda, 0x7fffffff, {0x40000000}}, &(0x7f0000001500)={0x28, 0x0, 0x400, {{0xff, 0x3, 0x1}}}, &(0x7f0000001540)={0x60, 0xfffffffffffffff5, 0x8, {{0x1, 0xbcb0, 0x1, 0x80000000, 0x8, 0x8, 0x6, 0x2}}}, &(0x7f00000015c0)={0x18, 0x0, 0x102, {0x6}}, &(0x7f0000000440)=ANY=[@ANYBLOB="17ffffff0000000005000000000000002f6465762f696f6d6d7500b1a0a32dc1c6038af263b06bd428a6d6ff3d13f4f10818361f817d9e3d70c21522855f7f066f52b9f8ec7b364bdf341cd4cbf2376ed002fec2d0d83954c6ddd524a220a00f65a0b5240b22a6d5345f8cab7d40241cf1da721d1c04dcea8e044a5063dd85706407961d9d9e52ded54c3d211fd207880750bcc325050bf5f02bf7e0c822a424f5eff6bfdc99"], 0x0, &(0x7f00000038c0)={0x78, 0x0, 0xffffffffffffffff, {0x4, 0x200, 0x0, {0x2, 0xfffffffffffffff7, 0x1, 0xd, 0xb, 0x4, 0x1, 0xe80c, 0x1, 0x4000, 0x1ff, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000003940)={0x90, 0x0, 0x2b0, {0x5, 0x0, 0x101, 0x2, 0x2, 0xe5f, {0x0, 0x7, 0x8, 0x5, 0x75b, 0x10, 0x9, 0x5, 0x15d87b66, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1}}}, 0x0, &(0x7f00000036c0)=ANY=[], &(0x7f0000003cc0)={0xa0, 0x0, 0x401, {{0x1, 0x1, 0xa, 0x6, 0x8, 0xffffffff, {0x0, 0x1, 0x401, 0x4, 0xc, 0xf095, 0x1, 0x6, 0xe33f, 0x6000, 0x8, 0x0, 0xee01, 0xffffffff, 0x2}}, {0x0, 0x1}}}, &(0x7f0000003d80)={0x20, 0x0, 0x6, {0x0, 0x0, 0x200, 0xb}}, &(0x7f0000003e00)={0x130, 0x0, 0x1, {0x2, 0x3da7, 0x0, '\x00', {0x10, 0x8, 0x2, 0x3, 0x0, 0x0, 0xa000, '\x00', 0x5, 0x0, 0x6, 0x80, {0xc, 0x3}, {0x9, 0xa}, {0x3, 0x9}, {0x5, 0x1}, 0xbb9, 0x8, 0x4, 0x8}}}}) 6m16.132040112s ago: executing program 32 (id=338): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r6, 0xda90) (async) accept4(r6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000300)={0xffffffffffffff40, 0xa5ad, 0x5, 0xf, 0xfffffffffffffff8, 0x0, 0x1, 0x4, 0xba36}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0xc36, {0x7, 0x2b, 0x10001, 0xffffffffc0010425, 0x1, 0x1ff, 0xae, 0xf38b68, 0x0, 0x0, 0x10, 0x2}}, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x8f}}, &(0x7f00000003c0)={0x18, 0x4df60775bc85ec92, 0x2, {0x400}}, &(0x7f00000014c0)={0x18, 0xffffffffffffffda, 0x7fffffff, {0x40000000}}, &(0x7f0000001500)={0x28, 0x0, 0x400, {{0xff, 0x3, 0x1}}}, &(0x7f0000001540)={0x60, 0xfffffffffffffff5, 0x8, {{0x1, 0xbcb0, 0x1, 0x80000000, 0x8, 0x8, 0x6, 0x2}}}, &(0x7f00000015c0)={0x18, 0x0, 0x102, {0x6}}, &(0x7f0000000440)=ANY=[@ANYBLOB="17ffffff0000000005000000000000002f6465762f696f6d6d7500b1a0a32dc1c6038af263b06bd428a6d6ff3d13f4f10818361f817d9e3d70c21522855f7f066f52b9f8ec7b364bdf341cd4cbf2376ed002fec2d0d83954c6ddd524a220a00f65a0b5240b22a6d5345f8cab7d40241cf1da721d1c04dcea8e044a5063dd85706407961d9d9e52ded54c3d211fd207880750bcc325050bf5f02bf7e0c822a424f5eff6bfdc99"], 0x0, &(0x7f00000038c0)={0x78, 0x0, 0xffffffffffffffff, {0x4, 0x200, 0x0, {0x2, 0xfffffffffffffff7, 0x1, 0xd, 0xb, 0x4, 0x1, 0xe80c, 0x1, 0x4000, 0x1ff, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000003940)={0x90, 0x0, 0x2b0, {0x5, 0x0, 0x101, 0x2, 0x2, 0xe5f, {0x0, 0x7, 0x8, 0x5, 0x75b, 0x10, 0x9, 0x5, 0x15d87b66, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1}}}, 0x0, &(0x7f00000036c0)=ANY=[], &(0x7f0000003cc0)={0xa0, 0x0, 0x401, {{0x1, 0x1, 0xa, 0x6, 0x8, 0xffffffff, {0x0, 0x1, 0x401, 0x4, 0xc, 0xf095, 0x1, 0x6, 0xe33f, 0x6000, 0x8, 0x0, 0xee01, 0xffffffff, 0x2}}, {0x0, 0x1}}}, &(0x7f0000003d80)={0x20, 0x0, 0x6, {0x0, 0x0, 0x200, 0xb}}, &(0x7f0000003e00)={0x130, 0x0, 0x1, {0x2, 0x3da7, 0x0, '\x00', {0x10, 0x8, 0x2, 0x3, 0x0, 0x0, 0xa000, '\x00', 0x5, 0x0, 0x6, 0x80, {0xc, 0x3}, {0x9, 0xa}, {0x3, 0x9}, {0x5, 0x1}, 0xbb9, 0x8, 0x4, 0x8}}}}) 2m35.733683545s ago: executing program 5 (id=1223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x4, 0xfffffffd, 0xffffff21, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9f0902, 0x5, '\x00', @value64=0xf9d}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1ff}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x5) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x0, 0x3001, 0x0, 0x0, 0x0, 0x1}}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) (async) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x2, 0x0, 0x1}, {0x3, 0x0, 0xae}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0xac, 0x0, 0x91ca, 0x1, 0x40000009, 0xfffffff7}]}) 2m33.71897157s ago: executing program 5 (id=1226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x80, 0xa5, 0x54, 0x40, 0x5a9, 0x8065, 0x4196, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xbc, 0x86, 0x82}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000040)=0x4800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0xa, 0x4, "04daf311"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.124245765s ago: executing program 5 (id=1240): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x38}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000180)={0x0, 0x7, 0x3, "3dfdfb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m28.828014554s ago: executing program 5 (id=1251): setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, 0x0, 0xfffffffffffffe7a) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) writev(r2, &(0x7f0000001740)=[{&(0x7f0000001380)="ac591bbcfe74a5efb10bc99b2d96cfece77b9233f0af6f388f2f426591ec9b4a1136854e39f5dd9402ec717e6aef971cf93001a72e7183507fb8654ce4925dadbd1479fea35f225d55623d439f18388a5b0fff012273c60e73e0b02c1c57aef5b3f4686377d7afedb6daab9b4a266d3810db264604fd89576e66d730663349936b6f1054f0c4ca3de76b3343031b4be2df1bd2de0f81c4d508c4a5bd305fba5fbd80601ce300c5b1108e5c91a3822b041b7e9bc2837ff57ce90e46c7822b6c0988eb5e4c752b21a04cd36efc0eed9ee9d495aaecf5ddab98", 0xd8}, {&(0x7f0000000080)="df68bdd40e71f8d1824069abd77120f558f168cd73a2b4f6725dbc32527f787ca0429c41a98546d605ae997d8336bb7181243f4b84a0141459bee1c72a7a7225f6f6d72550efedc2ef6d369a8403b4488b023962fd060b3192b6cfcb920a0f8649299330400782e1d16b80f30b82b5a8f054b0ec7c0158cf6c", 0x79}, {&(0x7f0000000240)="281a0929c9b334", 0x7}, {&(0x7f0000001480)="c34932ddd3e307c282587ec8759eb7d230d85d8e91244ea8614ad87ecbadd8a67bfe21a4905415addfdd0aa57098dba6da95e33f546e208ce506192fa297b613bb4a8ac63ea987268436d0749f63754f4a71062fa826d0c067b5c57e06e2d24cbdf702344a28c9b754289ac33dc714e7227b735d83d62cc807e8fd47cd492d920913da8d6963786dc5c472672358dfef22fbfef3aaec35db378998d61c15cee02174db695c15de899966cc3008985b9005a7d31f2d3ef7a33fb70a36c9efcfd626854d0ff70cb2f1897d52183f6dac90f5e3742a200180bb607751f0", 0xdc}, {&(0x7f0000001580)="06a6e5ae3acd6c068f4b1d1e84dc97a20e312b9cfbba55e50be222f22cf9785dc707b4c8d686d3629b2205aac21a88c042651bb898b4034a3b0b16c3eed9c98f7b9d6dbfc8c1d4276af4432af451aabd5a6b5006e5494e8574673e9a8b068c7bdc6c8ca5729be612a3b7e92198ca651b36093733980d062cb2928ebebbd3ecd8a170ebbed99ea535bd5f508a5b28f2d8b0f7569dd5ad2a91868c629a9295c0077e93faed9352dcc794967b8ab23e40a6e9c55b93530a0aa614ae6e4ab93d2807796da631b9652c117526bb29adeb76d3b0a74cee4e8f530bb6afea56b9f2f805912a8aaa8868b8", 0xe7}, {&(0x7f0000000280)="3dbe15675ba6", 0x6}, {&(0x7f0000001680)="905d9640364622c985d5f910d92c83006529d2115631a7dd78aabf95756c31047728ebbf368074009382efbd2e12532115756170fa5303e26694c2dac14f132a39561e88c5c4f50a43704139fa5237d7d66e34dd0713cfe6c5be32814d17d474fce92e39e8ba2c6920c074eb15da8385592faffd82b2b39fd0af71f6e442ee6966dd8b109adf3d9fde64531042df803b14067c15c8ae0a1156345a8abe0879cd7950feec4d960838cf5509009953ae18fa2d2ac2d7706497", 0xb8}], 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240eeffff0e100007800400028006000100e452000008000640000000010900010073797a30"], 0x118}}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) fcntl$lock(r1, 0x2, &(0x7f0000000180)={0x2, 0x3, 0x9, 0x6, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000740)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000001840)=[{{&(0x7f0000000380)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="b10e7218e71e7d0e0be7217645d0e39b536466beece72e76e6d3f96464d5a3f717b230948701978cb9b2e5934f89499c5645cdd3de097891daf972f90136c23dd7156fa623626594f865494f626af33dc94aefaaa2518c2ddc15b1f1b76f30ec6f", 0x61}, {&(0x7f0000000480)="7f5cafe6839d1fef798390fc50d52d9965376621cb36a1bc128ea0e3b0c7626c150c8246d3565ae548af4ca07e86ff15a288849dda327af4bf9195d2a4630bdf23e1edd7098370d49846f375a1976beb1af0a086b2d193b85a803370a5d2ba3ef51d", 0x62}, {&(0x7f0000000500)="be049fcfb723c595cff801d24f70bda7dca80e1cc68737638eabd9beb1ab416966004688729700138d827a7bd8e6fbd10e68c466959753ec5599945fb6500ab0884f1e57966462dd060863cca065d69213046af96a128dd7a50e0f36c0b79b1cd0313adfeaf886187d4d639db54462c00f83eb455b6de53f60ed33280ab4cf19a699db5ed76275abba43f36f258ea0d3e31e00426f1458af3b55615614cbe735970f119965e2ef2af797f110b85762fead6135763110d091925e7e6b01b6", 0xbe}, {&(0x7f00000005c0)="a574565f18d1fa54017b1e930a58d2660d798906ba3b19812e20fd4597505ac1045315dce0f222873064b38d320447898d7680cdfa4a4efb8e17d3fe3d0e4dc67fa31eeaf06537fd119a7f31be07e758b51017b543e6517d7c5836385432b2ad489f5b0b92c4d16d0092933aa734a00c19f997cc6c301f9f50a2721c74466d20aab18f77daa9e129c2ef259916d2dc66af9f280e3c8c7c72725ae197b774412fca5cd637229cc6b6d829bbf93a72d3a98a7f26bb942ca30ff6f53a693b5064576b20dd2409db9e2e6bda80fded1fad24c847ca1a3813841ed22a12ed339a88f45963d1250a67bc16f94248858a", 0xed}, {&(0x7f0000000200)="fc74e73d5df9a25a8c1ff3a7451115e441b0bfc0cd66165f653c87e393907349e6a6aa189df0e76afb25de842703bd", 0x2f}], 0x5, &(0x7f0000001900)=[{0xa0, 0x10e, 0x6, "7374650bb3bbc346c8507338eaafc06374b5a1667906fa10c94a207c95f34f3a200845ef839232bfcea02c996926a60277915d413efec06456c16d51921fe0bbd52e652da10830f1dd3627dc4c23738012b0b711e0b1408a410ec88a8a6b9213a2271801d80432c3e77f7c9b67b70db897d490e0067f564cd3d25b747345aa51555f50ea3ee7235e6f"}, {0xa0, 0x186, 0x0, "72ce20650d5fcc1bd2b57478f53037c3cb90d1089ea8fd431fde2e7d161a8d819fca77c4c5ad8c5f53cee3b2e10dcb252f02ff20a681ed69dc5fdfc37676efbd2ad4380a062099d0860b2ca50dc603938e463bb2ac370c24447d0c8e49aa2a5d6a4a6d24fae6dc1cf8dff8d5f3bfdc6a81e43d71a90b751c4d21a535f3470b29fb6818c67362029cef37"}, {0xc8, 0x10d, 0x2, "f7f5ea63d9f14a90c9f52d1488bab05b4af86bbbc8047aa06f429b719065770b2ff06a80b7e411e400be574100b1a584593a4487607f3ad5900a56a25e6ad022f0ed97a4f7ef22281e7d8d36e7e9cbbf7f2c46f11d359a33254fd8cdaa7efe84070c99899af3b62240f22b0423d1829bdbaff2cd87de5feedb470ac7fd8f4367d32e097eaa498f1d591ef327e964a6a3e404589d6b2d1bbbfa898de7633682eb05f578e9368af0807998e5f4e1293c72f44f0c6c"}, {0xa8, 0x103, 0x2, "10886e5d8cb9adab1408443c31dd148b345b60d1ff54ee5eb62013677d546f587e07adef3f40ed1de960920ab91eb2066fef2dd808e9038a7f9ed84dd42a1da3ae29dc57a3b25baf0570f7ba42bc81e488962740db900df28f3a7833f053f20de1b31866aedb9f4549ff26786e6ce31ad8ec703ba32643fdad615738a8070264255a26c0b34b82714885f60ca04af1998ad967"}, {0xf0, 0x29, 0x9, "e9615d1dc06b44b1828b5ba076e2f7ad65542dea34aea1b98bd0ed4a1d3f4f78a3e33353ec8fa40d11206db766d1765a10326a7fd4070eb06d310f99f586ab35a1fc7b33c50bd7f3b801ed176ffdd391b48ce23cf0335f0d94f975abeb287ccf4864df4bc73f1f5f4e549bc68c10dfb319f91ee73b795f6e21230a387bfffd6ee594d2045d141f321ddccc3aa0e91c1fe71c44b43a4e930ed0d0cb6e5e2fe920b22716711a41e449e24df514c70afefe55adb44a75272abe88551337fa4dd002bd9635cd3465200e1a80d8e5a3915b9e6031dc9af582a6bb971b3cbe"}, {0x1e8, 0x10c, 0x400, "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"}], 0x588}}, {{&(0x7f0000000b40)=@l2={0x1f, 0xdb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="01607ba87ab6290d8eeb263def3ca751903893eed579cd52c4b63a68d6f04b4d52e43f8f3d95c6febe3d30e2d0540d6ef680cc4cf1ba24a9fe3e7d292ba3e861158878d75cfb804d4ed8d655c7874c53a2d322392d23841dff504963535310125d251b667d87d27c3cefb47b81ac02910fdd1c12d72ed4d5d390994f69d8615c3718f607cd89537fc53a943f62f801b31c67dfcb", 0x94}, {&(0x7f0000000c80)="c4a5f8ae47782096f7c110b95a00cf5a7bc7860bee7d8c7e471e4406f060dcb85288fd4a5ea4328885c88e75c2aae3503cab5cc0bba9d5bf7c50405d1205641b79922b49740ca9ca8c3511e2bfc17af762342dc60954a961a426784efd21e2f6626ccddebd1857f9c96b049a02c9414f", 0x70}, {&(0x7f0000000d00)="ea0773db0758f55e7e3c13be68ab98e98c9c1fe7ea0da6bd23c79c77335823b10057a82668ef3185372b1ee1a2d81e2cf496b447ae1ea06000a054ff6a91da0dd872b0d6d88a5d90bb3ee334ef384f3bef46539a1900e08410126d8d31191775fc358bd02259763c70e3a59ce621d0d8b5418c605f1b8b2dc5578c379cf6f9ddc8144f664646f00a1d541cedbb705b927434287f17e9d0", 0x97}], 0x3, &(0x7f0000000e00)=[{0x30, 0x117, 0xffffff80, "d781d39be4183dc9bd9bd2f87c8bd4f5d38f7b178b9a40a79b3444ab7434"}, {0x78, 0x10c, 0xe3f, "4c057320ae2dda5394ab20b295cfea4b57fdfbeb18b709c816b3c3e095d4d6296bf8197ccebf367759c46582b4102f54c3ba97f117edd3ec45135d71fd43506cd4e24a949ca1b407b8460895cd9488c8849244107e2adb777c02fefec8f45da2b6e827"}, {0xd0, 0x11, 0x0, "d0a4029ee427da51c2b9171a53fd3e272a99ff9e1e6bd9ead93836f40c417d237578df82faeca9397372e58c3ae0f5cf51ddd325d71e753db6cbad786c9ba55e01ba869599cf569c577ab611b0e09a347707f4b838c75cce69e2794f9c3a0a4932e83cbc74d3babdf39a493d9f8a4391ded4ba5f87749e6e3a3dff5b6e61552c7e391c7efb0e9ab111e567a9ec616ed040eb9d1d0dd16c5e120629337b4ab7a551c2a45b4eb890878df9b4880470c5ab4316626cedf4bcfbd2110a98712e8a66"}, {0xc0, 0x117, 0x8, "96531116ee80fe6ed3864c3f607f8daf7dcf954f08cdbdfefa41945f9bd5fab3b96bd3c09ac1170895724f1f792160e99cf27464322b8ffeb14c178c4efe666b14b2967171b89e8dbd5a98ae93deecc482596909b9d612320cdba576603869154bf45db7da67af1298c66d0792675c3b0f5dbf9304a6d0a886f98dc74ffb75e2ea8f1b45bad153976fcd44b76fb79cf8ceb57c42bba80de9b7cb91c225ec8aa7c5ae3ed5894538783bd7d575b33ecd05"}, {0xf8, 0x114, 0xac, "ebdbde1de39b428f322de2bfc57dde1799c87669729e46e25a4c99553b046453c2767c672216efeca5491a85eb24733789f1a3a71321cc45053612508dc4ae3612937da5adefb0aff7480173bcd142be350b5050c821ee52be89b4431a48ba925b5edb37d748c1010d8c0f214bffb5b40ec8b04d47658b86556aac6260926d3b37302b29004fb554fa0702b969aa66935b0d34dec4d817182681e7f25177f189c580b1d80996b7db06fc267e07ef253a1301ed70ce92fcf2856eef78962a0a7d86bc42d4b7125bbe5cf904735e6e2013debdee4482fa9406058a76563654f51e09"}, {0x58, 0x119, 0x6, "0c87d5366badff24c09cd2efbbf8ffbe18fb35c47fae27b1b39143b66387f396613837a9f81fa1a78b965037e7ee33e868545e4c34b4f1422c7b227fe117d1538e"}, {0x48, 0x10f, 0xfffff213, "57415ff72ef47c8cece4b2ac0fd7e30accb015384ca44dd17c011b5006dc75811ef2b7dfdd6f47f1b7fab4825c23fe755261"}], 0x3d0}}, {{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x4, 0x4, 0x4, 0x4}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)="becb32d6ef059925efbb789db75109522f2fa89fe6bfa8c4fa21c09c4fc1100db4a7dca15297b49c7784ebe649849fe7a6", 0x31}], 0x1, &(0x7f00000017c0)=[{0x58, 0x116, 0x401, "2803f6186c05bfa31733b0cf0288fcf5f7f20d7c2b6c917c184ee82d4b96a3171470b5f989ca22a81256de683d56e60b62c11051d6ba0a589b1c5bc6fef8f39484921bb195"}], 0x58}}], 0x3, 0x800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) 2m27.958332208s ago: executing program 5 (id=1256): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006480)=@newtfilter={0xb20, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xaf4, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0xaec, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x80, 0x9, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1000, 0xe, 0x20000000, 0xfffffff1, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0x17, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x8fc, 0x12, 0x0, 0x0, {{0xb}, {0x8d0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x83, 0x2, 0x4, 0x10004, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x4003, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x4}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x100009, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x8, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a5, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x40000000, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0xffffffff, 0x5, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x10000004, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x1000, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @uid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006480)=@newtfilter={0xb20, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xaf4, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0xaec, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x80, 0x9, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1000, 0xe, 0x20000000, 0xfffffff1, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0x17, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x8fc, 0x12, 0x0, 0x0, {{0xb}, {0x8d0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x83, 0x2, 0x4, 0x10004, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x4003, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x4}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x100009, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x8, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a5, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x40000000, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0xffffffff, 0x5, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x10000004, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x1000, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb20}}, 0x0) (async) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @uid}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 2m26.320338045s ago: executing program 5 (id=1259): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x33}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x5c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefff7ff00010000fc010000000000000000000000000000ac1414bb000000000000000000000000000100034e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcb30000000000000000000000000000000004d46c000000640101020000000000000000000000000000efffffff000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffdfffffffffff0000000000000000ffffffffffffffff09000000000000001f00000000000000feffffffffffffff02000000fcffffff440000002abd700004350000020001000400000000000000480003"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000b0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r13}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r13, &(0x7f0000000280)="f2", &(0x7f00000002c0)=""/19}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x48}}, 0x810) r16 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0xffffffffffffffff, 0x636, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x26, &(0x7f00000002c0)=""/38, 0x41000, 0x39, '\x00', r15, 0x0, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x1, 0xffff, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[r17], &(0x7f00000005c0)=[{0x5, 0x2, 0x2, 0x3}, {0x4, 0x2, 0x3, 0x4}, {0x1, 0x4, 0x7, 0xb}, {0x3, 0x4, 0x5, 0x6}, {0x1, 0x1, 0x0, 0x5}, {0x2, 0x2, 0xb, 0x2}, {0x0, 0x1, 0x3, 0xb}, {0x0, 0x2, 0xb, 0x4}, {0x0, 0x1, 0x2, 0xc}, {0x0, 0x3, 0x10, 0x6}], 0x10, 0xfff}, 0x94) 2m11.140083601s ago: executing program 33 (id=1259): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r9, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x33}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x5c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefff7ff00010000fc010000000000000000000000000000ac1414bb000000000000000000000000000100034e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcb30000000000000000000000000000000004d46c000000640101020000000000000000000000000000efffffff000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffdfffffffffff0000000000000000ffffffffffffffff09000000000000001f00000000000000feffffffffffffff02000000fcffffff440000002abd700004350000020001000400000000000000480003"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000b0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r13}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r13, &(0x7f0000000280)="f2", &(0x7f00000002c0)=""/19}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x48}}, 0x810) r16 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0xffffffffffffffff, 0x636, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x26, &(0x7f00000002c0)=""/38, 0x41000, 0x39, '\x00', r15, 0x0, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x1, 0xffff, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[r17], &(0x7f00000005c0)=[{0x5, 0x2, 0x2, 0x3}, {0x4, 0x2, 0x3, 0x4}, {0x1, 0x4, 0x7, 0xb}, {0x3, 0x4, 0x5, 0x6}, {0x1, 0x1, 0x0, 0x5}, {0x2, 0x2, 0xb, 0x2}, {0x0, 0x1, 0x3, 0xb}, {0x0, 0x2, 0xb, 0x4}, {0x0, 0x1, 0x2, 0xc}, {0x0, 0x3, 0x10, 0x6}], 0x10, 0xfff}, 0x94) 13.413264817s ago: executing program 0 (id=1696): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r0, 0x800000000000005, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60b81923eb077301fe8000000000000000000000ea0000aafe8000000000000000000000000000aa0000000000000000"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r5, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x1800, 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 12.6779016s ago: executing program 0 (id=1698): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$audion(&(0x7f0000000180), 0xff, 0x20000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) fstatfs(r3, &(0x7f000001b340)=""/251) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x2c, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x14e}]}]}, 0x2c}}, 0x84054) writev(r5, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40) read$FUSE(r4, &(0x7f0000019200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f000001b240)={'\x00', 0x0, 0x800, 0x4, 0x3, 0xc361, r9}) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f000001b480)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000e00000000000000000000000000016dd5c5438db07f74dbebf9ffd9343322b992cb240f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x40, 0x3, 0x1b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f000001b440)=ANY=[@ANYRES8=0x0, @ANYRES32=r10, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 9.156246205s ago: executing program 6 (id=1708): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000150001000000010000000000", @ANYRES32=r1, @ANYRES32=r1], 0x18}, 0x8841) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) r15 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r15, &(0x7f0000000340)={0x1d, r14}, 0x10) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) sendmsg$can_bcm(r15, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000000e8b54f540000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fa010000c6e83912ce2150c0"], 0x38}, 0x2}, 0x20000080) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000200)=0x1b, 0x4) 9.003841176s ago: executing program 2 (id=1710): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x98, 0xc9, 0x46, 0x8, 0x413c, 0x81d2, 0xeb3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x9c, 0x40, 0x4, [{{0x9, 0x4, 0xed, 0x8, 0x0, 0x4b, 0x2d, 0x3e, 0x6}}, {{0x9, 0x4, 0x92, 0xf, 0x0, 0xff, 0x3, 0x65, 0x6}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540500001e000701fefffffffcdbdf25017c0000040045803c0501"], 0x554}, 0x1, 0x0, 0x0, 0xc004}, 0xc044) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_usb_connect$uac1(0x3, 0xbf, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x3, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x2], 0xa7}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x83c821d61112038b, 0x4, 0x76, 0xf, 0x80, 0xe6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x3, 0xe, 0x9, 0x6, 0x69}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0xe, '?', "02"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x21, 0x56, "5352b5fec97e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x9, 0xc, {0x7, 0x25, 0x1, 0x80, 0xf1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa9, 0x1, 0x3, 0xef, "c3", 'Cz'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0xdb, 0x81, 'E', ']'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x4, 0xe3, {0x7, 0x25, 0x1, 0x80, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfe, 0x3, 0x7f, 0x20, 0xac}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0x2c0}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0xa2a}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8c, 0x7, 0x2, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0xf2, 0x6}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1e0a}}]}) 8.385039888s ago: executing program 0 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x6, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x3d, [0x80008001, 0x10000, 0x1000, 0x6c, 0x400], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000580)=""/140}, &(0x7f0000000640)=0x78) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0x7, 0x1, 0x129, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x5, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10003, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x200005, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcd, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffff966, 0xfb5, 0xffffff4e, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x10001, 0x7, 0x1, 0x6, 0x525ba681, 0x8000, 0x7, 0x1, 0x1, 0x10000, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x8, 0xfffffff8, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0x2, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x1, 0x2, 0x4, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xd, 0x81, 0x47, 0x9, 0x0, 0x11, 0x3, 0xb5, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0xfffe, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0x1, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc41f, 0x3e1e, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x53, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xa, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8005, 0xfffffff7, 0x5]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x49}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/154) r10 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r10, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r10, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) unshare(0x22020600) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 8.016821546s ago: executing program 6 (id=1715): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08d66350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x22, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}, {0x5, '\x00', @data=0x5, 0xf}, {0x26, '\x00', @st={0x4, [{0x0, @svalue=0x54}, {0x2, @svalue=0x1}, {0x3, @svalue=0xffffffffffffffff}, {0x1, @svalue=0x7fffffffffffffff}]}, 0x81}, {0x1f, '\x00', @buffer={"6d7de94d25849fcfc55cb18f39dad10da05e45eba1045391fd5a846622ab6b13", 0x20}, 0x7}]}) 7.887008867s ago: executing program 3 (id=1716): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 32) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) (async, rerun: 64) io_setup(0x7, &(0x7f0000000780)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x40, 0x4000, @fd=r0, 0x7fffffffffffdfff, &(0x7f0000000340)=[{&(0x7f0000001900)="acbe16e9", 0x4}], 0x1, 0x0, 0x1}) (async, rerun: 64) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 64) 7.503276236s ago: executing program 6 (id=1717): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b04, 0x0) 7.313195077s ago: executing program 4 (id=1718): syz_usb_connect(0x5, 0x255, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36d", @ANYRESDEC=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x4d}, 0x94) r6 = eventfd(0x3) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) set_mempolicy(0x1, 0x0, 0x7582) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000001800040000000000000003fa03dfd0cf3bf15b5f798e8e47a40021f309332f4234381f492657b1e21a4050ee300758ccbd4b5962719897170c8dbce92508cd6fee62ee61043eab57ae8f052613b34658a5faf49af31e22b15bd60904b59504efba089b61aa9a20add382f7379313e687f26e4cbf93accaa26f0ecd2780ac060cb65f8b3b1d84f183a92b3b6c7f5d1097433bb644273029", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003002b160400ffffff01f8ff01000800f7ff0500040000000000"], 0x40}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000000)={[{0x1f, 0x0, 0x0, 0x30, 0xa, 0x9, 0xa4, 0x5, 0x0, 0x92, 0x0, 0xc7, 0x9}, {0x0, 0x5, 0x4, 0x1, 0x3, 0x7, 0x1, 0x8, 0x8, 0x7, 0x1, 0x1c, 0x7}, {0x1ff, 0x9, 0x0, 0x2, 0x9, 0x3, 0x5, 0x8, 0xb, 0x9, 0x77, 0x2, 0x3}], 0x75}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 7.122162983s ago: executing program 0 (id=1719): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x7b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x240000d5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000180001000000000000000000020000000001ff05000000000600150002000000100016800c000200330004000e58ff07f7dbd154d3c0198429b2ab19b168abb1655649c67c722fad5d16c81c0dda8d0ee661d16944f7b2a7c0a6ab3cbc02a4fdb80b32d5635911e91b6433569fe1868ae3da6498f0ca8ba738cb737857a168ed8117f153bbc968ab147b0da02298bc8849fec95ac6a37dca25745c25a993c16e7cce4cac2f129be05927a82ca617cd663ef395a686cdb8e525753ac9c707cbd064fb77c1a78fd8f6a9579d460220f1851bec0029ca0984eda7e7aab1d51600000000"], 0x34}}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) 7.041360508s ago: executing program 2 (id=1720): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fremovexattr(r1, &(0x7f0000000200)=@random={'osx.', '[\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000022c0)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x10}, {0x7ffa, 0x2}, {0x9, 0xfff3}}}, 0x24}}, 0x4080) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b3, 0x0, 0x854}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x191402) ioctl$VHOST_VDPA_GET_VRING_GROUP(r7, 0xc008af7b, &(0x7f0000000040)={0x0, 0x1e00}) 6.435598824s ago: executing program 3 (id=1721): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') read$FUSE(r3, &(0x7f00000011c0)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000080)={@initdev, @private, 0x0}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x50cc, 0x2a, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0xc}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xc}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x6}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc80, 0x2, [@TCA_BPF_POLICE={0xc44, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x7000000, 0x0, 0x10001, 0xfffffff9, 0xe, 0x400, 0xe04, 0x2, 0x2, 0x1000, 0x79, 0x80000000, 0x0, 0x0, 0xa5c6, 0x7, 0x3, 0x200, 0x622, 0x8, 0x1, 0x1, 0x8001, 0x5, 0xfffffffe, 0xf3, 0x0, 0x4, 0x7, 0x7, 0x7ff, 0x9, 0x80000001, 0x3, 0x7, 0x2, 0xd5, 0x4, 0x5000, 0x8001, 0x8, 0x4, 0x8e, 0xf, 0xd6a6, 0x8, 0x2, 0xfffffffa, 0x8, 0x2, 0x40, 0xab8c, 0x4, 0x80000001, 0x7, 0x7, 0x381f, 0x5, 0x5, 0xc970, 0x3, 0x9, 0xc, 0x4, 0x4, 0x7fffffff, 0xdc2, 0x7fff, 0x400, 0x0, 0x4, 0xf16, 0xca, 0x7, 0x3fa, 0x5, 0xfff, 0x3, 0x101, 0x6, 0x7, 0x7c, 0x9, 0x6, 0x7, 0x7775b36a, 0x777a, 0xa, 0x80000000, 0xfffffffc, 0x2, 0x61, 0x80000000, 0xffc0, 0x4, 0x6, 0x4, 0x80000000, 0x6, 0x1, 0x9, 0x101, 0x8, 0x9, 0x100, 0x80, 0x7, 0xe3a5, 0xfffffffd, 0xe23, 0x80000001, 0x2, 0x7, 0x40, 0x2, 0x38, 0xffffffff, 0x8000, 0x78e, 0x7fffffff, 0x3ff, 0x68e, 0x0, 0x7, 0x8, 0x3, 0x5, 0x80000000, 0x7fff, 0x3, 0x4, 0x101, 0xfffffbff, 0x8, 0x2, 0x6, 0x63555d28, 0x1, 0x3ff, 0x200, 0x2, 0xffff, 0x6, 0x6, 0xffffffff, 0x3b13, 0x6, 0x7, 0x1, 0x2, 0x7f, 0x10001, 0x0, 0xa8, 0x5, 0x9, 0x0, 0x5, 0x81, 0xd01, 0x0, 0x91, 0x3, 0x4, 0x9, 0xffffffff, 0x0, 0x6, 0x5, 0x9, 0xa, 0x1, 0x2, 0x400, 0xec, 0xffff, 0x9, 0x5, 0x22, 0x5, 0x52c0, 0x80000001, 0x6, 0x3, 0x7, 0xdb, 0x9, 0x9, 0x1, 0xfffffffb, 0x100, 0x2917, 0xca5, 0x9, 0x3, 0xe379, 0x1, 0x0, 0x0, 0x70f, 0x7fff, 0x55e, 0xa81, 0x9, 0x6e, 0x20, 0x8000, 0x0, 0x9, 0xffffffff, 0x3, 0x6, 0x401, 0x0, 0xfffffffa, 0x3, 0x0, 0x8bef, 0x5, 0x5, 0x7, 0x9, 0x6, 0x1, 0x100, 0x2, 0x9, 0x0, 0x9, 0x9, 0x8, 0x5, 0x10001, 0x0, 0x6, 0x1, 0x9, 0x7, 0xfffffffd, 0x8d4, 0xffff, 0x2, 0x2, 0x8, 0x2, 0x6, 0xe, 0x7, 0x8, 0x670, 0x8, 0x0, 0x8, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xab05}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x4, 0x7, 0x9, 0x2, 0x0, 0x7, 0x1, 0x9, 0x7cb1, 0x8, 0xec5, 0x6, 0x80c, 0x9, 0xf4, 0x0, 0x8, 0x101, 0x1, 0x800, 0x6, 0x4, 0xffff, 0x7, 0x0, 0x80000001, 0xfffffe00, 0x800, 0x10, 0x4, 0x2, 0x1de, 0x1, 0x853, 0x9, 0x80d3, 0x1, 0x18, 0x5, 0x2, 0x3, 0x1ff, 0xffff8001, 0x200, 0xfffff4cb, 0x7, 0x8d4, 0x7f, 0x100, 0x40, 0x39, 0x80, 0x549, 0x1, 0x200, 0x5, 0x8000, 0x9, 0x2, 0x0, 0x8, 0x5, 0x0, 0x240000, 0x5, 0x10, 0xffff, 0x494, 0x7, 0x7, 0xd4, 0xfffffffe, 0x5, 0x1, 0x3, 0x4, 0x9, 0x26b, 0x0, 0x1, 0x8, 0x4, 0x6c24, 0xa4c, 0xfffffffd, 0x2, 0x3, 0x7, 0x0, 0x1, 0x80000000, 0x6, 0x9, 0x1a9bae5a, 0x6, 0x0, 0x8, 0x3, 0x0, 0x8, 0x1, 0x8, 0x353, 0x4, 0x8, 0x1, 0x80000001, 0x3, 0xffff, 0x8, 0x7, 0x5, 0xffffff80, 0xffffffff, 0x781fe170, 0xde, 0x1, 0x0, 0x6, 0x1, 0xffffffff, 0x5, 0x1, 0x7fff, 0x3, 0xffff8fbf, 0x2, 0x101, 0x9, 0x328f, 0x80000000, 0x2, 0xfffffffb, 0x0, 0x5, 0x8001, 0x0, 0x3, 0x5ce2, 0x5, 0x5, 0x0, 0xffffff00, 0x453e, 0x9, 0x4, 0x7, 0xa9ed, 0x9, 0x6, 0x400, 0x3, 0x9, 0xe, 0x400, 0x5, 0x9, 0x3, 0x6, 0x6, 0xfffffffd, 0x0, 0x80000000, 0xfffffffe, 0x10000, 0x2, 0x1, 0x7, 0x3, 0x5, 0xbd, 0xffffffff, 0x0, 0x5, 0x7, 0x2, 0x9, 0x5e09, 0x8, 0x10, 0x3, 0xa05a, 0x5, 0xe68c, 0x10000, 0x5, 0x81, 0x3, 0xd7535b00, 0xdd2, 0xf3, 0x151, 0x519, 0x5c35, 0x80000001, 0x9, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x4, 0x4, 0xc5e1, 0x7, 0x8, 0x6, 0x4, 0x3, 0x1, 0xf9, 0x1, 0x1, 0x1, 0x7f, 0x3, 0x1c, 0x8, 0x40, 0xf9, 0x6, 0x7, 0xffff8000, 0x100, 0xfffffbff, 0xbb, 0x6, 0x0, 0x5, 0x7, 0x9f, 0x3, 0x724d, 0x2, 0x9, 0x5, 0x40, 0x6, 0x10000, 0x4, 0x4, 0x2, 0x66, 0xfffffffc, 0x1b, 0x5, 0x4, 0x7fff, 0x2000000, 0x1, 0xfff, 0x1, 0x7, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffff, 0xa, 0x3ff, 0x20, 0x4, 0x8, 0xfffffff2, 0x9, 0xe, 0xf0000000, 0xffff0000, 0x1, 0x2bc, 0x30, 0x0, 0x81, 0x3, 0x7fff, 0x4, 0x0, 0x8, 0x3, 0x602a, 0x2, 0xfffffffd, 0x10001, 0xffff, 0x2, 0x6, 0xfffff001, 0x1000, 0x7, 0x1000, 0x9, 0x882, 0x1, 0x40, 0x8, 0x9, 0x4, 0x1, 0x8, 0x37, 0xb19, 0x1, 0x0, 0x8, 0x8, 0xcfb4, 0x7, 0x7, 0xe, 0x2, 0xae85, 0x5, 0x1, 0xcc, 0xd, 0x1, 0x2, 0x6d1f, 0x80000000, 0xa, 0x5, 0x10000, 0xedf, 0x0, 0x8, 0x5, 0x80000001, 0x2, 0x26, 0x7dfc, 0x90, 0x2, 0x3e, 0xb, 0x7, 0x1, 0x6, 0x7, 0xa9, 0x2, 0xfffffff8, 0x0, 0x2, 0x4, 0x4, 0x6, 0x2, 0xffffffff, 0x5, 0x2, 0x2, 0x0, 0x40, 0x941f, 0x0, 0x2, 0x0, 0x3, 0xffff, 0x800000, 0x7fff, 0xe36, 0x7f, 0x6, 0x9, 0x6, 0x89a, 0x3ff, 0x3, 0xfffffffa, 0x7, 0x63, 0x4, 0x7cb, 0x0, 0x9, 0x2, 0x7, 0x7fffffff, 0x4, 0x1484, 0x7f, 0x5, 0xfc, 0x5, 0xfffffffa, 0x3ff, 0x1, 0xfffffff8, 0x5, 0x6, 0x400, 0x5, 0x7, 0x8, 0xfdc9, 0x40, 0x2, 0xa, 0x0, 0x7, 0x2, 0x7, 0x1784, 0xb3, 0x3, 0x2, 0xf, 0x5c24d260, 0x7, 0x2, 0x3, 0x3, 0x400, 0x4000, 0x0, 0x7, 0x1c, 0xffff, 0x6, 0x8, 0x4ef78de0, 0x1, 0x1000, 0x7, 0x8, 0x0, 0x1, 0x80, 0xfffffffa, 0x2, 0xc3, 0xfffffff8, 0x7, 0x6, 0x4, 0xfffffff7, 0x10000, 0x4, 0x3, 0x3, 0x4, 0x3, 0x8, 0x8, 0x20000000, 0x4, 0xa, 0x0, 0x7, 0x9, 0xffffffff, 0x0, 0x8001, 0x10000, 0x0, 0x0, 0x100, 0x4, 0x10001, 0x4, 0x1, 0x1000000, 0x4, 0x73, 0x5, 0x4, 0xfffffffc, 0x4, 0x449, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0xc9d, 0x4, 0x9, 0x9, 0x5, 0x80000000, 0xec04, 0x3, 0x800, 0x4, 0x7, 0x7, 0x1, 0xfff, 0x8, 0x5, 0x7fff, 0x0, 0x0, 0xfffffff9, 0xffff415d, 0x53, 0x1, 0x5, 0x6, 0x5, 0x1, 0x7, 0x0, 0x0, 0x9, 0x5, 0x2, 0x4, 0x23, 0x8, 0x6279]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x3, 0x40, 0xb, 0x455}, {0x100, 0x5, 0x7, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x6e, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_to_bridge\x00'}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x82}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0xf5}}, @filter_kind_options=@f_bpf={{0x8}, {0xd08, 0x2, [@TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf95}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5e8f}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_POLICE={0xc9c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0xecd, 0x80000001, 0x7, 0x1, 0x2, 0x0, 0x5, 0x2c, 0x100, 0x88, 0x0, 0x101, 0x3, 0x80, 0x0, 0x9, 0x0, 0xfff, 0x3, 0x7, 0x8, 0xff, 0x5, 0x2, 0x5, 0x1000, 0x7fffffff, 0x8, 0xfffffff8, 0x3, 0x5, 0x354, 0x0, 0x8, 0x1, 0x886f, 0x9, 0x1b3, 0x5, 0x4, 0x5, 0x7, 0x7567, 0x8, 0x400, 0x2, 0xa5, 0x0, 0x3, 0x101, 0x4, 0x7, 0x81, 0x6, 0x101, 0x5, 0x6, 0xffff, 0x47, 0x9, 0xaa31, 0x9573, 0x7, 0x315e0, 0x5, 0x8, 0x1, 0x8c1a, 0x1673, 0x0, 0x10, 0x3, 0x4, 0x9, 0x2, 0x80000000, 0x1ac80000, 0x8, 0xfffffff9, 0xe22, 0x0, 0xf, 0x1, 0x3, 0x830f, 0x7, 0x4, 0x4, 0x6, 0xfffffc00, 0xb, 0x400, 0x401, 0x6, 0x6, 0x7, 0x1, 0xffff, 0x6, 0x8, 0x9, 0x5, 0x77, 0x200, 0x3ff, 0x4, 0x8, 0x6, 0x2d81, 0x0, 0x2, 0x5, 0x10, 0x7, 0x1, 0x2, 0x74, 0x6, 0x4, 0x7, 0x1ff, 0x4, 0x8, 0x0, 0xb629, 0xce, 0x4, 0x0, 0x6, 0x4, 0x1, 0x80, 0x4, 0x4735, 0x3, 0x3ff, 0xd13, 0x80000001, 0x6, 0x1, 0x4, 0x8000, 0x3, 0x4, 0x4, 0x80000000, 0x1, 0x7, 0x66e, 0x6, 0x839, 0x8001, 0x9, 0x100, 0xff, 0x0, 0x0, 0x7, 0x4, 0x6, 0xff, 0x57c, 0xc, 0x5, 0x7f, 0x2, 0x3, 0x3, 0x8001, 0xf, 0x1, 0x5, 0x5, 0x5, 0x8, 0x200, 0x1, 0x2, 0x7f, 0x5, 0x3, 0x0, 0x5, 0x2, 0x63a, 0x8001, 0x5c, 0x1, 0x800, 0x0, 0xe4e, 0x3000, 0xa9, 0x800, 0x4, 0xfffffffb, 0x7ff, 0x80000000, 0x2b, 0x3, 0x4, 0x1, 0x0, 0xfd, 0x1, 0x1, 0x6, 0x4, 0x80000001, 0x7, 0xc0000000, 0x837a, 0x4, 0x0, 0x3, 0x9, 0x5, 0x2, 0x0, 0x0, 0x8, 0x9, 0x4, 0x2, 0x886b, 0xee3, 0x9, 0x9, 0x8, 0xa, 0x1, 0x7fffffff, 0x5, 0x4, 0x7e6, 0x1, 0xc, 0x9, 0x0, 0xbc49, 0x5, 0x0, 0x3782, 0x5, 0x5, 0xfffeffff, 0x1, 0x0, 0x1407, 0x9f85, 0x110, 0x927e, 0xfffffff9, 0x1ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x836}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc0, 0x3, 0x8, 0x2, 0x7, 0x7fffffff, 0xc83b, 0x800, 0x5, 0xa5d8, 0x5, 0x3, 0x1000, 0xffffffc0, 0x1, 0x800, 0x4, 0xfffffcd3, 0x9, 0x9, 0x5, 0x400, 0xe757, 0x6, 0x3a25, 0x9, 0x401, 0x40, 0x2df8, 0x4, 0x2, 0x9, 0x9, 0x7fff, 0x9, 0x0, 0x0, 0x400, 0x1, 0x9, 0x3, 0x9, 0x2, 0x7f, 0x800, 0x7, 0x3, 0x8, 0x2, 0x1, 0x5, 0x6, 0x4, 0x0, 0xe, 0x0, 0x4, 0x100, 0x9, 0x8, 0xe924, 0x1, 0xe, 0xaff, 0x354, 0x0, 0x8e, 0x5, 0x7a, 0x4f9c1d7, 0x9, 0x2, 0xa, 0x990, 0x400, 0x9, 0x300f, 0x3, 0x9, 0x2, 0xffffffd4, 0x6, 0x8, 0x5, 0xf, 0x101, 0x3, 0x8, 0x0, 0x1, 0x9, 0xfd2, 0x80, 0x3, 0x7, 0x6, 0x7fff, 0x3, 0x9, 0x10, 0x6, 0x4, 0x4, 0xfff, 0x2, 0x5, 0x5, 0xd608, 0x1, 0x7, 0x1000, 0xfffffffb, 0xb, 0x44, 0xffff, 0x40, 0x3, 0xf, 0x0, 0x1, 0xc1, 0xffff, 0x6, 0x9, 0x10, 0x4, 0x3, 0x33, 0x2, 0x3, 0xfb4d, 0x3, 0xdb, 0x5, 0x0, 0x7, 0x8, 0x7, 0x3, 0xa0, 0xffff, 0x14, 0x1, 0x2, 0x2, 0xff, 0x5, 0x916cd000, 0x4, 0xd756, 0x1, 0xff, 0x1000, 0xffffffff, 0xd, 0x2, 0x2, 0x6c32, 0x67, 0x100, 0xca, 0x3, 0x73182f9a, 0x9, 0x9, 0x8, 0x6, 0x0, 0x847, 0xffff, 0x5, 0x400, 0xe27c, 0x800, 0x1, 0x4, 0x401, 0x5, 0x9, 0x8, 0x5, 0x4, 0x200, 0x4, 0x8, 0x8, 0xfff, 0x40, 0x1ff, 0x65, 0x0, 0x8, 0xb9, 0x8, 0x4, 0x2, 0xfff, 0x611, 0x4, 0x4, 0x9, 0x0, 0x7fffffff, 0x7, 0x8, 0x80, 0x2, 0x6, 0x6, 0xa8e, 0x30, 0x1, 0x6, 0xb, 0xf9, 0x1ff, 0xc, 0x0, 0x24, 0x3, 0x6bda, 0x6, 0xffff, 0x2, 0x4, 0x0, 0x96bdb91e, 0x5a6b, 0x2, 0x101, 0x1, 0x40c, 0x6, 0x0, 0x9, 0x5, 0x62a5, 0x8, 0x101, 0x80, 0x8, 0x0, 0x9, 0x35, 0x8, 0xfffffffe, 0x80, 0x7541, 0x6, 0x5, 0x0, 0x7fffffff, 0x6, 0x80, 0x3ff, 0x1000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x5, 0x8, 0x1, 0x80000001, {0x5, 0x2, 0xd9ce, 0x101, 0x5e7, 0x4}, {0x8, 0x0, 0x6, 0x80, 0x1, 0x8}, 0xc, 0x18, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0xffffffff, 0xb, 0xb4, 0x4ca0796a, 0x789, 0x7fffffff, 0x7, 0x0, 0x9, 0x9, 0x965, 0x9, 0x5, 0x6, 0x8, 0x401, 0x8, 0x8000, 0x9c, 0x0, 0x4d, 0x3, 0x7, 0x8, 0x1d, 0xb, 0x200, 0x400, 0x6, 0x9, 0x5898, 0x4, 0x7f, 0x6, 0x4, 0x7, 0x7, 0x5ba1, 0x8000, 0x7fffffff, 0x9, 0xf0000000, 0x7, 0x7, 0x9, 0x4, 0xd64c945, 0x401, 0x1ff, 0x3, 0x1b4, 0xc, 0x6, 0x6, 0x0, 0xfffffff1, 0x9, 0x1000, 0xffffff81, 0x34bb, 0x1, 0x400, 0x639cdb8, 0x2, 0x4, 0x8bb, 0x7, 0x9, 0x1, 0x0, 0xffffffff, 0xa, 0x9, 0xee6, 0x8, 0x9, 0x7, 0x0, 0x1, 0x80, 0x5, 0x3, 0x400, 0x10, 0x4, 0x6, 0xfffffffd, 0x8, 0x2, 0x687, 0x3, 0x10001, 0x5, 0x8001, 0x0, 0x9, 0x9, 0x7ff, 0x6, 0x8, 0x6, 0x91de, 0xd4d3, 0x5, 0x2a, 0x26cf, 0x5, 0x0, 0xbac, 0xc5, 0x1, 0x7, 0xf0df, 0x9, 0xffffffff, 0x0, 0x7, 0x401, 0x4, 0x3c, 0x1, 0x9, 0x7, 0x7, 0x5, 0xffff46fe, 0x2, 0x8, 0x9, 0x7, 0xbb, 0x0, 0x200, 0x7, 0xfffffc00, 0x6, 0xe0, 0x5, 0x9, 0xfffffffc, 0x101, 0x10, 0x9, 0x3, 0x80, 0x7, 0x4, 0xbaa, 0x4, 0xce9, 0x7, 0x8, 0x4, 0x2, 0xc0d, 0xffff, 0xfffffffa, 0x7, 0x101, 0x6, 0xfffffffa, 0xd, 0x1, 0xfff, 0x3, 0x4, 0x0, 0xd88, 0xe7, 0x5, 0x0, 0x38, 0x3, 0x8, 0xc82, 0x3d81, 0x4, 0x6, 0x7f, 0x2, 0x3, 0x0, 0x2, 0xa, 0x282, 0x3ff, 0x3, 0xfffffff9, 0x6, 0x3, 0x8, 0xffffffff, 0x1, 0xa9d, 0x100, 0xfffffff0, 0xe, 0xff, 0x3, 0x2, 0x4, 0x0, 0x8, 0x6, 0x1, 0x0, 0x44, 0x5, 0x80, 0x2, 0xa96, 0x0, 0xffffffff, 0xb, 0x10, 0x6, 0x9, 0x8, 0xffff8000, 0x5a04, 0xffffff4e, 0x8, 0x51, 0x7000000, 0x8, 0xa, 0x4, 0x3, 0x1, 0x400, 0x9, 0x4, 0xab76, 0x5, 0x80000001, 0x971, 0x80000001, 0x4, 0x1, 0x480, 0x7e15, 0x7, 0x3, 0x7fffffff, 0x0, 0x6, 0x8, 0x5, 0x5, 0xc82, 0xe2f, 0x3, 0x4, 0x9, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xa, 0xc6, 0x9, {0x3, 0x2, 0x5, 0x0, 0xfff, 0xc}, {0x9, 0x2, 0x7, 0x1, 0x8000, 0x5}, 0xe82e, 0xfffffff0, 0x1fa}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x7, 0xaf, 0x3, 0x9}, {0x6, 0x40, 0x3, 0x7}, {0x7, 0x7, 0x0, 0x96b}, {0xc, 0x1, 0x9}]}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x3658, 0x2, [@TCA_MATCHALL_ACT={0x1228, 0x2, [@m_mirred={0x114, 0x7, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xdb, 0x5, 0x3, 0x0, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x401, 0xffffffffffffffff, 0x3, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x1, 0xffffffffffffffff, 0x9, 0x9}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc18, 0x6, 0x7, 0x100, 0x9}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x2, r2}}]}, {0x45, 0x6, "3d8c86a1ecb6f64c49741e9e6661adfd4e7760ed62101fbfab19ba1fce671a0b2c4baf40c268a009759a3b91bb6ea37f5ac90f5cf62372b58f673cf9517342d3c3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x1110, 0xd, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xc5, 0x10000000, 0x800, 0x3ff}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x4, 0x81c7, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x5, 0x9, 0x2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x20000000, 0x0, 0x2}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x5, 0x2, 0x8, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3e, 0x7, 0x10000000, 0x80000001, 0x6}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfa, 0x6a8f860b, 0x5, 0x3, 0x5d05}, 0x1, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_ACT={0x2414, 0x2, [@m_ct={0x74, 0x4, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d1502ac076ac576bbc59c121fa4d5789"}]}, {0x2e, 0x6, "489391723f21d6153574ad39bc783ba73c12266e6f2e02aea76269995c84a08fc7713fe16ff819b29f9a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x129c, 0x0, 0x0, 0x0, {{0x7}, {0x1184, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa9, 0x6, {0x70, 'nat\x00', 0xa, 0x40, "2cd6290980df747283b3a8c2b1cbded3833a81e67e86096f1f1d7c141fea1fdb576e37f5479dbac86f32c243e10b320e7b454ac53ebc84cd5cec51f89840b3b842a21dd43f9d8a3c21fae1c8517e902c2087df0e1d7b5a0dfa2c80cd86fb84084422e01069cc997991401e78954d7f8b55710721ea4adc361bee849ad9e872"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_INDEX={0x8, 0x3, 0x9df8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0xba74, 'security\x00', 0x2, 0x80, "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"}}, @TCA_IPT_TARG={0x7d, 0x6, {0x8, 'mangle\x00', 0x5, 0x2, "3f6441786ec28636d99856970f6e0d3e8ea70f338b8849c0da0398a32d8d98f8f536723ecec8b4aa0cb51fc4dbe87037fdb6e1ed1c0bcecb3fe3ecc2d607e10be0a76702fcb94e0a3a2c6a481ff448dd5a415a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}]}, {0xf4, 0x6, "0b35addac500a9fd59ca1e63a7135f1fffec24d5e7e3c3e1c5f4fe9accfa09d641bc926f0377901079c9cd107884fd4e938d975b906090e5d797aeee4e8b3501db557c2c4d4cac2520e501eeb745b4e97deea52ee9e2453ad210cae5609f35a15ab3fba36a3a4622ca821bb07333a15582ad34c431090db36f764b099f3b849afdcc4a54d39610acaf40da6e5b6cb3d0be0c69a8e9cec0eb2b9993068ae731b118e0c181b12d57a5abb3ab9866d0dd5f33d431cd2fd48c1a251f75e644872211f5662a93657d4d0b2193f43642e47e17d4449a13514f32714db1d962b39b2e36ab99268758333e7be580f791148c8d2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x1090, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x10000, 0x2, 0x7, 0x80}, 0x30afb43672670490, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xc5, 0xfffffffffffffff3, 0xdf8, 0x401}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x1c, 0x20000002, 0x5, 0x80}, 0x2, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x70, 0x8, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8}]}, {0x13, 0x6, "395861906827f54afbe935628b272e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xb}}]}}]}, 0x50cc}}, 0x20000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 6.376530171s ago: executing program 2 (id=1722): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc69\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\xea\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2, r5}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000880)=@urb_type_bulk={0x3, {0xc, 0x1}, 0x1, 0x0, &(0x7f0000000e80)="85e173e1678160fc211ccf1169cab69c6d88303eb2d572ff1cf865817bd1c90383c4e63cedcb37128a7ce80bd643f19ae63304ef6129d49d2b89e7b859b23131e27c9ff5b2c05750d5afb00a2b24962364cdf5e9f5e5c39e8108c5", 0x5b, 0x3, 0x80000002, 0x20871, 0x6, 0x5b8, &(0x7f00000008c0)}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x2, 0xd, 0x1c, "1fba00c387d13485e2d930b98dbf8264699f0363ab7b405914f1e6d6a5e40bf424000cc9a5cb1ad56c7bd4886a05040807f17d9b7e4a956cb7d54e634996dba7", "b48d749dacc04f382b477931e3af07dcbee2b004819470c90565d3d2579c0b60"}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x8000000000000003, {}, 0xfd}, 0x18) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r11, 0x0) setsockopt$sock_int(r11, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB="44702c414f17c7f7fa04d2a40b285f7b65b2bb743c4c8f04e34f495ab12a15ebb2e4c9b47f4f6fdc9fddcd4a275d4105c6db999daca547c2639a87d4d6d833b932d5bc749e9a21bbbe6d7fe8dd9c7554bc59205d271bd8922a6a2bf3caa1b9cef45417dfa6586ce2e81c0611ed9410413d3e076647c40676950482c12a1ba55d4d8b3daaaebb325b311f4c2b3a3e4adb3e2a00d98338a591aba41c63b1"], 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000300)=""/161) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r0, 0xe5865000) 6.257782282s ago: executing program 3 (id=1723): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) capset(&(0x7f0000000c00)={0x19980330}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x164) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100), 0x10) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000440)={[{0x5, 0x2, 0xfe, 0x0, 0x6, 0x8, 0x0, 0x0, 0x15, 0xff, 0x1f, 0x2}, {0x1b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x0, 0x3, 0x0, 0x1000002}], 0xfffffffe}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x280000, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$AUDIT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) (async) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0xa, 0x2, 0x2, {0x46, 0x13, 0xfffb, 0xf7168000}}) 6.008015845s ago: executing program 0 (id=1724): syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b30904e4b10102020194052406008d"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x4, 0xd0, 0x9, [{{0x9, 0x4, 0x0, 0x4d, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "5ed1b1"}, {0x5, 0x24, 0x0, 0xce58}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x6, 0x49}, [@country_functional={0x12, 0x24, 0x7, 0xd, 0xfff, [0x8, 0x401, 0x3, 0x7, 0x1, 0xb9eb]}, @ncm={0x6, 0x24, 0x1a, 0x3ff, 0x10}, @obex={0x5, 0x24, 0x15, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0xe7, 0x9, 0x80, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x1, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0xfe, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xf4, 0x79}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0xa, 0xe, 0x8, 0x9}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x9, 0xd, 0x0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x40, 0x1}, @generic={0xa, 0x10, 0xb, "d859dd55956bca"}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0xa9, &(0x7f00000001c0)=@string={0xa9, 0x3, "b4ad45cd63fda92cebc5f3ac89265c2413d5cede36ba9c1e8a4682e9e29bcb2c57d5d737106d3c973d2a7511d59171d40afc7c4e7617a92f789850f9d6aa5b86585396f5a37a9e02520a6dad1fdcdc8ac967f633a78780926a3f8d1235ab282a8b55bf0c7379e28b75aa3d8bf35b95ab52c09213507050e818f498c94910abc3cb0f4b8ba2c6991fa14507b2632f7c020e960bb47969ff46bbac58816366a369411a48b0250c98"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0xf2, &(0x7f00000002c0)=@string={0xf2, 0x3, "b51e53b10406c85b9195a395c41f5fee09befd130be92c1d74b4cef7725fe455d2993415556bbfc473d49910c1466481d567aaba5650118c2111f3d5d77c8faef80e6e13873939c765e5a768018e9d89bc11e51c1d8b180b8132220ea919dfca1d2608c2cf5be03a5a4e3d77665a48cab3ec6b2593127e46b291b1992adfaca13ba7305f4f34ddc09e086685f0b69d4851900df83abc4fb8443e8d3fa67e8a7b9e001691886a2bc826059b9bac7e0630c5b1bab7d84be90b7a1f05bc040d8c75fad966532fd4974ceca19bac8b84c9eef50f2bf06a06bddf6955d2218e2e43c3f2292879563f6f373fedd96672e7ffff"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3009}}]}) 5.928614698s ago: executing program 2 (id=1725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)={0x1c, 0x25, 0x109, 0x70bd22, 0xfffffffc, {0x5d}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_io_uring_setup(0x4e0b, &(0x7f0000000200)={0x0, 0x585e, 0x1040, 0xfffffffd, 0x1000021}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f0000000340)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000540)='@', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000000c0)={0x8, {0x5, 0x6, 0x8001, 0x6, 0x8, 0x800}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001740)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x7, 0x2, 0xfffffffc}, {0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x0, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) 5.856143422s ago: executing program 3 (id=1726): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004ffc, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) pipe2(&(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x20004804) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000000000000000000000000000000000000003ff0000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11400cfc26dd7c500f04cd85f2a70f5e9930e3c5db45a5500f8f669fb716dcf315ecaf385409ac65b9408678c2c"], 0x230) 4.311907145s ago: executing program 6 (id=1727): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804135000000000542f46dbcffdb50300000009040002010300000009210000640122f80409058103ff0304bc6f712db78249db7f8eea784960731298cc6c1086f0b698f6293f80551847e4b2a2ea8e881a5dd9a9307157af992fdbdc4a1f77dd51675f13b17d5d694ee42eaec95d71187f0a201b4fcb845d3ba04248b89cfff7c97f5a23af0f7bec1656c980f5cbb77e0082a317bc2da4e885bcbc4f7967e805180b922c207734c05a57944acf6cee222900d7111682cbf1cbe5ee827a88423af82e22c1c9b69e685d3a4fe143e0c50f778496dbbf98229d779e009a8079adfc8b7ec5f1ff9924fe24432db91dc695504f7beaba6f89c9dc4405188bc3e0d7b0c864a4bf06cfe6112b1ff8daea71a0edd2bd1b5e217a15e3bee59b87733d5662960000000000000000"], 0x0) syz_usb_connect$cdc_ncm(0xb, 0x101, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x2, 0x1, 0x4, 0xa0, 0xc4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6b04661a"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x24, 0x8, 0xf2}, {0x6, 0x24, 0x1a, 0x3c, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x5}, @mdlm={0x15}, @mdlm_detail={0x72, 0x24, 0x13, 0x4, "7d0e4d4831110de182390e10d207ba9815882f04bd821d5d990336714afd20581e30672bc3f6ec1effcc693e7aa03aac81f32e934353de2252ffc72e96b1339eec0f28d455efcc4a888c8e7cd52a17d2626547d2cb2652e6ae5db82c855e7268f61a7d8fe7fa54b2321e75b1af25"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ef, 0x3, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x8, 0x50}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x40, 0x1, 0x3, 0xff, 0x9}, 0x1f, &(0x7f0000000080)={0x5, 0xf, 0x1f, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x8, 0xf000, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xa, 0x316}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x1}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x5c25}}, {0x42, &(0x7f0000000240)=@string={0x42, 0x3, "03bf1f5e2941619cdb410127c4d3a08273579132045b3d20547d1b4f5ac1f291fb87e44a6a27ed67270bb4b704e7ed80461d7855d9faeed73142b8de69434e37"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000a30407010481bca76aaa0b1ef777f3a6e5f96937888ce3a249c778d7e083a95896cbdd262d4b7cd5927f3d2d848b0000008b20c617a2bec6897e3710a3463862"], 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x83, 0x1, {0x22, 0x43a}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.196219363s ago: executing program 4 (id=1728): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0xc6) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r3, 0x2}}, 0x18) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 3.84825574s ago: executing program 3 (id=1729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, r1, 0x2) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) 3.76484635s ago: executing program 4 (id=1730): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0xe, {0xe, 0x22, "a1ac9e4f45681cf4b550d28b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f00000000c0)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xb8, 0x1, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xfff, 0x0, 0xc4, [0xcf, 0x18, 0xff3ff0, 0xfe7ff0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "503b79286c2eb483ea0b565e0b84c6de"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x2, 0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0xfa, 0x8, "6efcd057", "13a6c39f"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x0, 0x56, 0x8, 0xfffb, 0x7}}}, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x3, 0xb7, "509ddb65d815dabc23711870ba6ad141205bd618c5bcc3217aee9d46de867e6e3cdc8f7b0e1a5cfe9f94c303c30a8385564538480f518e6fbf1c3c4e919c4aaf4c892dd18f96328acc84d8bbb481ba12d4d33efe0c7d3e2f9c9c7ab7efbc20a1e2811773a875a8d56bd6142cc83214364a29967a5fa06069f227c8d37d93ca3da43bf8244652edbcd4016d7612c4ebfc5850dd7b0ea49d7e81fa077245c465ff5b02384430ea4f133cc06c7b1d7468f53365a8b8bd3e91"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x20, 0x40, [0xf00f]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000000440)={0x40, 0xb, 0x2, "d365"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1acc281e1f40fa89}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @random="36dda18b6937"}, &(0x7f0000000540)={0x40, 0x19, 0x2, "8a24"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x1}}) 2.941023044s ago: executing program 2 (id=1731): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x880) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.896040393s ago: executing program 0 (id=1732): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x110) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000240)={0x14640}, 0x18) execveat$binfmt(r8, r5, 0x0, 0x0, 0x1000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8, 0x5268, 0x8000}, 0x10) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.677858218s ago: executing program 4 (id=1733): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = socket$unix(0x1, 0x2, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r4, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="9349f6868d40af08ce6e4cd18c7acb73856c9e2660cad93cdc55b7e730078b8e9678dc681705f0dc65027721a8cc1aea91c606702ccb74aea3ef13d7220efcb9ff55b8c5a808bfb6234dad81138ccf0cae02813391f5d6b10cad0252416acb19765571f20ba342e00bd576bb0ee94f7af2847f02d23291077f159b9f0052adf5ab4ca1f60e5d9c2c6aa8c2cb853a0b7ad48c59b45cd5c5f8b1e8ac", 0x9b}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}, 0x800) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000280)=0xff, 0x4) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) r5 = syz_open_dev$rtc(&(0x7f0000000300), 0x1ac, 0x20800) ioctl$RTC_UIE_ON(r5, 0x7003) r6 = socket$igmp6(0xa, 0x3, 0x2) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x4a00, 0x0) ioctl$PIO_FONT(r7, 0x4b61, &(0x7f0000000380)="2b3e2901f036ec9967288adce920dbc8eb921d8e629e463bd8cfa91912e52df6fc33f7549e7a83836246b6b67eba3de652fcbd848575f9c0dedc928e164ce7d98bee41e4348f38d9091e50") getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000400)={'filter\x00', 0x0, [0x6453, 0xa, 0xfffffff4, 0x2, 0xcce8]}, &(0x7f0000000480)=0x54) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x1, 0x1, 0x4, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffd86}, @CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000040) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000640)) r8 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x7, 0x1, 0x2, 0x7b0, {{0x15, 0x4, 0x1, 0x15, 0x54, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @empty, {[@cipso={0x86, 0x2b, 0x1, [{0x2, 0x11, "c4ee02bdb649189f0ce82e39b616bf"}, {0x5, 0x9, "f1a24e38b7bca8"}, {0x2, 0x9, "8a905ec0cd1bcd"}, {0x4, 0x2}]}, @cipso={0x86, 0x13, 0x3, [{0x6, 0x8, "749c20d7fb42"}, {0x6, 0x5, "3285a1"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xd9, 0x401, 0x40, @loopback, @local, 0x8000, 0x40, 0x6, 0x3}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000840)={@initdev, @multicast1, 0x0}, &(0x7f0000000880)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040000}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r8, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xf, 0x14, &(0x7f0000000a00)=@raw=[@func, @jmp={0x5, 0x0, 0xb, 0x9, 0x8, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x81}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000ac0)='GPL\x00', 0xe50, 0xca, &(0x7f0000000b00)=""/202, 0x41000, 0x21, '\x00', r10, @fallback=0x3, r8, 0x8, &(0x7f0000000c00)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r12, r8, 0x2, 0x0, &(0x7f0000000f40)=[{0x4, 0x4, 0xc, 0xa}, {0x0, 0x5, 0x8, 0x5}]}, 0x94) mknod$loop(&(0x7f0000001040)='./file0\x00', 0x8000, 0x1) syz_open_dev$media(&(0x7f0000001080), 0xf413, 0x220200) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, &(0x7f00000010c0)) 2.552227551s ago: executing program 4 (id=1734): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x7b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x240000d5}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000180001000000000000000000020000000001ff05000000000600150002000000100016800c000200330004000e58ff07f7dbd154d3c0198429b2ab19b168abb1655649c67c722fad5d16c81c0dda8d0ee661d16944f7b2a7c0a6ab3cbc02a4fdb80b32d5635911e91b6433569fe1868ae3da6498f0ca8ba738cb737857a168ed8117f153bbc968ab147b0da02298bc8849fec95ac6a37dca25745c25a993c16e7cce4cac2f129be05927a82ca617cd663ef395a686cdb8e525753ac9c707cbd064fb77c1a78fd8f6a9579d460220f1851bec0029ca0984eda7e7aab1d51600000000"], 0x34}}, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) 1.005478714s ago: executing program 6 (id=1735): socketpair$unix(0x1, 0x3, 0x0, 0x0) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000014) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563103b2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d058ffffc8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850b00000000b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a4e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$kcm(r4, 0x0, 0xfc40) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (fail_nth: 2) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) 451.451658ms ago: executing program 3 (id=1736): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$dsp(r4, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c0d5) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x3c, 0x48, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r6, 0x101200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x158, 0x18, 0x1, 0x70bd2d, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x40}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x3, 0x9ba3, 0xfffe, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x68, 0x3, {{'deflate\x00'}, 0x100, "258ecb40d7cc532c8c294bdccd86f4d1c0203e02cd23ed409efbb1b92523d85f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x9, 0x343002) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x48}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000025c0)={0xd, @meta={0x4531434d, 0x4d58ec72, 0x1a68, 0xfb1e, 0x79e6895}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000080)) 444.132543ms ago: executing program 2 (id=1737): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b04, 0x0) 0s ago: executing program 6 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x8090}, 0x800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x7fff) r2 = socket(0x1, 0x803, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRESDEC=r0, @ANYRESHEX=r3], 0x2c}}, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a010800000000000000000100000000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl(r1, 0x400001, &(0x7f0000001380)="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") r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x17) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) kernel console output (not intermixed with test programs): 3096] usb usb6-port1: attempt power cycle [ 392.600824][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.619800][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.928524][ T3096] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 392.992076][ T3096] usb 6-1: device descriptor read/8, error -71 [ 393.328650][ T3096] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 393.359262][ T3096] usb 6-1: device descriptor read/8, error -71 [ 393.538078][ T3096] usb usb6-port1: unable to enumerate USB device [ 394.058181][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 394.081730][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 394.114193][ T24] usb 1-1: USB disconnect, device number 42 [ 394.772210][ T5827] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 394.820945][T10460] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 394.925150][ T30] audit: type=1326 audit(1771782960.965:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10445 comm="syz.3.1134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d639c629 code=0x0 [ 394.990911][T10460] bond8: entered promiscuous mode [ 395.006737][T10460] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.055039][T10463] bond8: (slave bridge12): making interface the new active one [ 395.083250][T10463] bridge12: entered promiscuous mode [ 395.097433][T10463] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 395.131611][T10465] syzkaller0: entered promiscuous mode [ 395.137129][T10465] syzkaller0: entered allmulticast mode [ 395.163484][T10465] 0: reclassify loop, rule prio 0, protocol 800 [ 395.208479][ T797] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 395.368702][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 395.377808][ T797] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.407950][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.499233][ T797] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 51744, setting to 1024 [ 395.524730][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 395.543738][ T797] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.572963][T10476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.666409][ T30] audit: type=1326 audit(1771782961.705:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10477 comm="syz.2.1142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517239c629 code=0x0 [ 395.699573][ T797] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.731290][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.770347][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1140'. [ 395.979848][ T5896] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 396.178192][ T797] usb 4-1: GET_CAPABILITIES returned 0 [ 396.201019][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 396.209371][ T797] usbtmc 4-1:16.0: can't read capabilities [ 396.228148][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.258493][ T5896] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 396.268291][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 396.318814][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65341, setting to 1024 [ 396.347943][ T5896] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 396.355051][ T24] usb 4-1: USB disconnect, device number 46 [ 396.539627][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 396.628225][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.651568][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.698787][ T5896] usb 3-1: SerialNumber: syz [ 396.739931][T10481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 396.768351][T10481] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 398.009194][T10488] loop2: detected capacity change from 0 to 7 [ 398.026745][T10488] Dev loop2: unable to read RDB block 7 [ 398.038538][T10488] loop2: unable to read partition table [ 398.053903][T10488] loop2: partition table beyond EOD, truncated [ 398.079031][T10488] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.175422][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 398.186012][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 398.362616][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.391996][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.753211][ T5896] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 399.171585][ T5896] usb 3-1: USB disconnect, device number 66 [ 399.620219][T10508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.655396][T10508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.843874][T10511] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 399.898533][ T3096] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 399.956902][T10511] bond5: entered promiscuous mode [ 399.988224][T10511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.058708][ T3096] usb 6-1: Using ep0 maxpacket: 16 [ 400.078776][ T3096] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 400.088516][ T3096] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.100057][ T3096] usb 6-1: config 0 has no interface number 0 [ 400.106737][ T3096] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 400.118527][ T3096] usb 6-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.135450][T10515] bond5: (slave bridge7): making interface the new active one [ 400.169450][T10515] bridge7: entered promiscuous mode [ 400.186574][T10515] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 400.212158][ T3096] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 400.221686][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.232607][ T3096] usb 6-1: Product: syz [ 400.242648][ T3096] usb 6-1: Manufacturer: syz [ 400.253655][ T3096] usb 6-1: SerialNumber: syz [ 400.267888][ T3096] usb 6-1: config 0 descriptor?? [ 400.365622][ T3096] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 400.386678][ T3096] nokiaca42v2 ttyUSB0: required endpoint is missing [ 400.477639][ T5896] usb 6-1: USB disconnect, device number 32 [ 400.503826][ T5896] cypress_m8 6-1:0.35: device disconnected [ 401.441325][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 401.640611][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1155'. [ 403.135558][T10550] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 403.273380][T10555] program syz.5.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.282428][T10554] bond7: option min_links: invalid value (18446744073709551608) [ 403.290524][T10554] bond7: option min_links: allowed values 0 - 2147483647 [ 403.315820][T10554] bond7 (unregistering): Released all slaves [ 403.431779][T10550] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.490015][T10556] bond0: (slave syz_tun): Releasing backup interface [ 403.554254][T10556] bond7: (slave syz_tun): making interface the new active one [ 403.585483][T10556] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 403.803131][T10576] netlink: 'syz.3.1166': attribute type 2 has an invalid length. [ 403.849384][T10576] netlink: 'syz.3.1166': attribute type 12 has an invalid length. [ 403.958744][ T3096] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 404.138442][ T3096] usb 1-1: Using ep0 maxpacket: 16 [ 404.156944][ T3096] usb 1-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 404.188475][ T3096] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 404.228341][ T3096] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.255706][ T3096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.277749][ T3096] usb 1-1: config 0 descriptor?? [ 404.292803][ T3096] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 404.491498][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.504020][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.522014][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.531132][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.550414][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.569423][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.597647][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.611706][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.628009][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.643111][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.871993][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 404.918485][ T797] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 405.083917][ T797] usb 6-1: config 77 has an invalid interface number: 58 but max is 0 [ 405.101514][ T797] usb 6-1: config 77 has no interface number 0 [ 405.128555][ T797] usb 6-1: config 77 interface 58 has no altsetting 0 [ 405.152717][ T797] usb 6-1: New USB device found, idVendor=2100, idProduct=9e61, bcdDevice=46.da [ 405.170029][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.205700][ T797] usb 6-1: Product: syz [ 405.232876][ T797] usb 6-1: Manufacturer: syz [ 405.237547][ T797] usb 6-1: SerialNumber: syz [ 405.251690][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.263513][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.281776][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.321327][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.355105][T10623] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 405.365336][ T5896] usb 1-1: USB disconnect, device number 43 [ 405.377196][T10623] team0: Port device batadv2 added [ 405.408131][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.427880][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.640702][T10631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.226335][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.239043][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.603398][T10647] netlink: 'syz.0.1184': attribute type 2 has an invalid length. [ 406.692899][T10644] syzkaller0: entered promiscuous mode [ 406.704992][T10644] syzkaller0: entered allmulticast mode [ 407.018789][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 407.052420][T10644] IPv6: sit2: Disabled Multicast RS [ 407.104105][T10647] netlink: 'syz.0.1184': attribute type 12 has an invalid length. [ 407.619917][ T797] ftdi_sio 6-1:77.58: FTDI USB Serial Device converter detected [ 407.673819][ T797] ftdi_sio ttyUSB0: unknown device type: 0x46da [ 407.694777][ T797] usb 6-1: USB disconnect, device number 33 [ 407.722277][ T797] ftdi_sio 6-1:77.58: device disconnected [ 407.838780][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 407.979088][ T9] usb 4-1: device descriptor read/64, error -71 [ 407.999111][T10673] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 408.031352][T10673] team0: Port device batadv2 added [ 408.356163][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 408.425933][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 408.658537][ T9] usb 4-1: device descriptor read/64, error -71 [ 408.781284][ T9] usb usb4-port1: attempt power cycle [ 408.839000][ T797] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 408.988508][ T797] usb 1-1: device descriptor read/64, error -71 [ 409.149115][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 409.188141][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1195'. [ 409.197772][ T9] usb 4-1: device descriptor read/8, error -71 [ 409.228576][ T797] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 409.454919][ T797] usb 1-1: device descriptor read/64, error -71 [ 409.548959][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 409.570830][ T9] usb 4-1: device descriptor read/8, error -71 [ 409.600496][ T797] usb usb1-port1: attempt power cycle [ 409.685226][ T9] usb usb4-port1: unable to enumerate USB device [ 409.951458][ T797] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 409.980594][ T797] usb 1-1: device descriptor read/8, error -71 [ 410.228911][ T797] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 410.250169][ T797] usb 1-1: device descriptor read/8, error -71 [ 410.270759][T10706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.309492][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 410.369408][ T797] usb usb1-port1: unable to enumerate USB device [ 410.407420][T10711] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 410.428158][T10711] netlink: 'syz.4.1202': attribute type 12 has an invalid length. [ 410.582358][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 410.596766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.615148][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.633241][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.687249][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.698002][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.733263][ T9] usb 3-1: config 0 descriptor?? [ 410.817049][T10716] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 410.829407][T10716] team0: Port device batadv6 added [ 411.326215][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.339359][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.398837][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 411.404959][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 411.419729][ T9] usb 3-1: USB disconnect, device number 67 [ 412.300794][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 412.498507][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 412.517330][ T9] usb 4-1: config 0 has no interfaces? [ 412.545662][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.581352][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.628632][ T9] usb 4-1: Manufacturer: syz [ 412.724375][ T9] usb 4-1: config 0 descriptor?? [ 413.085461][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 413.345398][T10759] loop3: detected capacity change from 0 to 7 [ 413.396671][ T7948] Dev loop3: unable to read RDB block 7 [ 413.432169][ T7948] loop3: unable to read partition table [ 413.450008][T10761] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 413.458698][ T7948] loop3: partition table beyond EOD, truncated [ 413.482779][T10759] Dev loop3: unable to read RDB block 7 [ 413.508731][T10759] loop3: unable to read partition table [ 413.556344][ T30] audit: type=1800 audit(1771782979.545:285): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1215" name="file1" dev="tmpfs" ino=1356 res=0 errno=0 [ 413.757619][T10759] loop3: partition table beyond EOD, truncated [ 413.788580][T10759] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.867237][T10764] ip6gretap0: entered promiscuous mode [ 413.903299][ T3096] hid_parser_main: 28 callbacks suppressed [ 413.903318][ T3096] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 413.919088][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 413.963639][ T3096] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.273748][T10769] fido_id[10769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 414.779010][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 414.788097][T10787] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.807873][T10787] bridge14: entered promiscuous mode [ 414.823594][T10787] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 414.885090][ T3096] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 415.172037][ T3096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 415.200442][ T3096] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 415.268874][ T3096] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 415.279200][ T3096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.291030][ T3096] usb 6-1: config 0 descriptor?? [ 415.296909][T10783] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 415.514150][ T5896] usb 4-1: USB disconnect, device number 51 [ 416.045441][ T5896] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 416.239316][ T5896] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 416.277999][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.316096][ T5896] usb 4-1: Product: syz [ 416.329380][ T5896] usb 4-1: Manufacturer: syz [ 416.357300][ T5896] usb 4-1: SerialNumber: syz [ 416.389899][ T5896] usb 4-1: config 0 descriptor?? [ 416.509751][ T5896] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 417.191107][T10812] loop3: detected capacity change from 0 to 7 [ 417.221477][T10812] Dev loop3: unable to read RDB block 7 [ 417.229872][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 417.249386][T10812] loop3: unable to read partition table [ 417.261050][T10812] loop3: partition table beyond EOD, truncated [ 417.280895][T10812] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.426565][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.461450][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 417.499348][ T9] usb 3-1: too many configurations: 170, using maximum allowed: 8 [ 417.535325][ T9] usb 3-1: config index 0 descriptor too short (expected 16402, got 18) [ 417.555515][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.571610][ T9] usb 3-1: config 251 has no interface number 0 [ 417.580711][ T9] usb 3-1: config index 1 descriptor too short (expected 16402, got 18) [ 417.597050][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.629008][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.642025][ T9] usb 3-1: config 251 has no interface number 0 [ 417.659936][ T9] usb 3-1: config index 2 descriptor too short (expected 16402, got 18) [ 417.670041][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.688606][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.717840][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.738476][ T9] usb 3-1: config 251 has no interface number 0 [ 417.765971][ T9] usb 3-1: config index 3 descriptor too short (expected 16402, got 18) [ 417.778879][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.805494][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.826119][ T9] usb 3-1: config 251 has no interface number 0 [ 417.842162][ T9] usb 3-1: config index 4 descriptor too short (expected 16402, got 18) [ 417.855292][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.867823][T10822] macsec1: entered promiscuous mode [ 417.875534][ T9] usb 3-1: config 251 has no interface number 0 [ 417.882932][T10822] macsec1: entered allmulticast mode [ 417.891528][ T9] usb 3-1: config index 5 descriptor too short (expected 16402, got 18) [ 417.902032][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 417.922536][ T9] usb 3-1: config 251 has no interface number 0 [ 417.943512][ T9] usb 3-1: config index 6 descriptor too short (expected 16402, got 18) [ 417.964069][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 418.005939][ T9] usb 3-1: config 251 has no interface number 0 [ 418.036539][ T9] usb 3-1: config index 7 descriptor too short (expected 16402, got 18) [ 418.060383][ T9] usb 3-1: config 251 has an invalid interface number: 227 but max is 0 [ 418.077294][ T9] usb 3-1: config 251 has no interface number 0 [ 418.091653][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 418.119307][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=229 [ 418.140514][ T9] usb 3-1: Product: syz [ 418.149240][ T9] usb 3-1: Manufacturer: syz [ 418.154549][ T9] usb 3-1: SerialNumber: syz [ 418.387960][ T9] usb 3-1: unknown interface protocol 0xc7, assuming v1 [ 418.455682][ T9] usb 3-1: cannot find UAC_HEADER [ 418.616903][ T9] snd-usb-audio 3-1:251.227: probe with driver snd-usb-audio failed with error -22 [ 418.665236][ T9] usb 3-1: USB disconnect, device number 68 [ 418.720916][ T7948] udevd[7948]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:251.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.255987][ T5942] usb 4-1: USB disconnect, device number 52 [ 419.814252][T10844] No such timeout policy "syz1" [ 419.878655][ T5942] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 420.073699][ T5942] usb 3-1: device descriptor read/64, error -71 [ 420.169482][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.188077][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.238545][ T5896] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 420.328509][ T5942] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 420.388701][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 420.403701][ T5896] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 420.416028][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.428891][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.440886][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.451947][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.460211][ T5942] usb 3-1: device descriptor read/64, error -71 [ 420.466932][ T5896] usb 4-1: Product: syz [ 420.473183][ T5896] usb 4-1: Manufacturer: syz [ 420.478194][ T5896] usb 4-1: SerialNumber: syz [ 420.569072][ T5942] usb usb3-port1: attempt power cycle [ 420.897654][ T5896] usb 4-1: 0:2 : does not exist [ 420.938521][ T5942] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 420.971808][ T5942] usb 3-1: device descriptor read/8, error -71 [ 421.228544][ T5942] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 421.261147][ T5942] usb 3-1: device descriptor read/8, error -71 [ 421.372805][ T5942] usb usb3-port1: unable to enumerate USB device [ 421.542650][ T5896] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 421.632292][ T5896] usb 4-1: USB disconnect, device number 53 [ 421.642995][T10854] loop3: detected capacity change from 0 to 7 [ 421.675245][ T7948] udevd[7948]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.677334][T10854] Dev loop3: unable to read RDB block 7 [ 421.748809][T10854] loop3: unable to read partition table [ 421.768732][T10854] loop3: partition table beyond EOD, truncated [ 421.774960][T10854] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.202877][T10858] loop2: detected capacity change from 0 to 7 [ 422.216946][ T7948] Dev loop2: unable to read RDB block 7 [ 422.223298][ T7948] loop2: unable to read partition table [ 422.232374][ T7948] loop2: partition table beyond EOD, truncated [ 422.241360][T10858] Dev loop2: unable to read RDB block 7 [ 422.251140][T10858] loop2: unable to read partition table [ 422.257089][T10858] loop2: partition table beyond EOD, truncated [ 422.273791][T10858] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.303372][ T5193] Dev loop2: unable to read RDB block 7 [ 422.318181][ T5193] loop2: unable to read partition table [ 422.324670][ T5193] loop2: partition table beyond EOD, truncated [ 422.429483][ T9] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 422.620361][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.640739][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.658521][ T9] usb 4-1: Product: syz [ 422.662892][ T9] usb 4-1: Manufacturer: syz [ 422.667526][ T9] usb 4-1: SerialNumber: syz [ 422.693336][ T9] usb 4-1: config 0 descriptor?? [ 422.703154][ T30] audit: type=1326 audit(1771782988.745:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 422.736490][ T30] audit: type=1326 audit(1771782988.745:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 422.761634][ T30] audit: type=1326 audit(1771782988.745:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f517235cece code=0x7ffc0000 [ 422.785155][ T30] audit: type=1326 audit(1771782988.745:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 422.811110][ T30] audit: type=1326 audit(1771782988.745:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 422.834268][ T30] audit: type=1326 audit(1771782988.765:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 422.932749][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 422.997837][ T30] audit: type=1326 audit(1771782988.765:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 423.072124][ T30] audit: type=1326 audit(1771782988.765:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 423.224851][ T30] audit: type=1326 audit(1771782988.765:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 423.260640][ T30] audit: type=1326 audit(1771782988.765:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517239c629 code=0x7ffc0000 [ 423.561230][T10883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.608635][ T5946] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 423.749013][ T5946] usb 3-1: device descriptor read/64, error -71 [ 423.993382][ T5946] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 424.169022][ T5946] usb 3-1: device descriptor read/64, error -71 [ 424.281265][ T5946] usb usb3-port1: attempt power cycle [ 424.313069][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 424.349870][ T9] usb 4-1: USB disconnect, device number 54 [ 424.435184][T10896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.658611][ T5946] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 424.695616][ T5946] usb 3-1: device descriptor read/8, error -71 [ 424.964932][T10903] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 425.078601][ T5946] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 425.198781][ T5946] usb 3-1: device descriptor read/8, error -71 [ 425.322678][ T5946] usb usb3-port1: unable to enumerate USB device [ 425.581052][ T5942] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 425.764776][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.789317][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.817839][ T5942] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 425.839892][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.880112][ T5942] usb 4-1: config 0 descriptor?? [ 426.032679][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 426.164710][T10913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.340645][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.376770][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.442570][ T5942] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 426.477257][ T5942] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 426.628784][ T5942] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 426.643069][ T5942] hid-steam 0003:28DE:1142.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 426.673907][ T5942] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 426.899577][ T5942] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 426.935163][ T5942] usb 4-1: USB disconnect, device number 55 [ 426.960645][ T5942] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 427.220409][T10917] fido_id[10917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 427.849140][ T5942] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 428.048986][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 428.084290][ T5942] usb 4-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 428.103561][ T5942] usb 4-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 428.147563][ T5942] usb 4-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.208412][ T5942] usb 4-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.242039][ T5942] usb 4-1: config 173 interface 0 has no altsetting 0 [ 428.269266][ T5942] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 428.287338][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.527380][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.563897][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.573314][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.589413][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.810753][ T5942] hid (null): unknown global tag 0xd [ 428.825589][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 429.018878][ T5942] usb 4-1: USB disconnect, device number 56 [ 429.165331][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 429.173616][ T9] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 429.189587][ T9] usb 3-1: config 0 has no interface number 0 [ 429.213680][ T9] usb 3-1: config 0 interface 119 has no altsetting 0 [ 429.235200][ T9] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 429.246463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.276973][ T9] usb 3-1: Product: syz [ 429.287132][ T9] usb 3-1: Manufacturer: syz [ 429.302680][ T9] usb 3-1: SerialNumber: syz [ 429.336826][ T9] usb 3-1: config 0 descriptor?? [ 429.690266][ T9] mos7840 3-1:0.119: required endpoints missing [ 429.713837][ T9] usb 3-1: USB disconnect, device number 77 [ 429.846875][T10930] 8021q: adding VLAN 0 to HW filter on device bond7 [ 430.747777][T10945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.004881][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 431.376219][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.415868][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.455985][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 431.491231][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.546707][ T9] usb 3-1: config 0 descriptor?? [ 431.838827][ T9] usb 3-1: can't set config #0, error -71 [ 431.886574][ T9] usb 3-1: USB disconnect, device number 78 [ 432.684130][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 433.076199][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 434.498482][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 434.611884][T10980] ±ÿ: renamed from batadv_slave_1 (while UP) [ 434.671224][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 434.702634][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.740054][ T9] usb 4-1: config 0 has no interfaces? [ 434.778851][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.808631][ T9] usb 4-1: config 0 has no interfaces? [ 434.816819][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.859479][ T9] usb 4-1: config 0 has no interfaces? [ 434.867096][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 434.877039][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 434.898453][ T9] usb 4-1: Product: syz [ 434.906633][ T9] usb 4-1: Manufacturer: syz [ 434.933086][ T9] usb 4-1: config 0 descriptor?? [ 435.492928][T10993] netlink: set zone limit has 4 unknown bytes [ 435.571994][ T5942] usb 4-1: USB disconnect, device number 57 [ 435.653505][T10991] Invalid argument reading file caps for ./file0 [ 436.633072][T11002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.728896][T11003] kvm: MONITOR instruction emulated as NOP! [ 436.909630][T11006] loop2: detected capacity change from 0 to 7 [ 436.928668][T11006] Dev loop2: unable to read RDB block 7 [ 436.944133][T11006] loop2: unable to read partition table [ 436.961389][T11006] loop2: partition table beyond EOD, truncated [ 437.008747][T11006] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.760379][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 439.821145][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 440.128558][ T9] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 440.153243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.161908][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.223362][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.250672][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.341902][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 440.352686][ T9] usb 3-1: config 2 has an invalid interface number: 155 but max is 2 [ 440.378568][ T9] usb 3-1: config 2 has an invalid interface number: 191 but max is 2 [ 440.411053][ T9] usb 3-1: config 2 has an invalid interface number: 105 but max is 2 [ 440.452313][ T9] usb 3-1: config 2 has an invalid interface number: 224 but max is 2 [ 440.472151][ T9] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 440.501788][ T9] usb 3-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 440.532428][ T9] usb 3-1: config 2 has no interface number 0 [ 440.546845][ T9] usb 3-1: config 2 has no interface number 1 [ 440.569636][ T9] usb 3-1: config 2 has no interface number 2 [ 440.596541][ T9] usb 3-1: config 2 has no interface number 3 [ 440.608534][ T9] usb 3-1: config 2 interface 155 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 440.662925][ T9] usb 3-1: config 2 interface 155 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 440.693192][ T9] usb 3-1: config 2 interface 155 altsetting 0 endpoint 0x8B has an invalid bInterval 104, changing to 4 [ 440.708041][ T9] usb 3-1: config 2 interface 155 altsetting 0 endpoint 0x8B has invalid maxpacket 19938, setting to 1023 [ 440.756128][ T9] usb 3-1: config 2 interface 155 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 440.811265][ T9] usb 3-1: config 2 interface 155 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 440.866077][ T9] usb 3-1: config 2 interface 191 altsetting 32 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 440.919750][ T9] usb 3-1: config 2 interface 191 altsetting 32 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 440.963605][ T9] usb 3-1: config 2 interface 191 altsetting 32 has a duplicate endpoint with address 0x9, skipping [ 440.995483][ T9] usb 3-1: config 2 interface 191 altsetting 32 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 441.060480][ T9] usb 3-1: config 2 interface 191 altsetting 32 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 441.097497][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 441.132061][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 441.156303][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 441.180922][ T9] usb 3-1: config 2 interface 105 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 441.223458][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 441.264031][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 441.324329][ T9] usb 3-1: config 2 interface 105 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 441.387458][ T9] usb 3-1: config 2 interface 224 altsetting 225 has a duplicate endpoint with address 0x8, skipping [ 441.399394][ T9] usb 3-1: config 2 interface 224 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.430809][ T9] usb 3-1: config 2 interface 191 has no altsetting 0 [ 441.437989][ T9] usb 3-1: config 2 interface 224 has no altsetting 0 [ 441.467036][T11070] loop4: detected capacity change from 0 to 7 [ 441.476847][T11070] loop4: [POWERTEC] p1 p2 p3 [ 441.486648][T11070] loop4: p1 start 1600454656 is beyond EOD, truncated [ 441.494486][T11070] loop4: p2 start 3796309757 is beyond EOD, truncated [ 441.516802][ T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=0023, bcdDevice=b5.f2 [ 441.534830][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.543450][T11070] loop4: p3 start 98621423 is beyond EOD, truncated [ 441.556330][ T9] usb 3-1: Product: 《 [ 441.581010][ T9] usb 3-1: Manufacturer: ï—둘꪿剪î›ä•¼à§¢î¡¨ë²—퀿ࠗ꿻áŒî“‹è…¼ç†æº’ê¥Úµâ­¦áŠ“嵗殠ﺸႛ斃﹜ඟ玗㚇摺慔ê§æ˜€â®³ï…‰ê¸žë¥§áˆ®ê‡æ°±â£©æ¯ë°„ᓄꚻ짚⳻觭⇇鮇廒쌀砋儔鮗郖䀄憮ﱽçຣⴞ찡榫͸꧛沥◸啇ĥ௨á‘é½¾ä¨æŽ­îšé‚Šê½•ì¡°çœ¡è”®ì„¬î´»ç³…骘涱ࠦ頧婡⤿峦蟭⣉퀄Ỹ须í»è⺩ﯯ㕜틛 [ 441.724834][ T9] usb 3-1: SerialNumber: á‹ ë±âª°éŽ‚簢陾㵡唷傓둺ç±ê“ŒãŸ•î³é¦¶Ä²â‘è¨ë¨¦ç›—妠槦ꘃ䣆ྮ짱ﰺ焩玢봣⺈歚㞄ݬ땆蓅벚í›î•ê²‘ä½îŸ£çŒ¥æš‰ë„îž«í’悠疆ሇᨑ溼ã›é™‘늎ଔ⦂㩼罂皅ä·åŒƒæ«‹ë¬¬ê¾³ì®†ë‹Ÿéµšæ±“ۺ㔄ᗄ蹈嬗碘êëÇê€é±“冼치ꋩ잋㩠뵕䫞앻ﵺ┰釞í¦ìšƒé¾­ã㩸Ṿ譸ê³å¡©é‘§ç˜à§¼ï“šç» [ 442.044618][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.056932][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.068719][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.081187][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.089746][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.219548][ T9] option 3-1:2.155: GSM modem (1-port) converter detected [ 442.297233][ T9] option 3-1:2.191: GSM modem (1-port) converter detected [ 442.376075][ T9] option 3-1:2.105: GSM modem (1-port) converter detected [ 442.438830][ T9] option 3-1:2.224: GSM modem (1-port) converter detected [ 442.496004][ T9] usb 3-1: USB disconnect, device number 79 [ 442.552571][ T9] option 3-1:2.155: device disconnected [ 442.593273][ T9] option 3-1:2.191: device disconnected [ 442.622623][ T9] option 3-1:2.105: device disconnected [ 442.651414][ T9] option 3-1:2.224: device disconnected [ 443.074439][T11076] chnl_net:caif_netlink_parms(): no params data found [ 443.238633][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 443.311096][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.319823][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.327566][T11076] bridge_slave_0: entered allmulticast mode [ 443.402241][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 443.418993][T11076] bridge_slave_0: entered promiscuous mode [ 443.427083][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 443.436118][T11096] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.447714][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.454903][ T9] usb 3-1: config 1 has no interface number 0 [ 443.461327][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 443.468880][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.473180][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 443.489922][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.665001][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 443.669294][T11076] bridge_slave_1: entered allmulticast mode [ 443.680702][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.689943][ T9] usb 3-1: Product: syz [ 443.694482][ T9] usb 3-1: Manufacturer: syz [ 443.700259][ T9] usb 3-1: SerialNumber: syz [ 443.722987][T11083] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 443.801424][T11076] bridge_slave_1: entered promiscuous mode [ 444.159174][ T5827] Bluetooth: hci5: command tx timeout [ 444.236657][T11096] bridge13: entered promiscuous mode [ 444.562869][T11083] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 444.609939][T11097] netlink: 'syz.4.1307': attribute type 2 has an invalid length. [ 444.750430][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.805304][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.998081][ T9] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 445.014276][T11076] team0: Port device team_slave_0 added [ 445.024234][T11076] team0: Port device team_slave_1 added [ 445.214839][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.234441][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.343072][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.392020][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.416266][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.518657][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.765753][T11076] hsr_slave_0: entered promiscuous mode [ 445.791007][T11076] hsr_slave_1: entered promiscuous mode [ 445.819327][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 445.835590][T11076] Cannot create hsr debugfs directory [ 446.197601][ T9] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 446.221346][ T9] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 446.248550][ T9] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 446.275358][ T5827] Bluetooth: hci5: command tx timeout [ 446.281558][ T9] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 446.300588][ T9] usb 3-1: USB disconnect, device number 80 [ 446.333801][ T9] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 446.513667][ T9] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 446.996031][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 447.225966][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 447.242846][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.275523][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 447.391031][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 447.446206][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 447.505064][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.550251][T11076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.570252][T11076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.595487][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 447.604910][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.621391][ T9] usb 3-1: Product: syz [ 447.646310][T11076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.676366][ T9] usb 3-1: Manufacturer: syz [ 447.762355][ T9] usb 3-1: SerialNumber: syz [ 447.880487][ T9] usb 3-1: config 0 descriptor?? [ 447.907952][T11076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 448.073194][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 448.209043][ T9] usb 3-1: USB disconnect, device number 81 [ 448.308583][ T5827] Bluetooth: hci5: command tx timeout [ 448.603721][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.722352][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.760172][T11125] loop3: detected capacity change from 0 to 7 [ 448.773757][ T214] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.781113][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.849054][T11125] Dev loop3: unable to read RDB block 7 [ 448.854721][T11125] loop3: unable to read partition table [ 448.870273][T11125] loop3: partition table beyond EOD, truncated [ 448.906861][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.914130][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.934808][T11125] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 449.100656][T11076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.322910][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.476508][T11076] veth0_vlan: entered promiscuous mode [ 449.486908][T11143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1314'. [ 449.497686][T11143] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1314'. [ 449.761422][T11076] veth1_vlan: entered promiscuous mode [ 449.901460][T11076] veth0_macvtap: entered promiscuous mode [ 449.926597][T11150] IPv6: Can't replace route, no match found [ 450.011403][T11076] veth1_macvtap: entered promiscuous mode [ 450.095118][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.277303][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.389981][ T5827] Bluetooth: hci5: command tx timeout [ 450.447719][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.591166][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.669107][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.698499][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.432791][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.488565][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.610063][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.638743][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.293235][T11167] netlink: 'syz.6.1299': attribute type 23 has an invalid length. [ 452.605782][T11175] loop2: detected capacity change from 0 to 7 [ 452.667584][ T5844] Dev loop2: unable to read RDB block 7 [ 452.714371][ T5844] loop2: unable to read partition table [ 452.746305][ T5844] loop2: partition table beyond EOD, truncated [ 452.821177][T11175] Dev loop2: unable to read RDB block 7 [ 452.836964][T11175] loop2: unable to read partition table [ 452.905739][T11175] loop2: partition table beyond EOD, truncated [ 452.977284][T11175] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.423259][T11179] loop3: detected capacity change from 0 to 7 [ 453.471853][T11179] Dev loop3: unable to read RDB block 7 [ 453.477523][T11179] loop3: unable to read partition table [ 453.616705][T11179] loop3: partition table beyond EOD, truncated [ 453.681875][T11179] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.455840][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.517457][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.538218][T11192] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 454.684717][T11192] bond6: entered promiscuous mode [ 454.758961][T11192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.866584][T11192] bond6: (slave bridge8): making interface the new active one [ 454.899055][ T5946] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 454.933924][T11198] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 454.941944][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 454.949411][T11192] bridge8: entered promiscuous mode [ 454.961818][T11198] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 454.978294][T11192] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 455.090766][ T5946] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 455.099206][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.168668][ T5946] usb 3-1: config 0 has no interface number 0 [ 455.174882][ T5946] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 455.237222][ T5946] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 455.278950][ T5946] usb 3-1: config 0 interface 106 has no altsetting 0 [ 455.290189][T11203] loop2: detected capacity change from 0 to 7 [ 455.299493][ T5946] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 455.318151][T11203] Dev loop2: unable to read RDB block 7 [ 455.328661][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.339930][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 455.350086][T11203] loop2: unable to read partition table [ 455.355959][T11203] loop2: partition table beyond EOD, truncated [ 455.367697][T11206] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.396749][ T5946] usb 3-1: config 0 descriptor?? [ 455.404118][T11203] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.438667][T11206] bridge13: entered promiscuous mode [ 455.466253][ T5946] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 455.611007][T11206] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 455.844329][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.853672][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.868399][T11213] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 455.887730][T11213] team0: Device gtp0 is of different type [ 456.258153][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.267474][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.551798][ T214] usb 3-1: Failed to submit usb control message: -110 [ 456.718450][ T214] usb 3-1: unable to send the bmi data to the device: -110 [ 456.760056][ T214] usb 3-1: unable to get target info from device [ 456.787158][ T214] usb 3-1: could not get target info (-110) [ 456.820593][ T214] usb 3-1: could not probe fw (-110) [ 457.047148][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 457.241877][T11222] loop3: detected capacity change from 0 to 7 [ 457.303246][ T7948] Dev loop3: unable to read RDB block 7 [ 457.344643][ T7948] loop3: unable to read partition table [ 457.411236][ T7948] loop3: partition table beyond EOD, truncated [ 457.445677][T11222] Dev loop3: unable to read RDB block 7 [ 457.451502][T11222] loop3: unable to read partition table [ 457.458719][T11222] loop3: partition table beyond EOD, truncated [ 457.468567][T11222] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.899518][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1342'. [ 457.970171][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 458.507811][ T5942] usb 3-1: USB disconnect, device number 82 [ 458.748572][T11237] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1347'. [ 459.218787][ T797] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 459.230454][T11252] loop3: detected capacity change from 0 to 7 [ 459.246987][T11252] Dev loop3: unable to read RDB block 7 [ 459.260960][T11252] loop3: unable to read partition table [ 459.271794][T11252] loop3: partition table beyond EOD, truncated [ 459.289891][T11252] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.384557][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 459.400480][ T797] usb 4-1: can't read configurations, error -61 [ 459.590648][ T797] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 459.775355][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 459.789424][ T797] usb 4-1: can't read configurations, error -61 [ 459.825602][ T797] usb usb4-port1: attempt power cycle [ 460.063668][ T5942] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 460.189571][ T797] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 460.222615][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.248583][ T797] usb 4-1: can't read configurations, error -61 [ 460.258495][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 460.268925][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.288580][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.318465][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 460.344049][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 460.374534][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.406538][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.416046][ T797] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 460.434024][ T5942] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.462334][ T5942] usb 3-1: Manufacturer: syz [ 460.490322][ T5942] usb 3-1: config 0 descriptor?? [ 460.496279][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 460.513314][ T797] usb 4-1: can't read configurations, error -61 [ 460.554444][ T797] usb usb4-port1: unable to enumerate USB device [ 460.889490][ T5942] rc_core: IR keymap rc-hauppauge not found [ 460.895473][ T5942] Registered IR keymap rc-empty [ 460.909358][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 460.938902][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 460.991344][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 461.022535][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 461.039743][T11278] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.072760][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.099926][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.119631][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.143141][T11278] bond8: (slave lo): Enslaving as an active interface with an up link [ 461.159095][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.189727][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.201563][T11278] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.219268][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.249035][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.257679][T11279] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.309922][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.328618][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.357730][ T5942] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 461.424756][ T5942] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 461.461209][ T5942] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 461.479780][ T5942] usb 3-1: USB disconnect, device number 83 [ 462.170098][T11293] loop3: detected capacity change from 0 to 7 [ 462.209692][T11293] Dev loop3: unable to read RDB block 7 [ 462.215371][T11293] loop3: unable to read partition table [ 462.358675][T11293] loop3: partition table beyond EOD, truncated [ 462.365030][T11293] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.904633][T11315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 464.558449][ T5942] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 464.753969][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 464.766386][ T5942] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 464.808023][ T5942] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 464.827643][ T5942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 464.866512][ T5942] usb 3-1: config 1 has no interface number 0 [ 464.893424][ T5942] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.916932][ T5942] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 464.980125][ T5942] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 465.005782][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.051513][ T5942] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 465.245927][ T5942] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 465.419648][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 465.697084][ T797] usb 3-1: USB disconnect, device number 84 [ 465.741636][T11338] loop3: detected capacity change from 0 to 7 [ 465.763279][ T797] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 465.836193][T11338] Dev loop3: unable to read RDB block 7 [ 465.862890][T11338] loop3: unable to read partition table [ 465.898699][T11338] loop3: partition table beyond EOD, truncated [ 465.930642][T11338] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.222902][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 466.266672][T11346] macvlan0: entered promiscuous mode [ 466.292274][T11346] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 466.337326][T11346] netlink: 'syz.4.1381': attribute type 2 has an invalid length. [ 466.357517][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 467.099075][ T5942] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 467.238555][ T5942] usb 4-1: device descriptor read/64, error -71 [ 467.245525][T11375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1391'. [ 467.273100][T11376] netlink: 'syz.4.1392': attribute type 4 has an invalid length. [ 467.282448][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.301365][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.358092][T11375] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1391'. [ 467.475996][T11377] IPv6: Can't replace route, no match found [ 467.528511][ T5942] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 467.670695][ T5942] usb 4-1: device descriptor read/64, error -71 [ 467.790273][ T5942] usb usb4-port1: attempt power cycle [ 468.130208][ T5942] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 468.339204][ T5942] usb 4-1: device descriptor read/8, error -71 [ 468.569172][T11392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.688473][ T5942] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 468.722237][ T5942] usb 4-1: device descriptor read/8, error -71 [ 468.883193][ T5942] usb usb4-port1: unable to enumerate USB device [ 470.453378][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.543526][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.456143][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 471.456166][ T30] audit: type=1800 audit(1771783037.485:303): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1400" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=40890 res=0 errno=0 [ 471.663851][T11433] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1405'. [ 471.764640][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 472.003438][T11433] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1405'. [ 472.077805][T11433] IPv6: Can't replace route, no match found [ 473.127975][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.194532][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.243359][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.309840][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.569224][ T30] audit: type=1326 audit(1771783039.605:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.0.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa37139c629 code=0x0 [ 473.729109][T11455] fuse: Unknown parameter 'subj_role' [ 474.186789][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 474.369387][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 474.527375][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 474.542515][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.40 [ 474.553824][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.755611][ T9] usb 3-1: Product: ꌶ壳ê“䕉疷쌘첖挻Ȫ贪涰待ï í™ê™Œä’…㷥溷填릜怤뜲垰욓亲鳶示惛響웋অ媤径쫛輆盎쉼㪃ç’熑鵳潭龇硌㠭쳦è·ë’覯뤇곀ꇖâµæœ  [ 474.845135][ T9] usb 3-1: Manufacturer: 쭑赬䦎嘢챞쒭ርæŽì½–é°ëœ·ã«©å½¹î¶¶çŸ¥ä®ƒï£„ë‹Šè§Ó¯â°ä’阗ᥛ籮﷊邵蹗诸ì¢é›¯ì¼®á’®á’«âšƒä€¸ë°­å¤ˆî­…슲숳瓫姑䓑༔ⴔ웃◺ࡘêºä“šã˜–å—…ë™’ë—Žî‚®é¾í™’궪綣㡹湡ꠂëŠêˆ¥ì‘ºí„œè¬¡î¤·áœ¿ÄŸíŸ¢ç¸¶â†”爮걡턗譧쓞êºçƒç»í€žäì™å§ë‡šá·¥å†ªà²€êœ¡ç¡«ë€‡é‘‰ç‘™ì˜êž³å¼ ë“«í›¨à¢ŒéŠ¶ë™ƒí’´ä™°éž¿ [ 474.902368][ T9] usb 3-1: SerialNumber: 綢虄娘⒰ [ 475.208082][T11479] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1417'. [ 475.249481][T11479] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1417'. [ 475.437605][T11482] IPv6: Can't replace route, no match found [ 475.720830][T11489] bridge14: entered promiscuous mode [ 475.737284][T11489] netlink: 'syz.4.1419': attribute type 2 has an invalid length. [ 475.882116][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 475.888189][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 475.946908][ T9] usb 3-1: USB disconnect, device number 85 [ 477.579412][ T5942] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 477.758571][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 477.783000][ T5942] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 477.811764][ T5942] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.843092][ T5942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.879965][ T5942] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 477.922633][ T5942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 477.956920][ T5942] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.991117][ T5942] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.016210][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.054604][ T5942] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 478.418808][ T5942] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 478.606760][T11528] loop2: detected capacity change from 0 to 7 [ 478.620079][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.658241][T11530] netlink: 'syz.6.1431': attribute type 1 has an invalid length. [ 478.683213][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.692096][T11528] Dev loop2: unable to read RDB block 7 [ 478.697768][T11528] loop2: unable to read partition table [ 478.832259][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 478.844720][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 478.883598][T11528] loop2: partition table beyond EOD, truncated [ 478.893317][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 478.908700][T11530] bond1: entered promiscuous mode [ 478.914220][T11528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.936975][T11530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.945095][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 479.005458][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 479.043621][ T5942] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 479.056644][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.123552][ T5942] usb 3-1: Product: syz [ 479.133465][ T5942] usb 3-1: Manufacturer: syz [ 479.157930][T11535] bond1: (slave bridge1): making interface the new active one [ 479.289921][T11535] bridge1: entered promiscuous mode [ 479.298279][ T5942] usb 3-1: SerialNumber: syz [ 479.376237][T11535] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 479.401917][ T5942] usb 3-1: config 0 descriptor?? [ 479.415755][ T5942] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 479.431064][ T5942] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 479.501422][T11538] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1433'. [ 479.632195][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.644212][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.714910][ T5918] usb 3-1: USB disconnect, device number 86 [ 479.725760][ T5918] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 479.753177][ T5918] omninet 3-1:0.0: device disconnected [ 480.022410][ T9] usb 4-1: USB disconnect, device number 66 [ 480.330983][T11548] netlink: 'syz.3.1435': attribute type 2 has an invalid length. [ 480.422354][T11550] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1436'. [ 480.602925][T11550] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1436'. [ 480.762552][T11556] IPv6: Can't replace route, no match found [ 481.833634][T11578] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 482.003955][T11578] bond2 (unregistering): Released all slaves [ 482.343570][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 482.957974][T11586] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1446'. [ 483.301488][T11588] loop2: detected capacity change from 0 to 7 [ 483.320783][T11588] Dev loop2: unable to read RDB block 7 [ 483.326482][T11588] loop2: unable to read partition table [ 483.341280][T11588] loop2: partition table beyond EOD, truncated [ 483.358124][T11588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.557629][T11593] syzkaller0: entered promiscuous mode [ 483.565267][T11593] syzkaller0: entered allmulticast mode [ 484.782665][T11609] loop6: detected capacity change from 0 to 7 [ 484.796525][T11609] Dev loop6: unable to read RDB block 7 [ 484.803603][T11609] loop6: unable to read partition table [ 484.811182][T11609] loop6: partition table beyond EOD, truncated [ 484.824458][T11609] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 485.722263][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 485.897343][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 485.911642][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 485.956416][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 485.982376][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.006164][ T9] usb 3-1: config 0 descriptor?? [ 486.247729][ T9] hid (null): global environment stack underflow [ 486.256703][ T9] corsair 0003:1B1C:1B09.0018: ignoring exceeding usage max [ 486.276636][ T9] corsair 0003:1B1C:1B09.0018: global environment stack underflow [ 486.284932][ T9] corsair 0003:1B1C:1B09.0018: item 0 4 1 11 parsing failed [ 486.508928][ T9] corsair 0003:1B1C:1B09.0018: parse failed [ 486.523789][ T9] corsair 0003:1B1C:1B09.0018: probe with driver corsair failed with error -22 [ 486.567969][ T9] usb 3-1: USB disconnect, device number 87 [ 487.255493][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 489.451329][T11617] netlink: 'syz.6.1456': attribute type 2 has an invalid length. [ 489.480400][T11629] loop2: detected capacity change from 0 to 7 [ 489.525910][T11629] Dev loop2: unable to read RDB block 7 [ 489.568563][T11629] loop2: unable to read partition table [ 489.574471][T11629] loop2: partition table beyond EOD, truncated [ 489.652047][T11629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.752519][T11627] syzkaller0: entered promiscuous mode [ 489.779713][T11627] syzkaller0: entered allmulticast mode [ 489.820142][T11633] syzkaller0: entered promiscuous mode [ 489.826401][T11633] syzkaller0: entered allmulticast mode [ 490.270702][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.325482][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.406175][T11658] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1465'. [ 490.462112][T11658] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1465'. [ 490.745957][T11662] IPv6: Can't replace route, no match found [ 491.998974][ T29] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 492.247873][ T29] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 492.287025][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 492.329045][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 492.362972][ T29] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 492.393447][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.433642][ T29] usb 3-1: config 0 descriptor?? [ 492.465120][T11665] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 493.149929][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.198969][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.371492][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 493.377562][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 493.410124][ T29] usb 3-1: USB disconnect, device number 88 [ 493.701222][T11659] syzkaller0: entered promiscuous mode [ 493.712484][T11659] syzkaller0: entered allmulticast mode [ 493.772814][T11660] tipc: Started in network mode [ 493.777793][T11660] tipc: Node identity 9206a599041a, cluster identity 4711 [ 493.798725][T11660] tipc: Enabled bearer , priority 0 [ 493.859191][T11653] tipc: Resetting bearer [ 493.903282][T11653] tipc: Disabling bearer [ 494.478507][ T5942] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 494.538956][T11688] netlink: 'syz.6.1472': attribute type 2 has an invalid length. [ 494.819240][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 494.864951][ T5942] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 494.901718][ T5942] usb 4-1: config 0 has no interface number 0 [ 494.933611][ T5942] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.978636][ T5942] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 495.016916][ T5942] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 495.056401][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.092909][ T5942] usb 4-1: Product: syz [ 495.121251][ T5942] usb 4-1: Manufacturer: syz [ 495.181240][ T5942] usb 4-1: SerialNumber: syz [ 495.244561][ T5942] usb 4-1: config 0 descriptor?? [ 495.330373][ T5942] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 495.698447][ T29] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 495.761131][T11703] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1478'. [ 495.878316][T11703] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1478'. [ 495.910668][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.932090][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.983901][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.029731][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.060162][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.093704][T11703] IPv6: Can't replace route, no match found [ 496.141590][ T29] usb 3-1: config 0 descriptor?? [ 496.198825][ T5942] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 496.365936][T11706] netlink: 'syz.6.1479': attribute type 1 has an invalid length. [ 496.579905][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1470'. [ 496.612411][ T29] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 496.696732][ T29] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 496.857320][T11706] bond2: entered promiscuous mode [ 496.887437][ T5942] usb 3-1: USB disconnect, device number 89 [ 496.934067][T11706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.705950][T11711] fido_id[11711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 498.055569][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 498.064814][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 498.811875][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1484'. [ 499.063731][ T5942] usb 4-1: USB disconnect, device number 67 [ 499.255778][T11745] netlink: 'syz.0.1489': attribute type 2 has an invalid length. [ 499.529379][ T5942] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 499.590594][T11755] syzkaller0: entered promiscuous mode [ 499.596170][T11755] syzkaller0: entered allmulticast mode [ 499.768454][ T797] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 499.831926][ T5942] usb 4-1: config 13 has an invalid interface number: 100 but max is 1 [ 499.860450][ T5942] usb 4-1: config 13 has no interface number 1 [ 499.910991][ T5942] usb 4-1: config 13 interface 100 altsetting 250 endpoint 0xC has invalid maxpacket 264, setting to 8 [ 499.958712][ T5942] usb 4-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 499.988667][ T5942] usb 4-1: config 13 interface 100 has no altsetting 0 [ 500.013321][ T5942] usb 4-1: string descriptor 0 read error: -71 [ 500.021692][ T797] usb 3-1: config 4 has an invalid interface number: 156 but max is 0 [ 500.050935][ T797] usb 3-1: config 4 has no interface number 0 [ 500.057507][ T5942] usb 4-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 500.100731][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.123360][ T797] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 500.145487][ T5942] usb 4-1: can't set config #13, error -71 [ 500.151645][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.180043][ T5942] usb 4-1: USB disconnect, device number 68 [ 500.186281][ T797] usb 3-1: Product: syz [ 500.192845][ T797] usb 3-1: Manufacturer: syz [ 500.229730][ T797] usb 3-1: SerialNumber: syz [ 500.276849][ T797] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 500.347129][ T797] usb 3-1: setting power ON [ 500.375331][ T797] dvb-usb: bulk message failed: -22 (2/0) [ 500.403518][ T797] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 500.459041][ T797] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 500.505088][ T797] dvb_usb_cxusb 3-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 500.574795][ T797] usb 3-1: USB disconnect, device number 90 [ 500.764659][T11768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1495'. [ 501.123153][T11779] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 501.205851][T11779] bond8: entered promiscuous mode [ 501.311082][T11786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1499'. [ 501.320569][T11779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.367571][T11779] bond8: (slave bridge14): making interface the new active one [ 501.383932][T11779] bridge14: entered promiscuous mode [ 501.419978][T11779] bond8: (slave bridge14): Enslaving as an active interface with an up link [ 501.443014][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.450803][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.601229][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607691][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.824703][T11792] loop3: detected capacity change from 0 to 7 [ 501.859049][T11794] sctp: [Deprecated]: syz.6.1503 (pid 11794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.859049][T11794] Use struct sctp_sack_info instead [ 501.899750][T11792] Dev loop3: unable to read RDB block 7 [ 501.960863][T11792] loop3: unable to read partition table [ 501.966791][T11792] loop3: partition table beyond EOD, truncated [ 502.041367][T11792] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 502.371566][T11803] netlink: 'syz.3.1505': attribute type 3 has an invalid length. [ 502.418306][T11803] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1505'. [ 502.562572][T11813] netlink: 'syz.2.1507': attribute type 2 has an invalid length. [ 503.624261][T11827] netlink: 'syz.6.1513': attribute type 1 has an invalid length. [ 503.752651][T11827] bond3: entered promiscuous mode [ 503.758120][T11827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.866161][T11827] bond3: (slave bridge2): making interface the new active one [ 503.885333][T11827] bridge2: entered promiscuous mode [ 503.908012][T11834] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 503.917037][T11827] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 503.955310][T11834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1514'. [ 504.819131][T11843] syzkaller0: entered promiscuous mode [ 504.877926][T11843] syzkaller0: entered allmulticast mode [ 505.616450][T11867] loop2: detected capacity change from 0 to 7 [ 505.651881][T11867] Dev loop2: unable to read RDB block 7 [ 505.657527][T11867] loop2: unable to read partition table [ 505.703578][T11867] loop2: partition table beyond EOD, truncated [ 505.728471][T11867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.211948][T11883] fuse: Unknown parameter 'rootm‚de' [ 506.244582][T11883] binder: 11881:11883 ioctl 4018620d 0 returned -22 [ 506.438844][ T797] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 506.714232][ T797] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.853758][ T797] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.888456][ T797] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.952232][ T797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.094692][ T797] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.151497][ T797] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.230116][ T797] usb 4-1: Product: syz [ 507.289946][ T797] usb 4-1: Manufacturer: syz [ 507.374677][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 507.385858][ T797] cdc_wdm 4-1:1.0: skipping garbage [ 507.409147][ T797] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 507.604669][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 507.614347][T11879] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.675739][ T797] usb 4-1: USB disconnect, device number 69 [ 507.816423][T11888] loop6: detected capacity change from 0 to 7 [ 507.881058][T11888] Dev loop6: unable to read RDB block 7 [ 507.888495][T11888] loop6: unable to read partition table [ 507.895223][T11888] loop6: partition table beyond EOD, truncated [ 507.974475][T11888] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 508.412870][T11893] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1532'. [ 508.424128][T11893] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1532'. [ 508.564043][T11893] IPv6: Can't replace route, no match found [ 509.001796][T11904] nftables ruleset with unbound chain [ 509.176434][T11910] loop2: detected capacity change from 0 to 7 [ 509.229879][T11910] Dev loop2: unable to read RDB block 7 [ 509.313676][T11910] loop2: unable to read partition table [ 509.351632][T11910] loop2: partition table beyond EOD, truncated [ 509.389548][T11910] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.414344][ T30] audit: type=1326 audit(1771783075.455:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 509.516676][ T30] audit: type=1326 audit(1771783075.475:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 509.602289][ T30] audit: type=1326 audit(1771783075.475:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 509.666231][ T30] audit: type=1326 audit(1771783075.475:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 509.891554][ T30] audit: type=1326 audit(1771783075.475:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 509.982297][ T30] audit: type=1326 audit(1771783075.485:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 510.020900][ T30] audit: type=1326 audit(1771783075.485:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 510.050036][T11924] loop6: detected capacity change from 0 to 7 [ 510.064131][T11924] Dev loop6: unable to read RDB block 7 [ 510.076834][T11924] loop6: unable to read partition table [ 510.093397][T11924] loop6: partition table beyond EOD, truncated [ 510.101892][T11924] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 510.135743][ T30] audit: type=1326 audit(1771783075.485:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 510.361136][ T30] audit: type=1326 audit(1771783075.485:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 510.477095][ T30] audit: type=1326 audit(1771783075.485:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.4.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faaba19c629 code=0x7ffc0000 [ 510.613043][T11913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.650694][T11913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.777763][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 510.786864][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 511.040111][ T797] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 511.167351][T11941] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 511.203083][ T5896] IPVS: starting estimator thread 0... [ 511.208700][ T797] usb 4-1: device descriptor read/64, error -71 [ 511.406330][T11942] IPVS: using max 29 ests per chain, 69600 per kthread [ 511.554295][ T797] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 511.673972][T11951] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1549'. [ 511.861364][ T797] usb 4-1: device descriptor read/64, error -71 [ 511.910867][T11951] IPv6: Can't replace route, no match found [ 511.969801][ T797] usb usb4-port1: attempt power cycle [ 512.387758][ T797] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 512.427785][ T797] usb 4-1: device descriptor read/8, error -71 [ 512.637253][T11956] netlink: 'syz.2.1550': attribute type 2 has an invalid length. [ 512.669535][ T797] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 512.711284][ T797] usb 4-1: device descriptor read/8, error -71 [ 512.820939][ T797] usb usb4-port1: unable to enumerate USB device [ 513.133190][T11963] loop2: detected capacity change from 0 to 7 [ 513.176519][T11963] Dev loop2: unable to read RDB block 7 [ 513.245892][T11963] loop2: unable to read partition table [ 513.262164][T11963] loop2: partition table beyond EOD, truncated [ 513.282387][T11963] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.663779][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 514.833420][T11979] loop6: detected capacity change from 0 to 7 [ 514.893632][T11979] Dev loop6: unable to read RDB block 7 [ 514.932502][T11979] loop6: unable to read partition table [ 514.977766][T11979] loop6: partition table beyond EOD, truncated [ 515.068813][T11979] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.757352][T11986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1556'. [ 517.635203][T12019] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1566'. [ 517.647815][T12019] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1566'. [ 517.773217][T12021] IPv6: Can't replace route, no match found [ 517.817974][T12022] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 521.094809][T12064] netlink: 'syz.0.1579': attribute type 2 has an invalid length. [ 521.143420][T12064] netlink: 'syz.0.1579': attribute type 12 has an invalid length. [ 521.364879][T12072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.658914][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 522.534244][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1584'. [ 522.549204][T12095] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1584'. [ 522.644079][T12095] IPv6: Can't replace route, no match found [ 522.855666][T12102] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1586'. [ 523.200986][T12098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.363070][T12101] bond_slave_0: entered promiscuous mode [ 523.369040][T12101] bond_slave_1: entered promiscuous mode [ 523.382426][T12101] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.402288][T12101] bond4: (slave macvlan2): making interface the new active one [ 523.412354][T12101] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 523.887868][T12107] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1587'. [ 525.340741][T12116] netlink: 'syz.2.1589': attribute type 2 has an invalid length. [ 526.185779][T12133] vivid-007: disconnect [ 526.196709][T12133] ip6t_srh: unknown srh invflags 4000 [ 526.354159][T12132] netlink: 'syz.6.1593': attribute type 2 has an invalid length. [ 526.459062][T12132] netlink: 'syz.6.1593': attribute type 12 has an invalid length. [ 526.840453][T12124] vivid-007: reconnect [ 527.277856][T12149] netlink: 'syz.6.1597': attribute type 1 has an invalid length. [ 527.334932][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 527.594173][T12149] bond5: entered promiscuous mode [ 527.644585][T12149] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.699008][T12150] batadv0: Device is already in use. [ 527.859684][T12154] bond5: (slave bridge3): making interface the new active one [ 527.896310][T12154] bridge3: entered promiscuous mode [ 527.924247][T12154] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 528.019912][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.183200][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.256756][T12166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1600'. [ 529.199183][T12179] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1602'. [ 529.240475][T12179] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1602'. [ 529.325476][T12184] IPv6: Can't replace route, no match found [ 531.920524][T12191] netlink: 'syz.2.1608': attribute type 2 has an invalid length. [ 531.985426][T12191] netlink: 'syz.2.1608': attribute type 12 has an invalid length. [ 531.994498][T12192] syz.6.1607 (12192): attempted to duplicate a private mapping with mremap. This is not supported. [ 532.090364][T12199] netlink: 'syz.4.1610': attribute type 2 has an invalid length. [ 532.846991][T12213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.469716][T12222] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1616'. [ 533.485581][T12223] fuse: Bad value for 'fd' [ 533.542036][T12222] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1616'. [ 533.998788][T12226] IPv6: Can't replace route, no match found [ 535.103362][T12233] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 535.366738][T12233] bond9: entered promiscuous mode [ 535.384046][T12233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 535.569537][T12236] bond9: (slave bridge15): making interface the new active one [ 535.577160][T12236] bridge15: entered promiscuous mode [ 535.596276][T12236] bond9: (slave bridge15): Enslaving as an active interface with an up link [ 536.615163][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1620'. [ 536.938479][ T5946] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 537.111677][ T5946] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 537.121477][ T5946] usb 4-1: config 128 has no interface number 0 [ 537.182773][ T5946] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 537.218636][ T5946] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 537.280740][ T5946] usb 4-1: config 128 interface 148 has no altsetting 0 [ 537.372603][ T5946] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 537.390576][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.431612][ T5946] usb 4-1: Product: syz [ 537.435934][ T5946] usb 4-1: Manufacturer: syz [ 537.491271][ T5946] usb 4-1: SerialNumber: syz [ 537.788543][ T5946] usb 4-1: USB disconnect, device number 74 [ 537.906543][T12267] netlink: 'syz.0.1626': attribute type 2 has an invalid length. [ 537.949731][T12267] netlink: 'syz.0.1626': attribute type 12 has an invalid length. [ 538.147768][T12273] bridge15: entered promiscuous mode [ 538.156332][T12276] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 538.498880][ T5946] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 538.783565][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 538.888177][ T5946] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 538.940072][ T5946] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.988971][ T5946] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.041483][ T5946] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 539.092444][ T5946] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.148657][ T5946] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.198481][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.454180][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.463008][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.470964][ T5946] usb 4-1: usb_control_msg returned -32 [ 539.487668][ T5946] usbtmc 4-1:16.0: can't read capabilities [ 539.709939][T12281] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1630'. [ 540.464236][T12298] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1632'. [ 540.488075][T12298] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1632'. [ 540.587183][T12301] IPv6: Can't replace route, no match found [ 540.931255][ T5896] usb 4-1: USB disconnect, device number 75 [ 543.149613][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1640'. [ 543.318554][ T5918] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 543.468481][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 543.507393][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.538729][ T5918] usb 4-1: config 0 has no interface number 0 [ 543.565664][ T5918] usb 4-1: config 0 interface 1 has no altsetting 0 [ 543.591432][T12341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1643'. [ 543.618788][ T5918] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 543.648970][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.657020][ T5918] usb 4-1: Product: syz [ 543.691045][ T5918] usb 4-1: Manufacturer: syz [ 543.706943][ T5918] usb 4-1: SerialNumber: syz [ 543.736149][ T5918] usb 4-1: config 0 descriptor?? [ 543.967003][ T5918] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 544.018943][ T5918] usb 4-1: USB disconnect, device number 76 [ 544.336338][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.381589][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.389625][ T5918] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 544.590375][ T5918] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 544.620567][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.629252][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.659398][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.674578][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.691403][ T5918] usb 3-1: config 0 descriptor?? [ 544.775956][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.951787][ T5918] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 544.974413][ T5918] [drm:udl_init] *ERROR* Selecting channel failed [ 545.048983][ T5918] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 545.080689][ T5918] [drm] Initialized udl on minor 2 [ 545.194816][ T5918] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 545.236802][ T5918] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 545.277728][ T5946] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 545.295839][ T5918] usb 3-1: USB disconnect, device number 91 [ 545.302051][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 545.328822][ T5946] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 545.479170][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.498404][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.574973][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 545.692006][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.786435][ T24] usb 4-1: config 0 descriptor?? [ 546.251874][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.268037][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.343787][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.387953][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.456719][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.487287][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.519630][ T24] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 546.714242][ T24] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 546.856430][ T24] cp2112 0003:10C4:EA90.001A: Part Number: 0x82 Device Version: 0xFE [ 546.987853][T12369] FAULT_INJECTION: forcing a failure. [ 546.987853][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 547.023162][T12369] CPU: 0 UID: 0 PID: 12369 Comm: syz.6.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.023197][T12369] Tainted: [L]=SOFTLOCKUP [ 547.023205][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.023221][T12369] Call Trace: [ 547.023238][T12369] [ 547.023247][T12369] dump_stack_lvl+0xe8/0x150 [ 547.023283][T12369] should_fail_ex+0x412/0x560 [ 547.023318][T12369] should_failslab+0xa8/0x100 [ 547.023346][T12369] __kmalloc_cache_noprof+0x88/0x660 [ 547.023370][T12369] ? nfnetlink_rcv+0xfe1/0x27b0 [ 547.023398][T12369] nfnetlink_rcv+0xfe1/0x27b0 [ 547.023455][T12369] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 547.023494][T12369] ? ref_tracker_free+0x693/0x840 [ 547.023548][T12369] ? __netlink_deliver_tap+0x807/0x850 [ 547.023575][T12369] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.023617][T12369] netlink_unicast+0x80f/0x9b0 [ 547.023648][T12369] ? __pfx_netlink_unicast+0x10/0x10 [ 547.023673][T12369] ? netlink_sendmsg+0x650/0xb40 [ 547.023698][T12369] ? skb_put+0x11b/0x210 [ 547.023730][T12369] netlink_sendmsg+0x813/0xb40 [ 547.023764][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.023792][T12369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 547.023820][T12369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 547.023843][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.023868][T12369] ____sys_sendmsg+0xa68/0xad0 [ 547.023907][T12369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.023948][T12369] ? import_iovec+0x73/0xa0 [ 547.023981][T12369] ___sys_sendmsg+0x2a5/0x360 [ 547.024019][T12369] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.024086][T12369] ? __fget_files+0x2a/0x420 [ 547.024115][T12369] ? __fget_files+0x3a0/0x420 [ 547.024155][T12369] __x64_sys_sendmsg+0x1bd/0x2a0 [ 547.024189][T12369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.024239][T12369] ? __pfx_ksys_write+0x10/0x10 [ 547.024274][T12369] do_syscall_64+0x14d/0xf80 [ 547.024304][T12369] ? trace_irq_disable+0x3b/0x150 [ 547.024334][T12369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.024356][T12369] ? clear_bhb_loop+0x40/0x90 [ 547.024382][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.024411][T12369] RIP: 0033:0x7ff5e079c629 [ 547.024431][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.024450][T12369] RSP: 002b:00007ff5e16d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.024473][T12369] RAX: ffffffffffffffda RBX: 00007ff5e0a15fa0 RCX: 00007ff5e079c629 [ 547.024488][T12369] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 547.024500][T12369] RBP: 00007ff5e16d5090 R08: 0000000000000000 R09: 0000000000000000 [ 547.024513][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.024525][T12369] R13: 00007ff5e0a16038 R14: 00007ff5e0a15fa0 R15: 00007ff5e0b3fa48 [ 547.024558][T12369] [ 547.450068][T12371] program syz.2.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.049231][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 548.436228][ T24] cp2112 0003:10C4:EA90.001A: error setting SMBus config [ 548.556653][ T24] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -71 [ 548.733563][T12395] xt_connbytes: Forcing CT accounting to be enabled [ 548.792664][T12395] set match dimension is over the limit! [ 549.072453][T12401] program syz.2.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.431847][ T24] usb 4-1: USB disconnect, device number 77 [ 549.957927][ T797] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 550.109449][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 550.117615][ T797] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 550.134711][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.175362][ T797] pvrusb2: Hardware description: Terratec Grabster AV400 [ 550.206057][ T797] pvrusb2: ********** [ 550.236402][ T797] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 550.328724][ T797] pvrusb2: Important functionality might not be entirely working. [ 550.348977][ T797] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 550.366179][ T797] pvrusb2: ********** [ 550.416389][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1660'. [ 550.492253][T12410] veth0_macvtap: left promiscuous mode [ 552.440826][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 552.934021][ T2344] pvrusb2: Invalid write control endpoint [ 552.940103][ T797] usb 3-1: USB disconnect, device number 92 [ 553.149245][T12436] netlink: 'syz.0.1667': attribute type 2 has an invalid length. [ 553.197239][ T2344] pvrusb2: Invalid write control endpoint [ 553.233605][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 553.247009][T12436] netlink: 'syz.0.1667': attribute type 12 has an invalid length. [ 553.278782][T12443] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 553.296719][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 553.332194][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 553.433893][ T2344] pvrusb2: Device being rendered inoperable [ 553.475575][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 553.534478][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 553.688809][ T2344] pvrusb2: Attached sub-driver cx25840 [ 553.716592][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 553.754856][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 554.865067][T12463] IPVS: set_ctl: invalid protocol: 44 172.20.20.55:20003 [ 557.013616][T12498] syzkaller0: entered promiscuous mode [ 557.040807][T12498] syzkaller0: entered allmulticast mode [ 557.365669][T12504] netlink: 'syz.6.1686': attribute type 2 has an invalid length. [ 557.434058][T12504] netlink: 'syz.6.1686': attribute type 12 has an invalid length. [ 558.131849][T12517] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1691'. [ 558.288691][ T797] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 558.350308][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.390258][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.494623][ T797] usb 4-1: config 14 has an invalid interface number: 154 but max is 1 [ 558.530725][ T797] usb 4-1: config 14 has an invalid interface number: 197 but max is 1 [ 558.565048][ T797] usb 4-1: config 14 has an invalid interface number: 183 but max is 1 [ 558.579304][ T797] usb 4-1: config 14 has 3 interfaces, different from the descriptor's value: 2 [ 558.589239][ T797] usb 4-1: config 14 has no interface number 0 [ 558.595476][ T797] usb 4-1: config 14 has no interface number 1 [ 558.606549][ T797] usb 4-1: config 14 has no interface number 2 [ 558.615571][ T797] usb 4-1: config 14 interface 197 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 558.645613][ T797] usb 4-1: config 14 interface 197 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 558.669302][ T797] usb 4-1: config 14 interface 197 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 558.754408][ T5942] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 558.762423][ T797] usb 4-1: config 14 interface 197 altsetting 1 has a duplicate endpoint with address 0x88, skipping [ 558.774157][ T797] usb 4-1: config 14 interface 197 altsetting 1 endpoint 0x4 has an invalid bInterval 129, changing to 7 [ 558.786361][ T797] usb 4-1: config 14 interface 197 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 558.805894][ T797] usb 4-1: config 14 interface 197 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 558.820277][T12532] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 558.964734][T12532] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 559.017672][T12532] team0: Failed to send options change via netlink (err -105) [ 559.036841][ T5942] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 559.069405][T12532] team0: Port device netdevsim0 added [ 559.234695][ T5942] usb 3-1: config 128 has no interface number 0 [ 559.263212][ T797] usb 4-1: too many endpoints for config 14 interface 183 altsetting 252: 219, using maximum allowed: 30 [ 559.349291][ T5942] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 559.371932][ T797] usb 4-1: config 14 interface 183 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 559.388275][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 559.406015][ T5942] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 559.436371][ T797] usb 4-1: config 14 interface 183 altsetting 252 has a duplicate endpoint with address 0x7, skipping [ 559.450636][ T5942] usb 3-1: config 128 interface 148 has no altsetting 0 [ 559.458096][ T797] usb 4-1: config 14 interface 183 altsetting 252 has 3 endpoint descriptors, different from the interface descriptor's value: 219 [ 559.504206][ T5942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 559.546493][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.575065][ T5942] usb 3-1: Product: syz [ 559.579523][ T797] usb 4-1: config 14 interface 154 has no altsetting 0 [ 559.645293][ T5942] usb 3-1: Manufacturer: syz [ 559.657263][ T797] usb 4-1: config 14 interface 197 has no altsetting 0 [ 559.689518][ T5942] usb 3-1: SerialNumber: syz [ 559.696015][ T797] usb 4-1: config 14 interface 183 has no altsetting 0 [ 559.712109][ T797] usb 4-1: Dual-Role OTG device on HNP port [ 559.922533][ T5942] usb 3-1: USB disconnect, device number 93 [ 559.930530][ T797] usb 4-1: New USB device found, idVendor=413c, idProduct=4008, bcdDevice=5f.43 [ 559.960671][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.978870][T12542] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 559.980289][ T797] usb 4-1: Product: ဇ [ 560.004259][ T797] usb 4-1: Manufacturer: Å“ [ 560.014418][ T797] usb 4-1: SerialNumber: К [ 560.251760][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.288920][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.355054][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.409577][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.418498][ T5942] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 560.440078][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.460715][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.512304][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.547650][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.579934][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 560.586183][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.615696][ T5942] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 560.632187][ T5942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.643528][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.713248][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.747937][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 560.794563][ T5942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.861277][ T5942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.914918][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.932858][ T797] usb 4-1: USB disconnect, device number 78 [ 561.081440][T12556] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 561.171643][T12525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.181346][ T5942] usb 3-1: usb_control_msg returned -32 [ 561.215467][T12525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.225646][ T5942] usbtmc 3-1:16.0: can't read capabilities [ 561.718444][ T5918] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 561.741551][T12561] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 561.763787][ T29] usb 3-1: USB disconnect, device number 94 [ 561.900532][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 561.906945][T12563] IPv6: sit1: Disabled Multicast RS [ 561.945344][T12563] sit1: entered allmulticast mode [ 561.969853][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.019772][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 562.078601][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 562.144954][ T5918] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 562.170548][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.208476][ T5918] usb 4-1: Product: syz [ 562.212727][ T5918] usb 4-1: Manufacturer: syz [ 562.217362][ T5918] usb 4-1: SerialNumber: syz [ 562.225980][T12565] netlink: 'syz.4.1706': attribute type 2 has an invalid length. [ 562.279804][T12566] netlink: 'syz.4.1706': attribute type 12 has an invalid length. [ 562.288916][ T5918] usb 4-1: config 0 descriptor?? [ 562.664720][ T5918] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 562.728054][ T5918] usb 4-1: USB disconnect, device number 79 [ 563.043735][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059594][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.067887][T12571] tipc: Enabled bearer , priority 0 [ 563.102949][T12578] netlink: 'syz.4.1709': attribute type 29 has an invalid length. [ 563.148506][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 563.170601][T12571] syzkaller0: entered promiscuous mode [ 563.176114][T12571] syzkaller0: entered allmulticast mode [ 563.302334][ T5942] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 563.384664][T12581] tipc: Resetting bearer [ 563.410940][T12570] tipc: Resetting bearer [ 563.460600][T12583] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1711'. [ 563.489572][T12583] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 563.495628][T12570] tipc: Disabling bearer [ 563.507032][ T5942] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 563.525005][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.552147][ T5942] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 563.562762][ T5942] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 563.571096][ T5942] usb 3-1: Manufacturer: syz [ 563.575016][T12585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.593292][ T5942] usb 3-1: config 0 descriptor?? [ 563.601027][T12585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.624406][T12585] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 563.713093][T12585] gre1: entered promiscuous mode [ 563.728572][T12585] gre1: entered allmulticast mode [ 563.748537][ T5942] rc_core: IR keymap rc-hauppauge not found [ 563.761397][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.782686][ T5942] Registered IR keymap rc-empty [ 563.800517][ T5942] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 563.822423][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.841353][ T5942] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 564.092891][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 216 [ 564.181826][T12597] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 564.306072][ T5942] usb 3-1: USB disconnect, device number 95 [ 564.621831][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.651998][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.989589][T12613] netlink: 'syz.0.1719': attribute type 2 has an invalid length. [ 565.005279][T12613] netlink: 'syz.0.1719': attribute type 12 has an invalid length. [ 565.118819][T12576] Bluetooth: hci5: command 0x0406 tx timeout [ 568.486117][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.550182][ T9] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 568.560973][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.714338][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.745705][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 568.783419][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 568.820460][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 568.830954][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.857655][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 568.867303][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.878837][ T9] usb 4-1: Product: syz [ 568.883108][ T9] usb 4-1: Manufacturer: syz [ 568.887881][ T9] usb 4-1: SerialNumber: syz [ 568.912500][ T9] usb 4-1: config 0 descriptor?? [ 568.936691][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 568.966508][ T9] imon 4-1:0.0: unable to initialize intf0, err -90 [ 568.980972][ T9] imon:imon_probe: failed to initialize context! [ 569.007805][ T9] imon 4-1:0.0: unable to register, err -19 [ 569.386019][T12668] netlink: 'syz.4.1734': attribute type 2 has an invalid length. [ 569.549937][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 570.044591][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 570.077072][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 570.086423][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.095938][ T9] usb 3-1: Product: syz [ 570.100502][ T9] usb 3-1: Manufacturer: syz [ 570.105290][ T9] usb 3-1: SerialNumber: syz [ 570.112420][ T9] usb 3-1: config 0 descriptor?? [ 570.345418][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 570.552449][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 570.578162][ T9] usb 3-1: USB disconnect, device number 96 [ 571.072433][T12674] FAULT_INJECTION: forcing a failure. [ 571.072433][T12674] name failslab, interval 1, probability 0, space 0, times 0 [ 571.110937][T12674] CPU: 0 UID: 0 PID: 12674 Comm: syz.6.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.110978][T12674] Tainted: [L]=SOFTLOCKUP [ 571.110984][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.110993][T12674] Call Trace: [ 571.111000][T12674] [ 571.111007][T12674] dump_stack_lvl+0xe8/0x150 [ 571.111033][T12674] should_fail_ex+0x412/0x560 [ 571.111061][T12674] should_failslab+0xa8/0x100 [ 571.111082][T12674] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 571.111108][T12674] ? __alloc_skb+0x186/0x7d0 [ 571.111126][T12674] ? __alloc_skb+0x1d0/0x7d0 [ 571.111144][T12674] ? __local_bh_enable_ip+0xd0/0x130 [ 571.111167][T12674] __alloc_skb+0x1d0/0x7d0 [ 571.111190][T12674] netlink_sendmsg+0x5d4/0xb40 [ 571.111216][T12674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.111237][T12674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 571.111256][T12674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.111273][T12674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.111291][T12674] ____sys_sendmsg+0xa68/0xad0 [ 571.111319][T12674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.111348][T12674] ? import_iovec+0x73/0xa0 [ 571.111372][T12674] ___sys_sendmsg+0x2a5/0x360 [ 571.111397][T12674] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.111444][T12674] ? __fget_files+0x2a/0x420 [ 571.111464][T12674] ? __fget_files+0x3a0/0x420 [ 571.111493][T12674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 571.111517][T12674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.111546][T12674] ? __pfx_ksys_write+0x10/0x10 [ 571.111569][T12674] do_syscall_64+0x14d/0xf80 [ 571.111593][T12674] ? trace_irq_disable+0x3b/0x150 [ 571.111615][T12674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.111630][T12674] ? clear_bhb_loop+0x40/0x90 [ 571.111648][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.111663][T12674] RIP: 0033:0x7ff5e079c629 [ 571.111678][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.111691][T12674] RSP: 002b:00007ff5e16d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.111707][T12674] RAX: ffffffffffffffda RBX: 00007ff5e0a15fa0 RCX: 00007ff5e079c629 [ 571.111718][T12674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 571.111728][T12674] RBP: 00007ff5e16d5090 R08: 0000000000000000 R09: 0000000000000000 [ 571.111737][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.111746][T12674] R13: 00007ff5e0a16038 R14: 00007ff5e0a15fa0 R15: 00007ff5e0b3fa48 [ 571.111769][T12674] [ 571.147036][ T24] usb 4-1: USB disconnect, device number 80 [ 571.988995][ T31] INFO: task syz.5.1259:10907 blocked for more than 143 seconds. [ 572.006464][ T31] Tainted: G L syzkaller #0 [ 572.025735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.058639][ T31] task:syz.5.1259 state:D stack:28160 pid:10907 tgid:10906 ppid:7314 task_flags:0x400040 flags:0x00080002 [ 572.097268][ T31] Call Trace: [ 572.110495][ T31] [ 572.125112][ T31] __schedule+0x1585/0x5340 [ 572.225371][ T797] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 572.289934][ T31] ? __pfx___schedule+0x10/0x10 [ 572.318609][T12683] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1736'. [ 572.396127][ T31] ? schedule+0x90/0x360 [ 572.415196][ T31] schedule+0x164/0x360 [ 572.420770][ T797] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 572.427826][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.431105][ T797] usb 3-1: config 128 has no interface number 0 [ 572.447069][ T31] __mutex_lock+0x7fe/0x1300 [ 572.448669][ T797] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 572.481793][ T797] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 572.484609][ T31] ? __mutex_lock+0x5ac/0x1300 [ 572.514258][ T797] usb 3-1: config 128 interface 148 has no altsetting 0 [ 572.544105][ T797] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 572.553474][ T31] ? usbdev_open+0x182/0x770 [ 572.554240][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.558136][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.558168][ T31] ? bus_find_device+0x27d/0x2d0 [ 572.558200][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 572.647014][ T797] usb 3-1: Product: syz [ 572.651785][ T797] usb 3-1: Manufacturer: syz [ 572.656683][ T797] usb 3-1: SerialNumber: syz [ 572.698373][ T31] ? usbdev_open+0xa7/0x770 [ 572.738395][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 572.755280][ T31] usbdev_open+0x182/0x770 [ 572.769170][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.790765][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 572.814437][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 572.828533][ T31] chrdev_open+0x4cd/0x5e0 [ 572.833145][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 572.838624][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 572.847265][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 572.880827][ T31] do_dentry_open+0x785/0x14e0 [ 572.885793][ T31] vfs_open+0x3b/0x340 [ 572.890471][ T31] ? path_openat+0x2df0/0x3860 [ 572.905825][ T31] path_openat+0x2e08/0x3860 [ 572.929276][ T797] usb 3-1: USB disconnect, device number 97 [ 572.936938][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 572.955670][ T31] ? stack_depot_save_flags+0x33/0x810 [ 572.977930][ T31] ? __pfx_path_openat+0x10/0x10 [ 572.998371][ T31] ? __x64_sys_openat+0x138/0x170 [ 573.028593][ T31] ? do_syscall_64+0x14d/0xf80 [ 573.045334][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.069736][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 573.090024][ T31] do_file_open+0x23e/0x4a0 [ 573.108526][ T31] ? __pfx_do_file_open+0x10/0x10 [ 573.138946][ T31] ? _raw_spin_unlock+0x28/0x50 [ 573.151902][ T31] ? alloc_fd+0x64b/0x6c0 [ 573.166801][ T31] do_sys_openat2+0x113/0x200 [ 573.186942][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 573.221355][ T31] ? exc_page_fault+0x6a/0xc0 [ 573.226238][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 573.234154][ T31] __x64_sys_openat+0x138/0x170 [ 573.242967][ T31] do_syscall_64+0x14d/0xf80 [ 573.247711][ T31] ? trace_irq_disable+0x3b/0x150 [ 573.253464][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.261240][ T31] ? clear_bhb_loop+0x40/0x90 [ 573.277357][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.408786][ T31] RIP: 0033:0x7f270f15cece [ 573.420158][ T31] RSP: 002b:00007f27100c3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.440327][ T31] RAX: ffffffffffffffda RBX: 00007f27100c46c0 RCX: 00007f270f15cece [ 573.458486][ T797] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 573.466966][ T31] RDX: 0000000000000002 RSI: 00007f27100c3c00 RDI: ffffffffffffff9c [ 573.476496][ T31] RBP: 00007f27100c3c00 R08: 0000000000000000 R09: 0000000000000000 [ 573.485552][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 573.535383][ T31] R13: 00007f270f416038 R14: 00007f270f415fa0 R15: 00007f270f53fa48 [ 573.555549][ T31] [ 573.571439][ T31] [ 573.571439][ T31] Showing all locks held in the system: [ 573.642977][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 573.664336][ T31] 1 lock held by khungtaskd/31: [ 573.710818][ T797] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 573.724543][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 573.740349][ T797] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.763510][ T31] 3 locks held by kworker/0:2/797: [ 573.770806][ T797] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 573.785799][ T31] 3 locks held by kworker/u8:8/1158: [ 573.795971][ T31] #0: ffff888031a9a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 573.807769][ T797] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 573.836933][ T797] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.867869][ T31] #1: ffffc9000524fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 573.926101][ T797] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 573.931458][ T31] #2: [ 573.936476][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.978461][ T31] ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 574.024423][ T31] 6 locks held by kworker/1:2/3096: [ 574.048575][ T31] 2 locks held by getty/5586: [ 574.071114][ T31] #0: ffff888031c290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.105397][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 574.129040][ T31] 1 lock held by syz-executor/5810: [ 574.141159][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 574.166469][ T31] 1 lock held by syz.5.1259/10907: [ 574.175479][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.186903][ T797] usb 3-1: usb_control_msg returned -32 [ 574.198890][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.216129][ T31] #0: ffff8880298d5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 574.225395][ T797] usbtmc 3-1:16.0: can't read capabilities [ 574.251287][ T31] 2 locks held by syz.0.1732/12664: [ 574.268551][ T31] 1 lock held by syz.4.1734/12668: [ 574.284472][ T31] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 574.301985][ T31] 1 lock held by syz.4.1734/12671: [ 574.309015][ T31] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x375/0x490 [ 574.318867][ T31] 1 lock held by syz.6.1738/12677: [ 574.326278][ T31] #0: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 574.336502][ T31] 1 lock held by syz.3.1736/12682: [ 574.342911][ T31] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 574.353434][ T31] [ 574.355798][ T31] ============================================= [ 574.355798][ T31] [ 574.365816][ T31] NMI backtrace for cpu 0 [ 574.365836][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 574.365864][ T31] Tainted: [L]=SOFTLOCKUP [ 574.365871][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.365884][ T31] Call Trace: [ 574.365892][ T31] [ 574.365901][ T31] dump_stack_lvl+0xe8/0x150 [ 574.365935][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 574.365962][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.365990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.366019][ T31] sys_info+0x135/0x170 [ 574.366041][ T31] watchdog+0xfd9/0x1030 [ 574.366078][ T31] ? watchdog+0x21a/0x1030 [ 574.366116][ T31] kthread+0x388/0x470 [ 574.366136][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.366164][ T31] ? __pfx_kthread+0x10/0x10 [ 574.366185][ T31] ret_from_fork+0x51e/0xb90 [ 574.366215][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.366241][ T31] ? __switch_to+0xc7d/0x1450 [ 574.366268][ T31] ? __pfx_kthread+0x10/0x10 [ 574.366288][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.366334][ T31] [ 574.366342][ T31] Sending NMI from CPU 0 to CPUs 1: [ 574.486112][ C1] NMI backtrace for cpu 1 [ 574.486132][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.486158][ C1] Tainted: [L]=SOFTLOCKUP [ 574.486164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.486175][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 574.486209][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 574.486224][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 574.486242][ C1] RAX: 000000000070554b RBX: ffffffff819a80ad RCX: 0000000080000001 [ 574.486256][ C1] RDX: 0000000000000001 RSI: ffffffff8def1e84 RDI: ffffffff8c27a880 [ 574.486268][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 574.486282][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90117db0 [ 574.486296][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 574.486309][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 574.486323][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.486336][ C1] CR2: 00002000002e9030 CR3: 000000007636c000 CR4: 00000000003526f0 [ 574.486353][ C1] Call Trace: [ 574.486360][ C1] [ 574.486366][ C1] default_idle+0x9/0x20 [ 574.486385][ C1] default_idle_call+0x72/0xb0 [ 574.486404][ C1] do_idle+0x1bd/0x500 [ 574.486432][ C1] ? __pfx_do_idle+0x10/0x10 [ 574.486458][ C1] ? do_idle+0x4d2/0x500 [ 574.486483][ C1] cpu_startup_entry+0x43/0x60 [ 574.486509][ C1] start_secondary+0x101/0x110 [ 574.486532][ C1] common_startup_64+0x13e/0x147 [ 574.486563][ C1] [ 574.784329][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 574.791274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 574.802085][ T31] Tainted: [L]=SOFTLOCKUP [ 574.806454][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.816552][ T31] Call Trace: [ 574.819873][ T31] [ 574.822842][ T31] vpanic+0x56c/0xa60 [ 574.826882][ T31] ? __pfx___schedule+0x10/0x10 [ 574.831781][ T31] ? __pfx_vpanic+0x10/0x10 [ 574.836321][ T31] ? __pfx_console_unlock+0x10/0x10 [ 574.841557][ T31] panic+0xc5/0xd0 [ 574.845320][ T31] ? __pfx_panic+0x10/0x10 [ 574.849764][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 574.855161][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 574.861421][ T31] watchdog+0x1023/0x1030 [ 574.865788][ T31] ? watchdog+0x21a/0x1030 [ 574.870239][ T31] kthread+0x388/0x470 [ 574.874374][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.879081][ T31] ? __pfx_kthread+0x10/0x10 [ 574.883702][ T31] ret_from_fork+0x51e/0xb90 [ 574.888430][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.893569][ T31] ? __switch_to+0xc7d/0x1450 [ 574.898271][ T31] ? __pfx_kthread+0x10/0x10 [ 574.902885][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.907770][ T31] [ 574.911491][ T31] Kernel Offset: disabled [ 574.915829][ T31] Rebooting in 86400 seconds..