last executing test programs: 25m58.209807355s ago: executing program 3 (id=1620): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000004c0)={0x0, 0x2, 0x10000, 0x0, 0x806, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) r1 = socket(0x18, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0xf2) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000600)={0xfffffe34, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xffffffaf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000100)=0x9, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x41, 0x0, 0x0) eventfd(0xffffffff) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES8], 0x2b) sendfile(r7, r4, 0x0, 0x4000000053d2) 25m55.009831994s ago: executing program 3 (id=1625): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r0, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) accept4(r0, &(0x7f0000000480)=@nfc_llcp, &(0x7f0000000500)=0x80, 0x81200) 25m53.977686512s ago: executing program 3 (id=1628): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f020}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000306010100000000000000000a000005050001002a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f0000000240)='./file0\x00', 0x20e02, 0x0) 25m49.851167545s ago: executing program 3 (id=1636): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={r6, 0x3, 0x30}, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa882) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) ioctl$LOOP_SET_FD(r10, 0x4c00, r10) dup2(r9, r7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d906050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000221000000000400000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) setsockopt$packet_int(r12, 0x107, 0x14, 0x0, 0x0) 25m48.388062366s ago: executing program 3 (id=1641): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x5, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="580000000206030000000000090000000000000013000300686173683a6e65f115cc46e8b46e4a747b2e81befa08a6742c696661636500000900020073797a31000000000c000780080012400ffffffc05000500ee0248d09ee3508ab882fbfc3c6a08965188da1340efa7efc51ee7ab06a303fb8c15ff"], 0x58}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000040)={0x40000002, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4", 0x0, 0x0, 0x0, 0x0, 0x42}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) write$sysctl(r6, 0x0, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000038100320086dd60000000007e3affe20400000000000000000000000000aadfa3aaf1f11c0155909e01ff020000000000000000000000000001890090780000000006010000000000000000005403000008000000000000000000000000000000010201eb6ce0319eb933c9fda61809bcc3e6546231b840c7a0411ef2120a44c4633e6467da7cb7ab2e99759fac59016031bc3472f3cfaeea2f8ceb911d3f15eaec87ddf52d016dd38caef9eaf7ab4faa1b169ce766ec6f14a94af9d32e1bbca16177e497da"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r7 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000c80)={0x2, @sliced={0x8, [0x4, 0x7fff, 0x8, 0xf800, 0x2, 0x7b6, 0x2, 0x7, 0x1, 0xfff5, 0x401, 0xa9ef, 0x6, 0x2, 0x4, 0x6, 0x2, 0x38, 0x1, 0xffff, 0x8, 0x7, 0x3, 0xfffd, 0x5, 0xacb, 0x3, 0x7, 0x5f, 0x40, 0x7, 0xfc00, 0x2, 0x2, 0x0, 0xfffc, 0x0, 0x972, 0x1ff, 0x8, 0xc00, 0xddb, 0x4, 0x4, 0xd437, 0x9, 0x8], 0x2}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) pipe(&(0x7f00000001c0)) 25m47.909045432s ago: executing program 3 (id=1644): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x145a7ae8, 0x29cf, 0x0, 0x2000, r4, 0x41, '\x00', 0x0, r5, 0x2, 0x2, 0x3, 0xa}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000880)=r4}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000d40), 0x0}, 0x20) ioprio_get$pid(0x3, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2000000000003) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x9) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000580)='t', 0x1}], 0x1) 25m47.539138101s ago: executing program 32 (id=1644): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x145a7ae8, 0x29cf, 0x0, 0x2000, r4, 0x41, '\x00', 0x0, r5, 0x2, 0x2, 0x3, 0xa}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000880)=r4}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000d40), 0x0}, 0x20) ioprio_get$pid(0x3, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2000000000003) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000040)=0x9) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000580)='t', 0x1}], 0x1) 1m36.558541686s ago: executing program 4 (id=6022): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f0000000540)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0000}, 0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, {[0x1be63bf3]}}, 0x0, 0x8, &(0x7f0000000100)) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0xa, &(0x7f0000000240)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000001c0)={r4, 0x20}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0xe, 0x5, 0x32c}, {0x3, 0xfa, 0x29, 0x6}, {0xfffb, 0x5, 0xe, 0x5a27}]}, 0x8) 1m33.297959726s ago: executing program 4 (id=6030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x7}, @IFLA_IPOIB_PKEY={0x6}]}}}]}, 0x5c}}, 0x0) 1m32.717937567s ago: executing program 4 (id=6031): r0 = socket(0x2, 0x80805, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x109c82, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @initdev}, &(0x7f0000000280)=0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000540)=@nfc={0x27, r2, 0x0, 0x4}, 0xfffffffffffffd7a, &(0x7f0000001d40)=[{&(0x7f0000001d80)="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", 0x11d}, {&(0x7f0000001f00)="8270ef63004c003d9462afaf486fcaca8a709bcd25a8dd4b11af5f74a52b6b6e7a0509481d503d8ba2bcb4256f0e8f55bb92cae6e1bc9028cfff84e5ac34ecba06c5d32a6f1d3e6968e7d47310fe8349f4c1c401fd3bb4d7e18d8eb933d3582179c1a99ed43cc41989968b5e9f8f37c20afe431d51a88cc55c75b838f50104dc9da8b5357543544ea6bebcb9ee034468b70332865a05330c0098660a6a5444ec031583d80e1adff3c43057a6c3f80999e2392553f57ecf95", 0xb8}, {&(0x7f0000000b40)="98d943d3cbdb672614adf16838d30a79d09890fa7c6d2d2b010b7e8e90d8e297cef3b796194608df91136ebba7759ea75808508811aa49f1ab77b07f20d6163a9cbab970f79ce36dc977bfeff7ef7c0a662fa2897ff1f7bc8e865f643e77839a5649118a4bd43d86a67211c19830a86f30207f0b0cddb685f42418c192f5275d19132ce4d50ebe7a00c98f9f50ee7796915988d3df15282c991d35e3d1ad942bb2bb25d3006e8484cafd63d4f8e88975445ce66b99f5a0c4370bfa40857156d55dd8d2c14581a6ab7b690c5008b4d5fc32791c0e5c2febf503a448b9fce3918b649f618159df22", 0xe7}, {&(0x7f00000004c0)="c7053ee255a4deb459da93fd3ddc839b38f676b165d9", 0x16}, {&(0x7f0000001ec0)="efffc2615226e039f765814e27ae963a7537e946e113cfacf02b66d111e27a4da104cd43144b", 0x26}, {&(0x7f0000001c80)="a2a2ef8e4985b6690ae7479942bd96fe3699bf58ca3cc865856c67277cd74c8d8d37f93520079451715b98c729ab8088db13752f23deb05a0a042cfb6922db33cb59caa7b38743ffefe98ab705a14599f82dd73409c9f556e14bbfa7206c557cebf46fffb71162e6f5c42ca2b72211412a880cf8b824cd7819f87e3d59f7b9aecc405550058c2de51e7378345d4374", 0x8f}], 0x6, &(0x7f0000006200)=ANY=[@ANYRESHEX=r1], 0x120c}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000c40)={0x0, "0698911a59e77db354d23cd822257673"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000680)={r4, 0x0, 0x0, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/socket\x00') ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2008801, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES64=r3, @ANYBLOB="2c00006f746d6f64653d303030303030303030303030e83030303034050000002c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESHEX=r5]) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x80) fchdir(r11) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$kcm(r11, &(0x7f0000001c40)={&(0x7f0000000a80)=@qipcrtr, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001fc0)=""/222, 0xde}, {&(0x7f0000002140)=""/75, 0x4b}, {&(0x7f00000021c0)=""/149, 0x95}, {&(0x7f0000002280)=""/247, 0xf7}, {&(0x7f0000002380)=""/143, 0x8f}], 0x5, &(0x7f0000002440)=""/93, 0x5d}, 0x12001) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r7, &(0x7f00000005c0)=""/161, 0xff6d) lseek(r12, 0xffffffffffffffff, 0x1) syz_fuse_handle_req(r12, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x3, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x4, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', r9, &(0x7f0000000280)='./file0/../file0/file0\x00') 1m32.352400918s ago: executing program 4 (id=6032): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r6, 0x36, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) chdir(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 1m31.741010984s ago: executing program 0 (id=6035): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6(0xa, 0x4, 0xd58) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x28, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x4, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x400f1ff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x3, 0x1ff, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0xffffffff, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x200001, 0x0, 0x9, 0x101, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x5b9, 0x0, 0x0, 0x401, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4, 0x0, 0x800000, 0x0, 0x6, 0x0, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0xd79, 0xfffffffd, 0x0, 0x200, 0x401, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40100, 0x401, 0x4, 0xfffffffd, 0x80000003, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x1, 0x0, 0x1, 0x6}, {0xff, 0x0, 0x0, 0x10}}}]}}]}, 0x45c}}, 0x24044410) 1m31.465982287s ago: executing program 0 (id=6036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x10, 0x1, [0x81]}, 0x0) close(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m31.152673722s ago: executing program 0 (id=6039): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0) 1m31.081238508s ago: executing program 4 (id=6040): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1cd8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x2, 0x6, [{0x1, 0xffff, 0x7706, 0x8}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000, 0xe}, {0xf, 0x3a3, 0x8, 0x401}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0xd, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x715e}, {0x6, 0xc25a0, 0x8, 0x1000}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfc}, @filter_kind_options=@f_u32={{0x8}, {0x1ba0, 0x2, [@TCA_U32_POLICE={0xd10, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x40000000, 0x5, 0x5, 0x9b, 0xc, 0xc, 0x0, 0x7, 0x5, 0x6, 0x80000000, 0xf, 0x7, 0x0, 0x6, 0x8, 0x7, 0x6, 0x5, 0x2, 0x5, 0x6, 0x7, 0x2, 0xe, 0x9, 0x0, 0x0, 0x43, 0x8001, 0x8001, 0x7, 0x1, 0x7, 0x0, 0x1, 0x5, 0x8a9a0000, 0x8, 0x9, 0x1ff, 0xe3f, 0x5, 0xffff7fff, 0x2, 0xffffff7f, 0xe, 0x80000000, 0x6, 0x39e, 0x3, 0x7fffffff, 0x400, 0x10001, 0xed1, 0x2, 0x5, 0xcab, 0xb1, 0x2c, 0x9, 0x7fff, 0x9, 0x0, 0x702b, 0x4, 0x789c, 0x3, 0x1, 0xffffffff, 0x80000000, 0xf65, 0x7, 0x7, 0xfc30, 0x119, 0x7e, 0xfca2, 0x8, 0xbef, 0x2b, 0x8, 0x9, 0xdd7, 0x7fffffff, 0x2, 0x1, 0x2, 0x6, 0x1, 0x7fffffff, 0x4, 0x2, 0x4, 0x0, 0x5186, 0x10, 0x9, 0x80000001, 0x7ff, 0x8, 0x3, 0x1, 0x0, 0x8, 0x8, 0x5142f057, 0x1, 0xfffffffa, 0x0, 0xffffffff, 0x81, 0x6, 0x1, 0x8, 0x9, 0xa29, 0x2659, 0x5, 0x9, 0x20000002, 0x1, 0x36, 0x1, 0x6, 0x508, 0x7, 0x5, 0x0, 0x8001, 0x7, 0x0, 0x1d, 0x5, 0x0, 0x6, 0x44f7, 0x2, 0xd75, 0x7, 0x1, 0x80000000, 0x1, 0x5, 0x7, 0x8, 0xa, 0x232c0, 0x4, 0x1, 0x3ff, 0xffffff86, 0x5, 0x9, 0x7f, 0x5216, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x40000, 0xd60, 0x4, 0x7, 0x7, 0x6, 0x1, 0x2, 0x6, 0x6, 0x800, 0x8, 0x0, 0x6, 0x13ab1cbe, 0x1, 0x7fff, 0x3, 0x3, 0x0, 0x7, 0x4, 0x7, 0x101, 0x5, 0x9, 0x1, 0x4, 0x0, 0x3, 0x2, 0x2, 0x9, 0x4, 0xffff, 0x5, 0x80000001, 0x5, 0xaf, 0x9, 0x1, 0x40, 0x4, 0x80, 0x7, 0x8, 0x6a, 0x800, 0x4, 0x5, 0x7, 0x8000, 0xb, 0x5, 0x2, 0x1, 0x5, 0x1, 0x58a6, 0x2, 0x0, 0xc05a, 0xfffffffe, 0x5, 0xdf6, 0x7, 0x6, 0x9, 0x3, 0xf, 0x2, 0x6, 0x4, 0x750, 0x4, 0x29, 0x4, 0xe, 0x200, 0x6, 0xa, 0x3ff, 0x100, 0xa567, 0x3, 0x3, 0x3, 0x6, 0x7fffffff, 0x1, 0x6, 0xdc2, 0x7ff, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x81, 0x5, 0x3, 0x3, 0x5, 0x8, 0x7, 0x1, 0x9e24, 0x7ff, 0x1, 0x5, 0xc83, 0x4, 0xef2e, 0x151, 0xffff, 0x2, 0x81, 0x4, 0xb04, 0x8, 0xffffffff, 0xff, 0xd595, 0x7, 0x80, 0x7, 0xfffffff8, 0x6, 0x40, 0xffffffff, 0x3, 0x5e14, 0x800, 0x9, 0x6, 0x8, 0x7, 0x4a, 0x44, 0x0, 0x206, 0x496, 0x6, 0xfffffffc, 0x0, 0x4, 0x45, 0x0, 0x448, 0x3, 0xfffffffb, 0x4, 0x9, 0x2, 0x40, 0x4, 0x80000001, 0x0, 0x6e, 0x1ab0, 0x1b, 0x8, 0x6, 0x1, 0x2, 0x3d7, 0x6, 0x5, 0xfffffffa, 0x4, 0xb1, 0x7, 0x4, 0x5, 0x2e, 0x3, 0x5, 0x8, 0x400, 0x9, 0x9, 0xd, 0x4, 0x1, 0x100, 0x27, 0x9, 0x7f, 0x7fff, 0x1, 0x10000, 0x38b, 0x0, 0x6, 0x3, 0x7, 0x0, 0x7ff, 0x6f, 0x1000, 0x9, 0x1000, 0x1, 0x6, 0xd4f, 0xda, 0x1000, 0xffff7fff, 0x7fffffff, 0x0, 0x80000001, 0x5, 0x0, 0x4, 0x40, 0x80000001, 0x0, 0x8001, 0x9, 0x87b, 0xac8a, 0xfff, 0x6, 0x2, 0x1, 0x9, 0x1, 0x1, 0x5, 0x200, 0xf, 0x3, 0x4, 0x9, 0x8, 0x3, 0x3, 0x2, 0x7, 0x8000, 0x1e, 0x0, 0x3, 0x8, 0xa, 0x0, 0xffff1fe1, 0x8, 0x6, 0x0, 0x3, 0x7aa, 0x3ff, 0x78a8, 0x5, 0x1ff, 0x1400000, 0x81, 0x101, 0x7, 0x6, 0x4, 0x5e, 0x1, 0x1ff, 0x655, 0x2, 0x5, 0x3, 0x9, 0x101, 0x9, 0x9, 0x2, 0x8000, 0x7, 0x8, 0x641, 0x4, 0x5, 0x9, 0x8, 0x5, 0x1, 0x7, 0x1, 0x1, 0x0, 0xfffffff7, 0x80000001, 0x6, 0x3, 0xac41, 0x2, 0x1, 0xb7, 0x3, 0x4000000, 0x41, 0x101, 0x3, 0x5, 0x9, 0x1000, 0x5, 0x8001, 0x5, 0xfff, 0x0, 0x5, 0x55, 0x8, 0xe7, 0x39, 0x3, 0x4, 0xb7d, 0x259b, 0xfff, 0x1, 0x2, 0x4, 0x0, 0x9, 0x7ff, 0x9, 0x4, 0x33, 0x3, 0x2, 0x0, 0x2, 0x7, 0x5, 0x6, 0x8, 0x1000, 0x9, 0x87, 0xffffff01, 0x67a, 0x8, 0xffff, 0x5, 0x9, 0x7, 0xd, 0xe, 0xfffffffb, 0x9, 0x93d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x5, 0x5, 0x0, {0x81, 0x2, 0x71, 0x9, 0x1, 0x7}, {0x1, 0x1, 0x5, 0x1ff, 0x3, 0x6}, 0x4, 0x5, 0x4}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x9, 0x4000, 0x4, {0x2, 0x1, 0x0, 0x8, 0x5, 0xa}, {0xfd, 0x2, 0x4, 0x9c, 0x9, 0x7}, 0x1, 0x80000000, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x10001, 0xa0, 0x4561, {0x6, 0x0, 0x8, 0x7, 0xfe00, 0x6}, {0x4, 0x0, 0x7, 0x7, 0x3, 0x1ff}, 0x9, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x9, 0x6, 0x5, 0xb, 0x7, 0x1, 0x7, 0x5, 0x80, 0x80000000, 0x5, 0x800, 0xff, 0x0, 0x40, 0x7, 0x9, 0x2, 0x3, 0x101, 0x5, 0x9, 0x401, 0x6, 0xf2, 0x2, 0x7, 0x7, 0x3, 0x10, 0x5, 0xffff8000, 0x3c6, 0x8, 0x2e, 0x5, 0x5, 0x8, 0x0, 0x5, 0x0, 0xd, 0x6, 0x1, 0xffff9dcb, 0x0, 0x2, 0x39b, 0x8, 0xc, 0x2, 0x7, 0x0, 0x1da, 0x2, 0x48, 0x1c29, 0xb, 0x698, 0x5, 0x1, 0x1d0d, 0x300, 0xf, 0x6, 0x10, 0x8, 0x80000000, 0x2, 0xad4, 0xf8, 0x7ff, 0x1ff, 0x7, 0x6, 0x8, 0x9, 0x10000, 0x7e1, 0x5f, 0x40e8bc4e, 0x75, 0x9, 0x4, 0x8, 0x3, 0x8, 0x2, 0x1ff, 0x14118449, 0xf348, 0x7fffffff, 0x1, 0xfffffff7, 0x4, 0x0, 0x8c9, 0x81, 0xd, 0x4, 0x7, 0x40, 0x1, 0x48, 0x7, 0x14a3, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x6d, 0x3, 0xa, 0x100, 0x1, 0x6, 0x1, 0x5, 0x101, 0x2, 0x8, 0x9, 0x6, 0xa824, 0x7fff, 0x5, 0xe, 0x3, 0xfffffff8, 0x100, 0xc0000000, 0x8, 0x2, 0xfffffff0, 0x1, 0x0, 0x3ff, 0x9, 0x3, 0x1f32, 0xd, 0x3c5, 0xe6, 0x2, 0xfffffff9, 0x9, 0x9da, 0x7fffffff, 0x1, 0xff, 0x1, 0x80000000, 0x0, 0x4, 0x8, 0x0, 0x6, 0x7fff, 0x6, 0x9, 0xfff, 0x9, 0x9, 0x80, 0x54, 0x7c, 0x8, 0x1, 0x1, 0xe, 0x1, 0x5, 0x254, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x8, 0x6, 0x0, 0x10001, 0x6, 0xd, 0x6, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3, 0x1, 0x9, 0x40, 0x9, 0x1, 0x9a6, 0x81, 0x3, 0x100, 0xc07, 0x7, 0x0, 0xe, 0x7ff, 0xc1, 0x1, 0x4, 0x5, 0x7fff, 0x1, 0x5, 0x8, 0x3ff, 0x80000001, 0x7, 0xffffffff, 0x3ff, 0x6, 0xc, 0x65d, 0xd, 0x3, 0xc04, 0x10001, 0x2, 0xda6, 0xbed6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x264, 0x98, 0x101, 0x3, 0x9, 0xf, 0xcc, 0x8, 0xeab0, 0x9, 0xd, 0x69b3, 0x4, 0x8, 0x8, 0x80000001, 0x7, 0x2e244449, 0x81, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x7fff, 0x5, 0x1, {0x2, 0x2, 0x6, 0x6, 0x2, 0x1}, {0x7, 0x2, 0x7, 0xe, 0x5, 0x9}, 0xffff, 0xfffffff2, 0x7f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_SEL={0x624, 0x5, {0x1, 0x0, 0x8, 0x4, 0x1d, 0xc0, 0x2, 0x10040, [{0x4, 0x1a, 0x7fff, 0x9}, {0x5, 0x7, 0x3, 0x10000}, {0x634a, 0x1, 0x400, 0x3}, {0x5, 0xff, 0x7, 0x5}, {0xfffffff7, 0x2, 0xfffffff8, 0x84}, {0x38, 0x6, 0x7, 0x6dfc074c}, {0x40, 0x8, 0x101, 0x40}, {0x7ff, 0xff, 0x1, 0xba6}, {0x1, 0xff, 0x0, 0x5}, {0x5, 0x1, 0x34f8, 0xd}, {0x8000, 0x5, 0x2, 0x81b3}, {0x101, 0x8000, 0x6, 0x10000}, {0x0, 0x8, 0x0, 0x7}, {0x727, 0xfffffffd, 0x4, 0x8}, {0x3, 0x4, 0x2df, 0xabc}, {0x3, 0x100, 0x3b50222b, 0x80000001}, {0xd, 0x1800, 0x5, 0x3}, {0x7, 0x80000000, 0x5, 0x6}, {0x8, 0x5, 0x5}, {0x3, 0xfffffd5f, 0x1ff, 0x100}, {0x2, 0x400, 0x1, 0x1e}, {0x6, 0x5, 0x9, 0x96aa}, {0x7fffffff, 0x2, 0x7ff, 0xd}, {0x4, 0xf57, 0x458, 0x8}, {0x2b4, 0xfffffffd, 0xf92, 0x1}, {0x8, 0x0, 0x9, 0x4}, {0x10, 0x7, 0x5, 0x4}, {0x9, 0xffffffff, 0xa0b}, {0x6, 0x59ad, 0x8, 0x6}, {0x2f0, 0x2, 0x7ff, 0x1}, {0x1, 0x0, 0x4}, {0xff, 0x3, 0x1, 0xc}, {0x7, 0x0, 0xff, 0xfffffff7}, {0x4, 0x8, 0x5, 0x40}, {0x5, 0x1, 0xa4, 0xffffffff}, {0x419, 0x0, 0x0, 0x46a0}, {0x9, 0x6, 0x0, 0x9ddf}, {0x5, 0x1, 0x3, 0x1ff}, {0x1b, 0x9724, 0x1ff, 0x7f}, {0x8000, 0xf75, 0x6, 0x10001}, {0x9d, 0x0, 0xfffffffb, 0x946}, {0x0, 0x7, 0x8, 0x10}, {0x9, 0x4, 0xfffffffb, 0x9}, {0x8, 0x7, 0x10, 0x6}, {0x2, 0x10001, 0x8, 0x5}, {0x556f, 0x31a0, 0x79, 0xffff0f3c}, {0xb5c1, 0x4e79, 0x56f, 0xbdc}, {0x9, 0xfff, 0x9, 0x9}, {0x4, 0x6, 0xa5, 0xe}, {0x3, 0x9, 0x7, 0x9}, {0xd8, 0x437, 0x4, 0x8001}, {0x0, 0x5a0, 0x2, 0x5}, {0x7, 0x7, 0x7ff, 0x3e91}, {0xac2f, 0x1, 0x4, 0x8}, {0x3, 0xff, 0x8000, 0x731b}, {0x1ff, 0xa, 0x8, 0x2}, {0x8, 0x80, 0x7, 0x1}, {0x9, 0x303, 0x7, 0x5}, {0x0, 0xa, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x7fffffff}, {0x3, 0x7, 0xfffffff9, 0x5}, {0x0, 0x5, 0x2, 0x8}, {0x6, 0xf, 0x6, 0x2}, {0x3, 0xffff0000, 0xf22, 0x2}, {0x4, 0x3, 0x4, 0x1ff}, {0x3, 0x4, 0x8, 0x5}, {0x6, 0x3, 0xea4}, {0xffffff7e, 0x80000001, 0x7, 0x80000001}, {0x2, 0x3188, 0x7000, 0x4}, {0x8, 0x5, 0x4, 0x8001}, {0x7, 0x800, 0xffff03ed, 0x400}, {0x3, 0x200, 0x4, 0x6}, {0x7, 0x4, 0xbc32, 0x4}, {0x8, 0xc45, 0x7639, 0x9}, {0x2, 0x8, 0x2400000, 0x3}, {0xe, 0x5a, 0x34fc, 0x7f}, {0x94c0, 0x0, 0x8, 0x6}, {0x9, 0x6, 0x7, 0x1}, {0x2, 0x7, 0xd73}, {0xffff, 0xc9, 0x1b, 0xe5}, {0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0x8871}, {0xc, 0x0, 0x63b8, 0x3}, {0x80, 0x6904c235, 0x401, 0xd7f}, {0x35792f16, 0x30, 0x1, 0x6}, {0x8, 0x1, 0xd0}, {0x20000000, 0x8, 0x6c, 0x1}, {0x101, 0x2086c4a2, 0xa, 0x1}, {0x8, 0x7, 0xffa, 0x400}, {0x40b77, 0x1, 0x5d2, 0x2}, {0x2, 0x2, 0x8, 0x5}, {0x918, 0x9, 0xfffffff8, 0x5}, {0xa16, 0x18c, 0x1, 0xd9fc}, {0x24, 0x9, 0xaf3, 0x4}, {0x1, 0x401, 0x2, 0x8}, {0xa460, 0x7, 0x9, 0x3ff}, {0x5419e79a, 0x2, 0x0, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x62, 0x5, 0x5, 0x7, 0x73b, 0xff, 0x4e43b74b, 0x1a, 0x800, 0x0, 0x100, 0x401, 0x5, 0x8000, 0x7ff, 0x7, 0x0, 0x8000, 0x80000000, 0x400, 0x80000000, 0x7fffffff, 0x7c, 0xb, 0x8, 0x6, 0x7f, 0x4, 0x10000, 0x0, 0xc875, 0x6, 0x7fffffff, 0xaff, 0x6, 0x14, 0x8, 0xe7b, 0x0, 0x0, 0x1, 0x67c, 0x9, 0x50d406ac, 0x22a, 0x8, 0x80000000, 0x3, 0x47d0, 0x5, 0x3, 0x40, 0x100, 0x4, 0x2c, 0x21, 0x1, 0x0, 0x3, 0x0, 0xdd9, 0x80, 0x95f5, 0xe304, 0x8, 0x2, 0xed, 0x7, 0x2, 0x2, 0x7868, 0x3, 0x200, 0x8, 0x4, 0x80, 0x5, 0x20000, 0xfffffffd, 0x80000001, 0x4, 0x9, 0x5, 0x4, 0xfffffffd, 0x88da, 0x6, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0x4, 0x4, 0x3, 0x8, 0x7fff, 0x4, 0x8, 0xe61f, 0x5d0b, 0xf6a, 0x4, 0x100010, 0x0, 0x81, 0x6, 0x1d6e, 0x8, 0x4, 0xa, 0x7, 0x4, 0xffffffff, 0x8, 0x1, 0x4, 0xfffffff0, 0x2869e7b5, 0x1, 0x5, 0x80, 0x3, 0x5, 0x1, 0x4, 0x4, 0xfffffff9, 0x2, 0x3ff, 0x7, 0x8000, 0x4, 0x6012, 0x8, 0x6, 0xc6f6, 0x3, 0xfffffffc, 0x3, 0x81, 0xfffffffb, 0x1, 0x21, 0x4, 0x9, 0x6, 0x9, 0x5, 0xb0fb, 0x5, 0xfff, 0xf1b9, 0x0, 0x4, 0x401, 0x1, 0x8, 0x9, 0x2, 0x0, 0x8, 0x7, 0x100, 0x4, 0x7ff, 0xfff, 0x80000001, 0x9, 0x2, 0x1, 0x81, 0x1, 0x8, 0x8, 0x6, 0x7, 0xbd79, 0x7ff, 0xffffffff, 0xb, 0xffff, 0xae1c, 0x3, 0x1, 0x0, 0x200, 0x5, 0x48, 0x6, 0x4, 0x0, 0x5, 0x5e, 0x0, 0x7fffffff, 0x7, 0x8, 0x100, 0x0, 0xd1be, 0x8, 0x3f4, 0xffffffff, 0x10000, 0x0, 0x0, 0x10000, 0x2, 0x136, 0x2, 0x6, 0x4, 0x3, 0x8, 0x7fff800, 0x3b, 0x4, 0x80000000, 0x7, 0x6, 0x6, 0x4, 0x6, 0x5, 0x6, 0x9, 0xc6e, 0x0, 0x800, 0x400, 0x302e, 0x0, 0x100, 0x1, 0x10000, 0x2, 0x4, 0x0, 0xbd, 0x0, 0x80000000, 0x2, 0x800, 0x8, 0xfffffffb, 0x3, 0x472, 0x4, 0x200, 0x8, 0x11, 0x7, 0x82ca]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xad0}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0xf024, 0x1, 0x2, 0xfffffffd, 0x23, 0x8, 0x35, 0x10001, 0x2, 0x2, 0x3, 0x200, 0xf2340606, 0x0, 0xc44, 0x2, 0xc, 0x5, 0x7, 0x3, 0x7, 0x10, 0x6, 0x0, 0x7fffffff, 0x5, 0xace, 0x54, 0x7, 0x3, 0x8, 0xfff, 0xd076, 0x7, 0xffff6b30, 0xc1, 0x7, 0xffffffd2, 0x7fffffff, 0x1, 0xfffffff8, 0xfffffffd, 0x1000, 0x5, 0x0, 0x10, 0x80, 0x10001, 0x301, 0xd5a4, 0x43, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x1cf, 0xb, 0x0, 0x2, 0x5, 0xa303, 0x1, 0x8, 0x0, 0x2, 0xf07, 0x7, 0x5, 0x48, 0x101, 0xf75, 0x8, 0xe, 0x6, 0x4, 0x66, 0x80000000, 0x6, 0x4, 0x0, 0x800, 0x7f, 0x2, 0x9, 0x0, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2800, 0xae00000, 0x1, 0x2, 0x66fc, 0xc, 0x1, 0x0, 0x4, 0x81, 0x7fff, 0x401, 0x2, 0x5, 0x8001, 0x1b3, 0x1, 0x7, 0x2, 0x3ff, 0x7, 0xa, 0x7, 0x8, 0x5, 0x56, 0x7, 0x101, 0x80000000, 0xffffff81, 0x101, 0x100, 0x4, 0x9, 0x5, 0x401, 0x10000, 0x3, 0x68d8, 0xfb, 0x4, 0x80000000, 0xc6bf, 0x1, 0x9, 0x80000000, 0xff, 0x8, 0x101, 0x3, 0x5, 0x1, 0x8, 0x7fffffff, 0x4, 0x8, 0x80000000, 0x6, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x8, 0x4, 0xfffffc00, 0x9, 0xc, 0x8000000, 0x200, 0x1, 0xc, 0x0, 0x3ff, 0x5, 0x8, 0x0, 0x9, 0x2, 0x8000, 0x60, 0x0, 0x8, 0x3, 0x401, 0x7, 0x0, 0x7, 0x1, 0xfffffffa, 0x7, 0xa4, 0x6, 0x7fff, 0x10001, 0xff5, 0x3, 0x10001, 0x5, 0x3, 0x1, 0x1, 0x6, 0x7, 0x101, 0x9d, 0xffffffff, 0x3, 0x0, 0x3e, 0x3, 0x8, 0x4, 0x1000, 0x5d, 0x89, 0x10001, 0x40, 0x9, 0x2, 0x1, 0x7, 0xa39, 0xe, 0x3, 0x9, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x200, 0xe6aa, 0x5, 0x100, 0x7fff, 0x3, 0x5, 0xf, 0x0, 0xfff, 0x1, 0xfffffff8, 0xfffffffe, 0x8, 0x9, 0x4, 0x2, 0xfff, 0x5, 0x1000, 0x9, 0x9, 0x1, 0x5, 0x200, 0x7, 0x156, 0xf0, 0x5, 0x2]}]}, @TCA_U32_MARK={0x10, 0xa, {0x7fff, 0xa35}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x48}]}}]}, 0x1cd8}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0xfffffffe, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast}}}}}}, 0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup(r12) 1m30.659491993s ago: executing program 0 (id=6041): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m30.245760659s ago: executing program 0 (id=6042): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff09, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg(r5, &(0x7f0000003d00), 0x1, 0x4000802) recvfrom(r5, &(0x7f0000000000)=""/59, 0x3b, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000780)) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff03000000090534"], 0x0) syz_usb_control_io(r6, &(0x7f0000000180)={0x18, &(0x7f0000000000)={0x0, 0x11, 0x37, {0x37, 0x8, "f3ba371179cfe6809fb8189356119d8ce7e2092b35a57c25f8dc46a4e5c6c91be7edb69f4be0f1ca0927e5d418dfca75f247451e35"}}, &(0x7f00000007c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "362450a6e708ed31814327a5b9afde516828a8cedc411027e17539245be0b422fab5daaa3df5101a0664a86c223e7a9f3ae507b846a1181ba889e66db25056b48cd6880ef5072e7164c46b25365e297bd17e2d5310e33554fc6ee7e37086f14f53be77ca9a4c8243869669f62a59ca351f79b0e57312858d8b232fda1dad20cc084efa0d40db40e138bda348f6a12a0d757195e5ffd905242699b8df67fcd6599cb3e4988a"}}, &(0x7f0000000040)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x8, 0xad}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x4, 0x0, 0x1dea, [0xf, 0xff000f, 0x0, 0xf0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0xa3, 0x7}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x80, 0x53, 0xd4, "d76a50b6", "348e03a9"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x4, 0xdf, 0x5, 0x10, 0x6}}}, &(0x7f0000000700)={0x44, &(0x7f0000000880)={0x40, 0xe, 0xfc, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)=ANY=[@ANYBLOB="2000e2ffffff1f010400"], &(0x7f0000000440)={0x40, 0x7, 0x2, 0x17c}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xef}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '{i'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f0000000080)={0x40, 0x19, 0x2, "0997"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xe8}}) 1m29.569441026s ago: executing program 4 (id=6044): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000040)}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000001480)={0xfffffffe, 0x7, 0x2, {0x9, @win={{0x4, 0x80, 0x9, 0x80}, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x6}}, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)={0x1a}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x40001018, r6, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_acct\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0x1}}, 0x20) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x11, "fe94b89fc43c3328eaa0cae1f5eba329e6f215"}) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f0000000040)) 1m28.501514864s ago: executing program 0 (id=6048): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)={0x1a}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) (fail_nth: 8) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x61, &(0x7f0000000080)}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001018, r2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x6}}, 0x20) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x11, "fe94b89fc43c3328eaa0cae1f5eba329e6f215"}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000040)) 1m14.273680207s ago: executing program 33 (id=6044): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000040)}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000001480)={0xfffffffe, 0x7, 0x2, {0x9, @win={{0x4, 0x80, 0x9, 0x80}, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x6}}, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)={0x1a}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x40001018, r6, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_acct\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0x1}}, 0x20) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x11, "fe94b89fc43c3328eaa0cae1f5eba329e6f215"}) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f0000000040)) 1m12.39112488s ago: executing program 34 (id=6048): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)={0x1a}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) (fail_nth: 8) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x61, &(0x7f0000000080)}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001018, r2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x6}}, 0x20) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x11, "fe94b89fc43c3328eaa0cae1f5eba329e6f215"}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000040)) 1m10.078585745s ago: executing program 2 (id=6074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010000004000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffa640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800e000100636f6e6e6c696d6974000000140002"], 0xc8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1m9.485476022s ago: executing program 2 (id=6077): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f020}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0844123, &(0x7f0000000180)=0x4) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000240)='./file0\x00', 0x20e02, 0x0) 1m7.19564094s ago: executing program 2 (id=6082): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1cd8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x2, 0x6, [{0x1, 0xffff, 0x7706, 0x8}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000, 0xe}, {0xf, 0x3a3, 0x8, 0x401}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0xd, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x715e}, {0x6, 0xc25a0, 0x8, 0x1000}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfc}, @filter_kind_options=@f_u32={{0x8}, {0x1ba0, 0x2, [@TCA_U32_POLICE={0xd10, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x40000000, 0x5, 0x5, 0x9b, 0xc, 0xc, 0x0, 0x7, 0x5, 0x6, 0x80000000, 0xf, 0x7, 0x0, 0x6, 0x8, 0x7, 0x6, 0x5, 0x2, 0x5, 0x6, 0x7, 0x2, 0xe, 0x9, 0x0, 0x0, 0x43, 0x8001, 0x8001, 0x7, 0x1, 0x7, 0x0, 0x1, 0x5, 0x8a9a0000, 0x8, 0x9, 0x1ff, 0xe3f, 0x5, 0xffff7fff, 0x2, 0xffffff7f, 0xe, 0x80000000, 0x6, 0x39e, 0x3, 0x7fffffff, 0x400, 0x10001, 0xed1, 0x2, 0x5, 0xcab, 0xb1, 0x2c, 0x9, 0x7fff, 0x9, 0x0, 0x702b, 0x4, 0x789c, 0x3, 0x1, 0xffffffff, 0x80000000, 0xf65, 0x7, 0x7, 0xfc30, 0x119, 0x7e, 0xfca2, 0x8, 0xbef, 0x2b, 0x8, 0x9, 0xdd7, 0x7fffffff, 0x2, 0x1, 0x2, 0x6, 0x1, 0x7fffffff, 0x4, 0x2, 0x4, 0x0, 0x5186, 0x10, 0x9, 0x80000001, 0x7ff, 0x8, 0x3, 0x1, 0x0, 0x8, 0x8, 0x5142f057, 0x1, 0xfffffffa, 0x0, 0xffffffff, 0x81, 0x6, 0x1, 0x8, 0x9, 0xa29, 0x2659, 0x5, 0x9, 0x20000002, 0x1, 0x36, 0x1, 0x6, 0x508, 0x7, 0x5, 0x0, 0x8001, 0x7, 0x0, 0x1d, 0x5, 0x0, 0x6, 0x44f7, 0x2, 0xd75, 0x7, 0x1, 0x80000000, 0x1, 0x5, 0x7, 0x8, 0xa, 0x232c0, 0x4, 0x1, 0x3ff, 0xffffff86, 0x5, 0x9, 0x7f, 0x5216, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x40000, 0xd60, 0x4, 0x7, 0x7, 0x6, 0x1, 0x2, 0x6, 0x6, 0x800, 0x8, 0x0, 0x6, 0x13ab1cbe, 0x1, 0x7fff, 0x3, 0x3, 0x0, 0x7, 0x4, 0x7, 0x101, 0x5, 0x9, 0x1, 0x4, 0x0, 0x3, 0x2, 0x2, 0x9, 0x4, 0xffff, 0x5, 0x80000001, 0x5, 0xaf, 0x9, 0x1, 0x40, 0x4, 0x80, 0x7, 0x8, 0x6a, 0x800, 0x4, 0x5, 0x7, 0x8000, 0xb, 0x5, 0x2, 0x1, 0x5, 0x1, 0x58a6, 0x2, 0x0, 0xc05a, 0xfffffffe, 0x5, 0xdf6, 0x7, 0x6, 0x9, 0x3, 0xf, 0x2, 0x6, 0x4, 0x750, 0x4, 0x29, 0x4, 0xe, 0x200, 0x6, 0xa, 0x3ff, 0x100, 0xa567, 0x3, 0x3, 0x3, 0x6, 0x7fffffff, 0x1, 0x6, 0xdc2, 0x7ff, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x81, 0x5, 0x3, 0x3, 0x5, 0x8, 0x7, 0x1, 0x9e24, 0x7ff, 0x1, 0x5, 0xc83, 0x4, 0xef2e, 0x151, 0xffff, 0x2, 0x81, 0x4, 0xb04, 0x8, 0xffffffff, 0xff, 0xd595, 0x7, 0x80, 0x7, 0xfffffff8, 0x6, 0x40, 0xffffffff, 0x3, 0x5e14, 0x800, 0x9, 0x6, 0x8, 0x7, 0x4a, 0x44, 0x0, 0x206, 0x496, 0x6, 0xfffffffc, 0x0, 0x4, 0x45, 0x0, 0x448, 0x3, 0xfffffffb, 0x4, 0x9, 0x2, 0x40, 0x4, 0x80000001, 0x0, 0x6e, 0x1ab0, 0x1b, 0x8, 0x6, 0x1, 0x2, 0x3d7, 0x6, 0x5, 0xfffffffa, 0x4, 0xb1, 0x7, 0x4, 0x5, 0x2e, 0x3, 0x5, 0x8, 0x400, 0x9, 0x9, 0xd, 0x4, 0x1, 0x100, 0x27, 0x9, 0x7f, 0x7fff, 0x1, 0x10000, 0x38b, 0x0, 0x6, 0x3, 0x7, 0x0, 0x7ff, 0x6f, 0x1000, 0x9, 0x1000, 0x1, 0x6, 0xd4f, 0xda, 0x1000, 0xffff7fff, 0x7fffffff, 0x0, 0x80000001, 0x5, 0x0, 0x4, 0x40, 0x80000001, 0x0, 0x8001, 0x9, 0x87b, 0xac8a, 0xfff, 0x6, 0x2, 0x1, 0x9, 0x1, 0x1, 0x5, 0x200, 0xf, 0x3, 0x4, 0x9, 0x8, 0x3, 0x3, 0x2, 0x7, 0x8000, 0x1e, 0x0, 0x3, 0x8, 0xa, 0x0, 0xffff1fe1, 0x8, 0x6, 0x0, 0x3, 0x7aa, 0x3ff, 0x78a8, 0x5, 0x1ff, 0x1400000, 0x81, 0x101, 0x7, 0x6, 0x4, 0x5e, 0x1, 0x1ff, 0x655, 0x2, 0x5, 0x3, 0x9, 0x101, 0x9, 0x9, 0x2, 0x8000, 0x7, 0x8, 0x641, 0x4, 0x5, 0x9, 0x8, 0x5, 0x1, 0x7, 0x1, 0x1, 0x0, 0xfffffff7, 0x80000001, 0x6, 0x3, 0xac41, 0x2, 0x1, 0xb7, 0x3, 0x4000000, 0x41, 0x101, 0x3, 0x5, 0x9, 0x1000, 0x5, 0x8001, 0x5, 0xfff, 0x0, 0x5, 0x55, 0x8, 0xe7, 0x39, 0x3, 0x4, 0xb7d, 0x259b, 0xfff, 0x1, 0x2, 0x4, 0x0, 0x9, 0x7ff, 0x9, 0x4, 0x33, 0x3, 0x2, 0x0, 0x2, 0x7, 0x5, 0x6, 0x8, 0x1000, 0x9, 0x87, 0xffffff01, 0x67a, 0x8, 0xffff, 0x5, 0x9, 0x7, 0xd, 0xe, 0xfffffffb, 0x9, 0x93d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x5, 0x5, 0x0, {0x81, 0x2, 0x71, 0x9, 0x1, 0x7}, {0x1, 0x1, 0x5, 0x1ff, 0x3, 0x6}, 0x4, 0x5, 0x4}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x9, 0x4000, 0x4, {0x2, 0x1, 0x0, 0x8, 0x5, 0xa}, {0xfd, 0x2, 0x4, 0x9c, 0x9, 0x7}, 0x1, 0x80000000, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x10001, 0xa0, 0x4561, {0x6, 0x0, 0x8, 0x7, 0xfe00, 0x6}, {0x4, 0x0, 0x7, 0x7, 0x3, 0x1ff}, 0x9, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x9, 0x6, 0x5, 0xb, 0x7, 0x1, 0x7, 0x5, 0x80, 0x80000000, 0x5, 0x800, 0xff, 0x0, 0x40, 0x7, 0x9, 0x2, 0x3, 0x101, 0x5, 0x9, 0x401, 0x6, 0xf2, 0x2, 0x7, 0x7, 0x3, 0x10, 0x5, 0xffff8000, 0x3c6, 0x8, 0x2e, 0x5, 0x5, 0x8, 0x0, 0x5, 0x0, 0xd, 0x6, 0x1, 0xffff9dcb, 0x0, 0x2, 0x39b, 0x8, 0xc, 0x2, 0x7, 0x0, 0x1da, 0x2, 0x48, 0x1c29, 0xb, 0x698, 0x5, 0x1, 0x1d0d, 0x300, 0xf, 0x6, 0x10, 0x8, 0x80000000, 0x2, 0xad4, 0xf8, 0x7ff, 0x1ff, 0x7, 0x6, 0x8, 0x9, 0x10000, 0x7e1, 0x5f, 0x40e8bc4e, 0x75, 0x9, 0x4, 0x8, 0x3, 0x8, 0x2, 0x1ff, 0x14118449, 0xf348, 0x7fffffff, 0x1, 0xfffffff7, 0x4, 0x0, 0x8c9, 0x81, 0xd, 0x4, 0x7, 0x40, 0x1, 0x48, 0x7, 0x14a3, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x6d, 0x3, 0xa, 0x100, 0x1, 0x6, 0x1, 0x5, 0x101, 0x2, 0x8, 0x9, 0x6, 0xa824, 0x7fff, 0x5, 0xe, 0x3, 0xfffffff8, 0x100, 0xc0000000, 0x8, 0x2, 0xfffffff0, 0x1, 0x0, 0x3ff, 0x9, 0x3, 0x1f32, 0xd, 0x3c5, 0xe6, 0x2, 0xfffffff9, 0x9, 0x9da, 0x7fffffff, 0x1, 0xff, 0x1, 0x80000000, 0x0, 0x4, 0x8, 0x0, 0x6, 0x7fff, 0x6, 0x9, 0xfff, 0x9, 0x9, 0x80, 0x54, 0x7c, 0x8, 0x1, 0x1, 0xe, 0x1, 0x5, 0x254, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x8, 0x6, 0x0, 0x10001, 0x6, 0xd, 0x6, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3, 0x1, 0x9, 0x40, 0x9, 0x1, 0x9a6, 0x81, 0x3, 0x100, 0xc07, 0x7, 0x0, 0xe, 0x7ff, 0xc1, 0x1, 0x4, 0x5, 0x7fff, 0x1, 0x5, 0x8, 0x3ff, 0x80000001, 0x7, 0xffffffff, 0x3ff, 0x6, 0xc, 0x65d, 0xd, 0x3, 0xc04, 0x10001, 0x2, 0xda6, 0xbed6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x264, 0x98, 0x101, 0x3, 0x9, 0xf, 0xcc, 0x8, 0xeab0, 0x9, 0xd, 0x69b3, 0x4, 0x8, 0x8, 0x80000001, 0x7, 0x2e244449, 0x81, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x7fff, 0x5, 0x1, {0x2, 0x2, 0x6, 0x6, 0x2, 0x1}, {0x7, 0x2, 0x7, 0xe, 0x5, 0x9}, 0xffff, 0xfffffff2, 0x7f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_SEL={0x624, 0x5, {0x1, 0x0, 0x8, 0x4, 0x1d, 0xc0, 0x2, 0x10040, [{0x4, 0x1a, 0x7fff, 0x9}, {0x5, 0x7, 0x3, 0x10000}, {0x634a, 0x1, 0x400, 0x3}, {0x5, 0xff, 0x7, 0x5}, {0xfffffff7, 0x2, 0xfffffff8, 0x84}, {0x38, 0x6, 0x7, 0x6dfc074c}, {0x40, 0x8, 0x101, 0x40}, {0x7ff, 0xff, 0x1, 0xba6}, {0x1, 0xff, 0x0, 0x5}, {0x5, 0x1, 0x34f8, 0xd}, {0x8000, 0x5, 0x2, 0x81b3}, {0x101, 0x8000, 0x6, 0x10000}, {0x0, 0x8, 0x0, 0x7}, {0x727, 0xfffffffd, 0x4, 0x8}, {0x3, 0x4, 0x2df, 0xabc}, {0x3, 0x100, 0x3b50222b, 0x80000001}, {0xd, 0x1800, 0x5, 0x3}, {0x7, 0x80000000, 0x5, 0x6}, {0x8, 0x5, 0x5}, {0x3, 0xfffffd5f, 0x1ff, 0x100}, {0x2, 0x400, 0x1, 0x1e}, {0x6, 0x5, 0x9, 0x96aa}, {0x7fffffff, 0x2, 0x7ff, 0xd}, {0x4, 0xf57, 0x458, 0x8}, {0x2b4, 0xfffffffd, 0xf92, 0x1}, {0x8, 0x0, 0x9, 0x4}, {0x10, 0x7, 0x5, 0x4}, {0x9, 0xffffffff, 0xa0b}, {0x6, 0x59ad, 0x8, 0x6}, {0x2f0, 0x2, 0x7ff, 0x1}, {0x1, 0x0, 0x4}, {0xff, 0x3, 0x1, 0xc}, {0x7, 0x0, 0xff, 0xfffffff7}, {0x4, 0x8, 0x5, 0x40}, {0x5, 0x1, 0xa4, 0xffffffff}, {0x419, 0x0, 0x0, 0x46a0}, {0x9, 0x6, 0x0, 0x9ddf}, {0x5, 0x1, 0x3, 0x1ff}, {0x1b, 0x9724, 0x1ff, 0x7f}, {0x8000, 0xf75, 0x6, 0x10001}, {0x9d, 0x0, 0xfffffffb, 0x946}, {0x0, 0x7, 0x8, 0x10}, {0x9, 0x4, 0xfffffffb, 0x9}, {0x8, 0x7, 0x10, 0x6}, {0x2, 0x10001, 0x8, 0x5}, {0x556f, 0x31a0, 0x79, 0xffff0f3c}, {0xb5c1, 0x4e79, 0x56f, 0xbdc}, {0x9, 0xfff, 0x9, 0x9}, {0x4, 0x6, 0xa5, 0xe}, {0x3, 0x9, 0x7, 0x9}, {0xd8, 0x437, 0x4, 0x8001}, {0x0, 0x5a0, 0x2, 0x5}, {0x7, 0x7, 0x7ff, 0x3e91}, {0xac2f, 0x1, 0x4, 0x8}, {0x3, 0xff, 0x8000, 0x731b}, {0x1ff, 0xa, 0x8, 0x2}, {0x8, 0x80, 0x7, 0x1}, {0x9, 0x303, 0x7, 0x5}, {0x0, 0xa, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x7fffffff}, {0x3, 0x7, 0xfffffff9, 0x5}, {0x0, 0x5, 0x2, 0x8}, {0x6, 0xf, 0x6, 0x2}, {0x3, 0xffff0000, 0xf22, 0x2}, {0x4, 0x3, 0x4, 0x1ff}, {0x3, 0x4, 0x8, 0x5}, {0x6, 0x3, 0xea4}, {0xffffff7e, 0x80000001, 0x7, 0x80000001}, {0x2, 0x3188, 0x7000, 0x4}, {0x8, 0x5, 0x4, 0x8001}, {0x7, 0x800, 0xffff03ed, 0x400}, {0x3, 0x200, 0x4, 0x6}, {0x7, 0x4, 0xbc32, 0x4}, {0x8, 0xc45, 0x7639, 0x9}, {0x2, 0x8, 0x2400000, 0x3}, {0xe, 0x5a, 0x34fc, 0x7f}, {0x94c0, 0x0, 0x8, 0x6}, {0x9, 0x6, 0x7, 0x1}, {0x2, 0x7, 0xd73}, {0xffff, 0xc9, 0x1b, 0xe5}, {0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0x8871}, {0xc, 0x0, 0x63b8, 0x3}, {0x80, 0x6904c235, 0x401, 0xd7f}, {0x35792f16, 0x30, 0x1, 0x6}, {0x8, 0x1, 0xd0}, {0x20000000, 0x8, 0x6c, 0x1}, {0x101, 0x2086c4a2, 0xa, 0x1}, {0x8, 0x7, 0xffa, 0x400}, {0x40b77, 0x1, 0x5d2, 0x2}, {0x2, 0x2, 0x8, 0x5}, {0x918, 0x9, 0xfffffff8, 0x5}, {0xa16, 0x18c, 0x1, 0xd9fc}, {0x1, 0x401, 0x2, 0x8}, {0x9, 0x0, 0x2, 0x1cb8}, {0xa460, 0x7, 0x9, 0x3ff}, {0x5419e79a, 0x2, 0x0, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x62, 0x5, 0x5, 0x7, 0x73b, 0xff, 0x4e43b74b, 0x1a, 0x800, 0x0, 0x100, 0x401, 0x5, 0x8000, 0x7ff, 0x7, 0x0, 0x8000, 0x80000000, 0x400, 0x80000000, 0x7fffffff, 0x7c, 0xb, 0x8, 0x6, 0x7f, 0x4, 0x10000, 0x0, 0xc875, 0x6, 0x7fffffff, 0xaff, 0x6, 0x14, 0x8, 0xe7b, 0x0, 0x0, 0x1, 0x67c, 0x9, 0x50d406ac, 0x22a, 0x8, 0x80000000, 0x3, 0x47d0, 0x5, 0x3, 0x40, 0x100, 0x4, 0x2c, 0x21, 0x1, 0x0, 0x3, 0x0, 0xdd9, 0x80, 0x95f5, 0xe304, 0x8, 0x2, 0xed, 0x7, 0x2, 0x2, 0x7868, 0x3, 0x200, 0x8, 0x4, 0x80, 0x5, 0x20000, 0xfffffffd, 0x80000001, 0x4, 0x9, 0x5, 0x4, 0xfffffffd, 0x88da, 0x6, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0x4, 0x4, 0x3, 0x8, 0x7fff, 0x4, 0x8, 0xe61f, 0x5d0b, 0xf6a, 0x4, 0x100010, 0x0, 0x81, 0x6, 0x1d6e, 0x8, 0x4, 0xa, 0x7, 0x4, 0xffffffff, 0x8, 0x1, 0x4, 0xfffffff0, 0x2869e7b5, 0x1, 0x5, 0x80, 0x3, 0x5, 0x1, 0x4, 0x4, 0xfffffff9, 0x2, 0x3ff, 0x7, 0x8000, 0x4, 0x6012, 0x8, 0x6, 0xc6f6, 0x3, 0xfffffffc, 0x3, 0x81, 0xfffffffb, 0x1, 0x21, 0x4, 0x9, 0x6, 0x9, 0x5, 0xb0fb, 0x5, 0xfff, 0xf1b9, 0x0, 0x4, 0x401, 0x1, 0x8, 0x9, 0x2, 0x0, 0x8, 0x7, 0x100, 0x4, 0x7ff, 0xfff, 0x80000001, 0x9, 0x2, 0x1, 0x81, 0x1, 0x8, 0x8, 0x6, 0x7, 0xbd79, 0x7ff, 0xffffffff, 0xb, 0xffff, 0xae1c, 0x3, 0x1, 0x0, 0x200, 0x5, 0x48, 0x6, 0x4, 0x0, 0x5, 0x5e, 0x0, 0x7fffffff, 0x7, 0x8, 0x100, 0x0, 0xd1be, 0x8, 0x3f4, 0xffffffff, 0x10000, 0x0, 0x0, 0x10000, 0x2, 0x136, 0x2, 0x6, 0x4, 0x3, 0x8, 0x7fff800, 0x3b, 0x4, 0x80000000, 0x7, 0x6, 0x6, 0x4, 0x6, 0x5, 0x6, 0x9, 0xc6e, 0x0, 0x800, 0x400, 0x302e, 0x0, 0x100, 0x1, 0x10000, 0x2, 0x4, 0x0, 0xbd, 0x0, 0x80000000, 0x2, 0x800, 0x8, 0xfffffffb, 0x3, 0x472, 0x4, 0x200, 0x8, 0x11, 0x7, 0x82ca]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xad0}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0xf024, 0x1, 0x2, 0xfffffffd, 0x23, 0x8, 0x35, 0x10001, 0x2, 0x2, 0x3, 0x200, 0xf2340606, 0x0, 0xc44, 0x2, 0xc, 0x5, 0x7, 0x3, 0x7, 0x10, 0x6, 0x0, 0x7fffffff, 0x5, 0xace, 0x54, 0x7, 0x3, 0x8, 0xfff, 0xd076, 0x7, 0xffff6b30, 0xc1, 0x7, 0xffffffd2, 0x7fffffff, 0x1, 0xfffffff8, 0xfffffffd, 0x1000, 0x5, 0x0, 0x10, 0x80, 0x10001, 0x301, 0xd5a4, 0x43, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x1cf, 0xb, 0x0, 0x2, 0x5, 0xa303, 0x1, 0x8, 0x0, 0x2, 0xf07, 0x7, 0x5, 0x48, 0x101, 0xf75, 0x8, 0xe, 0x6, 0x4, 0x66, 0x80000000, 0x6, 0x4, 0x0, 0x800, 0x7f, 0x2, 0x9, 0x0, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2800, 0xae00000, 0x1, 0x2, 0x66fc, 0xc, 0x1, 0x0, 0x4, 0x81, 0x7fff, 0x401, 0x2, 0x5, 0x8001, 0x1b3, 0x1, 0x7, 0x2, 0x3ff, 0x7, 0xa, 0x7, 0x8, 0x5, 0x56, 0x7, 0x101, 0x80000000, 0xffffff81, 0x101, 0x100, 0x4, 0x9, 0x5, 0x401, 0x10000, 0x3, 0x68d8, 0xfb, 0x4, 0x80000000, 0xc6bf, 0x1, 0x9, 0x80000000, 0xff, 0x8, 0x101, 0x3, 0x5, 0x1, 0x8, 0x7fffffff, 0x4, 0x8, 0x80000000, 0x6, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x8, 0x4, 0xfffffc00, 0x9, 0xc, 0x8000000, 0x200, 0x1, 0xc, 0x0, 0x3ff, 0x5, 0x8, 0x0, 0x9, 0x2, 0x8000, 0x60, 0x0, 0x8, 0x3, 0x401, 0x7, 0x0, 0x7, 0x1, 0xfffffffa, 0x7, 0xa4, 0x6, 0x7fff, 0x10001, 0xff5, 0x3, 0x10001, 0x5, 0x3, 0x1, 0x1, 0x6, 0x7, 0x101, 0x9d, 0xffffffff, 0x3, 0x0, 0x3e, 0x3, 0x8, 0x4, 0x1000, 0x5d, 0x89, 0x10001, 0x40, 0x9, 0x2, 0x1, 0x7, 0xa39, 0xe, 0x3, 0x9, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x200, 0xe6aa, 0x5, 0x100, 0x7fff, 0x3, 0x5, 0xf, 0x0, 0xfff, 0x1, 0xfffffff8, 0xfffffffe, 0x8, 0x9, 0x4, 0x2, 0xfff, 0x5, 0x1000, 0x9, 0x9, 0x1, 0x5, 0x200, 0x7, 0x156, 0xf0, 0x5, 0x2]}]}, @TCA_U32_MARK={0x10, 0xa, {0x7fff, 0xa35}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x48}]}}]}, 0x1cd8}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0xfffffffe, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast}}}}}}, 0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup(r12) 1m5.992923397s ago: executing program 2 (id=6085): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(r0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000040)=[{0x101, 0x1201, 0xfffffffffffffdc7, &(0x7f0000000140)="33a1fe91e1a679b3d51b0a8855dedf6dffc68f28ccdd5043ccbbd16c57940a663749f2f77e202815e743a0288bf46901b449c71c3c1b3f9bf144144a7b0dc4e141856b4f0a64acd783a46c632d03b15c8726f440ba8d8285b35fb78fbf25e4203fd1a8ae33a36e6655cbfa9395a194720246"}], 0x1}) 1m2.29937016s ago: executing program 2 (id=6101): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x2000, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x43}, 0x2}], 0x1, 0x40002001, 0x0) 1m2.171034706s ago: executing program 2 (id=6102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r6, &(0x7f0000002280)=[{&(0x7f0000002780)=""/133, 0x85}], 0x1, 0x10001, 0x7) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x227e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x6, 0x3f, 0x0, r10}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) 47.096936743s ago: executing program 35 (id=6102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r6, &(0x7f0000002280)=[{&(0x7f0000002780)=""/133, 0x85}], 0x1, 0x10001, 0x7) ioctl$BLKGETSIZE64(r6, 0x80041272, &(0x7f0000000080)) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x227e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x6, 0x3f, 0x0, r10}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}) io_uring_enter(r11, 0x2def, 0x4000, 0x0, 0x0, 0x0) 16.309246307s ago: executing program 5 (id=6202): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(&(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="ea", 0x1}], 0x1}, 0x840) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00009fc000/0x1000)=nil, 0x6) 15.748266836s ago: executing program 8 (id=6203): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={r6, 0x3, 0x30}, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa882) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) ioctl$LOOP_SET_FD(r10, 0x4c00, r10) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d906050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000221000000000400000000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000"/51], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) setsockopt$packet_int(r11, 0x107, 0x14, 0x0, 0x0) 12.245780189s ago: executing program 5 (id=6208): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(0x0, 0x3d, 0x0, 0xfffffffffffffffe) r4 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$NS_GET_USERNS(r0, 0x8008b705, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009ff7f0000000000000905820200"], 0x0) 11.944983058s ago: executing program 8 (id=6209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x4000, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 11.511319577s ago: executing program 8 (id=6210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x10, 0x1, [0x81]}, 0x0) close(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000800", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 10.889241766s ago: executing program 8 (id=6213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.617795657s ago: executing program 6 (id=6214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000081bfe708460d1220577000000001090222002a0000000009040000011a137d00090500000000000000070567c7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbfffffe, 0x3}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) sched_getattr(r2, &(0x7f00000001c0)={0x38}, 0x38, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x1000, 0x8ba, 0x4, {0x4, @sliced={0x0, [0x7, 0x56, 0x2, 0x4, 0x4, 0x6ffe, 0x7ff, 0x80, 0xfe, 0x44, 0x8, 0x6a4, 0x0, 0x200, 0x7, 0x5e1, 0x5, 0x80, 0x0, 0x5, 0x2, 0x9480, 0x3ff, 0x1000, 0x6, 0x8, 0x4, 0x9, 0xcb9, 0x7, 0xc8, 0x2, 0x4, 0xf5, 0x10, 0x0, 0xb, 0x8, 0x3, 0x9, 0x4, 0x1, 0x7, 0x2, 0x80, 0x4, 0xa174, 0xf801], 0x4}}, 0x40004}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000027}, 0x40010) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0xfc, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x62000}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xec}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x479}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x4095) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0xc) io_submit(0x0, 0x0, &(0x7f00000002c0)) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000540)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x14, 0x43, 0x0, 0x0) 10.377391188s ago: executing program 7 (id=6215): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x8, 0x3, 0x1000, 0x5}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000fcb000), 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) (fail_nth: 1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40094) 8.810435599s ago: executing program 1 (id=6216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000004000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffa640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800e000100636f6e6e6c696d6974000000140002"], 0xc8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 7.677877342s ago: executing program 7 (id=6217): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$eventfd(r6, &(0x7f0000000000), 0x8) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.643629452s ago: executing program 5 (id=6218): r0 = syz_usb_connect(0x2, 0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000002540202338020041860102030109027c0001000010000904de0202f307ab00090502020002024000510bd18e6611f52aa473d32b2db91b9bd482f8292053dc98bdc2ed32d3632c81d084b29739096bf64f2a00c0967e6c0b2784bc854ed62e67e09fe61601a7722bb22f380fa09f448a158a671b2eb829e9640725018309040009058202000200000015ba8e783bdf8dfe5cd19dafbeff2c9885f81d7afd4a4f31411ed62a50"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6.82059637s ago: executing program 6 (id=6219): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x8, 0xd0000000, 0x0, 0x2, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x1f054572}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000800}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xebff) 6.181166013s ago: executing program 8 (id=6220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000345000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40100, 0x0, 'queue0\x00', 0x9}) io_uring_setup(0x5c48, &(0x7f0000000300)={0x0, 0x2792, 0x1000, 0x2, 0x1ea, 0x0, r1}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000600)) 5.724152959s ago: executing program 7 (id=6221): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x58}, 0x1, 0x40afc, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xe4, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x20, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xe4}}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.31588393s ago: executing program 1 (id=6222): syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x3c, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x200, 0x0, 0x4, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x5}, @generic={0xe8, 0x2}, @fastopen={0x22, 0xf, "52c0835ee22ced8e62648dd726"}, @sack={0x5, 0xa, [0x9, 0x8]}]}}}}}}}}, 0x0) 5.149478089s ago: executing program 1 (id=6223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) rename(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x2, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, 0x984a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}]}}) 5.096390316s ago: executing program 5 (id=6224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.257464852s ago: executing program 1 (id=6225): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01f1ff040000000000000b00000008000300", @ANYRES32=r1, @ANYBLOB="1c006e80040002000000010004000100040002000400020004000200"], 0x38}}, 0x0) 2.397933255s ago: executing program 1 (id=6226): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x1800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x6400, 0x8, 0x1, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 2.397444306s ago: executing program 6 (id=6227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x700, @loopback, 0x10000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000740)='z', 0x1}], 0x1}}], 0x1, 0x0) 2.183137659s ago: executing program 7 (id=6228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002140)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xd1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="4c000000f500050925bd5000fcdbdf250a06ff004e264e234e220000070000000600000005000000feffffff010000000400000000000000", @ANYRES32=0x0, @ANYBLOB="61000000fcffffff08000000ffffffff"], 0x4c}}, 0x4814) 2.053485027s ago: executing program 5 (id=6229): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1cd8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_SEL={0xe4, 0x5, {0x3, 0x8, 0xd, 0x4, 0x7ff, 0x365, 0x2, 0x6, [{0x1, 0xffff, 0x7706, 0x8}, {0x7fffffff, 0x8, 0xd7, 0x3}, {0x3, 0x2, 0xea9a, 0x6}, {0x7, 0x9, 0x1, 0x9}, {0x40, 0x2, 0x1000, 0xe}, {0xf, 0x3a3, 0x8, 0x401}, {0x10000, 0x9, 0x6, 0x7fffffff}, {0x4, 0x0, 0x80, 0x40}, {0x43, 0x5, 0x5, 0x4}, {0xfffffffb, 0x5, 0xff, 0x9}, {0xd, 0x7f, 0x1, 0x8}, {0x5, 0x6, 0x80, 0x715e}, {0x6, 0xc25a0, 0x8, 0x1000}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfc}, @filter_kind_options=@f_u32={{0x8}, {0x1ba0, 0x2, [@TCA_U32_POLICE={0xd10, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x40000000, 0x5, 0x5, 0x9b, 0xc, 0xc, 0x0, 0x7, 0x5, 0x6, 0x80000000, 0xf, 0x7, 0x0, 0x6, 0x8, 0x7, 0x6, 0x5, 0x2, 0x5, 0x6, 0x7, 0x2, 0xe, 0x9, 0x0, 0x0, 0x43, 0x8001, 0x8001, 0x7, 0x1, 0x7, 0x0, 0x1, 0x5, 0x8a9a0000, 0x8, 0x9, 0x1ff, 0xe3f, 0x5, 0xffff7fff, 0x2, 0xffffff7f, 0xe, 0x80000000, 0x6, 0x39e, 0x3, 0x7fffffff, 0x400, 0x10001, 0xed1, 0x2, 0x5, 0xcab, 0xb1, 0x2c, 0x9, 0x7fff, 0x9, 0x0, 0x702b, 0x4, 0x789c, 0x3, 0x1, 0xffffffff, 0x80000000, 0xf65, 0x7, 0x7, 0xfc30, 0x119, 0x7e, 0xfca2, 0x8, 0xbef, 0x2b, 0x8, 0x9, 0xdd7, 0x7fffffff, 0x2, 0x1, 0x2, 0x6, 0x1, 0x7fffffff, 0x4, 0x2, 0x4, 0x0, 0x5186, 0x10, 0x9, 0x80000001, 0x7ff, 0x8, 0x3, 0x1, 0x0, 0x8, 0x8, 0x5142f057, 0x1, 0xfffffffa, 0x0, 0xffffffff, 0x81, 0x6, 0x1, 0x8, 0x9, 0xa29, 0x2659, 0x5, 0x9, 0x20000002, 0x1, 0x36, 0x1, 0x6, 0x508, 0x7, 0x5, 0x0, 0x8001, 0x7, 0x0, 0x1d, 0x5, 0x0, 0x6, 0x44f7, 0x2, 0xd75, 0x7, 0x1, 0x80000000, 0x1, 0x5, 0x7, 0x8, 0xa, 0x232c0, 0x4, 0x1, 0x3ff, 0xffffff86, 0x5, 0x9, 0x7f, 0x5216, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x40000, 0xd60, 0x4, 0x7, 0x7, 0x6, 0x1, 0x2, 0x6, 0x6, 0x800, 0x8, 0x0, 0x6, 0x13ab1cbe, 0x1, 0x7fff, 0x3, 0x3, 0x0, 0x7, 0x4, 0x7, 0x101, 0x5, 0x9, 0x1, 0x4, 0x0, 0x3, 0x2, 0x2, 0x9, 0x4, 0xffff, 0x5, 0x80000001, 0x5, 0xaf, 0x9, 0x1, 0x40, 0x4, 0x80, 0x7, 0x8, 0x6a, 0x800, 0x4, 0x5, 0x7, 0x8000, 0xb, 0x5, 0x2, 0x1, 0x5, 0x1, 0x58a6, 0x2, 0x0, 0xc05a, 0xfffffffe, 0x5, 0xdf6, 0x7, 0x6, 0x9, 0x3, 0xf, 0x2, 0x6, 0x4, 0x750, 0x4, 0x29, 0x4, 0xe, 0x200, 0x6, 0xa, 0x3ff, 0x100, 0xa567, 0x3, 0x3, 0x3, 0x6, 0x7fffffff, 0x1, 0x6, 0xdc2, 0x7ff, 0x5, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x81, 0x5, 0x3, 0x3, 0x5, 0x8, 0x7, 0x1, 0x9e24, 0x7ff, 0x1, 0x5, 0xc83, 0x4, 0xef2e, 0x151, 0xffff, 0x2, 0x81, 0x4, 0xb04, 0x8, 0xffffffff, 0xff, 0xd595, 0x7, 0x80, 0x7, 0xfffffff8, 0x6, 0x40, 0xffffffff, 0x3, 0x5e14, 0x800, 0x9, 0x6, 0x8, 0x7, 0x4a, 0x44, 0x0, 0x206, 0x496, 0x6, 0xfffffffc, 0x0, 0x4, 0x45, 0x0, 0x448, 0x3, 0xfffffffb, 0x4, 0x9, 0x2, 0x40, 0x4, 0x80000001, 0x0, 0x6e, 0x1ab0, 0x1b, 0x8, 0x6, 0x1, 0x2, 0x3d7, 0x6, 0x5, 0xfffffffa, 0x4, 0xb1, 0x7, 0x4, 0x5, 0x2e, 0x3, 0x5, 0x8, 0x400, 0x9, 0x9, 0xd, 0x4, 0x1, 0x100, 0x27, 0x9, 0x7f, 0x7fff, 0x1, 0x10000, 0x38b, 0x0, 0x6, 0x3, 0x7, 0x0, 0x7ff, 0x6f, 0x1000, 0x9, 0x1000, 0x1, 0x6, 0xd4f, 0xda, 0x1000, 0xffff7fff, 0x7fffffff, 0x0, 0x80000001, 0x5, 0x0, 0x4, 0x40, 0x80000001, 0x0, 0x8001, 0x9, 0x87b, 0xac8a, 0xfff, 0x6, 0x2, 0x1, 0x9, 0x1, 0x1, 0x5, 0x200, 0xf, 0x3, 0x4, 0x9, 0x8, 0x3, 0x3, 0x2, 0x7, 0x8000, 0x1e, 0x0, 0x3, 0x8, 0xa, 0x0, 0xffff1fe1, 0x8, 0x6, 0x0, 0x3, 0x7aa, 0x3ff, 0x78a8, 0x5, 0x1ff, 0x1400000, 0x81, 0x101, 0x7, 0x6, 0x4, 0x5e, 0x1, 0x1ff, 0x655, 0x2, 0x5, 0x3, 0x9, 0x101, 0x9, 0x9, 0x2, 0x8000, 0x7, 0x8, 0x641, 0x4, 0x5, 0x9, 0x8, 0x5, 0x1, 0x7, 0x1, 0x1, 0x0, 0xfffffff7, 0x80000001, 0x6, 0x3, 0xac41, 0x2, 0x1, 0xb7, 0x3, 0x4000000, 0x41, 0x101, 0x3, 0x5, 0x9, 0x1000, 0x5, 0x8001, 0x5, 0xfff, 0x0, 0x5, 0x55, 0x8, 0xe7, 0x39, 0x3, 0x4, 0xb7d, 0x259b, 0xfff, 0x1, 0x2, 0x4, 0x0, 0x9, 0x7ff, 0x9, 0x4, 0x33, 0x3, 0x2, 0x0, 0x2, 0x7, 0x5, 0x6, 0x8, 0x1000, 0x9, 0x87, 0xffffff01, 0x67a, 0x8, 0xffff, 0x5, 0x9, 0x7, 0xd, 0xe, 0xfffffffb, 0x9, 0x93d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x5, 0x5, 0x0, {0x81, 0x2, 0x71, 0x9, 0x1, 0x7}, {0x1, 0x1, 0x5, 0x1ff, 0x3, 0x6}, 0x4, 0x5, 0x4}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x9, 0x4000, 0x4, {0x2, 0x1, 0x0, 0x8, 0x5, 0xa}, {0xfd, 0x2, 0x4, 0x9c, 0x9, 0x7}, 0x1, 0x80000000, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x10001, 0xa0, 0x4561, {0x6, 0x0, 0x8, 0x7, 0xfe00, 0x6}, {0x4, 0x0, 0x7, 0x7, 0x3, 0x1ff}, 0x9, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x9, 0x6, 0x5, 0xb, 0x7, 0x1, 0x7, 0x5, 0x80, 0x80000000, 0x5, 0x800, 0xff, 0x0, 0x40, 0x7, 0x9, 0x2, 0x3, 0x101, 0x5, 0x9, 0x401, 0x6, 0xf2, 0x2, 0x7, 0x7, 0x3, 0x10, 0x5, 0xffff8000, 0x3c6, 0x8, 0x2e, 0x5, 0x5, 0x8, 0x0, 0x5, 0x0, 0xd, 0x6, 0x1, 0xffff9dcb, 0x0, 0x2, 0x39b, 0x8, 0xc, 0x2, 0x7, 0x0, 0x1da, 0x2, 0x48, 0x1c29, 0xb, 0x698, 0x5, 0x1, 0x1d0d, 0x300, 0xf, 0x6, 0x10, 0x8, 0x80000000, 0x2, 0xad4, 0xf8, 0x7ff, 0x1ff, 0x7, 0x6, 0x8, 0x9, 0x10000, 0x7e1, 0x5f, 0x40e8bc4e, 0x75, 0x9, 0x4, 0x8, 0x3, 0x8, 0x2, 0x1ff, 0x14118449, 0xf348, 0x7fffffff, 0x1, 0xfffffff7, 0x4, 0x0, 0x8c9, 0x81, 0xd, 0x4, 0x7, 0x40, 0x1, 0x48, 0x7, 0x14a3, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x6d, 0x3, 0xa, 0x100, 0x1, 0x6, 0x1, 0x5, 0x101, 0x2, 0x8, 0x9, 0x6, 0xa824, 0x7fff, 0x5, 0xe, 0x3, 0xfffffff8, 0x100, 0xc0000000, 0x8, 0x2, 0xfffffff0, 0x1, 0x0, 0x3ff, 0x9, 0x3, 0x1f32, 0xd, 0x3c5, 0xe6, 0x2, 0xfffffff9, 0x9, 0x9da, 0x7fffffff, 0x1, 0xff, 0x1, 0x80000000, 0x0, 0x4, 0x8, 0x0, 0x6, 0x7fff, 0x6, 0x9, 0xfff, 0x9, 0x9, 0x80, 0x54, 0x7c, 0x8, 0x1, 0x1, 0xe, 0x1, 0x5, 0x254, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x8, 0x6, 0x0, 0x10001, 0x6, 0xd, 0x6, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3, 0x1, 0x9, 0x40, 0x9, 0x1, 0x9a6, 0x81, 0x3, 0x100, 0xc07, 0x7, 0x0, 0xe, 0x7ff, 0xc1, 0x1, 0x4, 0x5, 0x7fff, 0x1, 0x5, 0x8, 0x3ff, 0x80000001, 0x7, 0xffffffff, 0x3ff, 0x6, 0xc, 0x65d, 0xd, 0x3, 0xc04, 0x10001, 0x2, 0xda6, 0xbed6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x264, 0x98, 0x101, 0x3, 0x9, 0xf, 0xcc, 0x8, 0xeab0, 0x9, 0xd, 0x69b3, 0x4, 0x8, 0x8, 0x80000001, 0x7, 0x2e244449, 0x81, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x7fff, 0x5, 0x1, {0x2, 0x2, 0x6, 0x6, 0x2, 0x1}, {0x7, 0x2, 0x7, 0xe, 0x5, 0x9}, 0xffff, 0xfffffff2, 0x7f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_SEL={0x624, 0x5, {0x1, 0x0, 0x8, 0x4, 0x1d, 0xc0, 0x2, 0x10040, [{0x4, 0x1a, 0x7fff, 0x9}, {0x5, 0x7, 0x3, 0x10000}, {0x634a, 0x1, 0x400, 0x3}, {0x5, 0xff, 0x7, 0x5}, {0xfffffff7, 0x2, 0xfffffff8, 0x84}, {0x38, 0x6, 0x7, 0x6dfc074c}, {0x40, 0x8, 0x101, 0x40}, {0x7ff, 0xff, 0x1, 0xba6}, {0x1, 0xff, 0x0, 0x5}, {0x5, 0x1, 0x34f8, 0xd}, {0x8000, 0x5, 0x2, 0x81b3}, {0x101, 0x8000, 0x6, 0x10000}, {0x0, 0x8, 0x0, 0x7}, {0x727, 0xfffffffd, 0x4, 0x8}, {0x3, 0x4, 0x2df, 0xabc}, {0x3, 0x100, 0x3b50222b, 0x80000001}, {0xd, 0x1800, 0x5, 0x3}, {0x7, 0x80000000, 0x5, 0x6}, {0x8, 0x5, 0x5}, {0x3, 0xfffffd5f, 0x1ff, 0x100}, {0x2, 0x400, 0x1, 0x1e}, {0x6, 0x5, 0x9, 0x96aa}, {0x7fffffff, 0x2, 0x7ff, 0xd}, {0x4, 0xf57, 0x458, 0x8}, {0x2b4, 0xfffffffd, 0xf92, 0x1}, {0x8, 0x0, 0x9, 0x4}, {0x10, 0x7, 0x5, 0x4}, {0x9, 0xffffffff, 0xa0b}, {0x6, 0x59ad, 0x8, 0x6}, {0x2f0, 0x2, 0x7ff, 0x1}, {0x1, 0x0, 0x4}, {0xff, 0x3, 0x1, 0xc}, {0x7, 0x0, 0xff, 0xfffffff7}, {0x4, 0x8, 0x5, 0x40}, {0x5, 0x1, 0xa4, 0xffffffff}, {0x419, 0x0, 0x0, 0x46a0}, {0x9, 0x6, 0x0, 0x9ddf}, {0x5, 0x1, 0x3, 0x1ff}, {0x1b, 0x9724, 0x1ff, 0x7f}, {0x8000, 0xf75, 0x6, 0x10001}, {0x9d, 0x0, 0xfffffffb, 0x946}, {0x0, 0x7, 0x8, 0x10}, {0x9, 0x4, 0xfffffffb, 0x9}, {0x8, 0x7, 0x10, 0x6}, {0x2, 0x10001, 0x8, 0x5}, {0x556f, 0x31a0, 0x79, 0xffff0f3c}, {0xb5c1, 0x4e79, 0x56f, 0xbdc}, {0x9, 0xfff, 0x9, 0x9}, {0x4, 0x6, 0xa5, 0xe}, {0x3, 0x9, 0x7, 0x9}, {0xd8, 0x437, 0x4, 0x8001}, {0x0, 0x5a0, 0x2, 0x5}, {0x7, 0x7, 0x7ff, 0x3e91}, {0xac2f, 0x1, 0x4, 0x8}, {0x3, 0xff, 0x8000, 0x731b}, {0x1ff, 0xa, 0x8, 0x2}, {0x8, 0x80, 0x7, 0x1}, {0x9, 0x303, 0x7, 0x5}, {0x0, 0xa, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x7fffffff}, {0x3, 0x7, 0xfffffff9, 0x5}, {0x0, 0x5, 0x2, 0x8}, {0x6, 0xf, 0x6, 0x2}, {0x3, 0xffff0000, 0xf22, 0x2}, {0x4, 0x3, 0x4, 0x1ff}, {0x3, 0x4, 0x8, 0x5}, {0x6, 0x3, 0xea4}, {0xffffff7e, 0x80000001, 0x7, 0x80000001}, {0x2, 0x3188, 0x7000, 0x4}, {0x8, 0x5, 0x4, 0x8001}, {0x7, 0x800, 0xffff03ed, 0x400}, {0x3, 0x200, 0x4, 0x6}, {0x7, 0x4, 0xbc32, 0x4}, {0x8, 0xc45, 0x7639, 0x9}, {0x2, 0x8, 0x2400000, 0x3}, {0xe, 0x5a, 0x34fc, 0x7f}, {0x94c0, 0x0, 0x8, 0x6}, {0x9, 0x6, 0x7, 0x1}, {0x2, 0x7, 0xd73}, {0xffff, 0xc9, 0x1b, 0xe5}, {0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0x8871}, {0xc, 0x0, 0x63b8, 0x3}, {0x80, 0x6904c235, 0x401, 0xd7f}, {0x35792f16, 0x30, 0x1, 0x6}, {0x8, 0x1, 0xd0}, {0x20000000, 0x8, 0x6c, 0x1}, {0x101, 0x2086c4a2, 0xa, 0x1}, {0x40b77, 0x1, 0x5d2, 0x2}, {0x2, 0x2, 0x8, 0x5}, {0x918, 0x9, 0xfffffff8, 0x5}, {0xa16, 0x18c, 0x1, 0xd9fc}, {0x24, 0x9, 0xaf3, 0x4}, {0x1, 0x401, 0x2, 0x8}, {0x9, 0x0, 0x2, 0x1cb8}, {0xa460, 0x7, 0x9, 0x3ff}, {0x5419e79a, 0x2, 0x0, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x62, 0x5, 0x5, 0x7, 0x73b, 0xff, 0x4e43b74b, 0x1a, 0x800, 0x0, 0x100, 0x401, 0x5, 0x8000, 0x7ff, 0x7, 0x0, 0x8000, 0x80000000, 0x400, 0x80000000, 0x7fffffff, 0x7c, 0xb, 0x8, 0x6, 0x7f, 0x4, 0x10000, 0x0, 0xc875, 0x6, 0x7fffffff, 0xaff, 0x6, 0x14, 0x8, 0xe7b, 0x0, 0x0, 0x1, 0x67c, 0x9, 0x50d406ac, 0x22a, 0x8, 0x80000000, 0x3, 0x47d0, 0x5, 0x3, 0x40, 0x100, 0x4, 0x2c, 0x21, 0x1, 0x0, 0x3, 0x0, 0xdd9, 0x80, 0x95f5, 0xe304, 0x8, 0x2, 0xed, 0x7, 0x2, 0x2, 0x7868, 0x3, 0x200, 0x8, 0x4, 0x80, 0x5, 0x20000, 0xfffffffd, 0x80000001, 0x4, 0x9, 0x5, 0x4, 0xfffffffd, 0x88da, 0x6, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0x4, 0x4, 0x3, 0x8, 0x7fff, 0x4, 0x8, 0xe61f, 0x5d0b, 0xf6a, 0x4, 0x100010, 0x0, 0x81, 0x6, 0x1d6e, 0x8, 0x4, 0xa, 0x7, 0x4, 0xffffffff, 0x8, 0x1, 0x4, 0xfffffff0, 0x2869e7b5, 0x1, 0x5, 0x80, 0x3, 0x5, 0x1, 0x4, 0x4, 0xfffffff9, 0x2, 0x3ff, 0x7, 0x8000, 0x4, 0x6012, 0x8, 0x6, 0xc6f6, 0x3, 0xfffffffc, 0x3, 0x81, 0xfffffffb, 0x1, 0x21, 0x4, 0x9, 0x6, 0x9, 0x5, 0xb0fb, 0x5, 0xfff, 0xf1b9, 0x0, 0x4, 0x401, 0x1, 0x8, 0x9, 0x2, 0x0, 0x8, 0x7, 0x100, 0x4, 0x7ff, 0xfff, 0x80000001, 0x9, 0x2, 0x1, 0x81, 0x1, 0x8, 0x8, 0x6, 0x7, 0xbd79, 0x7ff, 0xffffffff, 0xb, 0xffff, 0xae1c, 0x3, 0x1, 0x0, 0x200, 0x5, 0x48, 0x6, 0x4, 0x0, 0x5, 0x5e, 0x0, 0x7fffffff, 0x7, 0x8, 0x100, 0x0, 0xd1be, 0x8, 0x3f4, 0xffffffff, 0x10000, 0x0, 0x0, 0x10000, 0x2, 0x136, 0x2, 0x6, 0x4, 0x3, 0x8, 0x7fff800, 0x3b, 0x4, 0x80000000, 0x7, 0x6, 0x6, 0x4, 0x6, 0x5, 0x6, 0x9, 0xc6e, 0x0, 0x800, 0x400, 0x302e, 0x0, 0x100, 0x1, 0x10000, 0x2, 0x4, 0x0, 0xbd, 0x0, 0x80000000, 0x2, 0x800, 0x8, 0xfffffffb, 0x3, 0x472, 0x4, 0x200, 0x8, 0x11, 0x7, 0x82ca]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xad0}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0xf024, 0x1, 0x2, 0xfffffffd, 0x23, 0x8, 0x35, 0x10001, 0x2, 0x2, 0x3, 0x200, 0xf2340606, 0x0, 0xc44, 0x2, 0xc, 0x5, 0x7, 0x3, 0x7, 0x10, 0x6, 0x0, 0x7fffffff, 0x5, 0xace, 0x54, 0x7, 0x3, 0x8, 0xfff, 0xd076, 0x7, 0xffff6b30, 0xc1, 0x7, 0xffffffd2, 0x7fffffff, 0x1, 0xfffffff8, 0xfffffffd, 0x1000, 0x5, 0x0, 0x10, 0x80, 0x10001, 0x301, 0xd5a4, 0x43, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x1cf, 0xb, 0x0, 0x2, 0x5, 0xa303, 0x1, 0x8, 0x0, 0x2, 0xf07, 0x7, 0x5, 0x48, 0x101, 0xf75, 0x8, 0xe, 0x6, 0x4, 0x66, 0x80000000, 0x6, 0x4, 0x0, 0x800, 0x7f, 0x2, 0x9, 0x0, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2800, 0xae00000, 0x1, 0x2, 0x66fc, 0xc, 0x1, 0x0, 0x4, 0x81, 0x7fff, 0x401, 0x2, 0x5, 0x8001, 0x1b3, 0x1, 0x7, 0x2, 0x3ff, 0x7, 0xa, 0x7, 0x8, 0x5, 0x56, 0x7, 0x101, 0x80000000, 0xffffff81, 0x101, 0x100, 0x4, 0x9, 0x5, 0x401, 0x10000, 0x3, 0x68d8, 0xfb, 0x4, 0x80000000, 0xc6bf, 0x1, 0x9, 0x80000000, 0xff, 0x8, 0x101, 0x3, 0x5, 0x1, 0x8, 0x7fffffff, 0x4, 0x8, 0x80000000, 0x6, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x8, 0x4, 0xfffffc00, 0x9, 0xc, 0x8000000, 0x200, 0x1, 0xc, 0x0, 0x3ff, 0x5, 0x8, 0x0, 0x9, 0x2, 0x8000, 0x60, 0x0, 0x8, 0x3, 0x401, 0x7, 0x0, 0x7, 0x1, 0xfffffffa, 0x7, 0xa4, 0x6, 0x7fff, 0x10001, 0xff5, 0x3, 0x10001, 0x5, 0x3, 0x1, 0x1, 0x6, 0x7, 0x101, 0x9d, 0xffffffff, 0x3, 0x0, 0x3e, 0x3, 0x8, 0x4, 0x1000, 0x5d, 0x89, 0x10001, 0x40, 0x9, 0x2, 0x1, 0x7, 0xa39, 0xe, 0x3, 0x9, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x200, 0xe6aa, 0x5, 0x100, 0x7fff, 0x3, 0x5, 0xf, 0x0, 0xfff, 0x1, 0xfffffff8, 0xfffffffe, 0x8, 0x9, 0x4, 0x2, 0xfff, 0x5, 0x1000, 0x9, 0x9, 0x1, 0x5, 0x200, 0x7, 0x156, 0xf0, 0x5, 0x2]}]}, @TCA_U32_MARK={0x10, 0xa, {0x7fff, 0xa35}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x48}]}}]}, 0x1cd8}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0xfffffffe, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast}}}}}}, 0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup(r12) 1.849915414s ago: executing program 7 (id=6230): syz_io_uring_setup(0x496e, &(0x7f0000000140)={0x0, 0xbeb6, 0x8, 0x2, 0x4d}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x6}, @window={0x3, 0x8, 0x7ff}, @timestamp, @mss={0x2, 0x3ff}, @mss={0x2, 0x80}], 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r5 = gettid() move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a77000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000380), 0x2) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) open(0x0, 0x6440, 0xb9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x1a6}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633", 0x14c}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709", 0xa2}], 0x5}, 0x200048c0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.849572434s ago: executing program 1 (id=6231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x4, 0x5f, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x28040680) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x0, 0x82, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r3}}, 0x18) ioctl$TCXONC(r5, 0x540a, 0x2) close(r5) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0x0, 0xe00) r7 = syz_open_procfs(0x0, 0x0) read$watch_queue(r7, &(0x7f0000001540)=""/4111, 0x100f) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) write$nbd(r8, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) sendfile(r4, r4, 0x0, 0x200000) 1.842222335s ago: executing program 6 (id=6232): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee339084eeef16f162471f4000000080007"], 0x58}}, 0x800) 1.628541245s ago: executing program 7 (id=6233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000004000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffa640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800e000100636f6e6e6c696d6974000000140002"], 0xc8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1.317090309s ago: executing program 6 (id=6234): syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x3c, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x200, 0x0, 0x4, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x5}, @generic={0xe8, 0x2}, @fastopen={0x22, 0xf, "52c0835ee22ced8e62648dd726"}, @sack={0x5, 0xa, [0x9, 0x8]}]}}}}}}}}, 0x0) 1.095219418s ago: executing program 6 (id=6235): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) lseek(0xffffffffffffffff, 0x36, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) chdir(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 188.044532ms ago: executing program 8 (id=6236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x40, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000024c0)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)={{0x0, 0x5, 0x9, 0x7, 0x7, 0xffffffff, 0x3, 0x7, 0x7336, 0x9, 0x3c, 0x0, 0x4, 0x7ff, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000700)={r5, r6, "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", "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"}) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x9100, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r13 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r13, 0x227f, &(0x7f0000000100)) 0s ago: executing program 5 (id=6237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1158e3b975e78980}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xbb8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7fffffff}}, './file0\x00'}) connect$qrtr(r5, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) kernel console output (not intermixed with test programs): +0x22a/0x250 [ 2087.441155][T28623] ? __secure_computing+0xe2/0x2a0 [ 2087.441183][T28623] syscall_trace_enter+0xaa/0x160 [ 2087.441208][T28623] __do_fast_syscall_32+0x99/0x2b0 [ 2087.441231][T28623] ? lockdep_hardirqs_on+0x9c/0x150 [ 2087.441268][T28623] do_fast_syscall_32+0x34/0x80 [ 2087.441290][T28623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2087.441317][T28623] RIP: 0023:0xf70ae539 [ 2087.441335][T28623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2087.441354][T28623] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001bc [ 2087.441377][T28623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2087.441391][T28623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2087.441404][T28623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2087.441417][T28623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2087.441430][T28623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2087.441461][T28623] [ 2087.724760][ T30] audit: type=1326 audit(1752749259.195:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.747696][ T30] audit: type=1326 audit(1752749259.195:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.758990][T28623] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 2087.770525][ T30] audit: type=1326 audit(1752749259.195:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.801173][ T30] audit: type=1326 audit(1752749259.195:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.826180][ T30] audit: type=1326 audit(1752749259.195:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.848954][ T30] audit: type=1326 audit(1752749259.195:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.1.6017" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2087.918356][ T45] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2087.929468][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2088.008210][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2088.017323][ T45] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2088.026348][T11895] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2088.034498][ T45] usb 1-1: Product: syz [ 2088.040771][ T45] usb 1-1: Manufacturer: syz [ 2088.048202][ T45] usb 1-1: SerialNumber: syz [ 2088.073459][ T45] usb 1-1: config 0 descriptor?? [ 2088.086685][ T5957] usbhid 2-1:0.0: can't add hid device: -71 [ 2088.092322][ T45] usb 1-1: selecting invalid altsetting 0 [ 2088.115168][ T5957] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2088.156010][ T5957] usb 2-1: USB disconnect, device number 123 [ 2088.190060][T11895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.211465][T11895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.242499][T11895] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2088.267862][T11895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.300852][T11895] usb 5-1: config 0 descriptor?? [ 2088.315325][T28628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6018'. [ 2088.662675][T28631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.678579][T28631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.835999][ T5957] usb 1-1: USB disconnect, device number 11 [ 2088.935000][T28654] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6024'. [ 2089.661021][ T5957] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2089.687930][T27808] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2089.817935][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 2089.825275][ T5957] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2089.844387][ T5957] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2089.854704][T27808] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2089.863954][T27808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.887212][ T5957] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2089.904204][T27808] usb 2-1: config 0 descriptor?? [ 2089.918046][ T5957] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2089.932001][T27808] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2089.943223][ T5957] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2089.959909][ T5957] usb 3-1: config 0 has no interface number 0 [ 2089.966341][ T5957] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2089.979971][ T5957] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2089.990899][ T5957] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2090.001451][ T5957] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2090.015614][ T5957] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2090.022851][ T5957] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2090.053067][ T5957] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2090.074009][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.091739][ T5957] usb 3-1: Product: syz [ 2090.101009][ T5957] usb 3-1: Manufacturer: syz [ 2090.111226][ T5957] usb 3-1: SerialNumber: syz [ 2090.137621][ T5957] usb 3-1: config 0 descriptor?? [ 2090.162263][ T5957] usb 3-1: selecting invalid altsetting 2 [ 2090.178482][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2090.338338][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 2090.345223][T27808] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 2090.361724][ T45] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2090.374146][ T45] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2090.387493][ T45] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2090.403403][ T45] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2090.414985][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2090.436000][ T45] usb 1-1: config 0 has no interface number 0 [ 2090.454298][ T45] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2090.468461][ T45] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2090.485936][ T45] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2090.495981][ T45] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2090.514654][T11895] usbhid 5-1:0.0: can't add hid device: -71 [ 2090.534385][T11895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2090.542676][ T45] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2090.555605][ T45] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2090.564065][T11895] usb 5-1: USB disconnect, device number 119 [ 2090.578896][ T45] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2090.595993][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.605381][ T45] usb 1-1: Product: syz [ 2090.612927][ T45] usb 1-1: Manufacturer: syz [ 2090.617575][ T45] usb 1-1: SerialNumber: syz [ 2090.639214][ T45] usb 1-1: config 0 descriptor?? [ 2090.660692][ T45] usb 1-1: selecting invalid altsetting 2 [ 2090.660878][ C0] usb 3-1: async_complete: urb error -71 [ 2090.672286][ C0] usb 3-1: async_complete: urb error -71 [ 2090.678010][ C0] usb 3-1: async_complete: urb error -71 [ 2090.714288][ T5957] get_1284_register: usb error -71 [ 2090.726317][ T5957] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 2090.746634][T27808] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 2090.791619][ T5957] usb 3-1: USB disconnect, device number 102 [ 2090.966810][T27808] usb 2-1: USB disconnect, device number 124 [ 2091.207056][T28670] fuse: Unknown parameter 'ÿÿÿÿ' [ 2091.237092][ C1] usb 1-1: async_complete: urb error -71 [ 2091.242885][ C1] usb 1-1: async_complete: urb error -71 [ 2091.248655][ C1] usb 1-1: async_complete: urb error -71 [ 2091.277247][ T45] get_1284_register: usb error -71 [ 2091.284901][ T45] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 2091.345444][ T45] usb 1-1: USB disconnect, device number 12 [ 2092.087381][T28681] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6034'. [ 2092.132252][T16961] IPVS: starting estimator thread 0... [ 2092.173089][T28681] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2092.299514][T28683] IPVS: using max 37 ests per chain, 88800 per kthread [ 2092.324982][T28687] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 2092.594996][T28689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6036'. [ 2093.321083][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.328667][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 2094.008587][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2094.338263][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 2094.355731][ T45] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2094.407681][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.482812][ T45] usb 1-1: config 0 descriptor?? [ 2094.734856][T28707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.756359][T28707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.775664][ T45] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2094.821941][ T45] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2094.853644][ T45] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2094.878213][T11895] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2095.060088][T11895] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2095.082437][T11895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.110581][T11895] usb 6-1: config 0 descriptor?? [ 2095.130624][T11895] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2095.328386][ T24] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2095.388675][ T5932] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2095.478395][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2095.485653][ T24] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2095.494513][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2095.503781][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2095.512925][ T24] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2095.522456][T11895] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 2095.530286][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2095.539740][ T24] usb 3-1: config 0 has no interface number 0 [ 2095.545939][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2095.557401][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2095.567493][ T24] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2095.579274][ T24] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2095.592655][ T24] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2095.600850][ T24] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2095.612798][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2095.623053][ T5932] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2095.632945][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2095.648548][ T24] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2095.658452][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.666495][ T24] usb 3-1: Product: syz [ 2095.671317][ T24] usb 3-1: Manufacturer: syz [ 2095.675996][ T24] usb 3-1: SerialNumber: syz [ 2095.681904][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2095.692519][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.703362][ T24] usb 3-1: config 0 descriptor?? [ 2095.713386][ T5932] usb 2-1: Product: syz [ 2095.717628][ T5932] usb 2-1: Manufacturer: syz [ 2095.724541][ T24] usb 3-1: selecting invalid altsetting 2 [ 2095.732385][ T5932] usb 2-1: SerialNumber: syz [ 2095.924632][T11895] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 2095.929522][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 2095.929542][ T30] audit: type=1326 audit(1752749267.875:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2095.964192][ T30] audit: type=1326 audit(1752749267.875:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2095.991305][ T30] audit: type=1326 audit(1752749267.875:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2095.992169][ T5932] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2096.022095][ T30] audit: type=1326 audit(1752749267.875:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.053807][ T30] audit: type=1326 audit(1752749267.945:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.078289][ T30] audit: type=1326 audit(1752749267.945:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.100775][ T30] audit: type=1326 audit(1752749267.975:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.143369][ T5957] usb 6-1: USB disconnect, device number 22 [ 2096.161189][ T30] audit: type=1326 audit(1752749267.975:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.197126][ T30] audit: type=1326 audit(1752749267.975:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.229743][ T30] audit: type=1326 audit(1752749268.005:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28719 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 2096.340552][ C1] usb 3-1: async_complete: urb error -71 [ 2096.346365][ C1] usb 3-1: async_complete: urb error -71 [ 2096.352128][ C1] usb 3-1: async_complete: urb error -71 [ 2096.362922][ T24] get_1284_register: usb error -71 [ 2096.368544][ T24] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 2096.381415][ T24] usb 3-1: USB disconnect, device number 103 [ 2096.763009][T28732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6049'. [ 2096.772791][T28732] veth0_to_bond: entered allmulticast mode [ 2096.786609][T27808] usb 2-1: USB disconnect, device number 125 [ 2096.794605][T28732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6049'. [ 2096.807115][T27808] usblp0: removed [ 2097.170588][T28735] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6050'. [ 2097.889008][T28743] gretap0: entered promiscuous mode [ 2097.894338][T28743] gretap0: entered allmulticast mode [ 2097.966563][T28743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2098.129391][T28753] [U]  [ 2098.868366][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.874735][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.456291][ T5168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2101.468345][ T5168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2101.478368][ T5168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2101.489001][ T5168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2101.496652][ T5168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2101.773105][T28769] trusted_key: encrypted_key: master key parameter ' [ 2101.773105][T28769] ' is invalid [ 2102.218628][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2102.383803][ T24] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2102.393320][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.414603][ T24] usb 6-1: config 0 descriptor?? [ 2102.425629][T28766] chnl_net:caif_netlink_parms(): no params data found [ 2102.442465][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2102.726625][T28766] bridge0: port 1(bridge_slave_0) entered blocking state [ 2102.735233][T28766] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.742836][T28766] bridge_slave_0: entered allmulticast mode [ 2102.751371][T28766] bridge_slave_0: entered promiscuous mode [ 2102.759897][T28766] bridge0: port 2(bridge_slave_1) entered blocking state [ 2102.769512][T28766] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.776806][T28766] bridge_slave_1: entered allmulticast mode [ 2102.784694][T28766] bridge_slave_1: entered promiscuous mode [ 2102.859241][T28766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2102.863215][ T24] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 2102.880668][T28766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2102.991828][T28766] team0: Port device team_slave_0 added [ 2103.282763][ T24] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 2103.500710][ T24] usb 6-1: USB disconnect, device number 23 [ 2103.560762][ T5848] Bluetooth: hci5: command tx timeout [ 2103.666085][ T3460] bond0 (unregistering): Released all slaves [ 2103.680675][ T3460] bond1 (unregistering): Released all slaves [ 2103.697295][ T3460] bond2 (unregistering): Released all slaves [ 2103.752822][T27808] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2103.845972][ T3460] bond3 (unregistering): Released all slaves [ 2103.860661][ T3460] bond4 (unregistering): Released all slaves [ 2103.928234][T27808] usb 2-1: Using ep0 maxpacket: 16 [ 2103.939627][T27808] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 2103.963699][T27808] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2103.994624][T27808] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2104.010586][T27808] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2104.020406][T27808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2104.029452][T27808] usb 2-1: config 0 has no interface number 0 [ 2104.035616][T27808] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2104.047209][T27808] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2104.057136][T27808] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2104.059528][ T3460] bond5 (unregistering): Released all slaves [ 2104.067096][T27808] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2104.087695][T27808] usb 2-1: config 0 interface 125 has no altsetting 0 [ 2104.103074][T27808] usb 2-1: config 0 interface 125 has no altsetting 2 [ 2104.124368][T28766] team0: Port device team_slave_1 added [ 2104.137930][T27808] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2104.147033][T27808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.155696][T27808] usb 2-1: Product: syz [ 2104.161057][T27808] usb 2-1: Manufacturer: syz [ 2104.178021][T27808] usb 2-1: SerialNumber: syz [ 2104.185546][T27808] usb 2-1: config 0 descriptor?? [ 2104.211865][T27808] usb 2-1: selecting invalid altsetting 2 [ 2104.219477][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6062'. [ 2104.284659][T28766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.300784][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.338346][T28766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.359238][ T3460] tipc: Disabling bearer [ 2104.364788][ T3460] tipc: Left network mode [ 2104.370719][T28766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.377792][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2104.404628][T28766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.423904][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2104.423920][ T30] audit: type=1326 audit(1752749276.375:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.463154][ T30] audit: type=1326 audit(1752749276.375:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.546176][ T30] audit: type=1326 audit(1752749276.375:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.575178][ T30] audit: type=1326 audit(1752749276.375:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.607689][ T30] audit: type=1326 audit(1752749276.435:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.643893][T28766] hsr_slave_0: entered promiscuous mode [ 2104.651290][T28766] hsr_slave_1: entered promiscuous mode [ 2104.657701][T28766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2104.665410][ T30] audit: type=1326 audit(1752749276.435:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.678397][T28766] Cannot create hsr debugfs directory [ 2104.688232][ T30] audit: type=1326 audit(1752749276.445:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.739872][ T30] audit: type=1326 audit(1752749276.445:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.774227][ C0] usb 2-1: async_complete: urb error -71 [ 2104.780021][ C0] usb 2-1: async_complete: urb error -71 [ 2104.785783][ C0] usb 2-1: async_complete: urb error -71 [ 2104.793201][T27808] get_1284_register: usb error -71 [ 2104.798458][T27808] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 2104.811420][T27808] usb 2-1: USB disconnect, device number 126 [ 2104.827865][ T30] audit: type=1326 audit(1752749276.445:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2104.901238][ T30] audit: type=1326 audit(1752749276.475:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.1.6061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2105.163618][ T3460] hsr_slave_1: left promiscuous mode [ 2105.468923][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2105.640676][ T5848] Bluetooth: hci5: command tx timeout [ 2105.646490][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2105.679620][ T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2105.692942][ T24] usb 6-1: config 0 has no interface number 0 [ 2105.699876][ T24] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2105.725765][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2105.737717][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.746487][ T24] usb 6-1: Product: syz [ 2105.751009][ T24] usb 6-1: Manufacturer: syz [ 2105.755651][ T24] usb 6-1: SerialNumber: syz [ 2105.767408][ T24] usb 6-1: config 0 descriptor?? [ 2105.777412][ T24] smsc75xx v1.0.0 [ 2105.781505][ T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2105.792282][ T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 2105.985507][T28798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.994248][T28798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2106.874664][ T3460] IPVS: stop unused estimator thread 0... [ 2107.226605][T28766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2107.243120][T28766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2107.263075][T28766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2107.296080][T28766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2107.511371][T28766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2107.546802][T28766] 8021q: adding VLAN 0 to HW filter on device team0 [ 2107.572482][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.579714][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2107.613849][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.621037][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2107.702185][T28766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2107.718322][ T5848] Bluetooth: hci5: command tx timeout [ 2107.736085][T28766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2107.843415][T28833] FAULT_INJECTION: forcing a failure. [ 2107.843415][T28833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2107.900960][T28833] CPU: 0 UID: 0 PID: 28833 Comm: syz.1.6065 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2107.900997][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2107.901012][T28833] Call Trace: [ 2107.901021][T28833] [ 2107.901031][T28833] dump_stack_lvl+0x189/0x250 [ 2107.901064][T28833] ? __pfx____ratelimit+0x10/0x10 [ 2107.901098][T28833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2107.901124][T28833] ? __pfx__printk+0x10/0x10 [ 2107.901154][T28833] ? __might_fault+0xb0/0x130 [ 2107.901197][T28833] should_fail_ex+0x414/0x560 [ 2107.901235][T28833] _copy_from_user+0x2d/0xb0 [ 2107.901274][T28833] do_ip_getsockopt+0x25f/0x1b60 [ 2107.901307][T28833] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 2107.901330][T28833] ? register_lock_class+0x51/0x320 [ 2107.901357][T28833] ? __lock_acquire+0xab9/0xd20 [ 2107.901386][T28833] ? __mutex_trylock_common+0x153/0x260 [ 2107.901415][T28833] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2107.901447][T28833] ? rcu_is_watching+0x15/0xb0 [ 2107.901471][T28833] ? trace_contention_end+0x39/0x120 [ 2107.901498][T28833] ? __mutex_lock+0x330/0xe80 [ 2107.901527][T28833] ? __pfx___might_resched+0x10/0x10 [ 2107.901554][T28833] ip_getsockopt+0xbb/0x220 [ 2107.901585][T28833] ? __pfx_ip_getsockopt+0x10/0x10 [ 2107.901608][T28833] ? aa_sk_perm+0x81e/0x950 [ 2107.901635][T28833] ? sock_common_getsockopt+0x2d/0xb0 [ 2107.901658][T28833] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2107.901678][T28833] smc_getsockopt+0x1ba/0x380 [ 2107.901713][T28833] ? __pfx_smc_getsockopt+0x10/0x10 [ 2107.901744][T28833] ? aa_sock_opt_perm+0x74/0x110 [ 2107.901775][T28833] ? bpf_lsm_socket_getsockopt+0x9/0x20 [ 2107.901810][T28833] do_sock_getsockopt+0x35d/0x650 [ 2107.901839][T28833] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2107.901886][T28833] ? __fget_files+0x2a/0x420 [ 2107.901913][T28833] ? __fget_files+0x3a0/0x420 [ 2107.901941][T28833] ? __fget_files+0x2a/0x420 [ 2107.901978][T28833] __ia32_sys_getsockopt+0x1a5/0x250 [ 2107.902022][T28833] __do_fast_syscall_32+0xb6/0x2b0 [ 2107.902045][T28833] ? lockdep_hardirqs_on+0x9c/0x150 [ 2107.902083][T28833] do_fast_syscall_32+0x34/0x80 [ 2107.902105][T28833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2107.902131][T28833] RIP: 0023:0xf70ae539 [ 2107.902150][T28833] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2107.902169][T28833] RSP: 002b:00000000f501855c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2107.902192][T28833] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 2107.902206][T28833] RDX: 0000000000000484 RSI: 0000000080000000 RDI: 0000000080000080 [ 2107.902220][T28833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2107.902232][T28833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2107.902246][T28833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2107.902277][T28833] [ 2107.902890][T28766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2108.541810][T28766] veth0_vlan: entered promiscuous mode [ 2108.592266][T11895] usb 6-1: USB disconnect, device number 24 [ 2108.623142][T28766] veth1_vlan: entered promiscuous mode [ 2108.686217][T28766] veth0_macvtap: entered promiscuous mode [ 2108.717130][T28766] veth1_macvtap: entered promiscuous mode [ 2108.742366][T28766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2108.772068][T28766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2108.793258][T28766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.906620][T28766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.928667][T28766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.937485][T28766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2109.629295][T28856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6067'. [ 2109.798177][ T5848] Bluetooth: hci5: command tx timeout [ 2109.828834][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.888009][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.021005][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2110.078450][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.153555][T28863] veth1_macvtap: left promiscuous mode [ 2110.172947][T28863] macsec0: entered promiscuous mode [ 2110.207062][T28866] veth1_macvtap: entered promiscuous mode [ 2110.213358][T28866] macsec0: left promiscuous mode [ 2110.334204][T28863] vlan2: entered allmulticast mode [ 2110.363694][T28863] team0: Device vlan2 is already an upper device of the team interface [ 2110.503298][T28873] Cannot find set identified by id 0 to match [ 2110.605218][T28876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6058'. [ 2110.683536][T28871] trusted_key: encrypted_key: master key parameter ' [ 2110.683536][T28871] ' is invalid [ 2111.362677][ T5168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2111.373772][ T5168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2111.382214][ T5168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2111.397760][ T5168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2111.413845][ T5168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2112.645897][T28887] chnl_net:caif_netlink_parms(): no params data found [ 2112.684690][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2112.695964][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2112.707117][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2112.716343][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2112.724939][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2113.252255][T28887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.259632][T28887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.266865][T28887] bridge_slave_0: entered allmulticast mode [ 2113.275001][T28887] bridge_slave_0: entered promiscuous mode [ 2113.289459][T28887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.296607][T28887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.303909][T28887] bridge_slave_1: entered allmulticast mode [ 2113.311592][T28887] bridge_slave_1: entered promiscuous mode [ 2113.380702][T28887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.404579][T28887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.478344][ T5168] Bluetooth: hci4: command tx timeout [ 2113.510832][T28887] team0: Port device team_slave_0 added [ 2113.527350][T28887] team0: Port device team_slave_1 added [ 2113.576153][T28887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2113.583472][T28887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2113.612385][T28887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2113.635231][T28887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2113.642903][T28887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2113.669769][T28887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2113.687656][T28906] chnl_net:caif_netlink_parms(): no params data found [ 2113.903551][T28926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6074'. [ 2113.956660][T28887] hsr_slave_0: entered promiscuous mode [ 2113.981092][T28887] hsr_slave_1: entered promiscuous mode [ 2113.997704][T28887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2114.018176][T28887] Cannot create hsr debugfs directory [ 2114.375115][T28906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.384016][T28906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.391434][T28906] bridge_slave_0: entered allmulticast mode [ 2114.399799][T28906] bridge_slave_0: entered promiscuous mode [ 2114.511550][T28906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.536947][T28906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.554623][T28906] bridge_slave_1: entered allmulticast mode [ 2114.571809][T28906] bridge_slave_1: entered promiscuous mode [ 2114.768005][ T5168] Bluetooth: hci6: command tx timeout [ 2114.884201][T28906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2114.909106][T28935] trusted_key: encrypted_key: master key parameter ' [ 2114.909106][T28935] ' is invalid [ 2114.973708][T28906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2115.245396][T28940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6079'. [ 2115.436123][T28906] team0: Port device team_slave_0 added [ 2115.463896][T28906] team0: Port device team_slave_1 added [ 2115.558879][ T5168] Bluetooth: hci4: command tx timeout [ 2115.598800][T28906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.601823][T28942] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6080'. [ 2115.605778][T28906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.605845][T28906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.676954][T28906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.678023][T27810] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2115.684083][T28906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.718565][T28906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.814836][T28906] hsr_slave_0: entered promiscuous mode [ 2115.821837][T28906] hsr_slave_1: entered promiscuous mode [ 2115.835095][T28906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2115.843491][T28906] Cannot create hsr debugfs directory [ 2115.864885][T27810] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2115.893111][T28887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2115.901975][T27810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.928962][T27810] usb 2-1: config 0 descriptor?? [ 2115.940069][T27810] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2115.991101][T28887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2116.012251][T28887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2116.039115][T28887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2116.166527][T28945] trusted_key: encrypted_key: master key parameter ' [ 2116.166527][T28945] ' is invalid [ 2116.379299][T28887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.460256][T27810] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 2116.497740][T28887] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.593691][T20452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.600951][T20452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.651878][T20452] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.659101][T20452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.681364][T28906] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2116.811428][T28906] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2116.838917][ T5168] Bluetooth: hci6: command tx timeout [ 2116.855362][T28906] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2116.868366][T27810] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 2116.903693][T28906] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2117.030559][T28887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2117.075798][T28723] usb 2-1: USB disconnect, device number 127 [ 2117.229518][T28887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.251033][T28906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2117.301007][T28906] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.329799][T27833] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.336982][T27833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.358527][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.365664][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.417469][T28887] veth0_vlan: entered promiscuous mode [ 2117.460787][T28887] veth1_vlan: entered promiscuous mode [ 2117.543990][T28887] veth0_macvtap: entered promiscuous mode [ 2117.574932][T28887] veth1_macvtap: entered promiscuous mode [ 2117.613665][T28906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.638134][ T5168] Bluetooth: hci4: command tx timeout [ 2117.647634][T28887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.711577][T28887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.741789][T28887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.758792][T28887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.768250][T28887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.777318][T28887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.940578][T28906] veth0_vlan: entered promiscuous mode [ 2118.028213][T27808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2118.037101][T28906] veth1_vlan: entered promiscuous mode [ 2118.125587][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.144715][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.181333][T27808] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 2118.207862][T27808] usb 2-1: config 0 has no interface number 0 [ 2118.225584][T28906] veth0_macvtap: entered promiscuous mode [ 2118.228875][T27808] usb 2-1: config 0 interface 94 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2118.252927][T27808] usb 2-1: config 0 interface 94 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 0 [ 2118.264921][T27833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.275489][T28906] veth1_macvtap: entered promiscuous mode [ 2118.285826][T27808] usb 2-1: config 0 interface 94 altsetting 5 has an endpoint descriptor with address 0x69, changing to 0x9 [ 2118.304711][T27833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.307893][T27808] usb 2-1: config 0 interface 94 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2118.323165][ T5905] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2118.362724][T27808] usb 2-1: config 0 interface 94 has no altsetting 0 [ 2118.375423][T28906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2118.387543][T27808] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2f.16 [ 2118.419865][T28906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.427174][T27808] usb 2-1: New USB device strings: Mfr=1, Product=50, SerialNumber=157 [ 2118.449285][T27808] usb 2-1: Product: syz [ 2118.453567][T27808] usb 2-1: Manufacturer: syz [ 2118.479509][T28906] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.487894][T27808] usb 2-1: SerialNumber: syz [ 2118.494835][T28906] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.504949][T27808] usb 2-1: config 0 descriptor?? [ 2118.513923][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.534447][T28906] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.549846][T27808] kvaser_usb 2-1:0.94: error -ENODEV: Cannot get usb endpoint(s) [ 2118.555971][T28906] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.566921][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.609648][ T5905] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2118.647587][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.786587][ T5905] usb 3-1: config 0 descriptor?? [ 2118.824411][T27807] usb 2-1: USB disconnect, device number 2 [ 2118.931884][ T5168] Bluetooth: hci6: command tx timeout [ 2119.205484][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.221468][T28981] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6088'. [ 2119.231984][ T5905] cp2112 0003:10C4:EA90.00E8: unknown main item tag 0x0 [ 2119.254513][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.268428][ T5905] cp2112 0003:10C4:EA90.00E8: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2119.378587][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.424638][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.433167][ T5905] cp2112 0003:10C4:EA90.00E8: error requesting version [ 2119.453139][ T5905] cp2112 0003:10C4:EA90.00E8: probe with driver cp2112 failed with error -32 [ 2119.598326][T28986] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6089'. [ 2119.728352][ T5168] Bluetooth: hci4: command tx timeout [ 2120.247163][T28999] trusted_key: encrypted_key: master key parameter ' [ 2120.247163][T28999] ' is invalid [ 2120.411773][T28723] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2120.855387][T28723] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2120.864649][T28723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.909287][T28723] usb 6-1: config 0 descriptor?? [ 2120.923991][T28723] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2121.013027][ T5168] Bluetooth: hci6: command tx timeout [ 2121.325480][T28723] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2121.352663][T28723] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2121.552676][T28723] usb 3-1: USB disconnect, device number 104 [ 2121.604496][ T5932] usb 6-1: USB disconnect, device number 25 [ 2122.295075][T29033] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6103'. [ 2123.038271][T28723] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2123.207917][T28723] usb 7-1: Using ep0 maxpacket: 8 [ 2123.214917][T28723] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 2123.228927][T28723] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 2123.278351][T28723] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2123.304753][T28723] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 2123.316872][T28723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 2123.335522][T28723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2123.367064][T28723] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2123.413413][T28723] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 2123.414532][T29042] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.443300][T28723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.464320][T28723] usb 7-1: config 0 descriptor?? [ 2123.486129][T28723] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 2123.534305][T28723] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2123.687331][T29049] netlink: 'syz.1.6108': attribute type 10 has an invalid length. [ 2123.695941][T29049] veth1_vlan: left allmulticast mode [ 2123.704864][T29049] bond0: (slave macvlan0): Releasing backup interface [ 2123.715580][T29049] veth1_vlan: entered allmulticast mode [ 2123.741544][T29049] team0: Port device macvlan0 added [ 2123.755049][T29039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.768950][T29039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.137181][T29063] netlink: 'syz.5.6113': attribute type 13 has an invalid length. [ 2125.178358][T27810] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2125.244291][T29063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2125.342214][T27810] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2125.355088][T27810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.372041][T27810] usb 2-1: Product: syz [ 2125.376449][T27810] usb 2-1: Manufacturer: syz [ 2125.382462][T27810] usb 2-1: SerialNumber: syz [ 2125.390315][T27810] usb 2-1: config 0 descriptor?? [ 2125.436854][T29065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6114'. [ 2125.632302][T27810] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2125.715496][ T24] usb 7-1: USB disconnect, device number 2 [ 2125.788540][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2125.852329][ T24] kobil_sct 7-1:0.0: device disconnected [ 2125.937453][T29070] trusted_key: encrypted_key: master key parameter ' [ 2125.937453][T29070] ' is invalid [ 2126.044345][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2126.044363][ T30] audit: type=1326 audit(1752749297.995:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.262176][ T30] audit: type=1326 audit(1752749298.025:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.329695][ T30] audit: type=1326 audit(1752749298.025:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.420038][ T30] audit: type=1326 audit(1752749298.025:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.529493][ T30] audit: type=1326 audit(1752749298.025:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.573990][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.604608][ T30] audit: type=1326 audit(1752749298.025:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.657904][ T30] audit: type=1326 audit(1752749298.025:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.713422][ T30] audit: type=1326 audit(1752749298.025:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.743365][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.774539][ T30] audit: type=1326 audit(1752749298.025:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.839912][ T30] audit: type=1326 audit(1752749298.025:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.1.6112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2126.903247][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.220944][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.267683][T27810] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2127.298299][T27810] usb 2-1: USB disconnect, device number 3 [ 2127.568410][ T49] bridge_slave_1: left allmulticast mode [ 2127.574114][ T49] bridge_slave_1: left promiscuous mode [ 2127.597640][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.624010][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2127.633961][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2127.644213][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2127.657024][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2127.668209][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2127.680581][ T49] bridge_slave_0: left allmulticast mode [ 2127.718322][ T49] bridge_slave_0: left promiscuous mode [ 2127.724149][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.626282][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2128.653123][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2128.667656][ T49] bond0 (unregistering): Released all slaves [ 2129.220459][ T49] hsr_slave_0: left promiscuous mode [ 2129.247007][ T49] hsr_slave_1: left promiscuous mode [ 2129.264802][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2129.340426][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2129.364457][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2129.376732][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2129.492706][ T49] veth1_macvtap: left promiscuous mode [ 2129.499164][ T49] veth0_macvtap: left promiscuous mode [ 2129.504912][ T49] veth1_vlan: left promiscuous mode [ 2129.510328][ T49] veth0_vlan: left promiscuous mode [ 2129.857973][ T5168] Bluetooth: hci4: command tx timeout [ 2130.482608][T29124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6125'. [ 2130.745318][ T49] team0 (unregistering): Port device team_slave_1 removed [ 2130.797565][ T49] team0 (unregistering): Port device team_slave_0 removed [ 2131.616099][T29081] chnl_net:caif_netlink_parms(): no params data found [ 2131.879890][ T5168] Bluetooth: hci4: command tx timeout [ 2131.894889][T29081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.906771][T29081] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.923811][T29081] bridge_slave_0: entered allmulticast mode [ 2131.944781][T29081] bridge_slave_0: entered promiscuous mode [ 2131.960454][T29081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.975768][T29081] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.984082][T29081] bridge_slave_1: entered allmulticast mode [ 2131.998179][T27810] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2132.000339][T29081] bridge_slave_1: entered promiscuous mode [ 2132.083891][T29081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.099435][T29081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.163443][T27810] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2132.186669][T27810] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2132.187331][T29081] team0: Port device team_slave_0 added [ 2132.205074][T29081] team0: Port device team_slave_1 added [ 2132.216095][T27810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2132.227362][T27810] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2132.247697][T27810] usb 6-1: Product: syz [ 2132.252111][T27810] usb 6-1: Manufacturer: syz [ 2132.256833][T27810] usb 6-1: SerialNumber: syz [ 2132.285230][T27810] usb 6-1: config 0 descriptor?? [ 2132.302462][T27810] usb 6-1: selecting invalid altsetting 0 [ 2132.306234][T29081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.323175][T29081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.349135][ C1] vkms_vblank_simulate: vblank timer overrun [ 2132.386633][T29081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.445124][T29081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.474188][T29081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.500120][ C1] vkms_vblank_simulate: vblank timer overrun [ 2132.546177][T29081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2132.651905][T29081] hsr_slave_0: entered promiscuous mode [ 2132.658964][T29081] hsr_slave_1: entered promiscuous mode [ 2132.665356][T29081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2132.684533][T29081] Cannot create hsr debugfs directory [ 2132.779644][T29137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.793762][T29137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.813460][ T24] usb 6-1: USB disconnect, device number 26 [ 2132.832172][T27810] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2132.993091][T27810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.004430][T27810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2133.023194][T27810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2133.034668][T27810] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2133.059542][T27810] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2133.076418][T27810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2133.094889][T27810] usb 2-1: Manufacturer: syz [ 2133.103612][T27810] usb 2-1: config 0 descriptor?? [ 2133.460531][T27810] rc_core: IR keymap rc-hauppauge not found [ 2133.474680][T27810] Registered IR keymap rc-empty [ 2133.503264][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.547987][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.598872][T27810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2133.640936][T27810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input174 [ 2133.703070][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.738022][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.769026][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.788937][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.843523][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.878435][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.918376][T27808] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2133.926794][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.945883][T29081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2133.958563][ T5168] Bluetooth: hci4: command tx timeout [ 2133.965157][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2133.977642][T29081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2133.995515][T29081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2134.005473][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2134.024736][T29081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2134.041317][T27810] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2134.075570][T27810] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2134.115031][T27808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.155248][T27810] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2134.168282][T27808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.219428][T27808] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2134.234622][T27808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.299871][T27808] usb 6-1: config 0 descriptor?? [ 2134.491373][T29081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2134.537380][T29081] 8021q: adding VLAN 0 to HW filter on device team0 [ 2134.553691][T27833] bridge0: port 1(bridge_slave_0) entered blocking state [ 2134.561032][T27833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2134.584770][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 2134.592014][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.661430][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6129'. [ 2134.673188][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6129'. [ 2134.734869][T27808] cp2112 0003:10C4:EA90.00E9: unknown main item tag 0x0 [ 2134.745833][T27807] usb 2-1: USB disconnect, device number 4 [ 2134.794028][T27808] cp2112 0003:10C4:EA90.00E9: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2134.867068][T29081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.929733][T27808] cp2112 0003:10C4:EA90.00E9: error requesting version [ 2134.950703][T27808] cp2112 0003:10C4:EA90.00E9: probe with driver cp2112 failed with error -32 [ 2134.966952][T29081] veth0_vlan: entered promiscuous mode [ 2134.990395][T29081] veth1_vlan: entered promiscuous mode [ 2135.057104][T29081] veth0_macvtap: entered promiscuous mode [ 2135.086040][T29081] veth1_macvtap: entered promiscuous mode [ 2135.120472][T29081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.136216][T29081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2135.154345][T29081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.166456][T29081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.176558][T29081] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.186656][T29081] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.392523][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2135.415003][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2135.460755][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2135.469208][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.039851][ T5168] Bluetooth: hci4: command tx timeout [ 2136.606999][T29213] trusted_key: encrypted_key: master key parameter ' [ 2136.606999][T29213] ' is invalid [ 2136.878367][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6135'. [ 2137.068197][T27808] usb 6-1: USB disconnect, device number 27 [ 2137.428351][T27810] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2137.455688][T29227] lo: entered promiscuous mode [ 2137.461593][T29227] lo: entered allmulticast mode [ 2137.471825][T29227] tunl0: entered promiscuous mode [ 2137.476963][T29227] tunl0: entered allmulticast mode [ 2137.493365][T29227] gre0: entered promiscuous mode [ 2137.539989][T29227] gre0: entered allmulticast mode [ 2137.564366][T29227] gretap0: entered promiscuous mode [ 2137.573457][T29227] gretap0: entered allmulticast mode [ 2137.617090][T29227] erspan0: entered promiscuous mode [ 2137.626433][T29227] erspan0: entered allmulticast mode [ 2137.665698][T27810] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2137.729742][T27810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.758518][T29227] ip_vti0: entered promiscuous mode [ 2137.782754][T27810] usb 2-1: config 0 descriptor?? [ 2137.809597][T29227] ip_vti0: entered allmulticast mode [ 2137.845908][T27810] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2137.853237][T29227] ip6_vti0: entered promiscuous mode [ 2137.858950][T29227] ip6_vti0: entered allmulticast mode [ 2137.866024][T29227] sit0: entered promiscuous mode [ 2137.871128][T29227] sit0: entered allmulticast mode [ 2137.878912][T29227] ip6tnl0: entered promiscuous mode [ 2137.884178][T29227] ip6tnl0: entered allmulticast mode [ 2137.895076][T29227] ip6gre0: entered promiscuous mode [ 2137.900462][T27807] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2137.908137][T29227] ip6gre0: entered allmulticast mode [ 2137.914957][T29227] syz_tun: entered promiscuous mode [ 2137.920283][T29227] syz_tun: entered allmulticast mode [ 2137.926454][T29227] ip6gretap0: entered promiscuous mode [ 2137.933233][T29227] ip6gretap0: entered allmulticast mode [ 2137.941897][T29227] bridge0: entered promiscuous mode [ 2137.947324][T29227] bridge0: entered allmulticast mode [ 2137.970787][T29227] vcan0: entered promiscuous mode [ 2137.988592][T29227] vcan0: entered allmulticast mode [ 2138.083542][T29227] bond0: entered promiscuous mode [ 2138.093378][T29227] bond_slave_0: entered promiscuous mode [ 2138.128253][T27807] usb 6-1: Using ep0 maxpacket: 32 [ 2138.150912][T27807] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 2138.166539][T29227] bond_slave_1: entered promiscuous mode [ 2138.191544][T29227] bond0: entered allmulticast mode [ 2138.207090][T27807] usb 6-1: config 0 has no interface number 0 [ 2138.216998][T29227] bond_slave_0: entered allmulticast mode [ 2138.230941][T27807] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 256 [ 2138.248081][T27810] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 2138.256495][T27807] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2138.261872][T29227] bond_slave_1: entered allmulticast mode [ 2138.283488][T29227] team0: entered promiscuous mode [ 2138.284054][T27807] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 2138.309530][T29227] team_slave_0: entered promiscuous mode [ 2138.324166][T29227] team_slave_1: entered promiscuous mode [ 2138.342105][T29227] team0: entered allmulticast mode [ 2138.347417][T27807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.366146][T29227] team_slave_0: entered allmulticast mode [ 2138.374589][T29227] team_slave_1: entered allmulticast mode [ 2138.407149][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2138.417544][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2138.427038][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2138.436299][T27807] usb 6-1: Product: syz [ 2138.450444][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2138.460053][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2138.530472][T27807] usb 6-1: Manufacturer: syz [ 2138.535150][T27807] usb 6-1: SerialNumber: syz [ 2138.568178][T29227] dummy0: entered promiscuous mode [ 2138.573340][T29227] dummy0: entered allmulticast mode [ 2138.600604][T27807] usb 6-1: config 0 descriptor?? [ 2138.628441][T29229] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2138.629346][T29227] nlmon0: entered promiscuous mode [ 2138.656238][T29227] nlmon0: entered allmulticast mode [ 2138.663959][T27810] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 2138.689757][T27807] redrat3 6-1:0.83: Couldn't find all endpoints [ 2138.876350][T27807] usb 2-1: USB disconnect, device number 5 [ 2139.003950][T29227] caif0: entered promiscuous mode [ 2139.014578][T29227] caif0: entered allmulticast mode [ 2139.026398][T29227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2140.529783][ T5848] Bluetooth: hci7: command tx timeout [ 2140.607660][T29243] chnl_net:caif_netlink_parms(): no params data found [ 2140.906377][T28723] usb 6-1: USB disconnect, device number 28 [ 2141.157991][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2141.198293][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2141.213472][T29243] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.237446][T29243] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.268240][T29243] bridge_slave_0: entered allmulticast mode [ 2141.306093][T29243] bridge_slave_0: entered promiscuous mode [ 2141.327651][T29243] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.335340][T29243] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.357890][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 2141.364296][T29243] bridge_slave_1: entered allmulticast mode [ 2141.384038][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 2141.391897][T29243] bridge_slave_1: entered promiscuous mode [ 2141.393989][ T5932] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 2141.445041][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2141.682949][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2141.693832][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2141.714063][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.734558][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2141.748567][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2141.768788][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2141.900741][ T5932] usb 2-1: config 0 has no interface number 0 [ 2141.973975][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2141.993221][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2142.011731][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.030186][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2142.053712][ T24] usb 7-1: Product: syz [ 2142.061044][ T24] usb 7-1: Manufacturer: syz [ 2142.065771][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2142.076135][ T24] usb 7-1: SerialNumber: syz [ 2142.096517][ T5932] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2142.153358][ T5932] usb 2-1: config 0 interface 125 has no altsetting 0 [ 2142.157019][T29243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2142.180211][T29290] fuse: Bad value for 'fd' [ 2142.215933][T29243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2142.223160][ T5932] usb 2-1: config 0 interface 125 has no altsetting 2 [ 2142.281181][ T5932] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2142.304214][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.361783][ T5932] usb 2-1: Product: syz [ 2142.366051][ T5932] usb 2-1: Manufacturer: syz [ 2142.379260][ T5932] usb 2-1: SerialNumber: syz [ 2142.438764][ T5932] usb 2-1: config 0 descriptor?? [ 2142.452051][ T5932] usb 2-1: selecting invalid altsetting 2 [ 2142.494142][T29243] team0: Port device team_slave_0 added [ 2142.596353][T29243] team0: Port device team_slave_1 added [ 2142.608776][ T5848] Bluetooth: hci7: command tx timeout [ 2142.678502][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2142.678553][ T30] audit: type=1326 audit(1752749314.635:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2142.727902][ T30] audit: type=1326 audit(1752749314.635:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2142.766343][ T30] audit: type=1326 audit(1752749314.635:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2142.826931][ T30] audit: type=1326 audit(1752749314.635:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2142.885738][ T30] audit: type=1326 audit(1752749314.635:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2142.887415][T29243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.907919][ C0] vkms_vblank_simulate: vblank timer overrun [ 2142.943629][ T30] audit: type=1326 audit(1752749314.635:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2143.005660][ T30] audit: type=1326 audit(1752749314.695:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2143.048250][T29243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2143.074171][ C0] vkms_vblank_simulate: vblank timer overrun [ 2143.104899][T29243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.123085][ T30] audit: type=1326 audit(1752749314.695:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2143.161604][ C1] usb 2-1: async_complete: urb error -71 [ 2143.167447][ C1] usb 2-1: async_complete: urb error -71 [ 2143.173242][ C1] usb 2-1: async_complete: urb error -71 [ 2143.221954][ T5932] get_1284_register: usb error -71 [ 2143.227319][ T5932] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 2143.244366][ T30] audit: type=1326 audit(1752749314.715:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2143.250235][T29243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.291337][ T5932] usb 2-1: USB disconnect, device number 6 [ 2143.349867][ T30] audit: type=1326 audit(1752749314.715:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.1.6142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2143.367391][T29243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2143.397952][ C0] vkms_vblank_simulate: vblank timer overrun [ 2143.512609][T29243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2143.754058][T29243] hsr_slave_0: entered promiscuous mode [ 2143.779452][T29243] hsr_slave_1: entered promiscuous mode [ 2143.791021][T29243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2143.808342][T29243] Cannot create hsr debugfs directory [ 2144.021990][ T24] usb 7-1: 0:2 : does not exist [ 2144.041828][ T24] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 2144.128620][ T24] usb 7-1: USB disconnect, device number 3 [ 2144.217132][T28789] udevd[28789]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2144.247993][T16961] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2144.434913][T16961] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 2144.453805][T16961] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 2144.477856][T16961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.507950][T16961] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2144.527214][T16961] usb 2-1: config 0 has no interface number 0 [ 2144.537388][T16961] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2144.565531][T16961] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2144.597521][T16961] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2144.631119][T16961] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2144.672024][T29243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2144.680973][ T5848] Bluetooth: hci7: command tx timeout [ 2144.681359][T16961] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2144.714979][T29243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2144.716258][T16961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.737626][T29243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2144.769968][T29243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2144.788452][T16961] usb 2-1: config 0 descriptor?? [ 2144.815681][T16961] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2145.006134][T16961] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 2145.020888][T16961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2145.038338][T16961] usb 2-1: MIDIStreaming interface descriptor not found [ 2145.085899][T29330] trusted_key: encrypted_key: master key parameter ' [ 2145.085899][T29330] ' is invalid [ 2145.159670][T29243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2145.188148][T16961] usb 2-1: USB disconnect, device number 7 [ 2145.311076][T29243] 8021q: adding VLAN 0 to HW filter on device team0 [ 2145.375331][T20452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.382570][T20452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.491969][T27833] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.499208][T27833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2145.625137][T29346] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2145.770569][T29243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.962448][T29243] veth0_vlan: entered promiscuous mode [ 2146.427362][T29243] veth1_vlan: entered promiscuous mode [ 2146.768444][ T5848] Bluetooth: hci7: command tx timeout [ 2147.093907][T29243] veth0_macvtap: entered promiscuous mode [ 2147.140888][T29243] veth1_macvtap: entered promiscuous mode [ 2147.365952][T29243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2147.409515][T29243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2147.588641][T29243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.749014][T29243] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.849044][T29243] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.902584][T29243] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.136893][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2148.368418][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 2148.373733][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.389221][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.402043][ T5932] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 2148.431883][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2148.482848][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2148.503113][ T5932] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2148.520120][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2148.551100][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.567852][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.575345][ T5932] usb 2-1: config 0 has no interface number 0 [ 2148.610257][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2148.654068][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2148.693921][ T5932] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2148.740203][ T5932] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2148.838456][ T5932] usb 2-1: config 0 interface 125 has no altsetting 0 [ 2148.850786][ T5932] usb 2-1: config 0 interface 125 has no altsetting 2 [ 2148.879805][ T5932] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2148.889284][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.907660][ T5932] usb 2-1: Product: syz [ 2148.923079][ T5932] usb 2-1: Manufacturer: syz [ 2148.975107][ T5932] usb 2-1: SerialNumber: syz [ 2149.011400][ T5932] usb 2-1: config 0 descriptor?? [ 2149.043038][ T5932] usb 2-1: selecting invalid altsetting 2 [ 2149.239959][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2149.240006][ T30] audit: type=1326 audit(1752749321.185:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2149.268260][ C1] vkms_vblank_simulate: vblank timer overrun [ 2149.285890][T27807] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2149.339824][T29386] @: renamed from vlan0 (while UP) [ 2149.374194][ T30] audit: type=1326 audit(1752749321.195:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2149.437376][ T30] audit: type=1326 audit(1752749321.195:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2149.526818][ C1] usb 2-1: async_complete: urb error -71 [ 2149.532609][ C1] usb 2-1: async_complete: urb error -71 [ 2149.538392][ C1] usb 2-1: async_complete: urb error -71 [ 2149.544149][ C1] usb 2-1: async_complete: urb error -71 [ 2149.613605][ T5932] get_1284_register: usb error -71 [ 2149.844002][T27807] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2149.876052][ T5932] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 2149.888194][ T30] audit: type=1326 audit(1752749321.195:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2149.946039][T27807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.956312][T27807] usb 9-1: Product: syz [ 2149.963736][T27807] usb 9-1: Manufacturer: syz [ 2149.999016][ T30] audit: type=1326 audit(1752749321.195:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.025697][T27807] usb 9-1: SerialNumber: syz [ 2150.036232][T27807] usb 9-1: config 0 descriptor?? [ 2150.052247][ T30] audit: type=1326 audit(1752749321.195:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.088034][T27807] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2150.094436][ T30] audit: type=1326 audit(1752749321.275:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.101748][ T5932] usb 2-1: USB disconnect, device number 8 [ 2150.117650][ T30] audit: type=1326 audit(1752749321.275:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.335091][ T30] audit: type=1326 audit(1752749321.355:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.397188][ T30] audit: type=1326 audit(1752749321.355:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29369 comm="syz.1.6156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 2150.600097][T29399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6158'. [ 2151.431970][T27807] gspca_sunplus: reg_r err -110 [ 2152.975822][T29424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6167'. [ 2153.078070][T27808] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2153.239700][T27808] usb 7-1: Using ep0 maxpacket: 32 [ 2153.269179][T27808] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 2153.277404][T27808] usb 7-1: config 0 has no interface number 0 [ 2153.321352][T27808] usb 7-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 256 [ 2153.367048][T27808] usb 7-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2153.407422][T27808] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 2153.426887][T27808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.449715][T27808] usb 7-1: Product: syz [ 2153.453918][T27808] usb 7-1: Manufacturer: syz [ 2153.485018][T27808] usb 7-1: SerialNumber: syz [ 2153.517721][T27808] usb 7-1: config 0 descriptor?? [ 2153.534023][T29419] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2153.545378][T27808] redrat3 7-1:0.83: Couldn't find all endpoints [ 2153.648096][T29427] trusted_key: encrypted_key: master key parameter ' [ 2153.648096][T29427] ' is invalid [ 2153.814765][T28723] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2154.222729][T28723] usb 2-1: Using ep0 maxpacket: 32 [ 2154.406344][T28723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2154.420624][T28723] usb 2-1: config 253 has an invalid interface number: 227 but max is 1 [ 2154.429550][T28723] usb 2-1: config 253 has an invalid interface number: 202 but max is 1 [ 2154.438896][T28723] usb 2-1: config 253 has no interface number 0 [ 2154.447555][T28723] usb 2-1: config 253 has no interface number 1 [ 2154.457553][T28723] usb 2-1: config 253 interface 227 has no altsetting 0 [ 2154.476201][T28723] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2154.493502][T28723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.506506][T28723] usb 2-1: Product: syz [ 2154.512511][T28723] usb 2-1: Manufacturer: syz [ 2154.521825][T28723] usb 2-1: SerialNumber: syz [ 2154.864986][T28723] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2154.877147][ T77] usb 2-1: Failed to submit usb control message: -71 [ 2154.896447][ T77] usb 2-1: unable to send the bmi data to the device: -71 [ 2154.907945][ T77] usb 2-1: unable to get target info from device [ 2154.926181][ T77] usb 2-1: could not get target info (-71) [ 2154.928625][T28723] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2154.948238][ T3493] usb 2-1: Failed to submit usb control message: -71 [ 2154.956604][ T77] usb 2-1: could not probe fw (-71) [ 2154.964639][ T3493] usb 2-1: unable to send the bmi data to the device: -71 [ 2154.964957][T28723] usb 2-1: USB disconnect, device number 9 [ 2154.981960][ T3493] usb 2-1: unable to get target info from device [ 2154.988762][ T3493] usb 2-1: could not get target info (-71) [ 2155.000006][ T3493] usb 2-1: could not probe fw (-71) [ 2155.219070][ T45] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2155.268174][ T45] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2155.297154][ T45] usb 1-1: USB disconnect, device number 13 [ 2155.908994][T27807] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 2155.944497][T27807] usb 9-1: USB disconnect, device number 2 [ 2155.958125][T28723] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2156.157904][T28723] usb 2-1: Using ep0 maxpacket: 8 [ 2156.169560][T28723] usb 2-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 2156.217614][T28723] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 2156.260828][T28723] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2156.280613][ T45] usb 7-1: USB disconnect, device number 4 [ 2156.347939][T28723] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 2156.357022][T28723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.459273][T28723] usb 2-1: config 0 descriptor?? [ 2156.475034][T28723] kobil_sct 2-1:0.0: required endpoints missing [ 2156.754208][T29444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.786571][T29444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.799681][ T45] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2156.960668][ T45] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2156.991549][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2157.013724][T29458] FAULT_INJECTION: forcing a failure. [ 2157.013724][T29458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.041018][ T45] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2157.079932][ T45] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2157.093774][T29458] CPU: 0 UID: 0 PID: 29458 Comm: syz.7.6175 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2157.093800][T29458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2157.093813][T29458] Call Trace: [ 2157.093822][T29458] [ 2157.093830][T29458] dump_stack_lvl+0x189/0x250 [ 2157.093859][T29458] ? __pfx____ratelimit+0x10/0x10 [ 2157.093891][T29458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2157.093915][T29458] ? __pfx__printk+0x10/0x10 [ 2157.093943][T29458] ? __might_fault+0xb0/0x130 [ 2157.093977][T29458] should_fail_ex+0x414/0x560 [ 2157.094011][T29458] _copy_from_user+0x2d/0xb0 [ 2157.094036][T29458] get_compat_msghdr+0xad/0x4a0 [ 2157.094070][T29458] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2157.094108][T29458] ___sys_sendmsg+0x193/0x2a0 [ 2157.094138][T29458] ? __pfx____sys_sendmsg+0x10/0x10 [ 2157.094198][T29458] ? __fget_files+0x2a/0x420 [ 2157.094224][T29458] ? __fget_files+0x3a0/0x420 [ 2157.094260][T29458] __sys_sendmsg+0x164/0x220 [ 2157.094287][T29458] ? __pfx___sys_sendmsg+0x10/0x10 [ 2157.094328][T29458] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2157.094348][T29458] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.094382][T29458] __do_fast_syscall_32+0xb6/0x2b0 [ 2157.094403][T29458] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.094438][T29458] do_fast_syscall_32+0x34/0x80 [ 2157.094459][T29458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2157.094484][T29458] RIP: 0023:0xf709e539 [ 2157.094502][T29458] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2157.094526][T29458] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2157.094547][T29458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 2157.094561][T29458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.094573][T29458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.094585][T29458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2157.094597][T29458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2157.094625][T29458] [ 2157.109005][ T45] usb 7-1: Product: syz [ 2157.515076][ T45] usb 7-1: Manufacturer: syz [ 2157.521127][ T45] usb 7-1: SerialNumber: syz [ 2157.554097][ T45] usb 7-1: config 0 descriptor?? [ 2157.609830][ T45] usb 7-1: selecting invalid altsetting 0 [ 2157.678012][T27807] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 2157.697937][ T5905] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2157.805091][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.843718][T27807] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2157.857256][T27807] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2157.875693][ T5905] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2157.891736][ T5905] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2157.905806][T27807] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2157.917375][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2157.927063][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2157.946536][T27807] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2157.975001][T27807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.993509][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2158.005754][T27807] usb 9-1: Product: syz [ 2158.011049][T27807] usb 9-1: Manufacturer: syz [ 2158.015722][T27807] usb 9-1: SerialNumber: syz [ 2158.029414][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.044935][ T5905] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2158.057394][T29462] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2158.071897][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2158.084712][ T5905] usb 6-1: Product: syz [ 2158.089418][ T5905] usb 6-1: Manufacturer: syz [ 2158.112138][ T5905] cdc_wdm 6-1:1.0: skipping garbage [ 2158.119235][ T5905] cdc_wdm 6-1:1.0: skipping garbage [ 2158.130734][ T5905] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2158.136721][ T5905] cdc_wdm 6-1:1.0: Unknown control protocol [ 2158.162459][T29451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.182433][T29451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.211276][ T5932] usb 7-1: USB disconnect, device number 5 [ 2158.278809][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.356344][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.596313][ T77] bridge_slave_1: left allmulticast mode [ 2158.607728][ T77] bridge_slave_1: left promiscuous mode [ 2158.623776][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.634070][ T77] bridge_slave_0: left allmulticast mode [ 2158.640255][ T77] bridge_slave_0: left promiscuous mode [ 2158.646067][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.721915][T11895] usb 2-1: USB disconnect, device number 10 [ 2158.913994][T29462] loop6: detected capacity change from 0 to 7 [ 2158.966059][T29462] Dev loop6: unable to read RDB block 7 [ 2158.976834][T29462] loop6: unable to read partition table [ 2159.022341][T29462] loop6: partition table beyond EOD, truncated [ 2159.048361][T29462] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2159.093589][T27807] cdc_ncm 9-1:1.0: bind() failure [ 2159.145229][T27807] usb 9-1: USB disconnect, device number 3 [ 2159.280168][T29485] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2159.436804][T29481] trusted_key: encrypted_key: master key parameter ' [ 2159.436804][T29481] ' is invalid [ 2160.143116][ T45] usb 6-1: USB disconnect, device number 29 [ 2160.252013][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.276992][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2160.297754][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.304200][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.342528][ T77] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2160.357425][ T77] bond0 (unregistering): Released all slaves [ 2160.590842][ T77] tipc: Disabling bearer [ 2160.614787][ T77] tipc: Left network mode [ 2161.218996][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2161.418746][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.435286][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.495343][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2161.618701][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2161.629936][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.663052][ T45] usb 6-1: config 0 descriptor?? [ 2161.962879][ T77] hsr_slave_0: left promiscuous mode [ 2161.997885][ T77] hsr_slave_1: left promiscuous mode [ 2162.023214][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.063662][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.118330][ T45] plantronics 0003:047F:FFFF.00EA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2162.152206][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.209405][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.511215][ T77] veth1_macvtap: left promiscuous mode [ 2162.516820][ T77] veth0_macvtap: left promiscuous mode [ 2162.590194][ T77] veth1_vlan: left promiscuous mode [ 2162.605867][ T77] veth0_vlan: left promiscuous mode [ 2164.251898][T11895] usb 6-1: USB disconnect, device number 30 [ 2164.379375][T29543] netlink: 'syz.7.6192': attribute type 72 has an invalid length. [ 2164.387291][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6192'. [ 2164.628387][T11895] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2164.630105][T29545] FAULT_INJECTION: forcing a failure. [ 2164.630105][T29545] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.649349][T29545] CPU: 0 UID: 0 PID: 29545 Comm: syz.1.6193 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2164.649377][T29545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2164.649391][T29545] Call Trace: [ 2164.649401][T29545] [ 2164.649411][T29545] dump_stack_lvl+0x189/0x250 [ 2164.649443][T29545] ? __pfx____ratelimit+0x10/0x10 [ 2164.649489][T29545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2164.649513][T29545] ? __pfx__printk+0x10/0x10 [ 2164.649547][T29545] ? __pfx___might_resched+0x10/0x10 [ 2164.649571][T29545] ? fs_reclaim_acquire+0x7d/0x100 [ 2164.649603][T29545] should_fail_ex+0x414/0x560 [ 2164.649638][T29545] should_failslab+0xa8/0x100 [ 2164.649666][T29545] __kmalloc_noprof+0xcb/0x4f0 [ 2164.649688][T29545] ? kfree+0x4d/0x440 [ 2164.649716][T29545] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2164.649743][T29545] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2164.649766][T29545] ? tomoyo_domain+0xd9/0x130 [ 2164.649792][T29545] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2164.649821][T29545] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2164.649863][T29545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2164.649890][T29545] ? __lock_acquire+0xab9/0xd20 [ 2164.649948][T29545] ? __pfx_current_check_access_path+0x10/0x10 [ 2164.649982][T29545] ? lookup_one_qstr_excl_raw+0x126/0x280 [ 2164.650015][T29545] tomoyo_path_mkdir+0xa8/0xe0 [ 2164.650036][T29545] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 2164.650060][T29545] ? __pfx_filename_create+0x10/0x10 [ 2164.650087][T29545] security_path_mkdir+0x171/0x380 [ 2164.650110][T29545] do_mkdirat+0x1bd/0x590 [ 2164.650134][T29545] ? __pfx_do_mkdirat+0x10/0x10 [ 2164.650157][T29545] ? getname_flags+0x1e5/0x540 [ 2164.650188][T29545] __ia32_sys_mkdirat+0x87/0xa0 [ 2164.650211][T29545] __do_fast_syscall_32+0xb6/0x2b0 [ 2164.650232][T29545] ? lockdep_hardirqs_on+0x9c/0x150 [ 2164.650269][T29545] do_fast_syscall_32+0x34/0x80 [ 2164.650289][T29545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2164.650313][T29545] RIP: 0023:0xf70ae539 [ 2164.650329][T29545] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2164.650346][T29545] RSP: 002b:00000000f509e3c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 2164.650366][T29545] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 2164.650380][T29545] RDX: 00000000000001ff RSI: 0000000080002280 RDI: 0000000000000000 [ 2164.650392][T29545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2164.650403][T29545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2164.650415][T29545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2164.650443][T29545] [ 2164.931649][T29545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2165.024020][T11895] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2165.038100][T11895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2165.047579][T11895] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2165.072285][T11895] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2165.096795][T11895] usb 6-1: Product: syz [ 2165.105677][T11895] usb 6-1: Manufacturer: syz [ 2165.142231][T11895] usb 6-1: SerialNumber: syz [ 2165.168516][T11895] usb 6-1: config 0 descriptor?? [ 2165.249540][T11895] usb 6-1: selecting invalid altsetting 0 [ 2165.297507][T29553] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 2165.758907][T29541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.778324][ T77] team0 (unregistering): Port device team_slave_1 removed [ 2165.784130][T29541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.821681][T16961] usb 6-1: USB disconnect, device number 31 [ 2165.923097][ T77] team0 (unregistering): Port device team_slave_0 removed [ 2166.727887][T27810] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2166.752963][T29553] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2166.794734][T29555] vlan2: entered allmulticast mode [ 2166.858468][T29555] geneve1: entered allmulticast mode [ 2166.921012][T27810] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2166.934240][T27810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.985453][T27810] usb 7-1: config 0 descriptor?? [ 2167.013824][T27810] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2167.426475][T27810] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 2167.932847][T27810] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 2168.143688][T27808] usb 7-1: USB disconnect, device number 6 [ 2168.425410][T29577] trusted_key: encrypted_key: master key parameter ' [ 2168.425410][T29577] ' is invalid [ 2169.186564][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.418735][T29609] lo: entered promiscuous mode [ 2169.423674][T29609] lo: entered allmulticast mode [ 2169.434219][T29609] tunl0: entered promiscuous mode [ 2169.439405][T29609] tunl0: entered allmulticast mode [ 2169.445385][T29609] gre0: entered promiscuous mode [ 2169.450465][T29609] gre0: entered allmulticast mode [ 2169.457179][T29609] gretap0: entered promiscuous mode [ 2169.462518][T29609] gretap0: entered allmulticast mode [ 2169.588498][T29609] erspan0: entered promiscuous mode [ 2169.608125][T29609] erspan0: entered allmulticast mode [ 2169.614351][T29609] ip_vti0: entered promiscuous mode [ 2169.619926][T29609] ip_vti0: entered allmulticast mode [ 2169.626907][T29609] ip6_vti0: entered promiscuous mode [ 2169.632348][T29609] ip6_vti0: entered allmulticast mode [ 2169.643068][T29609] sit0: entered promiscuous mode [ 2171.057929][T29609] sit0: entered allmulticast mode [ 2171.063984][T29609] ip6tnl0: entered promiscuous mode [ 2171.088153][T29609] ip6tnl0: entered allmulticast mode [ 2171.095031][T29609] ip6gre0: entered promiscuous mode [ 2171.100396][T29609] ip6gre0: entered allmulticast mode [ 2171.107243][T29609] syz_tun: entered promiscuous mode [ 2171.112567][T29609] syz_tun: entered allmulticast mode [ 2171.119320][T29609] ip6gretap0: entered promiscuous mode [ 2171.124847][T29609] ip6gretap0: entered allmulticast mode [ 2171.131142][T29609] bridge0: entered promiscuous mode [ 2171.136492][T29609] bridge0: entered allmulticast mode [ 2171.142669][T29609] vcan0: entered promiscuous mode [ 2171.148277][T29609] vcan0: entered allmulticast mode [ 2171.154386][T29609] bond0: entered promiscuous mode [ 2171.160046][T29609] bond_slave_0: entered promiscuous mode [ 2171.166174][T29609] bond_slave_1: entered promiscuous mode [ 2171.176759][T29609] bond0: entered allmulticast mode [ 2171.182084][T29609] bond_slave_0: entered allmulticast mode [ 2171.187915][T29609] bond_slave_1: entered allmulticast mode [ 2171.195334][T29609] team0: entered promiscuous mode [ 2171.200521][T29609] team_slave_0: entered promiscuous mode [ 2171.206602][T29609] team_slave_1: entered promiscuous mode [ 2171.212807][T29609] team0: entered allmulticast mode [ 2171.218063][T29609] team_slave_0: entered allmulticast mode [ 2171.223829][T29609] team_slave_1: entered allmulticast mode [ 2171.232065][T29609] dummy0: entered promiscuous mode [ 2171.237264][T29609] dummy0: entered allmulticast mode [ 2171.243427][T29609] nlmon0: entered promiscuous mode [ 2171.248686][T29609] nlmon0: entered allmulticast mode [ 2171.331658][T29609] caif0: entered promiscuous mode [ 2171.637995][T29609] caif0: entered allmulticast mode [ 2171.643333][T29609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2171.965829][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.419282][T28723] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2172.539004][T29622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2172.633108][T29627] netlink: 'syz.8.6210': attribute type 72 has an invalid length. [ 2172.677980][T28723] usb 6-1: Using ep0 maxpacket: 32 [ 2172.687300][T28723] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 2172.698242][T29627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6210'. [ 2172.700302][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.728551][T28723] usb 6-1: config 0 has no interface number 0 [ 2172.734695][T28723] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 256 [ 2172.846646][T28723] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2173.152797][T28723] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 2173.171534][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.207830][T28723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.261125][T28723] usb 6-1: Product: syz [ 2173.284715][T28723] usb 6-1: Manufacturer: syz [ 2173.322574][T28723] usb 6-1: SerialNumber: syz [ 2173.403070][T28723] usb 6-1: config 0 descriptor?? [ 2173.447929][T29623] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2173.500928][T28723] redrat3 6-1:0.83: Couldn't find all endpoints [ 2173.588602][T11895] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 2173.783484][T11895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.812651][T11895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2173.825143][T11895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2173.836449][T11895] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2173.852792][T11895] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2173.862421][T11895] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2173.870909][T11895] usb 9-1: Manufacturer: syz [ 2173.879512][T11895] usb 9-1: config 0 descriptor?? [ 2173.947943][T28723] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2174.155349][T28723] usb 7-1: Using ep0 maxpacket: 8 [ 2174.183304][T28723] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 2174.257839][T28723] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 2174.324791][T28723] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2174.378039][T28723] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 2174.380314][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.433723][T28723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 2174.433755][T28723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2174.433779][T28723] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2174.433825][T28723] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 2174.433851][T28723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.448643][T28723] usb 7-1: config 0 descriptor?? [ 2174.450227][T11895] rc_core: IR keymap rc-hauppauge not found [ 2174.450244][T11895] Registered IR keymap rc-empty [ 2174.450501][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.461931][T28723] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 2174.468428][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.474391][T28723] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2174.524335][T11895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2174.537157][T11895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input175 [ 2174.550978][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.570229][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.603179][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.620711][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.639323][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.659548][T29648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.660063][T29648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.668790][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2174.844419][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.125588][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.271406][T29653] FAULT_INJECTION: forcing a failure. [ 2175.271406][T29653] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.318921][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2175.329927][T29653] CPU: 1 UID: 0 PID: 29653 Comm: syz.7.6215 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2175.329954][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2175.329966][T29653] Call Trace: [ 2175.329977][T29653] [ 2175.329986][T29653] dump_stack_lvl+0x189/0x250 [ 2175.330014][T29653] ? __pfx____ratelimit+0x10/0x10 [ 2175.330045][T29653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2175.330069][T29653] ? __pfx__printk+0x10/0x10 [ 2175.330100][T29653] ? __pfx___might_resched+0x10/0x10 [ 2175.330121][T29653] ? fs_reclaim_acquire+0x7d/0x100 [ 2175.330157][T29653] should_fail_ex+0x414/0x560 [ 2175.330191][T29653] should_failslab+0xa8/0x100 [ 2175.330218][T29653] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2175.330239][T29653] ? vm_area_dup+0x2b/0x680 [ 2175.330269][T29653] vm_area_dup+0x2b/0x680 [ 2175.330297][T29653] __split_vma+0x1a9/0xa00 [ 2175.330322][T29653] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 2175.330352][T29653] ? __pfx___split_vma+0x10/0x10 [ 2175.330381][T29653] ? __lock_acquire+0xab9/0xd20 [ 2175.330409][T29653] vms_gather_munmap_vmas+0x2de/0x12b0 [ 2175.330438][T29653] ? __lock_acquire+0xab9/0xd20 [ 2175.330462][T29653] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2175.330501][T29653] do_vmi_align_munmap+0x25d/0x420 [ 2175.330537][T29653] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 2175.330593][T29653] ? mas_find+0x962/0xc10 [ 2175.330628][T29653] do_vmi_munmap+0x253/0x2e0 [ 2175.330653][T29653] mremap_at+0x1e4/0xc50 [ 2175.330679][T29653] ? __pfx_mremap_at+0x10/0x10 [ 2175.330696][T29653] ? mtree_load+0x655/0x700 [ 2175.330727][T29653] ? mtree_load+0x100/0x700 [ 2175.330759][T29653] ? __pfx_mtree_load+0x10/0x10 [ 2175.330810][T29653] __se_sys_mremap+0x89b/0xc00 [ 2175.330849][T29653] ? __pfx___se_sys_mremap+0x10/0x10 [ 2175.330866][T29653] ? ksys_write+0x22a/0x250 [ 2175.330897][T29653] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2175.330920][T29653] ? __ia32_sys_mremap+0x20/0xc0 [ 2175.330942][T29653] __do_fast_syscall_32+0xb6/0x2b0 [ 2175.330964][T29653] ? lockdep_hardirqs_on+0x9c/0x150 [ 2175.331000][T29653] do_fast_syscall_32+0x34/0x80 [ 2175.331021][T29653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2175.331046][T29653] RIP: 0023:0xf709e539 [ 2175.331063][T29653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2175.331081][T29653] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 2175.331102][T29653] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000c00000 [ 2175.331117][T29653] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000080c87000 [ 2175.331130][T29653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2175.331142][T29653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2175.331159][T29653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2175.331188][T29653] [ 2175.620698][ C1] vkms_vblank_simulate: vblank timer overrun [ 2175.789496][T27808] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 2175.968651][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2175.988805][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2176.009200][T11895] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2176.040420][T11895] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2176.049838][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2176.068267][T11895] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2176.110715][T27808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.164628][T27808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2176.194212][T11895] usb 6-1: USB disconnect, device number 32 [ 2176.223431][T27808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2176.264485][T27808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2176.319382][T27808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2176.336819][T27808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2176.345395][T27808] usb 2-1: Manufacturer: syz [ 2176.353386][T27808] usb 2-1: config 0 descriptor?? [ 2176.818902][ T49] bridge_slave_1: left allmulticast mode [ 2176.824609][ T49] bridge_slave_1: left promiscuous mode [ 2176.931950][T27808] rc_core: IR keymap rc-hauppauge not found [ 2176.948375][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.984492][T16961] usb 7-1: USB disconnect, device number 7 [ 2176.990554][T27808] Registered IR keymap rc-empty [ 2176.995590][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.014968][ T45] usb 9-1: USB disconnect, device number 4 [ 2177.067066][T16961] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2177.078878][T28723] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2177.108118][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.133158][ T49] bridge_slave_0: left allmulticast mode [ 2177.141053][T16961] kobil_sct 7-1:0.0: device disconnected [ 2177.157558][ T49] bridge_slave_0: left promiscuous mode [ 2177.201089][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 2177.219712][T27808] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 2177.260001][T27808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input176 [ 2177.283780][T28723] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 2177.291401][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6219'. [ 2177.298499][T28723] usb 6-1: config 0 has no interface number 0 [ 2177.330484][T28723] usb 6-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2177.339450][ T49] bridge_slave_1: left allmulticast mode [ 2177.347426][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.355172][ T49] bridge_slave_1: left promiscuous mode [ 2177.365439][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 2177.379484][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6216'. [ 2177.380387][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6219'. [ 2177.402705][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.408144][T28723] usb 6-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2177.438552][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.456787][ T49] bridge_slave_0: left allmulticast mode [ 2177.462794][T28723] usb 6-1: config 0 interface 222 has no altsetting 0 [ 2177.468036][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.487084][ T49] bridge_slave_0: left promiscuous mode [ 2177.494097][T28723] usb 6-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 2177.496400][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 2177.511429][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.525975][T28723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.548167][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.578080][T28723] usb 6-1: Product: syz [ 2177.581393][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.582267][T28723] usb 6-1: Manufacturer: syz [ 2177.582287][T28723] usb 6-1: SerialNumber: syz [ 2177.632475][T28723] usb 6-1: config 0 descriptor?? [ 2177.638291][T29672] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2177.655868][T29672] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2177.682302][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.738094][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.779129][T27808] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2177.831822][T27808] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2177.844754][T27808] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2177.884874][T27808] usb 2-1: USB disconnect, device number 11 [ 2177.913322][T28723] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.222/input/input177 [ 2178.042672][ C1] usbtouchscreen 6-1:0.222: usbtouch_irq - usb_submit_urb failed with result: -1 [ 2178.170170][ T5905] usb 6-1: USB disconnect, device number 33 [ 2178.170346][ C1] usbtouchscreen 6-1:0.222: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2178.268872][T29692] netlink: 'syz.7.6221': attribute type 1 has an invalid length. [ 2179.147912][T11895] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2179.347009][T11895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.360131][T11895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2179.396137][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.405109][T11895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2179.418088][T11895] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2179.439731][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2179.450506][ T49] bond0 (unregistering): Released all slaves [ 2179.456763][T11895] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2179.504444][T11895] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2179.563396][T11895] usb 6-1: Manufacturer: syz [ 2179.614875][T11895] usb 6-1: config 0 descriptor?? [ 2180.038054][T11895] rc_core: IR keymap rc-hauppauge not found [ 2180.075807][T11895] Registered IR keymap rc-empty [ 2180.101309][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.397913][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.523443][T11895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2180.608001][T11895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input179 [ 2180.645125][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.675700][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.714398][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.738382][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.762737][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.802392][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.829909][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.868379][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.920088][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2180.949086][T11895] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2181.010648][T11895] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2181.027707][T11895] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2181.029679][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2181.072912][T11895] usb 6-1: USB disconnect, device number 34 [ 2181.080103][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2181.124947][ T49] bond0 (unregistering): Released all slaves [ 2181.305999][ T49] bond1 (unregistering): Released all slaves [ 2181.353354][T29692] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2181.381541][T29697] vlan0: entered allmulticast mode [ 2181.417980][T29697] geneve1: entered allmulticast mode [ 2182.282370][T29745] [U]  [ 2182.395157][T29737] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6232'. [ 2184.054084][ T49] ------------[ cut here ]------------ [ 2184.060299][ T49] Have pending ack frames! [ 2184.161035][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x4d/0x60 [ 2184.171088][ T49] Modules linked in: [ 2184.177167][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2184.191070][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2184.201288][ T49] Workqueue: netns cleanup_net [ 2184.206112][ T49] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 2184.212555][ T49] Code: 00 00 e8 76 5f 71 fe 31 c0 5b c3 cc cc cc cc cc e8 b8 a6 e2 f6 c6 05 9c 64 ae 04 01 90 48 c7 c7 a0 e4 ae 8c e8 74 89 a6 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 2184.232646][ T49] RSP: 0018:ffffc90000b97610 EFLAGS: 00010246 [ 2184.238826][ T49] RAX: febdaa723e3a2500 RBX: ffff88806ccbb8c0 RCX: ffff888022ae1e00 [ 2184.246852][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2184.254960][ T49] RBP: ffffc90000b97718 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 2184.263010][ T49] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffffc90000b97680 [ 2184.271079][ T49] R13: ffff888056f29630 R14: ffff88805c912fa8 R15: 0000000000000001 [ 2184.280515][ T49] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 2184.290504][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2184.297093][ T49] CR2: 000000002e407ffc CR3: 0000000048afa000 CR4: 00000000003526f0 [ 2184.305105][ T49] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2184.313147][ T49] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2184.321164][ T49] Call Trace: [ 2184.324446][ T49] [ 2184.327383][ T49] idr_for_each+0x1b5/0x290 [ 2184.331938][ T49] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 2184.338098][ T49] ? __pfx_idr_for_each+0x10/0x10 [ 2184.343155][ T49] ? kobject_put+0x270/0x480 [ 2184.347861][ T49] ? kfree+0x18e/0x440 [ 2184.351980][ T49] ieee80211_free_hw+0xc6/0x480 [ 2184.356874][ T49] mac80211_hwsim_del_radio+0x2de/0x460 [ 2184.362733][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2184.368994][ T49] hwsim_exit_net+0x584/0x640 [ 2184.373708][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2184.379040][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2184.386963][ T49] ops_undo_list+0x49a/0x990 [ 2184.393048][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 2184.398468][ T49] cleanup_net+0x4c5/0x800 [ 2184.402939][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 2184.407995][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 2184.413233][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 2184.419052][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 2184.424823][ T49] process_scheduled_works+0xae1/0x17b0 [ 2184.430532][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 2184.436559][ T49] worker_thread+0x8a0/0xda0 [ 2184.441332][ T49] kthread+0x70e/0x8a0 [ 2184.445441][ T49] ? __pfx_worker_thread+0x10/0x10 [ 2184.450634][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.455275][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 2184.460613][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 2184.465851][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.470536][ T49] ret_from_fork+0x3fc/0x770 [ 2184.475164][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 2184.480332][ T49] ? __switch_to_asm+0x39/0x70 [ 2184.486365][ T49] ? __switch_to_asm+0x33/0x70 [ 2184.492197][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.496840][ T49] ret_from_fork_asm+0x1a/0x30 [ 2184.501681][ T49] [ 2184.504720][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2184.512004][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2184.523983][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2184.534047][ T49] Workqueue: netns cleanup_net [ 2184.538837][ T49] Call Trace: [ 2184.542131][ T49] [ 2184.545084][ T49] dump_stack_lvl+0x99/0x250 [ 2184.549680][ T49] ? __asan_memcpy+0x40/0x70 [ 2184.554278][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2184.559490][ T49] ? __pfx__printk+0x10/0x10 [ 2184.564108][ T49] panic+0x2db/0x790 [ 2184.568009][ T49] ? __pfx_panic+0x10/0x10 [ 2184.572460][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 2184.577442][ T49] __warn+0x31b/0x4b0 [ 2184.581438][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2184.587000][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2184.592561][ T49] report_bug+0x2be/0x4f0 [ 2184.596911][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2184.602479][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 2184.608046][ T49] ? ieee80211_free_ack_frame+0x4f/0x60 [ 2184.613620][ T49] handle_bug+0x84/0x160 [ 2184.617876][ T49] exc_invalid_op+0x1a/0x50 [ 2184.622391][ T49] asm_exc_invalid_op+0x1a/0x20 [ 2184.627239][ T49] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 2184.633432][ T49] Code: 00 00 e8 76 5f 71 fe 31 c0 5b c3 cc cc cc cc cc e8 b8 a6 e2 f6 c6 05 9c 64 ae 04 01 90 48 c7 c7 a0 e4 ae 8c e8 74 89 a6 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 2184.653049][ T49] RSP: 0018:ffffc90000b97610 EFLAGS: 00010246 [ 2184.659125][ T49] RAX: febdaa723e3a2500 RBX: ffff88806ccbb8c0 RCX: ffff888022ae1e00 [ 2184.667108][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2184.675079][ T49] RBP: ffffc90000b97718 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 2184.683054][ T49] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffffc90000b97680 [ 2184.691043][ T49] R13: ffff888056f29630 R14: ffff88805c912fa8 R15: 0000000000000001 [ 2184.699036][ T49] idr_for_each+0x1b5/0x290 [ 2184.703561][ T49] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 2184.709642][ T49] ? __pfx_idr_for_each+0x10/0x10 [ 2184.714682][ T49] ? kobject_put+0x270/0x480 [ 2184.719281][ T49] ? kfree+0x18e/0x440 [ 2184.723363][ T49] ieee80211_free_hw+0xc6/0x480 [ 2184.728257][ T49] mac80211_hwsim_del_radio+0x2de/0x460 [ 2184.733843][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 2184.739920][ T49] hwsim_exit_net+0x584/0x640 [ 2184.744618][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 2184.749826][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 2184.755642][ T49] ops_undo_list+0x49a/0x990 [ 2184.760254][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 2184.765380][ T49] cleanup_net+0x4c5/0x800 [ 2184.769805][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 2184.774749][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 2184.779955][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 2184.785678][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 2184.791407][ T49] process_scheduled_works+0xae1/0x17b0 [ 2184.796974][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 2184.802992][ T49] worker_thread+0x8a0/0xda0 [ 2184.807601][ T49] kthread+0x70e/0x8a0 [ 2184.811678][ T49] ? __pfx_worker_thread+0x10/0x10 [ 2184.816796][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.821409][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 2184.826614][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 2184.831826][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.836424][ T49] ret_from_fork+0x3fc/0x770 [ 2184.841025][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 2184.846143][ T49] ? __switch_to_asm+0x39/0x70 [ 2184.850919][ T49] ? __switch_to_asm+0x33/0x70 [ 2184.855690][ T49] ? __pfx_kthread+0x10/0x10 [ 2184.860301][ T49] ret_from_fork_asm+0x1a/0x30 [ 2184.865103][ T49] [ 2184.868455][ T49] Kernel Offset: disabled [ 2184.872780][ T49] Rebooting in 86400 seconds..