last executing test programs: 9m11.539459931s ago: executing program 32 (id=1695): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0xfffffffe, 0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6m25.638355524s ago: executing program 33 (id=2565): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e00010002000020000000000100000008000380"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x3d, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r2, 0x0, 0x0) r4 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7977ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453a5e3f66a", 0xc4, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="01f400000000000051fa6dd4f9", 0xd, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r5, r4, r4}, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="002b0104000084"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) write$binfmt_elf64(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46060478a3000000000000000002003e00cd000000b8010000000000004000000000000000ec02000000000000000001000500380000008102000009009b000000000000000700"/112], 0x78) r8 = fanotify_init(0x200, 0x1000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) fanotify_mark(r8, 0x1, 0x8001003, r7, 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2m46.468913541s ago: executing program 4 (id=3581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x35, &(0x7f0000000040)={0x0, 0x1, 0x60d5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x4}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_destroy(0x0) r3 = memfd_create(&(0x7f0000002340)='\x02A\xbb\xcc\xb7\x0eo\x1f$\xae\xd9\xd1>\xdc\x95\xfa; \xa7\xea\xa4h|\xe3H \x1fX\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r3, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001002aaaaaaaaa000000080004"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') getdents(r5, &(0x7f0000000f40)=""/243, 0xf3) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x81d}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FIBMAP(r7, 0x2283, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @multicast1}, {0x20000010304, @local}, 0x70, {0x2, 0x4e20, @rand_addr=0x64010101}, 'veth1_to_batadv\x00'}) 2m46.468439517s ago: executing program 4 (id=3582): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0x7df5, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x6, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x3, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x1, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0xd, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x2, 0x71, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0xb, '\x00', 0x14}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0x7, 0x2, 0xa}]}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x1e50}, {0x0, 0x0, 0x0, 0xad}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4000000e}, {0xb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x9}, {}, {}, {0x80000008}, {0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000019}, {}, {}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000129bd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00622909740e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 2m43.314319682s ago: executing program 4 (id=3595): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a", 0x259}], 0x4}, 0x20004000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000380)={0x0, 0x0}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], 0x0, &(0x7f0000000580)=[r4], &(0x7f0000000040)}) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000040)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e23, 0x7, @mcast1, 0x80000000}, {0xa, 0x4e22, 0x3, @remote, 0x5}, 0x0, {[0x4, 0x10001, 0x4, 0x401, 0x8, 0x2, 0xfffffffc, 0xb]}}, 0x5c) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000040)=""/115, 0x73}, {&(0x7f00000000c0)=""/4, 0x4}], 0x2, 0xeb, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r8, 0x0, 0x0, 0x100000000000000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x5, 0x30385056, 0x0, @discrete={0x3, 0x4}}) syz_usb_connect(0x1, 0x15f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x45, 0x4, 0x39, 0x40, 0x46d, 0x89d, 0x5ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14d, 0x1, 0x3, 0x0, 0x4a8c4bc89803627b, 0x32, "", [{{0x9, 0x4, 0xc4, 0x2, 0x1, 0x2b, 0x5a, 0x3d, 0x1, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb, 0x5, 0xf, "ce"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7bf5, 0x4, 0x5, 0xd}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xcb, 0x6f, 0x1, "cec31b059e"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd8, 0x5, 0x3, 0xb7}]}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x52, 0x0, 0x9, [@generic={0xff, 0x23, "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"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x64, 0xa1, 0x5, 0x10, 0x80}, 0x106, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x24, &(0x7f0000000440)=@string={0x24, 0x3, "5e5dd8ae448c62dac55d9f69111896cee2d81d52796549eb9fa93ea2f9cd0071ea6b"}}, {0xbc, &(0x7f0000000480)=ANY=[@ANYBLOB="bc0300a1f32490d440a16a4074f78a2b2c91d951a09b098c94bdd5116091c3f9b520fd9ba83cd4e72d4cf6859c1a0031b77d3997affcc2fda8091c7c63ed84313785c9341a0f6d84143436690dca674998739aefb0fdf474ae8d92fe5f034ad8b2ab1d6475e9c738f726fb653c6b9660dce2a6eddc070cb3653f22d3a92407f4de27feb45b3ddbeea1c5b918a27165782ee3f2bc52cfc0f27ae073f830971c05fd4fd73a364b17d71932e967df941f1f88c1252205d1112a2565b2d0"]}, {0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="4e035a696a2f277907ac60282b957a7c1dda139cd6b9d2a65923c8ee8fcb02c2fb41ef8b463103225b5ba16803d38e002a514f0d60035b8b2e81f5307cd5324f273a8205000000000000000000002ffc9f5bd7ae5e397e8082b51a74a639f1a347c6d0c6a6c02220b82df150a771d462f2985406af72314c11dee728b8f2d92243ff7da745da158f600f7b"]}]}) 2m40.220815942s ago: executing program 4 (id=3603): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x8b, 0x3, 0xffffd190, 0x14, 0x604, 0x823c, 0xc, 0x2, 0x7, 0x7ff, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m37.049419379s ago: executing program 4 (id=3613): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x9, 0x28103) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000400)={0x1, "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"}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) clock_getres(0x6, &(0x7f00000002c0)) read(r1, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a0001000000", @ANYRES32=r2, @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="97", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5}, 0x38) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x84000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b4b, 0x200000000002, 0x10004, 0xa, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x6, 0x0, 0x8) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r6, 0x0, 0xd231c4f959ad4808) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) process_vm_readv(0xffffffffffffffff, &(0x7f0000003380)=[{&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/44, 0x2c}, {&(0x7f0000003180)=""/224, 0xe0}, {&(0x7f0000003280)=""/143, 0x8f}, {&(0x7f0000003340)=""/48, 0x30}], 0xa, &(0x7f0000008640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x10) 2m36.147731138s ago: executing program 4 (id=3616): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x11) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) 2m24.239727886s ago: executing program 34 (id=3607): unshare(0x22020600) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000011001100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b00"], 0x30}}, 0x0) syz_usb_connect$midi(0x0, 0xbd, &(0x7f00000003c0)=ANY=[@ANYBLOB="120101020000001044060f804000010203010902ab00010101200209040000060103303a0624020144040f2403000a0408010101020603029c06240207050609050d00080081b6051125010df0552f91ffb555f13d7eb3a44a09050604200002650404250100090500102000ff590005250101490905801020000204071025010c6d95655c0cab605266fc635f09050303200006040514250110"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) 2m20.812017208s ago: executing program 35 (id=3617): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) epoll_create1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r2, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000340)="9a10edb00036f30fc7376766c744240045e900006766c7442402f10000006766c744240600000000670f011424ba4200ecb823018ed80f01cf9a0000890066f20ff013660fc732660f388200", 0x4c}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) r10 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x0, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r12) getsockname$packet(r12, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000081400028008000108", @ANYRES32=0x0, @ANYBLOB="08000300ac1e0001"], 0x44}}, 0x40848c0) 2m20.752899746s ago: executing program 36 (id=3616): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x11) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) 2m17.957187714s ago: executing program 2 (id=3659): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x0, 0xb, 0xb, {0xb, 0x2, "2168b40c2e2fc5d4a3"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d40)={0x40, 0x30, 0x92, "62f5d9bf1d93668f750599cbbc8c127d048c0006e4b34cce8a100f606dc88a24528cbc24578cb0522dee5df63a5a31b682106ae46ec1bc7984cbc3d76340b708dd4d0e97812978f739eb12eeba084e2f28b36e5404e94a5953547ea5667337c76c240934bfa8f0ca4abc13572fc547324d745dd4f2088b277e31ae5cc56b14d14b01cb90b852e50b90459c8274e3f6f061e8"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x8c}, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xca4b}, 0x0}) 2m14.890849867s ago: executing program 2 (id=3663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x2, r3}) r5 = eventfd2(0xe5c, 0x80000) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) readv(r6, &(0x7f0000001800)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x7, 0x2, r3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010900060904a7a7025d81df0209058a01"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':,.:\x00', 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000780)={0x0, 0xae22, 0x8000, 0x0, 0x63}, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) close_range(r9, 0xffffffffffffffff, 0x0) (fail_nth: 1) 2m13.831905833s ago: executing program 2 (id=3666): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x24044041) 2m13.645650535s ago: executing program 2 (id=3667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) r5 = eventfd2(0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f00000007c0)=@raw=[@call={0x85, 0x0, 0x0, 0x14}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f00000001c0)='GPL\x00', 0x9456, 0x2, &(0x7f0000000240)=""/2, 0x40f00, 0x10, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xd, 0xffffa423, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x1, 0x5, 0xa, 0x8}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000018000000c60001022500eeff841000000100000095000000000000001840000002000000000000000000000095000000000000119500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x48, '\x00', r8, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8000, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) ppoll(&(0x7f0000000040)=[{r0, 0x35e5}, {r5, 0xd399}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2m12.449859585s ago: executing program 2 (id=3671): r0 = socket(0x2, 0xa, 0x300) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x50172, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000400)={@broadcast, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "1f", 'C0%', 0x88f5}}}}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x30c3f000) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000120001012dbd7000fe0000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1800e58014003100"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local, @remote, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "3e252675afa528bf"}}}}, 0x0) 2m12.310248274s ago: executing program 2 (id=3672): r0 = fsopen(&(0x7f0000000200)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, 0xfffffffffffffffd) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, 0xfffffffffffffffd) 1m57.217948713s ago: executing program 37 (id=3672): r0 = fsopen(&(0x7f0000000200)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, 0xfffffffffffffffd) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, 0xfffffffffffffffd) 1m22.521105519s ago: executing program 6 (id=3867): syz_io_uring_setup(0x4475, &(0x7f0000000340)={0x0, 0xa27a, 0x60, 0x2, 0xf5}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) brk(0x55555ede6001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@x86={0x7d, 0x3, 0x0, 0x0, 0x8, 0x8c, 0x7, 0x5, 0x7, 0x9, 0x9, 0x7, 0x0, 0x0, 0x300, 0xf, 0x8, 0x65, 0x1, '\x00', 0x7, 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x5, 0x0, 0x0, @irqchip={0x10000, 0xfffffe89}}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x10100) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0xc000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x5}, {0x9, 0x5, 0xff, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x2, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5f, 0x54, '\x00', 0xff}, {0x71, 0xd1, 0x81, '\x00', 0x7f}, {0x6, 0x4, 0xc}, {0x7f, 0x5, 0xa, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xde}, {0xff, 0x1, 0xfe, '\x00', 0xc0}, {0xfe, 0x5, 0x26}, {0xce, 0x0, 0x3, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x0, 0x40, '\x00', 0xf}, {0x3f, 0x6, 0x2, '\x00', 0x28}, {0x1, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xf4}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x9, 0x80, '\x00', 0x7f}, {0xff, 0x6, 0x3, '\x00', 0x10}, {0x5, 0x23, 0xf3, '\x00', 0x4}, {0x87, 0x6, 0x84}]}}) 1m21.942995888s ago: executing program 6 (id=3875): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x200a}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f00000000c0)=0x4, 0x4) 1m20.992050863s ago: executing program 6 (id=3880): r0 = socket$inet6(0xa, 0x805, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd0000000c000100070c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB="38000000554acd", @ANYRES16=r1, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)={0x40, 0x16, 0x49, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000001100)={0x20, 0x30, 0xed, "8002ab1f8b651feba730fbf8d02c9c7d12e892aa6763e6dbd1981772c54569e0601d4740840aa8660ae1a3e5ccb771cf6cdba091d1a7842561413ecbd13031570a1be872eafd273ffbc1d6178a8518179326e67edbefe3cc9354f9939df3970da29be2fc23a7bdff8f7883069a5960ce8ef1da47e3f09c7b745946009a56be915f1f14fbf009023369d8e4a6ae153b06980eeaf9ccc4144c35bd99a507b989b6e059fe234a865ded1c51f31cdd0e0a825997f625820d4168e73cc51a81dfea9335b754536fb262b4988f3098c319802ebe4381a0d312dcf035bdc3c8859f1baa1528a1ad6cdd3957f4434d12bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m19.185912185s ago: executing program 6 (id=3884): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) syz_usb_connect$midi(0x4, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x582, 0x8b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x3, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0xb, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x0, 0x1, 0x5, [{0x1, 0x7}, {0x7, 0xf}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0xbb}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x9}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x6, 0x7, [{0x2a, 0x3}, {0x0, 0x65}, {0xb2, 0x8}, {0xe4, 0xd7}, {0x9, 0x6}, {0x1}, {0x3, 0x1}]}], [{{0x9, 0x5, 0x3, 0x1, 0x8, 0xc, 0x9, 0x6, {0x6, 0x25, 0x1, 0x2, "1ac1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0xe5, 0xb, {0x5, 0x25, 0x1, 0x1, 'G'}}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x3, 0x4, {0x7, 0x25, 0x1, 0x3, "9427f1"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0xd, 0x2, 0x10, 0xab}, 0x76, &(0x7f0000000200)={0x5, 0xf, 0x76, 0x6, [@generic={0x3c, 0x10, 0xa, "d625ecf5d962412ac2fb35bf5e710f94e851ecfa75163566c803e224f76b4b81b0ed3475a1d74e40aa6073180a6bd47fa84ded9da99514202d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x5, 0xd5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa2, "2e739ada2c19d8488b17bb054830e518"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x8, 0x350f}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9e, &(0x7f0000000340)=@string={0x9e, 0x3, "c2288f2be9c695fd1be74966a9fd394d2da7f7bedfccb64220c7054282ef1a7e47c1eb5efad52c60de24c96647b3c81727062fbf03565139e796cd2d93c2ffab20247021171966478cb5ed42e526138925ffcbef75386ea897d153daa136a8cf0d03d116c3941dae1acbdbfcae59fd7fe9c8a6a212dc4aef51bb64bcc95dccea5da02c26f87922ff2cbea459a486e67cee2a20bee8709cba3b160bab"}}, {0xec, &(0x7f0000000580)=@string={0xec, 0x3, "0af386a7b1132e58fdd12f5dcbeb25bcece236d7b369803d65e6982f4fc139c518df7c6828f6f3482cc6d7b8109665d22b1d0f804038dcc9aec26e04b4aff49896145ad9c4519bac8995fdc7607d27bf086057cc4411873fa2fc45f3b038a40030a9c62dab5e11d563a5df6a09d3dbe915593bfa4c4d28c869aa2f28fcc0bfea0f600deb12add0049e8c6a5415ea5268421179376e3bd57d17cb748d41250d01997d04d9b7d512d229dd54596066f8cfdb8cf84662f590a3f074946b69e9374eb6eb4a648fbfae3dbfc382cd3a2a15d12f9aea3531d2ce6a7ba2c77a0b88d2845eb5dec239e8bc48d4d3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xbe, &(0x7f0000000700)=@string={0xbe, 0x3, "45996049be19ec1cf4a8ce0dcacfff5c981149171c5cd2f669cba87e79d9aebf63d36cc373fd9643a9f0bed454bc0e3485ccf9574de54525cdcb499a8e1a0dd4fad6a371dd600c2999eff3ff5804647139b272f5c5ddc74a29542090b027059dd198a264d31acda88cd171d8342b46e1f9cf0513081c6f6637e433cd522129ef126fd30507bc9199d16c7bc0c3a295c3087088d87aef5791f203999a4bf5aa863c725be287f8d4c47fe387f92cc010afa5499094abd0b0d800f1cb09"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x606}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x5403}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) (async) syz_usb_connect$midi(0x4, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x582, 0x8b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x3, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0xb, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x0, 0x1, 0x5, [{0x1, 0x7}, {0x7, 0xf}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0xbb}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x9}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x6, 0x7, [{0x2a, 0x3}, {0x0, 0x65}, {0xb2, 0x8}, {0xe4, 0xd7}, {0x9, 0x6}, {0x1}, {0x3, 0x1}]}], [{{0x9, 0x5, 0x3, 0x1, 0x8, 0xc, 0x9, 0x6, {0x6, 0x25, 0x1, 0x2, "1ac1"}}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0xe5, 0xb, {0x5, 0x25, 0x1, 0x1, 'G'}}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0x3, 0x4, {0x7, 0x25, 0x1, 0x3, "9427f1"}}}]}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0xd, 0x2, 0x10, 0xab}, 0x76, &(0x7f0000000200)={0x5, 0xf, 0x76, 0x6, [@generic={0x3c, 0x10, 0xa, "d625ecf5d962412ac2fb35bf5e710f94e851ecfa75163566c803e224f76b4b81b0ed3475a1d74e40aa6073180a6bd47fa84ded9da99514202d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x5, 0xd5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa2, "2e739ada2c19d8488b17bb054830e518"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x8, 0x350f}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9e, &(0x7f0000000340)=@string={0x9e, 0x3, "c2288f2be9c695fd1be74966a9fd394d2da7f7bedfccb64220c7054282ef1a7e47c1eb5efad52c60de24c96647b3c81727062fbf03565139e796cd2d93c2ffab20247021171966478cb5ed42e526138925ffcbef75386ea897d153daa136a8cf0d03d116c3941dae1acbdbfcae59fd7fe9c8a6a212dc4aef51bb64bcc95dccea5da02c26f87922ff2cbea459a486e67cee2a20bee8709cba3b160bab"}}, {0xec, &(0x7f0000000580)=@string={0xec, 0x3, "0af386a7b1132e58fdd12f5dcbeb25bcece236d7b369803d65e6982f4fc139c518df7c6828f6f3482cc6d7b8109665d22b1d0f804038dcc9aec26e04b4aff49896145ad9c4519bac8995fdc7607d27bf086057cc4411873fa2fc45f3b038a40030a9c62dab5e11d563a5df6a09d3dbe915593bfa4c4d28c869aa2f28fcc0bfea0f600deb12add0049e8c6a5415ea5268421179376e3bd57d17cb748d41250d01997d04d9b7d512d229dd54596066f8cfdb8cf84662f590a3f074946b69e9374eb6eb4a648fbfae3dbfc382cd3a2a15d12f9aea3531d2ce6a7ba2c77a0b88d2845eb5dec239e8bc48d4d3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xbe, &(0x7f0000000700)=@string={0xbe, 0x3, "45996049be19ec1cf4a8ce0dcacfff5c981149171c5cd2f669cba87e79d9aebf63d36cc373fd9643a9f0bed454bc0e3485ccf9574de54525cdcb499a8e1a0dd4fad6a371dd600c2999eff3ff5804647139b272f5c5ddc74a29542090b027059dd198a264d31acda88cd171d8342b46e1f9cf0513081c6f6637e433cd522129ef126fd30507bc9199d16c7bc0c3a295c3087088d87aef5791f203999a4bf5aa863c725be287f8d4c47fe387f92cc010afa5499094abd0b0d800f1cb09"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x606}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x5403}}]}) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) (async) 1m17.627621829s ago: executing program 6 (id=3891): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001600)={0x0, @loopback}, &(0x7f0000001640)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x101, 0x1, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r4, &(0x7f0000000080)='/de', 0x3) lseek(r4, 0x0, 0x0) read(r4, &(0x7f0000000100), 0x14) r5 = socket$inet(0x2, 0x3, 0x81) close(0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="459ce77b8b9f6e9e310a9839e5ca1e6132bd6e76a5a776265af7855cbc61d2e3272162a451bb21bb82cc181c23881b1ea8d59613c6140c8cfbf5cf2ae8072a528ca0572b571817c79785e0d5516f486b00286fc60dc8581eab4498aa071cb3ace7343dee92acfc4c3394d6981b10ff0328011c35d199d8ec5368ae553e834984a49e3221cc", 0x85}, {&(0x7f00000002c0)="2db9e245fe6f003014318b835a98f2e12390a08bbc0b0b9fee4a649e47b21e8178787a3d9d7a7b476413ac94ff5e2f042d76e0e507dd47c6ec606e1aecd153e2d34d7a7ab707a17092e144993cf9a5f147f6856876cb435d9bc86b21fb5f786c77b9fc725c0a9cf842191323a64eac413840ae02e24d17b50d2cc516f35cbd4f495dade1825c877c86fd4756e9e0c685264c5ccebe0645f9d6fa4e1ac59db3c02d74d739446a67e54fe403", 0xab}], 0x2, &(0x7f00000003c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x23, 0x3, [{0x6, 0x10, "bbd4f75113144e249fb081472200"}, {0x5, 0xd, "9328524fe1ba9c38f66391"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x78}}, {{&(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="8f5a157af9b533530afd0fdfed8c21a68cee53db44cdb7db352bd9c07fcaba1e81291e016b64793d899612517bf70001a8c2d383cf24b52cdedb70227186f1c63f881916de0eb6840901a4cb304826ef7459b2c8111c10fd41fd0b19c8e91b23d55611ac9ff9fa2fe3a4", 0x6a}, {&(0x7f00000001c0)="d213d919a251ce40eb3cceb84a608ce510924d01e6eed217a902085b1f772fd87533d93759fa46f38d4187d9ff4c", 0x2e}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="c41111167ccbc11707c3de9157ed18da372cf1211739bb12e63acaf0399bb56e46ea7bb58a338b873801e67b08ae7ab51d2c93e9", 0x34}], 0x4, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xae}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd142}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x68}}, {{&(0x7f0000001700)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001740)="348c43f8748a4b1fa6b4791a75c786c0acb43e850d7faebb7c20ce01b32c723402b7bce8637628aa460b34a09da4f9a319d7a63e4bc026a3", 0x38}, {&(0x7f0000001780)="118e347c26ef40d4aa505e0fcbd201e6980044e2b9a2afeb6b00ab8cdfffdbeb0e58228dee82a5b5177013e744559c4abbdabc7b4574e54965ef8c86cb1cfc5e219f928dcbe9e0f66ca62c6235265176cb98900c629716b767e79f4907e26bf97bd53fced37352eaa32db891ac9375909021398559f18a11670f1233052542b2e80261fd", 0x84}], 0x2, &(0x7f0000001b00)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x5d, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@broadcast, 0x2}, {@local, 0xeef6}, {@empty, 0x4}, {@private=0xa010100, 0x5}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x0, [{0x6, 0x6, 'zp29'}, {0x1, 0xa, "4a02d23df6a3ce87"}, {0x1, 0x10, "4698897c89b0878fd83de1416696"}, {0x5, 0xa, "53071d5db21c9038"}, {0x4, 0x7, "34814dcc76"}]}, @cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "60ca42"}]}, @cipso={0x86, 0x3b, 0x0, [{0x0, 0x12, "910d263dceb05c6df845e6de3690bff5"}, {0x7, 0x2}, {0x1, 0x5, 'i40'}, {0x0, 0x12, "17c78fcd76099bef0a9ab96530f4ef33"}, {0x7, 0xa, "466652336b9abfd4"}]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0x3, [{@loopback, 0x6}, {@multicast2, 0x7}, {@local, 0xb33}, {@local, 0x2e231c01}]}]}}}], 0x158}}], 0x3, 0x4c800) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'team0\x00', 0x1}, 0x18) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 1m17.539827693s ago: executing program 6 (id=3892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x76}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="31030000000000ffe30009015400"], 0x14}}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {r5, r6+10000000}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x42000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 1m2.398405938s ago: executing program 38 (id=3892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x76}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="31030000000000ffe30009015400"], 0x14}}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {r5, r6+10000000}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x42000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 1m1.184529335s ago: executing program 1 (id=3957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xfffffff9}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000080)='wo=$\xfd\x97JNH\xc5.0\x85\xa5A\x88\'M\xd4\xdb\x10\x00\x00\x00\x00\x00\x00\x00\xa8u\xd8\xb1\xd0\xb64\"$\xc7rM\xee%\xd7U\xe2\x810s=q\xe0\x7f\x89\xf8\xd4O\x85\xb3Y\xef\xf7\x98\xd8\xb6(\xac\xf0&=V\x15\x0f\xa1.\xa5l\x16\x1a\xf7\xe1\xd0\xb0\xcf\xf5\xe3\xc2\xee`\'Cj\xd3\x9a\xe5N\x1a\x00\xb0\xc7\xe1Lv\xa7\xaan\xa9\xe4\x05c\xa2\xdeE\xc1Z\x89\x11\x91\x95\xfe\x1e\x88\x93\xc6hR_\x02', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 1m0.487567601s ago: executing program 1 (id=3960): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='='], 0x20) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000000c0)="66e40465937ea1b1603bd8dce761a58f252691e00f0e88d81deb0b31dbbb79ef6a7777225a1ad3e3d9a2b0951888aeb6963757227cc34f238d225fb65aea78ec63ad5c2ec5c7e98b28", 0x49, 0x20080000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/73, 0x49, 0x30102, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x8000) 1m0.380859432s ago: executing program 1 (id=3961): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0xfffffffffffffffe, 0x2cff, 0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0xa6, 0x45, 0x49, 0x10, 0x57c, 0x2200, 0x6508, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa, 0x20, 0x9, "", [{{0x9, 0x4, 0xc8, 0xfd, 0x0, 0xf4, 0xe6, 0x88, 0x8}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e31000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) syz_emit_ethernet(0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 58.484118596s ago: executing program 1 (id=3964): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x128}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80, @private0, 0xfffffffa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbddf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008000) 58.404207727s ago: executing program 1 (id=3966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8000, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 57.07943708s ago: executing program 1 (id=3972): r0 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, 0x0) fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x400, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) r2 = fanotify_init(0x200, 0x8000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040f12b6811620"], 0x7) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x3) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48000046, r4, 0x0) dup(r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x587042, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r6, r7, 0x0, 0x8000fb00) 41.68764873s ago: executing program 39 (id=3972): r0 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, 0x0) fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x400, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) r2 = fanotify_init(0x200, 0x8000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040f12b6811620"], 0x7) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x3) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x48000046, r4, 0x0) dup(r3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x587042, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r6, r7, 0x0, 0x8000fb00) 31.009403636s ago: executing program 9 (id=4068): listns(&(0x7f0000000000), &(0x7f0000000080)=[0x0], 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0, @ANYBLOB=',g']) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 29.354635128s ago: executing program 9 (id=4078): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1e030700800009", 0x23) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000012c0)) syz_usb_connect$uac2(0x5, 0xae, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x2c, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="43032a991298fbfb823432acfd99ea03e200780218f77945af2de8cc87c76c3a2cdbf19f10c6a741a83ce7f471b5f2aa1940cd84ddf0194f95e25905bbbaff34ccb25a"]}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r11, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 27.753695279s ago: executing program 9 (id=4081): socket$inet6(0xa, 0x805, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socket$netlink(0x10, 0x3, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)={0x40, 0x16, 0x49, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000001100)={0x20, 0x30, 0xed, "8002ab1f8b651feba730fbf8d02c9c7d12e892aa6763e6dbd1981772c54569e0601d4740840aa8660ae1a3e5ccb771cf6cdba091d1a7842561413ecbd13031570a1be872eafd273ffbc1d6178a8518179326e67edbefe3cc9354f9939df3970da29be2fc23a7bdff8f7883069a5960ce8ef1da47e3f09c7b745946009a56be915f1f14fbf009023369d8e4a6ae153b06980eeaf9ccc4144c35bd99a507b989b6e059fe234a865ded1c51f31cdd0e0a825997f625820d4168e73cc51a81dfea9335b754536fb262b4988f3098c319802ebe4381a0d312dcf035bdc3c8859f1baa1528a1ad6cdd3957f4434d12bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.818607686s ago: executing program 9 (id=4093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (fail_nth: 8) 25.721682682s ago: executing program 9 (id=4094): prctl$PR_SCHED_CORE(0x59616d61, 0x0, 0x0, 0x1, 0x0) 25.720767085s ago: executing program 9 (id=4095): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xb, 0xfff1}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc}]}}]}, 0x50}}, 0x24006904) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = fsopen(0x0, 0x1) fsmount(r8, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000027c0)={&(0x7f0000001300)=@deltfilter={0x146c, 0x2d, 0xa4affc0b56fbe691, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x2, 0x2}, {0x8, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x1440, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x70}, @TCA_U32_SEL={0x2e4, 0x5, {0x7, 0x0, 0xc, 0xfffe, 0x5, 0x6, 0x7, 0xd, [{0x70, 0xd, 0x5, 0xc}, {0x1, 0x3, 0xbc700000, 0x6b8a}, {0x2, 0x1, 0x8, 0x81}, {0x6, 0x8000007, 0x6, 0x2b}, {0x0, 0x6, 0x7fff, 0xbc6}, {0x3, 0x44c, 0x3, 0x4}, {0x3, 0x1ff, 0xe14, 0x5}, {0x4311, 0x9, 0xffff304f, 0xe}, {0x8, 0x0, 0x1, 0xffff}, {0x89, 0x2, 0x81}, {0x5, 0x5e9, 0x4, 0xffff}, {0x2, 0x6, 0x4, 0x100}, {0x3, 0xf, 0x2, 0xf}, {0x0, 0x3, 0x1, 0x5}, {0x197a, 0xfff, 0x5}, {0xff, 0x2, 0x9, 0x6}, {0x1, 0x3, 0x9, 0xffffffff}, {0x12, 0x800, 0x9, 0x6}, {0x4, 0x7cb, 0x7, 0x2eb5}, {0x9, 0xfffff001, 0x80, 0xfffffff7}, {0x6, 0x9, 0x1, 0x5}, {0x0, 0x1000, 0xe73, 0x8}, {0x5, 0x4dd, 0x2}, {0x2, 0x6, 0x8, 0xa0000000}, {0x1, 0x8, 0x0, 0x3}, {0x2, 0x2, 0xa5e3, 0xffffffff}, {0x5, 0x4, 0x3, 0xa}, {0x0, 0xb, 0x7, 0x8}, {0x9, 0x8, 0x2, 0x6}, {0x1, 0x9, 0x101, 0x132e}, {0x9, 0x35d, 0x6, 0x67}, {0x4, 0x7, 0xff, 0x5}, {0x984, 0xc, 0x9, 0x2}, {0x10002000, 0x7fe7d155, 0x5, 0x1f85}, {0x6, 0xffff0001, 0xffff, 0x6}, {0x4d2adeb9, 0xfffffff9, 0x4, 0x4}, {0xde, 0x5, 0x3, 0x75}, {0x5, 0x6, 0x1000, 0x5}, {0x7ff, 0x12, 0x0, 0x8}, {0x7fffffff, 0xfffff6ab, 0x6, 0x50362d22}, {0x4, 0x7, 0x5, 0xd}, {0x14, 0x2, 0xf, 0xffff0000}, {0xe, 0xb6, 0xdf, 0xffffffff}, {0x7ff, 0xff, 0x4, 0x9}, {0x0, 0x5, 0x6, 0xfffffff9}]}}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x31a}}, @TCA_U32_ACT={0x1128, 0x7, [@m_gact={0x1b8, 0xd, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x239a, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23d3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x1, 0x4, 0x7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x5, 0x9, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1233, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3bd, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xffffffff, 0x20000000, 0x6e2, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x133d, 0x4}}]}, {0xee, 0x6, "7c17095b5e5dedb89ec4f6fa03e1af608a3daa19d7697aa3a825805deab101107efbbb260b5d267eef5a65c50d4dd57d6145316c7f4f26be58f0278fbf6d9fa2befb8b190647aaefca6b5de5fc50f1aecb0738451c88befae4fab15cf7ca33bbac40f78c4853cf8840e97b7fcc81947392d497ab0ce314a0d8824c5aded470f6048057b017cb7b2db96d4854ed8d2de3caff39301be69c27576b442f4c85e618d1ef559c61226325dfd77ba6082da4de6841ede9b878ccc2ef9f91c264b610543785c66de35e1d49e191da921122d851a65bb076908a68fc4b00b65b932d0c4959fcdf5a29ea4ab355c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x17c, 0x8, 0x0, 0x0, {{0xa}, {0xc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x91, 0x6, "890111027bfbb27324d9068e16643aaab3426d5f76205070e9b11c80e4af4e163d8eaffdc9d4db435c1390c0710d0eb360929800b4e1a4acd1471a01ca3b5ff826871a5cd37c131a5a675aca325a685312b6c6ca33cca70c963ebdedd9b294fa17f9786e7400f8ce5f783173bcd5fd2669bcba005d78ecf92bf127b0fc3169589c09592119fe29f178c658a7c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xc0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, 'ev/nullb0\x00\x00\x00'}, @TCA_DEF_DATA={0x5, 0x3, 'D'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/sequencer\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff119, 0x400000, 0x5, 0x944, 0xb104}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x3, 0xffffffffffffffff, 0x9, 0xdfb}}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xced3, 0x5, 0x3, 0x101, 0x1000}}]}, {0x13, 0x6, "f9b5904515e5af2b78ee228c05990a"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_police={0xd30, 0x0, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x8, 0x1, 0x7, {0x5, 0x2, 0x5, 0x0, 0x8, 0x8}, {0x3, 0x0, 0xd8f, 0x400, 0x6, 0xffff}, 0x200, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10001, 0x3, 0x4, 0x7fff, 0x200, 0xfa9c, 0x8001, 0x7df9, 0x69, 0x1, 0x7, 0x0, 0x8000, 0x76, 0x7, 0x6, 0x7fffffff, 0x80, 0x2, 0x2, 0x1, 0x25, 0xffff, 0x4, 0x6c, 0x6, 0x5, 0xffffffff, 0x2, 0x0, 0x2, 0xc, 0x3, 0xd, 0x3, 0x9, 0x8, 0xfe94, 0x2, 0x7, 0x3, 0x0, 0x2, 0xb79, 0x8, 0x0, 0x1000, 0x101, 0x8001, 0x8, 0x7, 0x3, 0x237d, 0x6, 0xfffff801, 0x101, 0x0, 0x5, 0xfffffff5, 0x7, 0x3ff, 0x6, 0x80, 0x2, 0xffff2306, 0x6, 0x4, 0x0, 0x4b9, 0xf, 0x9886, 0x7, 0x0, 0x1, 0x6, 0x7, 0x8, 0x0, 0x2fdc, 0x2, 0x7, 0x1, 0x3, 0x9, 0x3, 0x2, 0xf90, 0x2, 0x0, 0x7, 0xa, 0x4, 0x7, 0x9, 0xb, 0x101, 0x10001, 0xb, 0xfffffff9, 0x400, 0x1f, 0x8, 0x6, 0x3, 0x2, 0x7bdc23a7, 0x3ff, 0x7, 0x3, 0x6, 0x6, 0x6, 0x9, 0x2, 0xc, 0xff73, 0xe, 0x5, 0x6, 0xa9, 0x6e, 0xb, 0xfc000000, 0x9, 0x0, 0xa7a, 0x6, 0x8, 0x10, 0xffff8000, 0xf2, 0xe8000000, 0x40, 0x0, 0x8, 0x8, 0x9, 0x1, 0x1, 0x94, 0xfffffff7, 0x8, 0x82bc, 0xfff, 0x0, 0xfffffff7, 0x80000001, 0x4, 0x984, 0x80000001, 0x101, 0x4, 0x3, 0x7, 0xffffb182, 0x5, 0x3, 0x6, 0x6901, 0x81, 0x2e, 0xfffffff9, 0x4, 0x2, 0x1, 0xa, 0x1006, 0x4, 0x1, 0x4, 0x8, 0x401, 0x4, 0x5, 0x6, 0x1, 0x80000001, 0x9, 0xd46, 0x9, 0x0, 0x10001, 0xfffffffc, 0x8, 0x7d87, 0xf, 0x0, 0x3, 0x8, 0xedf8, 0x7, 0xf, 0x1, 0xffffffff, 0x5, 0xfffffd68, 0x0, 0x5, 0x7, 0x2, 0x3, 0x6, 0xc8be, 0x5, 0xef58, 0x7, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x2, 0x3, 0xd, 0x2, 0x7, 0x7, 0x8, 0x8, 0x1, 0x401, 0x4, 0x39, 0xd1f, 0xc1, 0x9, 0x8, 0x8557, 0x8001, 0x8, 0x9, 0x81, 0x8, 0x10001, 0x7, 0x578, 0xcf, 0xae0, 0xfffffffa, 0x0, 0x1, 0x3, 0x8001, 0x6, 0x570d, 0xcd, 0x5, 0xa, 0x3, 0xd, 0xdf, 0x3, 0x8, 0xfff, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x80000001, 0xfffffffa, 0x8, 0x5, 0x38000000, 0x4, 0xf9, 0x181, 0x4d, 0x400, 0x8, 0x8000, 0x5, 0x2, 0x0, 0x2, 0x1, 0x4, 0xfffffffd, 0x9c2f, 0x5, 0xb3, 0x1, 0x9, 0x7, 0x100, 0xdfb, 0xb3, 0x3, 0x3, 0x1, 0x10001, 0x8, 0x2e, 0x86, 0x9, 0xfffffffb, 0x3, 0x8, 0x0, 0xfffeffff, 0x4, 0x81, 0x8, 0x0, 0x9, 0x7ff, 0x3, 0x9, 0x4, 0x2, 0x7, 0x40, 0x800, 0x0, 0xb4, 0xf4e, 0x2, 0xdb1d, 0x6, 0x9, 0x3, 0x40, 0x0, 0x3, 0x1ff, 0x80, 0x2d8, 0xa2, 0x8, 0x5e3, 0x6, 0xc42, 0x1, 0x3092, 0x9d, 0x7f, 0x8, 0xc, 0x401, 0x1, 0x2, 0xff, 0xffff, 0x8, 0x5, 0x1, 0x1, 0x10, 0x2, 0x9, 0x7, 0x4, 0x4, 0x2, 0x7, 0xffffffff, 0x4, 0x2, 0x76f2, 0x8001, 0xfb, 0x5c, 0xff, 0x9, 0x9, 0x8, 0xf782, 0x7, 0x401, 0x8001, 0x7fff, 0xffff, 0x7, 0x100, 0x4, 0x3, 0x1, 0xfffffffa, 0x1, 0x6ea, 0x4, 0xd, 0x5, 0x5ea, 0x10000, 0x8000, 0x0, 0x5, 0x2, 0x460, 0x4, 0x6, 0x8f, 0x40, 0xf2cf, 0x6, 0x8, 0x6, 0x0, 0xc, 0x6, 0xfffffff9, 0x4f91, 0x7, 0x0, 0x6, 0x1, 0x1774, 0x7ffb, 0xa, 0x3, 0x6, 0x8, 0x6ca6e490, 0x8, 0x7f, 0x2, 0x1, 0xa, 0xfffffffe, 0xd, 0x2, 0x6, 0x8736, 0x9, 0x3, 0x101, 0x7fff, 0x6, 0x2, 0x7, 0x80000000, 0x0, 0x2, 0x9, 0x2, 0x5, 0x7, 0x5, 0x0, 0xf772, 0x6, 0x1e, 0x0, 0x1000, 0x100, 0xa17e, 0x7fff, 0x6, 0x18, 0x1, 0xffffff25, 0x4, 0x8, 0x80000000, 0xcda, 0x1, 0x4, 0x400, 0x1, 0x7, 0x7, 0x5, 0x8, 0x10, 0x4, 0x8, 0x2, 0xf, 0x7fff, 0x85, 0x18e4afb0, 0x1, 0x81, 0x3, 0x5, 0x1, 0x6, 0x3, 0x8000, 0x6, 0x1ff, 0xd, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff8, 0x4, 0x4, 0x4, 0x5, 0x2, 0x81, 0xfffffe00, 0x1, 0x6, 0xf0, 0x2, 0x4, 0x5, 0x1, 0x6, 0xfffffffc, 0x8, 0x101, 0x2, 0xfffffff3, 0x4, 0x9, 0x7, 0x1ff, 0x4, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x8001, 0x2000005, {0xf7, 0x0, 0xfff6, 0x8, 0x9, 0x6}, {0x5, 0x0, 0x9, 0x9, 0x4, 0x6}, 0xf76ea500, 0x0, 0x7dae4696}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1009}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x7, 0xfffff077, 0x2, 0xb7, 0xb, 0x9912, 0x1000, 0x80000000, 0x1, 0x800, 0xc, 0x0, 0xffff2001, 0x1, 0x7, 0x80, 0x81, 0xfffffffa, 0x7, 0x5ad580, 0x80000001, 0x1ff, 0x6b, 0x9, 0x10, 0x3, 0xec, 0x7, 0x3, 0x8e2, 0x5, 0x1, 0x401, 0x200, 0x5, 0x5a04, 0x9, 0x9, 0x8000, 0x6, 0x1, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x9, 0x8, 0x9, 0xf44, 0x2, 0x8, 0x3ff, 0x80000000, 0x8, 0x2, 0x80000001, 0x2670, 0x8, 0x9, 0x344c, 0x2, 0x10, 0x99f2, 0x1, 0xffc, 0xa6, 0xffffff97, 0x21, 0x10, 0x8, 0x2, 0x4, 0x4, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x1, 0x3, 0x3, 0x2, 0x9, 0x8, 0x7, 0x8, 0xd, 0x101, 0x6, 0x8, 0x7, 0x42d9, 0x18000000, 0x9, 0x9, 0xfffffffa, 0x7, 0x3, 0x8, 0x4, 0x80000001, 0x0, 0x7, 0x95, 0x5, 0x5, 0x4, 0x3b1, 0xdb0f, 0x4, 0x2, 0xfff, 0xb, 0x2, 0xd, 0x10000, 0x0, 0x8d, 0x6, 0x4, 0x401, 0x0, 0x0, 0x3cf, 0x2, 0x81, 0x7fffffff, 0x7df9, 0x1000000, 0x4, 0xd, 0x5, 0xfff, 0x2000, 0xb1fd, 0x7, 0x9, 0x10, 0x5, 0x3, 0x9, 0x51, 0xa, 0x1, 0x5, 0x1, 0x8, 0x7, 0xe, 0x81, 0x4, 0x5, 0x6, 0x7, 0x0, 0x7, 0x5, 0x7, 0x5, 0x4, 0x3, 0x608a9e9b, 0x8, 0x3, 0x0, 0x5, 0x7fff, 0x8000, 0x2, 0x4b42, 0x7e, 0x0, 0x6, 0x0, 0x3, 0x3, 0x2, 0x6, 0xf, 0x3, 0x4, 0x0, 0x6, 0x7ff, 0x8, 0x2, 0x0, 0xfffffffd, 0x1, 0x5, 0x6, 0x4, 0x80, 0x9, 0x1, 0x4, 0x0, 0x6, 0x9, 0x9, 0x5, 0x5000, 0xf, 0x3b8, 0xffffffff, 0x3, 0x1, 0x3, 0x0, 0x5, 0x7, 0xed00000, 0x1, 0x101, 0x40, 0x5, 0x7f, 0x6, 0xfffffff7, 0xa, 0x400, 0xd7, 0x6, 0x7f, 0x4, 0x8, 0x28, 0x2d4f, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x6, 0xffff, 0x6805, 0x4, 0x80000001, 0x5, 0x5, 0x2, 0x5, 0x1, 0x6, 0x2, 0x200, 0x8001, 0x2, 0x5, 0x10001, 0x401, 0x1b13]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x52, 0x6, "8a6ae6179aa3610481b24696f7d830d33715bc0347fe79764530a66f636ecf6fadad9d5b33f3c7c8e6e64db3ad84cdfa6cc910ce3eb9d6b51144ed6b390a1d7ee1b23163ea1271abbc7bbca5bc8b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa1}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x146c}}, 0x8040040) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000280)={0xc, @sdr={0x41414270, 0x6}}) 12.126062633s ago: executing program 7 (id=4148): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0x8001, "00000000020000000000002100", '\x00', "0006008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70ca6403556000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='4', 0x1}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x5, 0x2, @mcast1, @mcast1, 0x700, 0x1, 0x7, 0x3}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000002"], 0xfecc, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00170001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000140)="508c7efb7b1c05e693e2523e706b8316dc059e8bc0e1c106d61fe5b2f080ebcff707eab9d9fb5d13"}, 0x20) 10.406151538s ago: executing program 40 (id=4095): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xb, 0xfff1}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc}]}}]}, 0x50}}, 0x24006904) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = fsopen(0x0, 0x1) fsmount(r8, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f00000027c0)={&(0x7f0000001300)=@deltfilter={0x146c, 0x2d, 0xa4affc0b56fbe691, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x2, 0x2}, {0x8, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x1440, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x70}, @TCA_U32_SEL={0x2e4, 0x5, {0x7, 0x0, 0xc, 0xfffe, 0x5, 0x6, 0x7, 0xd, [{0x70, 0xd, 0x5, 0xc}, {0x1, 0x3, 0xbc700000, 0x6b8a}, {0x2, 0x1, 0x8, 0x81}, {0x6, 0x8000007, 0x6, 0x2b}, {0x0, 0x6, 0x7fff, 0xbc6}, {0x3, 0x44c, 0x3, 0x4}, {0x3, 0x1ff, 0xe14, 0x5}, {0x4311, 0x9, 0xffff304f, 0xe}, {0x8, 0x0, 0x1, 0xffff}, {0x89, 0x2, 0x81}, {0x5, 0x5e9, 0x4, 0xffff}, {0x2, 0x6, 0x4, 0x100}, {0x3, 0xf, 0x2, 0xf}, {0x0, 0x3, 0x1, 0x5}, {0x197a, 0xfff, 0x5}, {0xff, 0x2, 0x9, 0x6}, {0x1, 0x3, 0x9, 0xffffffff}, {0x12, 0x800, 0x9, 0x6}, {0x4, 0x7cb, 0x7, 0x2eb5}, {0x9, 0xfffff001, 0x80, 0xfffffff7}, {0x6, 0x9, 0x1, 0x5}, {0x0, 0x1000, 0xe73, 0x8}, {0x5, 0x4dd, 0x2}, {0x2, 0x6, 0x8, 0xa0000000}, {0x1, 0x8, 0x0, 0x3}, {0x2, 0x2, 0xa5e3, 0xffffffff}, {0x5, 0x4, 0x3, 0xa}, {0x0, 0xb, 0x7, 0x8}, {0x9, 0x8, 0x2, 0x6}, {0x1, 0x9, 0x101, 0x132e}, {0x9, 0x35d, 0x6, 0x67}, {0x4, 0x7, 0xff, 0x5}, {0x984, 0xc, 0x9, 0x2}, {0x10002000, 0x7fe7d155, 0x5, 0x1f85}, {0x6, 0xffff0001, 0xffff, 0x6}, {0x4d2adeb9, 0xfffffff9, 0x4, 0x4}, {0xde, 0x5, 0x3, 0x75}, {0x5, 0x6, 0x1000, 0x5}, {0x7ff, 0x12, 0x0, 0x8}, {0x7fffffff, 0xfffff6ab, 0x6, 0x50362d22}, {0x4, 0x7, 0x5, 0xd}, {0x14, 0x2, 0xf, 0xffff0000}, {0xe, 0xb6, 0xdf, 0xffffffff}, {0x7ff, 0xff, 0x4, 0x9}, {0x0, 0x5, 0x6, 0xfffffff9}]}}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_MARK={0x10, 0xa, {0x4, 0x31a}}, @TCA_U32_ACT={0x1128, 0x7, [@m_gact={0x1b8, 0xd, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x239a, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x23d3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x1, 0x4, 0x7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x5, 0x9, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1233, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3bd, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xffffffff, 0x20000000, 0x6e2, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x133d, 0x4}}]}, {0xee, 0x6, "7c17095b5e5dedb89ec4f6fa03e1af608a3daa19d7697aa3a825805deab101107efbbb260b5d267eef5a65c50d4dd57d6145316c7f4f26be58f0278fbf6d9fa2befb8b190647aaefca6b5de5fc50f1aecb0738451c88befae4fab15cf7ca33bbac40f78c4853cf8840e97b7fcc81947392d497ab0ce314a0d8824c5aded470f6048057b017cb7b2db96d4854ed8d2de3caff39301be69c27576b442f4c85e618d1ef559c61226325dfd77ba6082da4de6841ede9b878ccc2ef9f91c264b610543785c66de35e1d49e191da921122d851a65bb076908a68fc4b00b65b932d0c4959fcdf5a29ea4ab355c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x17c, 0x8, 0x0, 0x0, {{0xa}, {0xc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x91, 0x6, "890111027bfbb27324d9068e16643aaab3426d5f76205070e9b11c80e4af4e163d8eaffdc9d4db435c1390c0710d0eb360929800b4e1a4acd1471a01ca3b5ff826871a5cd37c131a5a675aca325a685312b6c6ca33cca70c963ebdedd9b294fa17f9786e7400f8ce5f783173bcd5fd2669bcba005d78ecf92bf127b0fc3169589c09592119fe29f178c658a7c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xc0, 0x1b, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, 'ev/nullb0\x00\x00\x00'}, @TCA_DEF_DATA={0x5, 0x3, 'D'}, @TCA_DEF_DATA={0x13, 0x3, '/dev/sequencer\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff119, 0x400000, 0x5, 0x944, 0xb104}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x3, 0xffffffffffffffff, 0x9, 0xdfb}}, @TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xced3, 0x5, 0x3, 0x101, 0x1000}}]}, {0x13, 0x6, "f9b5904515e5af2b78ee228c05990a"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_police={0xd30, 0x0, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x8, 0x1, 0x7, {0x5, 0x2, 0x5, 0x0, 0x8, 0x8}, {0x3, 0x0, 0xd8f, 0x400, 0x6, 0xffff}, 0x200, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10001, 0x3, 0x4, 0x7fff, 0x200, 0xfa9c, 0x8001, 0x7df9, 0x69, 0x1, 0x7, 0x0, 0x8000, 0x76, 0x7, 0x6, 0x7fffffff, 0x80, 0x2, 0x2, 0x1, 0x25, 0xffff, 0x4, 0x6c, 0x6, 0x5, 0xffffffff, 0x2, 0x0, 0x2, 0xc, 0x3, 0xd, 0x3, 0x9, 0x8, 0xfe94, 0x2, 0x7, 0x3, 0x0, 0x2, 0xb79, 0x8, 0x0, 0x1000, 0x101, 0x8001, 0x8, 0x7, 0x3, 0x237d, 0x6, 0xfffff801, 0x101, 0x0, 0x5, 0xfffffff5, 0x7, 0x3ff, 0x6, 0x80, 0x2, 0xffff2306, 0x6, 0x4, 0x0, 0x4b9, 0xf, 0x9886, 0x7, 0x0, 0x1, 0x6, 0x7, 0x8, 0x0, 0x2fdc, 0x2, 0x7, 0x1, 0x3, 0x9, 0x3, 0x2, 0xf90, 0x2, 0x0, 0x7, 0xa, 0x4, 0x7, 0x9, 0xb, 0x101, 0x10001, 0xb, 0xfffffff9, 0x400, 0x1f, 0x8, 0x6, 0x3, 0x2, 0x7bdc23a7, 0x3ff, 0x7, 0x3, 0x6, 0x6, 0x6, 0x9, 0x2, 0xc, 0xff73, 0xe, 0x5, 0x6, 0xa9, 0x6e, 0xb, 0xfc000000, 0x9, 0x0, 0xa7a, 0x6, 0x8, 0x10, 0xffff8000, 0xf2, 0xe8000000, 0x40, 0x0, 0x8, 0x8, 0x9, 0x1, 0x1, 0x94, 0xfffffff7, 0x8, 0x82bc, 0xfff, 0x0, 0xfffffff7, 0x80000001, 0x4, 0x984, 0x80000001, 0x101, 0x4, 0x3, 0x7, 0xffffb182, 0x5, 0x3, 0x6, 0x6901, 0x81, 0x2e, 0xfffffff9, 0x4, 0x2, 0x1, 0xa, 0x1006, 0x4, 0x1, 0x4, 0x8, 0x401, 0x4, 0x5, 0x6, 0x1, 0x80000001, 0x9, 0xd46, 0x9, 0x0, 0x10001, 0xfffffffc, 0x8, 0x7d87, 0xf, 0x0, 0x3, 0x8, 0xedf8, 0x7, 0xf, 0x1, 0xffffffff, 0x5, 0xfffffd68, 0x0, 0x5, 0x7, 0x2, 0x3, 0x6, 0xc8be, 0x5, 0xef58, 0x7, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x2, 0x3, 0xd, 0x2, 0x7, 0x7, 0x8, 0x8, 0x1, 0x401, 0x4, 0x39, 0xd1f, 0xc1, 0x9, 0x8, 0x8557, 0x8001, 0x8, 0x9, 0x81, 0x8, 0x10001, 0x7, 0x578, 0xcf, 0xae0, 0xfffffffa, 0x0, 0x1, 0x3, 0x8001, 0x6, 0x570d, 0xcd, 0x5, 0xa, 0x3, 0xd, 0xdf, 0x3, 0x8, 0xfff, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x80000001, 0xfffffffa, 0x8, 0x5, 0x38000000, 0x4, 0xf9, 0x181, 0x4d, 0x400, 0x8, 0x8000, 0x5, 0x2, 0x0, 0x2, 0x1, 0x4, 0xfffffffd, 0x9c2f, 0x5, 0xb3, 0x1, 0x9, 0x7, 0x100, 0xdfb, 0xb3, 0x3, 0x3, 0x1, 0x10001, 0x8, 0x2e, 0x86, 0x9, 0xfffffffb, 0x3, 0x8, 0x0, 0xfffeffff, 0x4, 0x81, 0x8, 0x0, 0x9, 0x7ff, 0x3, 0x9, 0x4, 0x2, 0x7, 0x40, 0x800, 0x0, 0xb4, 0xf4e, 0x2, 0xdb1d, 0x6, 0x9, 0x3, 0x40, 0x0, 0x3, 0x1ff, 0x80, 0x2d8, 0xa2, 0x8, 0x5e3, 0x6, 0xc42, 0x1, 0x3092, 0x9d, 0x7f, 0x8, 0xc, 0x401, 0x1, 0x2, 0xff, 0xffff, 0x8, 0x5, 0x1, 0x1, 0x10, 0x2, 0x9, 0x7, 0x4, 0x4, 0x2, 0x7, 0xffffffff, 0x4, 0x2, 0x76f2, 0x8001, 0xfb, 0x5c, 0xff, 0x9, 0x9, 0x8, 0xf782, 0x7, 0x401, 0x8001, 0x7fff, 0xffff, 0x7, 0x100, 0x4, 0x3, 0x1, 0xfffffffa, 0x1, 0x6ea, 0x4, 0xd, 0x5, 0x5ea, 0x10000, 0x8000, 0x0, 0x5, 0x2, 0x460, 0x4, 0x6, 0x8f, 0x40, 0xf2cf, 0x6, 0x8, 0x6, 0x0, 0xc, 0x6, 0xfffffff9, 0x4f91, 0x7, 0x0, 0x6, 0x1, 0x1774, 0x7ffb, 0xa, 0x3, 0x6, 0x8, 0x6ca6e490, 0x8, 0x7f, 0x2, 0x1, 0xa, 0xfffffffe, 0xd, 0x2, 0x6, 0x8736, 0x9, 0x3, 0x101, 0x7fff, 0x6, 0x2, 0x7, 0x80000000, 0x0, 0x2, 0x9, 0x2, 0x5, 0x7, 0x5, 0x0, 0xf772, 0x6, 0x1e, 0x0, 0x1000, 0x100, 0xa17e, 0x7fff, 0x6, 0x18, 0x1, 0xffffff25, 0x4, 0x8, 0x80000000, 0xcda, 0x1, 0x4, 0x400, 0x1, 0x7, 0x7, 0x5, 0x8, 0x10, 0x4, 0x8, 0x2, 0xf, 0x7fff, 0x85, 0x18e4afb0, 0x1, 0x81, 0x3, 0x5, 0x1, 0x6, 0x3, 0x8000, 0x6, 0x1ff, 0xd, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff8, 0x4, 0x4, 0x4, 0x5, 0x2, 0x81, 0xfffffe00, 0x1, 0x6, 0xf0, 0x2, 0x4, 0x5, 0x1, 0x6, 0xfffffffc, 0x8, 0x101, 0x2, 0xfffffff3, 0x4, 0x9, 0x7, 0x1ff, 0x4, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x3, 0x8001, 0x2000005, {0xf7, 0x0, 0xfff6, 0x8, 0x9, 0x6}, {0x5, 0x0, 0x9, 0x9, 0x4, 0x6}, 0xf76ea500, 0x0, 0x7dae4696}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1009}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x7, 0xfffff077, 0x2, 0xb7, 0xb, 0x9912, 0x1000, 0x80000000, 0x1, 0x800, 0xc, 0x0, 0xffff2001, 0x1, 0x7, 0x80, 0x81, 0xfffffffa, 0x7, 0x5ad580, 0x80000001, 0x1ff, 0x6b, 0x9, 0x10, 0x3, 0xec, 0x7, 0x3, 0x8e2, 0x5, 0x1, 0x401, 0x200, 0x5, 0x5a04, 0x9, 0x9, 0x8000, 0x6, 0x1, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x9, 0x8, 0x9, 0xf44, 0x2, 0x8, 0x3ff, 0x80000000, 0x8, 0x2, 0x80000001, 0x2670, 0x8, 0x9, 0x344c, 0x2, 0x10, 0x99f2, 0x1, 0xffc, 0xa6, 0xffffff97, 0x21, 0x10, 0x8, 0x2, 0x4, 0x4, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x1, 0x3, 0x3, 0x2, 0x9, 0x8, 0x7, 0x8, 0xd, 0x101, 0x6, 0x8, 0x7, 0x42d9, 0x18000000, 0x9, 0x9, 0xfffffffa, 0x7, 0x3, 0x8, 0x4, 0x80000001, 0x0, 0x7, 0x95, 0x5, 0x5, 0x4, 0x3b1, 0xdb0f, 0x4, 0x2, 0xfff, 0xb, 0x2, 0xd, 0x10000, 0x0, 0x8d, 0x6, 0x4, 0x401, 0x0, 0x0, 0x3cf, 0x2, 0x81, 0x7fffffff, 0x7df9, 0x1000000, 0x4, 0xd, 0x5, 0xfff, 0x2000, 0xb1fd, 0x7, 0x9, 0x10, 0x5, 0x3, 0x9, 0x51, 0xa, 0x1, 0x5, 0x1, 0x8, 0x7, 0xe, 0x81, 0x4, 0x5, 0x6, 0x7, 0x0, 0x7, 0x5, 0x7, 0x5, 0x4, 0x3, 0x608a9e9b, 0x8, 0x3, 0x0, 0x5, 0x7fff, 0x8000, 0x2, 0x4b42, 0x7e, 0x0, 0x6, 0x0, 0x3, 0x3, 0x2, 0x6, 0xf, 0x3, 0x4, 0x0, 0x6, 0x7ff, 0x8, 0x2, 0x0, 0xfffffffd, 0x1, 0x5, 0x6, 0x4, 0x80, 0x9, 0x1, 0x4, 0x0, 0x6, 0x9, 0x9, 0x5, 0x5000, 0xf, 0x3b8, 0xffffffff, 0x3, 0x1, 0x3, 0x0, 0x5, 0x7, 0xed00000, 0x1, 0x101, 0x40, 0x5, 0x7f, 0x6, 0xfffffff7, 0xa, 0x400, 0xd7, 0x6, 0x7f, 0x4, 0x8, 0x28, 0x2d4f, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x6, 0xffff, 0x6805, 0x4, 0x80000001, 0x5, 0x5, 0x2, 0x5, 0x1, 0x6, 0x2, 0x200, 0x8001, 0x2, 0x5, 0x10001, 0x401, 0x1b13]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x52, 0x6, "8a6ae6179aa3610481b24696f7d830d33715bc0347fe79764530a66f636ecf6fadad9d5b33f3c7c8e6e64db3ad84cdfa6cc910ce3eb9d6b51144ed6b390a1d7ee1b23163ea1271abbc7bbca5bc8b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa1}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x146c}}, 0x8040040) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000280)={0xc, @sdr={0x41414270, 0x6}}) 10.381049468s ago: executing program 3 (id=4159): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r1, 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) setresuid(0xee00, 0xee00, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r4 = socket$inet(0x2, 0x1, 0x6) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) syz_usb_connect(0x5, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680030bb96c010203010902e30003dc2000000904003f000e01000505a4"], 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000140)=0x80000000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0xd4, 0x2, 0x6, 0xfffffffd, 0x0, 0x6c9b}) write(r4, &(0x7f0000000400)='PASV\r\n\x00', 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030004000000300012800e00010069703665727370616e0000001c00028014000700ff0200000000000000000000000004010400120014000300"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 9.970499089s ago: executing program 8 (id=4161): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1e030700800009", 0x23) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000012c0)) syz_usb_connect$uac2(0x5, 0xae, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x2c, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="43032a991298fbfb823432acfd99ea03e200780218f77945af2de8cc87c76c3a2cdbf19f10c6a741a83ce7f471b5f2aa1940cd84ddf0194f95e25905bbbaff34ccb25a"]}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 9.296551267s ago: executing program 3 (id=4162): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x7f, 0x5, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x4, &(0x7f0000000000)="02c08120") syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)="02000000000000") lseek(0xffffffffffffffff, 0x851, 0x0) 9.043308099s ago: executing program 7 (id=4163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400de}, 0x4000080) 8.695007106s ago: executing program 7 (id=4165): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b519210040000102030109027a0003010e0002080b0102010030400904000000010130000a24010e1600050000000c240b0002010000000d06000904010000010230000904010101010220000905"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 8.43687751s ago: executing program 3 (id=4166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400de}, 0x4000080) 8.27397716s ago: executing program 3 (id=4168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) r4 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x18, 0x2, r2}) 8.162237214s ago: executing program 8 (id=4169): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00817b00000000000000b20c00fe0501000000000000800c000180"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (fail_nth: 8) 7.872483074s ago: executing program 3 (id=4170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r2 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000da80)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000140)="bdd9afe11d79319730267a0a752a93f83789750eb86ecb40b3a95cb182e0fcb45bb433adf483e7f7b5268c0e492233890b475921b8e90aa797e4fdf8c54f18b2aad5ecf25b6a23be550314d11e3fa3c97b", 0x51}, {&(0x7f00000001c0)="6851e609d0c4c85346322592579f07fe703197c94435114b01a34c90de0ee42b10", 0x21}, {&(0x7f0000000380)="34bc6fadb8fe1b4fcb9bdb60563a21cca7728cc01a4d878a944fe14b215012eb552176db90e1d61694867a27d0f42ccf388d6460815eb12951e092952015a7a40f65b35678798c8c5a1b4d9958b61a9f8a819757dbd7ca112dc2d51728b8461fece02b5b8056d8f7074fb2c3c7fa910796ca35d54c38288470f3cce18af4c1fa80", 0x81}, {&(0x7f0000000440)="85436b6d6819d6f628569f8a3715b3aa5b7fd060999038ae573e83bff071d3a085f17df1cc2186879a8fe3f4609d3bd1a4fd16aef00f4d604c611d183e997863bb39461053b77cbdadf172ca6af4e4b992f30d645ccd1a552f92bc9ebea09f2574fe2d9ffafdc7dea6691c4458d53f3d497d3c7ae48b1f7d34aebc16e1965839d144a1567b3c8996da8f8cf476a057ed4d7ca9333e56d7967f60033fb90a24e465e69c00fe5897a91a7a280b092200b461d8a7e397c89a8e8e18d49a9742f95fd1e8ca3149c83f22e7f2addb0fd7c8325d596b5aaf6db6b9b79f49e4b88ac271194588ceb04c", 0xe6}, {&(0x7f0000000580)="25eb5a4fb9a73a9f6d32746decaa11cac6940624205efd40b0ffb4540864a996dbbacbdd8189efac5bcafb0fd3e962320726a8945eb4a2ea5ee4df20b7ceb786e465ba9a32577d33a0651ea3b4c0bf176cd7a7b10c092544b80ba4cfbe5caa78ecdfc49aead03fdfdaa41a0e159dfcfe5fe4fa245e9e5a9e2e44cb3e0caf37ce612aecc438aa155007f765286f0b804d71a9cfedb587c21e4531972f183814011ca6723c6da4a15c05ceac9dd55d427fe53624d974981d3c652f54092a493301a31e5842cddb432409b018f9177900fa0083f9cfd27647e6876bff839fc70bbf26e219cfa98efa031d78a8402ef44fb71173e2987f84813179", 0xf9}, {&(0x7f0000000680)="8acd0df3d96bf056444addbea1d01d1d91973a850b10417bc595371c7584c7fae8147b06f796cc948881df5cf1d95194e79e85bf3d80c93190d7026938e825175c6d42184ca7b12a2cb69079b57011a2f6cff66fcc04529bc68dd7d40b976c6d557888b9a8746d71e7e1565d6d3d7c989c9fe79e3ae75fafa4d056834b470c33e50bc5539eea1c0fd809fada6e8fde5b77ba077652201a5d98d92f07cdf9c386aef7a6103066096c28862bc034f421a67c7985751e34e40bb4d160dba216226319920b33f2afa118bd2d2a104aca8b21237f79c5bd42dcf8e2f24f4251a8ab16c1f6206a1744dcce0f0fbfc423024f8aa31dfcb97b3c", 0xf6}], 0x6, &(0x7f0000001c80)=[@rights={{0x24, 0x1, 0x1, [r2, r0, r1, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xe0, 0x1}}, {{&(0x7f0000001d80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000d480)=[{&(0x7f0000001e00)="7b05a5a8778125cbd30200b130de0bd081279f89e5fc1ddf327936bfbfe81955234b15d9336a36711bdcdf9ed55d9fdeb3e5f57adf97ac3f2c0c5d7ad913c74abfbbb5d9b40460ec26b0c59189e777af1f491965374370a9039959d93e04d449bd6ba0e2b38fde4e638ea5700f599ebf1ce46bec366d60284d2f635eaabb5b2940aa2514fc5e6760fb805dc78693e32fa45c74d23783a9c2f07afb9c84215195d205033abd892020eb1ba95d7e6a3e8dffffa55e01c5495cf693a7b0c9a22ae47bf9a172c4b24a727ad3a8bd75078ba9a1ce2c63e610ed546ea828", 0xdb}, {&(0x7f0000001f00)="aba48e45c880cdbeada79db01ba9a0bd3797cb8de1aa12b2ddb764a731335504ead60d85e5838a9a31a54961a4869a9d62d0b3357357f43af1aff429b12fadb3e40f41a0ddc2d317a7b69f14925c3d70bdee660278ca09929f07dbf97a181f9acaff3761a997542110c9e7581be4a434502d7f61c84b5ece7e4c1aa63042eeab8fc01fc4ce59169f731128c1ec8a249492c92277c59e41a2897909bdc717cc558a1de647b21a2b7c220ecf631199", 0xae}, {&(0x7f0000001fc0)="310819234e6ad7b2311bb75192df64c9bc0fa530b14fc753ae2b3bcd57a6a9abf0", 0x21}, {&(0x7f0000002000)="4360340ec1623d6e114fb85ba787bead855a695047c1b335ee7d3b757176d3152f88e7309b190694a162fee0c30b0d199274de52c33430bc9e75a7bc6aa77674a9a958aa7c08d320c554c0374604c6fc911857942bc8a5029246e2180f7f7881e7082ce5ea37e6d35e0cfbe004f6e0b9f4210c0b011098d3281a51e1bccf019b510d51726856c2731dd60506417f2f9adc67ef67ea41ecae1d23aebd886a80d61e315968e5ac1a20a5477b0fcc3325093fcc849a524f1b586121fa7c10e8be4db356", 0xc2}, {&(0x7f000000c2c0)="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", 0x1000}, {&(0x7f000000d2c0)="825fe4b2bda486e6bf6a9ab29be088033375bdf075806c1d06368333a212d31982c24fc38c7fe423929da39991ecf99d7c8a019217e154d88e4e1a1109068915f9ac4502ad181fe176c7799e1bb60df07e4b45eaf5e64fae18dfaea242227d0d1be17ab90eaf144548e2001102ed4e85e08fde9ff7c7fb30797e28", 0x7b}, {&(0x7f000000d340)="c081e0f07ae35b5195e2fe789b2a980a848d13f538d4e7bccd7ff8fabb0d3ec0699429b276003c57afe983c233a4e57259e736a92ea1cf726c75e0120cfa892c19841ba3e3158fcf9151243fda6ca761f7a8984b5614367faba897851aba519fd8b75f0c4b2e4b905bda8cc4a7c2bf5fe17a983be1dea22019687e958c985d52b96f7884ff680db14fbe2dd8d169999ea0bf011bb48ca3d83c3c5bf38b63d3806168964366ebf8533f5c78dedce584b3c4e84463f5", 0xb5}, {&(0x7f000000d400)="d4e62531afa53c64c9134c47df8c05a6c8ad68f91cb261207313ec11bdb2cde39bea44be507efd2c8b50c7c7cf9c1f46fce96d7d7d2061e723265ee5ad38c88860ff29f2f6efe675c7eaa3913dec9a69766b", 0x52}], 0x8, &(0x7f000000d500)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r0, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x78, 0x6010}}, {{&(0x7f000000d580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000d700)=[{&(0x7f000000d600)}, {&(0x7f000000d640)="aa082f2c2db44d599645444f1e78727c8365524471cdbd9495b52e997d769e40751a525adbe07775be77389158ae50d4749bf673d1c37b5753c95a55de71eb5f852fbec585b8441d8c64021ff0b11f333401a5", 0x53}, {&(0x7f000000d6c0)}], 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="2c000000000000000100000001000006d8619406f087a84378b044", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000004}}, {{0x0, 0x0, &(0x7f000000da00)=[{&(0x7f000000d880)="9168cd90a1ac7c111d03a71518e04bed24b3379bde3434ee32b06d358cdd4947f594f6f24ac8fce2f1563005eed1bc2c166ab707354391ea6c3852d209d12b128bb89b7fdb6226ef97f50c877a3b83ab4f0077b88ad49542a4f267251e481e72b817ef2cce00a1ed3eb7f83038", 0x6d}, {&(0x7f000000d900)="8bf57c90f703b42213e85f04829fba71560259225cda8474d61c3db02cd6ae0283e9721bb3b080dcfab2b1592f9c0ef9a6ff197e32e00e74d4758d1ac2a2e80c625fe6092d8134a6917724c12112ecf1ead41b6ba1672e1881b4a604efabed7d6487a885b6a67be88acf16c1c68340e9330cd7c58980853c98b2419de2e9d8dc48d13adbdd2df4039b3b485f7bb8ec4f62a588f1141d281c16dc2cffc2c8cca467a996d29f3d3530b1faba8c71873ef2444454bf4e8a4c7c441fb575c1121b7616120c88fd210bb2ca13b915366d42b0e2b50759dd5debd7859aa9", 0xdb}], 0x2, &(0x7f000000da40)=[@cred={{0x1c}}], 0x20, 0x14}}], 0x4, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000240), 0x10) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{r5, 0x4450}, {r1, 0x10}, {0xffffffffffffffff, 0x5872c3bd887d4d3a}, {0xffffffffffffffff, 0x1120}, {r5, 0x1040}], 0x5, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, r7, 0xc2e24000) (async) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 7.539365803s ago: executing program 8 (id=4171): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x8007fffd, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x1ff, 0x4, 0x81, 0xfffff6a8, 0x7, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0xeb8, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe88, 0x2, [@TCA_CGROUP_ACT={0xe84, 0x1, [@m_ctinfo={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xe50, 0x20, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x109f, 0x0, 0x20000000, 0x9, 0x545a}, 0x6, 0x3}, [{0x200, 0x9ac, 0x0, 0x4, 0x6c}, {0x4, 0x7, 0x1, 0x3000000, 0x9, 0x7}, {0x5, 0x20000000, 0xffff3fa4, 0x63, 0x7, 0x4}, {0x6, 0x9, 0x6, 0x1, 0x6, 0x307b000}, {0x5, 0x8, 0x4, 0x1a0c, 0x3, 0x2}, {0x1, 0x7, 0x4, 0x3, 0x5286, 0x7}, {0xfffffc00, 0xfffffffc, 0x8, 0xffffffff, 0x4, 0x7}, {0x2, 0x200, 0xb37, 0xffffff17, 0xb, 0x9}, {0x0, 0x9, 0x1, 0x9126, 0x7}, {0x0, 0x3, 0xad, 0x6, 0xe9000000, 0x80}, {0x0, 0x9, 0x1, 0xf5, 0x7fff, 0x8}, {0x3, 0x2, 0x1, 0x9, 0x8, 0xfff}, {0x0, 0x6c5, 0x2, 0x5, 0x9, 0x805}, {0x2, 0x32, 0xfce2, 0x5, 0x4, 0xbc58}, {0xfff, 0x870, 0x5, 0x8, 0x6, 0xfffffffc}, {0x6, 0xba, 0x8, 0x4, 0xa, 0x1000}, {0x1, 0x1, 0x3, 0xd5, 0x6, 0x3}, {0x6, 0x216, 0x7, 0x10d600, 0x8, 0x800}, {0x6c, 0x2, 0xffff, 0x1000, 0x6, 0x42}, {0x9, 0xcd, 0x2, 0x2, 0x2, 0x1}, {0x8, 0x2, 0xc5, 0x4, 0x3, 0xd568}, {0x0, 0x9d7, 0x100, 0x8000, 0xec}, {0x8, 0x4, 0x7, 0x1, 0xc784, 0x4}, {0x6, 0x8, 0x4, 0xfff, 0x3, 0x6}, {0xc, 0x6, 0x7ff, 0x1, 0x5, 0x4}, {0x3, 0x8, 0xc, 0x7, 0xffff0001, 0x2e}, {0x328c, 0x5, 0x2, 0x8, 0x800, 0x89e}, {0x2, 0x2, 0x950, 0xd, 0xfffffffd, 0xb9}, {0x1, 0x71f9, 0x3, 0x100, 0xa90, 0x7}, {0x5, 0x101, 0x0, 0x1, 0x2, 0xfffffff8}, {0x6, 0x82, 0x10001, 0x8001, 0x246, 0xc1e}, {0x1f23, 0x7f, 0x80000001, 0x56, 0x9}, {0x3, 0x1, 0x599, 0x10, 0xffff8000}, {0x3, 0x4, 0x3, 0x7, 0xcf, 0x8}, {0x10, 0x47, 0x0, 0x74, 0x2, 0x401}, {0x1, 0x4, 0x2, 0x7, 0xf, 0x6a19babf}, {0x6, 0x3, 0x7aac, 0x795, 0xffffffff}, {0x8, 0x7, 0x4f3, 0x100, 0x7, 0x10}, {0x0, 0x401, 0x1, 0x4, 0x72, 0x7}, {0x94, 0x7, 0x4, 0xb3, 0x13f, 0x8}, {0x2, 0x1755, 0xfff, 0xe, 0x3, 0x7843}, {0x2, 0x8001, 0x6, 0x10, 0x5, 0x7}, {0x133, 0xc5bf, 0x6, 0x7, 0x4}, {0x2, 0x0, 0x2c82, 0x66, 0x6, 0x5}, {0x1, 0x8, 0x0, 0x0, 0x9, 0x2b0}, {0x5, 0x8, 0x5ce9, 0x12, 0x6, 0x8}, {0x9, 0x5, 0x9, 0x81, 0x2, 0x7}, {0x0, 0x401, 0x3, 0x5, 0x8, 0x8f}, {0x8, 0x1, 0xc7, 0x0, 0x3, 0x9}, {0x6, 0x7, 0x7, 0xd, 0x1, 0x1}, {0x2, 0xc, 0x80000001, 0x8001, 0xea, 0x9}, {0x3, 0xf, 0x3, 0x9, 0x1000}, {0x400, 0x1, 0x7, 0x80000000, 0x8, 0x2}, {0xfffffff7, 0x10000, 0xb, 0x5, 0x6, 0x40}, {0x4, 0x31, 0x7, 0x107, 0x8, 0x922}, {0x1, 0x17, 0x800, 0x2ea5, 0x6, 0x9}, {0x7fffffff, 0x10000, 0x6, 0x100, 0x9, 0x78}, {0xa, 0x0, 0x5, 0x7, 0x1ff, 0x5}, {0x2, 0x4, 0x4, 0xfff, 0x3ff, 0x8}, {0xc25, 0x3, 0x8001, 0xfffff1c9, 0xa6, 0x1}, {0x353, 0xc, 0x0, 0x1, 0x1, 0x6}, {0xddef, 0x0, 0x982c, 0x40, 0x2, 0xffff6e18}, {0x4, 0xff, 0x51, 0x0, 0x6, 0x8}, {0x6, 0x8, 0x2, 0x10000, 0xcc7e, 0xffffffff}, {0xa7f5, 0x1, 0x3, 0x100, 0x0, 0x800}, {0x5, 0x401, 0x6, 0x2, 0x80000001, 0x8}, {0x6, 0x8000, 0x8001, 0xa, 0x7f, 0xc}, {0x80000000, 0x6, 0x9, 0xfe61, 0xdab}, {0x3, 0x5, 0x1d9, 0xfffffffc, 0x8001, 0x6}, {0x10000, 0xc59b, 0x59, 0x7fff, 0x8000, 0x7}, {0x921, 0x2, 0xf6, 0x0, 0x7, 0x1e}, {0x7, 0x101, 0xfffffff7, 0xc67c, 0x100}, {0x3, 0x9, 0x1000, 0x3, 0x6, 0x8c0}, {0xf8aa, 0x7, 0x1ff, 0x4, 0x87, 0x4}, {0x7, 0x7, 0x4, 0x1000, 0x40, 0x5}, {0x6, 0x1, 0x2, 0x80000000, 0x200, 0xa0}, {0x8, 0x9, 0x6, 0xc431, 0x9, 0xc035}, {0x3, 0x7ff, 0x2, 0x4, 0x2, 0x51}, {0x93, 0x7, 0x7ff, 0x1, 0x5, 0x7}, {0x2, 0x5, 0x3, 0x1, 0x8, 0x7}, {0x0, 0x80, 0x79, 0x2, 0x60000000, 0xffff}, {0x9, 0x7, 0x8, 0x1, 0x6, 0x3}, {0x3, 0x7, 0xfffffffc, 0x8, 0x3, 0xeed}, {0x7, 0xaef, 0x733, 0x0, 0xfffffff3, 0x1}, {0x2, 0x72b, 0x4, 0xf4, 0x81, 0x4}, {0x9, 0x4df, 0x8, 0x101, 0x1, 0x10000}, {0x9, 0x0, 0x0, 0x9, 0x6, 0x742}, {0x60, 0x0, 0x8, 0x8faf, 0x3, 0x101}, {0x7, 0x5, 0xc, 0x30, 0x14b5, 0x6}, {0xfffffffd, 0x9, 0x9, 0x0, 0xd15, 0x5}, {0x0, 0xff, 0x0, 0x1, 0xa4, 0x62bd}, {0xc, 0x7, 0x9, 0x1, 0x4, 0x2e0}, {0x2, 0x0, 0xff, 0xfffffffe, 0x2, 0xf1b}, {0x100, 0x2, 0x869, 0x4, 0xa439, 0x5}, {0xfffffffc, 0x6bcb, 0x8, 0x4, 0x0, 0x8000}, {0x2a, 0x2, 0xf75, 0x2, 0xb9, 0x280}, {0xa, 0x4, 0xb44, 0x400, 0x4, 0x6}, {0x8, 0xf, 0x2, 0x871, 0x10001, 0x8000}, {0x56f, 0x7be6, 0x9, 0xfff, 0x6, 0x8001}, {0x0, 0xfffffffd, 0x7, 0x2, 0x1, 0x5}, {0xffffffff, 0x10000, 0xffffffff, 0x6, 0x7, 0x101}, {0x2, 0x8, 0x3, 0x3, 0x1, 0x589}, {0x1, 0x3, 0x0, 0x5, 0x8, 0xe1c3}, {0x7, 0x100, 0xffffff1c, 0x1, 0xdb3, 0xa}, {0x200, 0xc, 0x2, 0x74fe, 0x80, 0x7}, {0x5, 0x1, 0x0, 0x1d, 0x3, 0x3}, {0x7, 0xfffffff8, 0x78b4ad45, 0x9, 0x7, 0x6}, {0x4, 0x6, 0xcfe82bad, 0x6, 0x8000, 0xffff}, {0xcac1, 0x5, 0xb, 0x0, 0x80000000, 0x9}, {0x6, 0x7fffffff, 0x800, 0x2, 0x9, 0x2}, {0x0, 0x6, 0x7, 0x0, 0x400, 0x6}, {0x3, 0x3, 0xfffffffe, 0x4, 0x7fffffff, 0x6}, {0x1, 0x1ea, 0x1, 0xd1d, 0x78}, {0x800, 0x4, 0x80, 0x2, 0x100, 0x5}, {0x4, 0x2, 0x6, 0x7, 0x1, 0x5}, {0x80000000, 0x2, 0x985, 0x8, 0x7, 0x7}, {0xfffff000, 0xc771, 0x5e, 0x19b3, 0x7, 0xeaa}, {0xb, 0xd41d, 0xd, 0x0, 0x200, 0xffff}, {0x9, 0x1554, 0x5b, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x60000, 0x7fffffff, 0x1, 0x9}, {0x5, 0x4, 0x6, 0x4, 0x10, 0x9}, {0xbe38, 0x0, 0x1, 0xfffff244, 0x14eb36a3, 0x7}, {0x4, 0x7ae2, 0x3000, 0x3877, 0xa, 0x6}, {0x4, 0x4, 0x2, 0x7fff, 0x3, 0xe53}, {0x3, 0x1, 0x5, 0x5, 0x2, 0x7}, {0x2, 0x5, 0x800, 0xbc0, 0x6, 0xff}, {0x7e66, 0x7f, 0xd826, 0x7ffffffd, 0x3}, {0x4, 0xfffffff9, 0x2, 0x6, 0xcbc, 0x10001}], [{}, {}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x76fd50712e3ca073}, {}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x38c313914c2376af}, {0x2, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0xcffc20c5f194aaaa}, {0x3, 0x1}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xeb8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2001cc86) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="080002000392d81c"], 0x24}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 7.440249324s ago: executing program 3 (id=4172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000004280)={&(0x7f00000040c0)=[&(0x7f00000001c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000000240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000000280)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000000340)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000000480)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000000500)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000000540)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000580)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x7}, &(0x7f0000000700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000003}}, &(0x7f0000000740)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000000800)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000840)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x2}, &(0x7f0000000e00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x8, 0x3b76}, {0x9}, {0x1ff, 0x7}, {0xfff, 0xb}, {0x8000000000000000, 0x1ff}, {0x2, 0x2}, {0xc3, 0x3ff}, {0x5, 0x1c00000}, {0x6, 0xc}, {0x8926, 0x9}, {0x8000000000000000, 0x8}, {0xff, 0x9}, {0xd, 0xda}, {0x2, 0x101}, {0x401, 0xff}, {0x1, 0xba57}, {0x72, 0x1}, {0x9, 0x2}, {0xe, 0x9}, {0xfffffffffffffffc, 0x1ff}, {0x7f, 0xf}, {0x7fffffff, 0x400}, {0x3, 0x93}, {0xb, 0x81}, {0x9, 0x59}, {0x1, 0xb63}, {0x0, 0x5}, {0x100, 0x3}, {0x4, 0x1}, {0x694, 0x5}, {0xfffffffffffffff8, 0x59}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x27cc731d}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x3ff}, {0x200, 0x2}, {0xfff, 0x1}, {0x4, 0xc2b6}, {0xf2, 0x4}, {0x4, 0x8}, {0x5, 0x6}, {0xfffffffffffff000, 0xbef}, {0x2, 0xa}, {0x0, 0x8000000000000000}, {0xa, 0x5}, {0x3, 0xa}, {0x6, 0x1ff}, {0x4, 0x3}, {0xb, 0x1}, {0x7, 0x5}, {0xf5a}, {0x4, 0x5}, {0x6, 0x227bb508000000}, {0xf0000000000000, 0xc}, {0x2, 0x401}, {0x7, 0x8000000000000001}, {0xffffffffffffffff, 0xc}, {0x7, 0x7}, {0x2, 0xff}, {0xfffffffffffffeff, 0x1}, {0x8, 0x4}, {0xfffffffffffffffb, 0xd}, {0x2, 0x40}, {0x8000000000000001, 0x3}, {0x4f90, 0x8}, {0xffffffffffffff80, 0x7}, {0x109, 0x7fffffffffffffff}, {0x8, 0x10000}, {0x9, 0xfffffffffffffff7}, {0x3, 0x3}, {0x5, 0x6}, {0x9}, {0xffffffffffffffff, 0x40}, {0x2, 0x68}, {0x6, 0x6}, {0x8, 0x8000000000000000}, {0x1d8a, 0xfa}, {0x10001, 0x3}, {0x401, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0xf0200000000, 0x7fff}, {0x4, 0xfffffffffffffff6}, {0x7, 0x5}, {0x4, 0x2}, {0xb9, 0x1}, {0xfffffffffffffffc, 0x4}, {0x9, 0x3bfd}, {0x200, 0x2d78eb2e}, {0x9, 0x4}, {0x3, 0x3}, {0x7, 0xd}, {0x9, 0xa4a5}, {0xf, 0x9e}, {0xbea, 0x8}, {0x200f, 0x9}, {0xc, 0x401}, {0x4f, 0x8}, {0x2, 0x8000000000000000}, {0xffffffffffff0c10, 0x2}, {0x4}, {0xe8c, 0x8e3b}, {0x3, 0x7f}, {0xb07, 0x7fffffffffffffff}, {0x7b5, 0x7}, {0x8, 0x100000001}, {0x9}, {0x8, 0xb4e}, {0xc7, 0xe}, {0x400, 0x7}, {0x8, 0xb}, {0x1, 0x8}, {0x28f, 0x9}, {0x2, 0x8000}, {0x3, 0xfffffffffffffffe}, {0x1089, 0x401}, {0x5, 0x7}, {0x7, 0x8000000000000000}, {0x9, 0xfffffffffffffffd}, {0x1ff, 0x80bf}, {0x100000001, 0x4}, {0xf6, 0x5}, {0x2, 0xf4}, {0xb094, 0x3}, {0xfffffffffffffffe}, {0x8, 0x2}, {0xffffffffffffffff}, {0x10000, 0x4}, {0x8000, 0x1}, {0x1, 0x39}, {0x4aa, 0x1}, {0x5, 0x4}, {0x2de, 0x8}, {0x7, 0x3ff}, {0x8, 0x1ff}, {}, {0xfffffffffffffffa}, {0x4, 0x28086c0f}, {0x8000000000000000, 0x2}, {0x4, 0x4}, {0x5, 0x4}, {0x3f800000, 0x2f6f2c2b}, {0x5, 0x40}, {0x800, 0x401}, {0x9, 0x7}, {0x6, 0xfffffffffffffffa}, {0x1e2f00000000, 0x3}, {0xf6a5, 0xf}, {0xb43f, 0x92}, {0xfbe, 0x10001}, {0x4, 0x7}, {0x5, 0x70}, {0x6, 0x3fe2}, {0x7f80000000000, 0x10000}, {0x3799, 0x6}, {0x4, 0x3}, {0x7, 0x8000000000000001}, {0x7, 0x1}, {0x55543f17, 0x7}, {0x10001, 0x9}, {0x100, 0x1}, {0xffff, 0x6}, {0x5, 0x96c}, {0x100000001, 0x5}, {0xd2d, 0x7f}, {0x800, 0x3}, {0x4, 0x1}, {0x8400000000000000, 0xfffffffffffff9a8}, {0xfffffffffffffff8, 0x4}, {0xffffffffffffff04, 0xffffffffffffffff}, {0x2}, {0x1, 0xae6a}, {0x8, 0x40}, {0x9, 0xfffffffffffffffd}, {0x87, 0x8}, {0x5, 0x5}, {0x4, 0xb17}, {0x9, 0x3}, {0x8, 0xfffffffffffffffc}, {0xa7c4, 0x2}, {0x8, 0xfff}, {0xff, 0x8}, {0x9, 0x3ff}, {0x7, 0x9}, {0x3ff, 0x3}, {0x8, 0x3}, {0x3d00000000, 0x9}, {0x9, 0x10000}, {0x4, 0x7}, {0x4, 0x8}, {0x80000001, 0x39}, {0xffffffffffffffff, 0x9}, {0x4, 0xc}, {0xfffffffffffffffe, 0x1}, {0x10, 0x6}, {0x7, 0x2}, {0x2, 0x81}, {0xae87, 0x5}, {0x9c66, 0x9}, {0x9, 0x7fffffffffffffff}, {0x7fff, 0xc}, {0xa, 0x1}, {0xd3, 0x8}, {0x4, 0xffffffffffffbf46}, {0x5718, 0x494bafe8}, {0x4, 0x59d1f855}, {0x5, 0xffffffffffffffff}, {0xf8, 0x8}, {0x5, 0xffffffff}, {0x5, 0xfff}, {0xfffffffffffffff8, 0x4}, {0xf, 0xfffffffffffffff9}, {0x401, 0x3}, {0x5, 0x7ff}, {0x4a, 0x280}, {0x100000001, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x7f, 0x81}, {0x0, 0xc}, {0x4, 0x5}, {0x7, 0xfffffffffffffff8}, {0xb, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x2bb, 0x6}, {0xa, 0x3}, {0xffffffff00000001, 0x5}, {0xffffffff00000001, 0x8}, {0x7, 0x801}, {0x432, 0x2a9}, {0x0, 0x9}, {0x4, 0x6ce}, {0x8, 0xfff}, {0xb135, 0x6d0b2683}, {0x8000, 0x276b}, {0x7, 0xb}, {0x57, 0x1b0}, {0x2, 0x6}, {0xb, 0x4}, {0x6, 0x5}, {0x8000000000000001}, {0x0, 0x7}, {0x8000000000000000, 0xba}, {0x7f, 0x7}, {0x9, 0x2}, {0x100000, 0x3}, {0x0, 0x4}, {0x2, 0xaa5}, {0x7, 0xfffffffffffeffff}]}, &(0x7f0000001e40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xfffffff7}, &(0x7f0000001f80)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000001fc0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002000)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002040)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x1}, &(0x7f0000002180)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000021c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x8}, &(0x7f0000002300)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000002380)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f00000023c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002400)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000002480)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f00000024c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000002540)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000002580)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000002600)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002640)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000002680)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000002700)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000002740)=@features={{0x4f32494e, 0x6, 0x10, 0xe89399fbb32a0fa7}}, &(0x7f0000002780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f00000027c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x9}, &(0x7f0000002900)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002940)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0xfa}, &(0x7f0000002a80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002ac0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x6}, &(0x7f0000002c40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x475, 0xffffffffffff0000}, {0x3, 0xffffffffb348bc7e}, {0xe, 0x200}, {0xfffffffffffffff7, 0x10000}, {0x4, 0x4}, {0x9296, 0xff}, {0x40, 0x6e}, {0x0, 0x8}, {0x7, 0x90000}, {0x100, 0x5}, {0xfffffffffffffff7}, {0x3, 0x8001}, {0x489e, 0x4}, {0x9, 0x2}, {0xf3, 0x3509d3c9}, {0x100000001, 0x80000001}, {0x1ff, 0x3}, {0xffffffffffffffff, 0x8}, {0x7, 0x7}, {0x564, 0x1000}, {0x8, 0x5}, {0x0, 0x8}, {0x49}, {0xe00000, 0x7}, {0xdca0, 0x4}, {0xb2, 0x6b}, {0x4, 0x8001}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x80, 0x6430afaf}, {0x80, 0x1fe}, {0x6, 0x9}, {0xea73, 0x81}, {0x4, 0x4}, {0xe, 0x7}, {0x2, 0xffff}, {0x0, 0x6}, {0xf84, 0x80}, {0x3c9d, 0x2}, {0x40, 0x7}, {0x4, 0x6}, {0x7ff, 0x11fb28e3c0000}, {0xc}, {0xfffffffffffffff9, 0x7a2}, {0x101, 0x4}, {0x401, 0x401}, {0x1, 0xfe44}, {0x9, 0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x8, 0x80000001}, {0xfffffffffffffff8, 0xffffffffffff8000}, {0x4}, {0xd, 0x6}, {0x7, 0xffff}, {0x1, 0xa433}, {0x10001, 0x8}, {0xd35, 0x100}, {0x8000000000000000, 0x7e5}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x7}, {0x6, 0x7}, {0xb, 0x6}, {0xc, 0x7a}, {0xfffffffffffffffc, 0xff}, {0x5, 0x800}, {0xffffffffffffffff, 0x34}, {0x8000, 0x3}, {0x8000000000000000, 0x8c96}, {0xdbdb, 0x4}, {0x4, 0xd}, {0x1, 0x8}, {0x17b2, 0x400}, {0x1ff, 0x2}, {0xdd, 0x9657}, {0x425, 0x1000}, {0x5, 0x1000}, {0x81, 0x1}, {0x0, 0xda75}, {0x0, 0xff3}, {0x3, 0x7fffffffffffffff}, {0x4, 0x9}, {0x1, 0x3c08}, {0x4880000000000000, 0xe8}, {0x8, 0x2}, {0x48d, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xd6}, {0x9, 0x9}, {0x7, 0x5}, {0xfffffffffffffff7, 0x9}, {0x3, 0xb1c}, {0xfffffffffffffffb}, {0xfffffffffffffffd, 0xeb}, {0x4443, 0xfffffffffffffffc}, {0x7, 0x8}, {0x9, 0x4}, {0xffff, 0x4}, {0xf, 0xfffffffffffffff1}, {0x8, 0x9}, {0x0, 0x80000000}, {0x8000000000000001}, {0xeb8, 0x7}, {0x4, 0x2}, {0xfff, 0x3}, {0x96e5, 0x7ff}, {0xfffe, 0x10000}, {0x10000000, 0x4}, {0x7, 0x1}, {0x1ff}, {0x8, 0xfffffffffffffffa}, {0xfffffffffffffffa, 0x7b}, {0x7, 0x5}, {0x8, 0xd59}, {0x5, 0x2da2}, {0xfffffffffffeffff, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x8, 0x2}, {0x7, 0x400009}, {0x800, 0x8}, {0x4000000000000000, 0x8}, {0x5, 0x3800000000}, {0xd18, 0x4}, {0x9, 0x2}, {0x5f96, 0x8}, {0x7fffffffffffffff, 0x6}, {0x40, 0x1}, {0x5, 0x7}, {0x100000001, 0xa}, {0x80000001, 0x100000000}, {0xf7fa, 0x1ff}, {0xfffffffffffffff9, 0xc4}, {0x80, 0x100000001}, {0x1, 0x2}, {0x4, 0x2}, {0x19883843, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x80000001}, {0x72, 0x6}, {0x4, 0x2}, {0xb0f, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0xa10, 0xf}, {0x8, 0x2}, {0xf, 0x4888}, {0x80, 0x1000}, {0xfffffffffffeffff, 0x7f}, {0x10001, 0x8}, {0x10000}, {0x1, 0x7fffffff}, {0x0, 0x5f}, {0xfffffffffffffffd, 0xffffffff}, {0x40, 0xf6}, {0xd}, {0x9, 0x100000001}, {0x1, 0xf}, {0x9, 0xa8}, {0x8001, 0x8}, {0x14a, 0xffffffff7fffffff}, {0x0, 0x8}, {0x7ff}, {0xaf800000000000, 0x7}, {0xfffffffeffffffff, 0x7ff}, {0x7, 0x3}, {0x50, 0x7a}, {0x3ff, 0x10001}, {0x1284, 0xff}, {0x7, 0x5}, {0x8, 0x80000001}, {0x2, 0x9}, {0x7fffffff, 0x7}, {0x3, 0x9}, {0x5, 0x3}, {0x401, 0x7}, {0x3, 0x478c7684}, {0x5, 0x1d}, {0x1, 0x7ff}, {0x40, 0x1}, {0xf0, 0xff}, {0x0, 0x4}, {0x6, 0x3}, {0x8, 0xb71}, {0x5, 0x7}, {0x8000000000000001, 0x5}, {0x7, 0x1}, {0x676, 0x57}, {0x9, 0x100000000}, {0x9, 0xfffffffffffffff8}, {0x2, 0x8}, {0xe, 0x80000001}, {0x0, 0x5}, {0x634}, {0x2}, {0x7fffffffffffffff}, {0xde42, 0x7}, {0xa, 0x2}, {0x7a, 0x34a4b768}, {0x658, 0x1}, {0x80, 0x9}, {0x5, 0x7}, {0x749b, 0x2}, {0x5, 0x1}, {0x9, 0x7ff}, {0x5}, {0x4d3, 0x1000}, {0x100000000, 0xff}, {0xec62, 0x9b}, {0x7, 0x400}, {0xfffffffffffffff2, 0xfffffffffffff800}, {0x6, 0x5}, {0x7, 0x3}, {0x4564, 0x7}, {0x8, 0x9}, {0x0, 0x3}, {0xfef, 0x9}, {0xa000000000000000, 0x4}, {0x3, 0x1e000000000}, {0x8, 0xfffffffffffffff4}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x7}, {0xfbe, 0x8}, {0x38a, 0x1000}, {0xf, 0x2}, {0xf, 0x28000}, {0x1b3b, 0x8f2}, {0x5, 0xc5dc}, {0x7, 0x81}, {0x71, 0x5}, {0x8000000000000000, 0x80}, {0xa, 0x9e0000000000000}, {0x5, 0x71c}, {0x5a, 0x2}, {0x8000004, 0x8}, {0x4, 0x200}, {0x1000, 0x1}, {0x9, 0x952}, {}, {0x1, 0xc5}, {0x6, 0x100000000}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x38}, {0xdcd, 0x2}, {0x7, 0x3}, {0x8, 0x1c00000000000000}, {0x9, 0xffffffff}]}, &(0x7f0000003c80)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000003cc0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000003d40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000003d80)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000003e00)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000003e80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x43}, &(0x7f0000003fc0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000004000)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000004080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}], 0x32}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 6.537153032s ago: executing program 0 (id=4175): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x7f, 0x5, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x4, &(0x7f0000000000)="02c08120") syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)="02000000000000") lseek(0xffffffffffffffff, 0x851, 0x0) 6.347406362s ago: executing program 8 (id=4176): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d0009058103000200001209040100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x8b, 0x3, 0xffffd190, 0x14, 0x604, 0x823c, 0xc, 0x2, 0x7, 0x7ff, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.488710794s ago: executing program 7 (id=4177): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0x8000, 0x20000a, 0x203}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003100)=@newchain={0x2be4, 0x64, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0x5}, {0x10, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x2874, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_ACT={0x2850, 0x4, [@m_pedit={0xf40, 0xc, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x6, 0x7, 0x1, 0x0, 0xc}, 0x9, 0xf8, [{0xc, 0x6, 0xd, 0x6, 0x6, 0x1}, {0x5, 0x10001, 0x80, 0x3, 0x2, 0xc7d6}, {0x0, 0x7, 0xf, 0x0, 0x7, 0x3}, {0x101, 0x5, 0xfffffff6, 0xfffffffc, 0x7f8, 0x1}, {0xe, 0x400, 0x1, 0x4, 0xc2e, 0xfffff7f4}, {0x7923, 0x5, 0x9, 0x6, 0x7}]}, [{0x40, 0xffffffff, 0x3, 0x0, 0x8, 0x6}, {0x101, 0xff, 0x3, 0x6, 0x9, 0x2}, {0x0, 0x6, 0x5, 0x6, 0x10, 0x9}, {0x3, 0x276, 0x3, 0x9, 0x4, 0x902c}, {0x10, 0x3c, 0x37, 0x5, 0x3, 0x80000001}, {0xfffffff6, 0x6, 0x400, 0x40, 0x0, 0x4a}, {0xe0, 0x1, 0x4, 0x4, 0x4, 0x5}, {0x2, 0x3, 0x97e7, 0x0, 0x3, 0xf9}, {0x7, 0x2, 0x6, 0x40, 0x7, 0x2}, {0x7d9e614, 0x9, 0x4, 0x0, 0x100, 0xe}, {0x4, 0x1ff, 0x10001, 0x9, 0x3, 0x5}, {0x5, 0x3c23, 0x9, 0x6, 0x2, 0x1b}, {0x6, 0xffffffc0, 0x6, 0x100, 0x779}, {0x401, 0x4, 0x5, 0x9, 0x3, 0x5}, {0x4, 0x8, 0xfffffffd, 0xffff, 0x10000, 0x1}, {0x9, 0x8, 0x5, 0x6, 0x4, 0xc000}, {0x4, 0x10, 0x2e, 0x8001, 0xe93, 0xf}, {0x6, 0x0, 0x0, 0x7f, 0x3, 0x10000}, {0x292, 0x1, 0x10000, 0xfffffffc, 0x3, 0x7fff}, {0x2, 0x1, 0x6, 0xc, 0x8, 0x10}, {0x7, 0x0, 0x4, 0x7fffffff}, {0x7, 0x81, 0x2, 0x0, 0x6, 0x8}, {0x1dc2, 0xfffffffb, 0x73b, 0x9, 0x1, 0x6}, {0x3, 0x6, 0x2, 0x4, 0x1, 0x5}, {0x5, 0x4, 0x4, 0x9, 0xd2, 0x8}, {0x203e, 0x0, 0x40, 0x8000, 0xfffff800, 0x3}, {0x1000, 0x12, 0x200, 0x10, 0x9, 0x8}, {0x9b5b, 0x2, 0x3, 0x5, 0x4, 0xe9e9}, {0x401, 0x43, 0x4, 0x0, 0xfffffffc, 0xc2bb}, {0x10000, 0x6, 0x0, 0x0, 0x0, 0x6}, {0x100, 0x8, 0x4, 0x4, 0x6, 0x6}, {0x9, 0x0, 0x4, 0x3, 0xdae, 0x101}, {0xd, 0x6, 0x6, 0x0, 0x1}, {0x1, 0x9, 0x3, 0xe84, 0x8001, 0x280000}, {0xfffff001, 0x9, 0x6, 0xffff, 0xc0000000, 0xffff}, {0xe64, 0x5, 0x100, 0x49c, 0x9, 0x1}, {0x4, 0x9, 0x3, 0x3, 0x7, 0x8}, {0x81, 0x64, 0x3, 0x3, 0x7, 0x6}, {0x4, 0x8001, 0x5, 0x0, 0x5, 0x4}, {0x3, 0x0, 0xa6, 0x0, 0x81, 0x2}, {0x0, 0x6, 0x4b37, 0x0, 0x0, 0xffffa32b}, {0x616, 0x0, 0x25ab, 0x80000000, 0xfffffffd, 0xd6}, {0x9, 0x81, 0x18d, 0x5, 0xead8, 0x1000}, {0x4b3ed953, 0xff, 0x5, 0x2000000, 0x3}, {0xff800000, 0x5877, 0x4, 0x6, 0x200, 0x84}, {0x400, 0x6, 0x4, 0x1, 0x0, 0xffff}, {0xffff, 0x6, 0x9, 0x6, 0x12f5, 0x4}, {0x4, 0xfffffff7, 0xffff0001, 0x9, 0x3, 0x1ff}, {0x9957, 0x7, 0x2, 0x0, 0x78fe, 0x64}, {0xe, 0x6, 0x6, 0xff, 0x9, 0xee02}, {0x1, 0x5, 0x3, 0x80000000, 0x6, 0x7}, {0x5f, 0x1ff, 0x800, 0x5, 0x8, 0x3ff}, {0xfa, 0x6, 0x100, 0x7f, 0x8000, 0x7fffffff}, {0x63, 0xc11, 0x1, 0xb}, {0xb, 0x5, 0x63f, 0x4, 0xffffe694, 0x7}, {0xd, 0x2c8, 0x0, 0x4, 0x5, 0x5}, {0x3de9, 0x7, 0xf501, 0xff49, 0x1, 0x9}, {0x5, 0x8, 0x917f, 0x3, 0x4, 0x8}, {0x800, 0x8000, 0x2, 0x7, 0x1, 0x738df418}, {0x1, 0x800004, 0x0, 0x0, 0x3, 0x3}, {0x3, 0xf, 0x7, 0x2, 0x6, 0x7}, {0x8, 0x9, 0x2, 0x3a346fd2, 0xfffffff7, 0xf34c}, {0x2, 0x2, 0x9, 0x81, 0xda, 0xc5a5}, {0x2, 0x10001, 0x400, 0x800, 0x6, 0x2}, {0x0, 0x4, 0xd1a, 0x10000, 0x7, 0x9}, {0x81, 0x9, 0x1, 0x632, 0x7, 0x800}, {0x8, 0x39a7, 0x3, 0x1, 0x2, 0x6}, {0x7, 0x7, 0x8, 0x1, 0x5, 0x8}, {0x5, 0x0, 0xfa, 0x7, 0x101, 0x8}, {0x0, 0x2, 0x4, 0x0, 0x9, 0xd}, {0x7, 0xffff0001, 0x0, 0x1, 0x0, 0x7fffffff}, {0x4, 0x5, 0x5, 0x48a, 0x8466, 0x9}, {0xfffffffe, 0x8, 0x4, 0xd, 0x5, 0x1}, {0x80, 0x80000001, 0x3, 0x6, 0x5, 0x6}, {0x9, 0xf9, 0x9, 0x36d, 0x6, 0x8000}, {0x6, 0x0, 0x0, 0x578, 0x3, 0x8}, {0x2, 0x7, 0x4, 0x2, 0x80, 0xb53b}, {0x7, 0x8, 0x101, 0x8, 0x1, 0x81}, {0x6, 0x6, 0x1, 0x0, 0x0, 0x8}, {0x6, 0x3, 0x2, 0x4, 0x4, 0x7}, {0x5, 0x100, 0x3, 0x2, 0x5, 0x1e}, {0x10, 0x800, 0x0, 0x4, 0x401}, {0x0, 0x1, 0xff, 0x6fb, 0xfffffffa, 0x8}, {0x4c71, 0x9, 0xa7d, 0xa, 0x28000000, 0xb}, {0x0, 0x6, 0x2, 0x140, 0x800, 0x800}, {0x9, 0x2b, 0x0, 0x1, 0xd18, 0x3}, {0xfffffc00, 0x23b3, 0x20b1138a, 0xfffffffe, 0x1dc9, 0xa}, {0x7fff, 0x0, 0x2, 0x1, 0x1, 0x7}, {0x5, 0xffffffff, 0x1000, 0x10001, 0xffff}, {0xd3f8, 0xdf, 0x1, 0x8, 0x9, 0xd}, {0x0, 0x2, 0x2, 0x0, 0xa317, 0x5}, {0x1, 0x1, 0x0, 0xc97, 0x8, 0x5}, {0x7, 0xa, 0x5, 0x10001, 0x3, 0x978}, {0x0, 0x4, 0x71, 0x401, 0xd36c, 0x401}, {0x8001, 0x7d00, 0x6, 0xe, 0x6, 0x9}, {0x0, 0x8, 0x4, 0xcb, 0x5, 0x1}, {0x8, 0x7, 0x42f, 0xa063, 0x1, 0x9}, {0x6115, 0x400, 0x2, 0x8, 0x8, 0x6}, {0x0, 0x8001, 0x5, 0x0, 0xb263, 0x8}, {0x8, 0x10001, 0x80000001, 0x44c02a01, 0x5, 0x4}, {0x5, 0x400, 0x44, 0x9, 0x9, 0x101}, {0x0, 0xd8a8, 0x0, 0x3, 0x9, 0x97}, {0x0, 0xa36, 0x9, 0x40, 0x8, 0x1d4c62d1}, {0x2, 0x9, 0x350a80, 0x0, 0x1ff, 0x7}, {0xa040, 0x3, 0x9, 0x4, 0x4, 0x4}, {0x55c0d872, 0x9, 0xc88b, 0x7, 0x2, 0x10001}, {0x5, 0x4, 0x3, 0xffff, 0x7, 0x4dca}, {0x80000000, 0x1, 0xd4e1, 0x400, 0xd3d, 0x9}, {0x4, 0x9, 0x785f, 0xc75, 0x1, 0x74eb7f46}, {0xe, 0x3, 0x7, 0x0, 0x6}, {0x6, 0x7, 0x7fff, 0x9, 0x1}, {0x4, 0x7, 0x0, 0xe, 0x6, 0x99ec}, {0x1, 0xd4, 0x6, 0x40, 0x95, 0x7}, {0x9, 0x6b, 0xf, 0x10, 0x8, 0x5}, {0x10, 0x9, 0x7ff, 0x1, 0x9, 0x5}, {0x8, 0x1000, 0x10, 0x6, 0x9, 0x5}, {0x4, 0x4, 0x9, 0xecdf, 0x1, 0x3}, {0xfffffff2, 0xfff, 0xff, 0x9, 0x0, 0x5}, {0x100, 0x9, 0x3, 0x0, 0x4, 0xffff}, {0x1ff, 0x7, 0x656, 0x0, 0x9, 0x62c7811}, {0x3, 0x9, 0x2, 0x0, 0x8, 0x5}, {0xfffffff8, 0xfffffffa, 0x7, 0x2, 0xd, 0xc92b}, {0x9, 0x401, 0x8, 0x10000, 0x0, 0xffffffff}, {0x1, 0x56e, 0x81, 0x9, 0x5, 0xfffffffe}, {0xffff, 0x100, 0x6, 0x3a540000, 0x233c, 0xe}, {0x1, 0xff, 0xff, 0x200, 0x6, 0x8}, {0x1, 0x8b3e, 0x1, 0x1, 0x5, 0x6}, {0xd, 0x9, 0x1, 0x1, 0x401, 0x7fff}], [{0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {0x4}, {0x3}, {0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0xa898b12911e59402, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x6}]}}]}, {0x64, 0x6, "04eac211a3f9b1b5191a5da0f3e4533eb645c29ade9af6a43415775cc3d76865e14db68dd6b478d49a6b3aa02e69717f7910d65da3a85f445ea0058897f3635572c9fb94390ffc0fca9aa4466f6164ab5aac886d0baeb522bcbc3818aa73819e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x7c, 0x15, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8, 0x5, 0x7fffffff, 0xf}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x107}]}, {0x18, 0x6, "7b4eaa79524b038daa030250ca05e54fa4749a47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xf8, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x1, 0x20000000, 0x400, 0x5df8}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x0, 0x3, 0x8001, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8}]}, {0x66, 0x6, "e9570f329a273fd9113b3b697545e5723f32666cb9168df6ae88ec0efd03254baca9cc985d5948965878009869fa13586f69b5ce26d1a5b869c3ebddb22f16566015076ba72051d7cfcecfae249014316731ed40f117a444aa7634d723e5f8f6c02f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1528, 0x6, 0x0, 0x0, {{0xb}, {0x4fc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xf7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb68, 0x6, 0x3, 0x8000, 0x7, {0x2, 0x1, 0x1, 0x200, 0x7, 0x7}, {0x9, 0x2, 0x0, 0x5, 0x1, 0x95}, 0x2, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff0001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0xe, 0x8001, 0x16, {0x0, 0x0, 0x8d6, 0x3a18, 0x1}, {0x4, 0x0, 0x8b, 0x9, 0x5, 0x4}, 0x10000, 0xbecf, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc1c, 0xffffffffffffffff, 0x1, 0x9, 0xeb, {0x65, 0x1, 0x9, 0x0, 0x7, 0x6a5d}, {0x0, 0x2, 0x80, 0x47, 0xf, 0x2}, 0x2, 0x3, 0xff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4f, 0x1, 0x0, 0xd, 0xfffff80f, 0x5, 0x8, 0x9, 0x7ff, 0x7ff, 0x3, 0x4, 0x0, 0x9, 0x7856, 0x9, 0x3, 0x22da28cb, 0x6, 0x8, 0x2, 0x9, 0x87, 0x2, 0x4, 0x7, 0x8, 0x3ff, 0x2000, 0x82, 0xff800000, 0x2, 0x3, 0xd, 0xc, 0x9ff010c4, 0x6, 0x1, 0x3, 0x0, 0x8, 0x8, 0x5, 0x6, 0x2, 0x1, 0x28e0, 0x3, 0x4, 0x0, 0x1, 0x3, 0x9, 0x991, 0x80000000, 0x9, 0x78e, 0x0, 0x80000000, 0x81, 0x4000005, 0x1, 0x9, 0x3, 0x436, 0x3, 0x1c8, 0x0, 0x3, 0x5, 0x33e6, 0x1, 0x5, 0x3, 0x10001, 0x7fffffff, 0xb2, 0x8, 0x1ff, 0x3, 0xfff, 0xfffffc00, 0x2d, 0x6, 0xe, 0x10001, 0x4, 0x9, 0x58000000, 0x5, 0x0, 0x6, 0xe, 0x0, 0x8, 0xffffffff, 0x7, 0x2000, 0x5, 0x9, 0x4, 0x1, 0x3, 0x0, 0xa122, 0xffff, 0x4, 0x5, 0x223, 0x6, 0x4, 0x6, 0x1, 0x1, 0xdb37, 0xfff, 0x2, 0x1, 0x2, 0x3, 0x0, 0x6, 0xffff, 0x9, 0x6a7d, 0xb, 0x9, 0x1cac, 0x81, 0x1, 0x2, 0x1, 0x5, 0xfffffffb, 0x27ab, 0x2, 0x1, 0x4, 0x7, 0x5, 0x7, 0x5, 0x5, 0x0, 0x9, 0x0, 0x10, 0x8, 0x9af5, 0x2, 0xffff1dae, 0x100, 0x0, 0x3, 0x3, 0x8, 0x4, 0xa90f, 0x0, 0x5, 0x1, 0x8, 0x3, 0x7fffffff, 0x1, 0x3ff, 0x3, 0x1, 0xfffffffa, 0x4, 0xfff, 0x0, 0xf43f, 0x5, 0x4, 0x1, 0x200, 0x0, 0x40fa, 0x0, 0x7f, 0x2, 0x0, 0xcd, 0x38c, 0x6, 0x4, 0x0, 0x1, 0x7, 0x80000001, 0x5, 0x774b7b09, 0x0, 0xff, 0x2, 0x0, 0x4, 0x8, 0x5, 0x6, 0x100, 0x3, 0x0, 0xfffffff9, 0xff, 0xfffffffc, 0xffffffff, 0x8, 0x400, 0x2, 0x9, 0x400, 0x4, 0x8, 0x2, 0x6, 0x15fad193, 0x1000, 0x6, 0x9, 0x6, 0x3, 0x0, 0x1, 0x5, 0x2, 0x82, 0x4, 0x2, 0x10000, 0x0, 0x348, 0x1, 0x200, 0x1, 0x10001, 0x2, 0x6, 0x7, 0xda, 0x22be, 0x4, 0x1, 0x0, 0x0, 0x2, 0x84, 0x8, 0x1135, 0x1e3b4013, 0xfffffff7, 0x5, 0x10, 0xfa77]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x128, 0x6, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x9, 0x3, 0x1, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8710}]}, {0xcc, 0x6, "0c61943e0ad4f6443c5f26f23bd369a9a3a59372ffd395cf440f59795242ccec7ed83943aabf7a5aa0f70ccfb9c0ada3d639f332022e197243c127f247954dc41ed52b5cf807ffe09503f0c509615e47810782ab89abdd3e75f09948473d7c0c77684eddc273d8579a395edc74b754b5c161c75ef1f9d748134d60178c972bbd3eb15a6afdd036fe0177e0242cf59e9fb524622e0a372bd5e5ea6bf6f13ca19fa17e347ae718a625b65517c13f3dc4f16ca5c4635831c700a2a2875a49fe152700901c964fb2207a"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x148, 0x18, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x800, 0x5, 0x2, 0x7}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1b57a9fb, 0x80, 0x3, 0x2, 0x6}}]}, {0xcb, 0x6, "5f98693417a57aad5c60e87375cdb4fd34325e9388df12079e1bb1263c5bdb21a5fce862729f9551718cb167ddefc47ce09871fae136f8e66f4de887d55de309b324bcb8993f2219d020c13d52d5152482524a389788926b8a5dc19806615068046b6512031ba3738ac4b781551b7b35cecc5f45a3e9e9382f74d83c1307ecfd847f30fd777a876da8a327143032ef7c501c99fa4730fda5f40e23bddd1ddaea332d568ce8fd6c393ff6a23461c5736bdb997876a47b635cd9f65cfc0116333617952b01903e7c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x1, 0xc4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x318, 0x2, [@TCA_CGROUP_EMATCHES={0xe4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x7}, {0x9, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0x73, 0xa, 0x1, "193d910bd2314b5b07d5"}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x52}, {0x1, 0x3, 0x2, "63f4c1"}}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0xf91b, 0x9, 0x1000}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x54, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}]}]}, @TCA_CGROUP_ACT={0x230, 0x1, [@m_ife={0x80, 0x10, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xba80, 0xfffffff8, 0x6, 0x401, 0xa}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x33, 0x6, "ea5e52492407607f8a27b2f3aa13c9545afce4c18e6c26ec47fca55df2b16d207a9c9685af15e15e94e16da997ab5e"}, {0xc, 0x7, {0x1, 0xca8589bb3210633}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x60, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2e5a, 0x0, 0x0, 0x1, 0xffff}}]}, {0x19, 0x6, "af9ff271d1a364d3345c8f073a227ec9a00f21b3e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x14c, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0xfffffffe, 0x2, 0x3, 0x800}, 0x2}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2be4}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0xb, 0x3, 0x7ff, 0x7, 0x1e67d85f, 0x800, 0x800}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0xb, @sdr={0x36314d4e, 0x4}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0xc82, 0x3) 4.577977191s ago: executing program 7 (id=4178): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1e030700800009", 0x23) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000012c0)) syz_usb_connect$uac2(0x5, 0xae, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x2c, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="43032a991298fbfb823432acfd99ea03e200780218f77945af2de8cc87c76c3a2cdbf19f10c6a741a83ce7f471b5f2aa1940cd84ddf0194f95e25905bbbaff34ccb25a"]}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) 4.259466139s ago: executing program 0 (id=4179): r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffffffffff7, 0x9) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) keyctl$invalidate(0x15, r1) socket$rds(0x15, 0x5, 0x0) socket(0x5, 0x5, 0x4) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271f, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000432000/0x3000)=nil, &(0x7f000087a000/0xa000)=nil, 0x3000, 0x0, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041080) 4.061639193s ago: executing program 0 (id=4181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xf, r4, &(0x7f0000000000)="46cac79185c2641b", 0x8, 0x7, 0x0, 0x0, r4}]) r6 = eventfd(0xffffff64) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x3, 0x2, r6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.14167262s ago: executing program 8 (id=4183): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2954004877612322e31f2004261673bfdde8d765a98aafd54947423d528dacc76612d9cef0af549ad592f84250aea3211376b6833811cb0a0421c1328181d40b8bdfaad6dd8686c5707160fccd215921e2c30f032d0e23ff54643f520173a41520b921694f9ea4dc1ab6873f36027cd755480a77d4874a36d8a9c09d06000000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fbdbdf250c00000008002b005f0e000008002c00c00c0000050035000900000008000b000100000005002900010000000800310006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000400)=""/76) futex(&(0x7f0000000580), 0x189, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002001100000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x8) landlock_restrict_self(r7, 0xc) r8 = dup3(r3, r7, 0x80000) write$sysctl(r8, &(0x7f0000000280)='6\x00', 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8800090503"], 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x70a41) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000240)={0x5, 0x30314142, 0x3, @discrete={0x100004, 0x9920}}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r9, 0x8008f512, &(0x7f0000000180)) 1.474226669s ago: executing program 7 (id=4185): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103", @ANYRES64=r0, @ANYRES8=r0], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) pidfd_getfd(r2, r0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x147902, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) 1.425422755s ago: executing program 5 (id=4186): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x40000, 0x0, 0x4000000000000000, 0x1, 0x8000000, 0x6, 0x0, 0x3, 0x100000000000, 0x0, 0x0, 0x10000, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffff365a, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}) 1.345404398s ago: executing program 5 (id=4187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r3, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="807efaa0498933df4b28869b891345f0c9bd6505cf7b052797361992955317b38cb689384974e000216774622dc68d00e0163d5df634d9a0979a9f9b1c3d8ad5725bd02293a69d81441ddfaceb91148f8492fb6a99511834f47a04e49a5df7fcf257bdbcd469ab8cf8554475a04b", 0x6e}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) r6 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b9a6ccb399607e35000000008000000003000004"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) close(0x3) 783.729803ms ago: executing program 0 (id=4188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) (async) r1 = syz_open_dev$mtd(&(0x7f0000000080), 0xa, 0x28000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$MEMGETINFO(r1, 0x80204d01, &(0x7f0000000100)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x413, 0x0) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r6, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x9]}}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0x4c08, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, 0x0) 701.161827ms ago: executing program 5 (id=4189): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x350, 0x7) ptrace$pokeuser(0x6, r0, 0x388, 0x1) tkill(r0, 0x13) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ptrace$pokeuser(0x6, r0, 0xd8, 0xffffffffffffffff) 642.890086ms ago: executing program 0 (id=4190): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) unshare(0x20000400) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x40) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000002c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 608.427981ms ago: executing program 5 (id=4191): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000002cc0)=@ethtool_gstrings={0x1b, 0x8}}) r0 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x4) (async) socket$inet6(0xa, 0x80000, 0x4) sendmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000000)=@generic={0x2a, "242c3de956522c10e1ccf05beaedbe09d671d3ce6f4efe886298687064f6c02e051daad4b283448a6666b363ab993470febdeb08efb45a5f25adc220f669404789dd7d9bf1139c35842582f690c513ed525fbe60bcb8c8e414ea96508e13f49fe42ac0284180967de65103114ec5b881310ff0a7ef6d05b663ee3ad96eed"}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)="660473e86ddf9e3bf1455fabaa3b82d54071fd66be0803d6fff7b07c79cbad5b69273fab30116d9551830d374f4b2cdc4c7c8f1f298dc6128c191381e9399610eee243c2548092eed92ed7c6a30f87efa680b303fa0acc41f1af03db85955e1e29f858daff8e72f5498447bdaf92832a56373b4d470a30cc5e3f62d6868e968c4f104090d837263b64ba17c6b5a25528530dfd7b9ef503fb4803656686b249cb04747c065f7e4bddcf083612f9231554da187e5e0d580608645a69b0ce622e1c7d23252c0219d658cbfe01462c", 0xcd}, {&(0x7f0000000180)="42660e0c5beda7c0c954ff616c6cb2edf3e5ea9830162abdf4371b62e1b1f8a0302f3d4c3be203988fd6459d8b7efb94d2e37238a46d5d6cb7bca9293cc4b1aa393b6073fef738bace190626cefe75a048f308f0cd3e6c135b8b0f1c96b3e0844d6a9f9161b4ab0cc194bb4319d114c42234c66aedbf3785b07b26502ba29db6f0ff17c3aa09c8c6b13cfa3cf222fd03e89390d11bb1f49f25ce4bbfe807d85de00779b36acb312dbcd8425cbbe019c2bc48cc1914107707c9c76402cbfa0f5da70d8fc97fada400b1cc38e0", 0xcc}, {&(0x7f00000002c0)="3b4233b2c587a27c183cd655e70a376871976577c73e0de951ac169d1a884d2265013d24f04fa0c2a0a7e73038eec694328a1d72997c59c4d6b48385086b594cd22294931fed28dd03aab6130937de40815d42e473fac87e9a22ebf74a68fe5ccd52b474c7b2a1956643290ab69c486a0483863ed15d522f7d6320fcf1b31a414d9c4dd895f8237a2e4a942cf4782ebdd65d00bcec04b7d4bca16e80ae00", 0x9e}, {&(0x7f0000000380)="c5ce011c78b2b8bc5b", 0x9}, {&(0x7f00000003c0)="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", 0x1000}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="400000000000000017010000020000008ae01ba1af2c6f96c7f9ec7880b3c0b497caf6e92b02b4e72972e7a86b6579972cb595678b4198ad88a706554b53d600a0000000000000001100000000800000c07b7dc5b0beb1997abb17773e20014ed3db85c787dcae5c6fa353853cbe4cc27b940cf7329677d61617fc3b6a1a9da470e488980289e2722c902c95deed5f9152cfbfec6d847fc19682a6f11ed3c1f92ba9a9a34e01bf5939cd0caba67b5b167dbc6c16b620a781b5479819d5bef509f7362345e8030baca5e66eac663881c9f82a2b3a0964a25187df40000000000090000000000000008400000001010000e31b541cbbcd2698c8da371a35ec130c1c069b6d904dbd83e8a6c13f010247e008bc55f64d958b9a535d43b9108ffab88d32651d3f6622ab3512ccb870d1f10490adb5beb3b15e1f2ef79764d9d5c2921a41fff854f260ddb66e2f3db3cea0126e3f72ec093cb81a69edbc02ff06e888b0624eb878de13dd6e8b177199c85b00e00000000000000006000000080000007710c0981f4f6e0f51601619cd40890aa8b7a70e70488f3fb52237c8337168dd61b5c0ac50d6fd97995f24af9741cbc6b21b4f91cbc96f3eba410dcdb6fdfb316a5890c7346104355b6d386b58fcb1f73e6e0900000000000000f5bd924f170a03caaf38485827550095da4ccbdabe9f56d89cf0dbdf5b6f40fdccd0ffe8c385abc5c762f656f749a9f73251d5338b87b4870ce23b0ff6d6c1ad054effa6146a64eada9e66c7544f440b237aa1960daaf1bb43067596dfef017f90bd2b0100000000000000c7467a3df576d3cecfc8ef2800000000000000010000000400000080fee28440ea4c7c70b65fb8251310169b95e82c0240000068000000000000000d010000050000006472d7f7a0c4e9f116a123a976c819fef9262b8f7407512bd17530e946573b5415fe42402831760e313f3b26def7cbf6bbe451db77be29b58b62a54accef73eba285a79ccc8b4130e100507c62e9fad1b84cedb74ccf0cef"], 0x320}, 0x40) (async) sendmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000000)=@generic={0x2a, "242c3de956522c10e1ccf05beaedbe09d671d3ce6f4efe886298687064f6c02e051daad4b283448a6666b363ab993470febdeb08efb45a5f25adc220f669404789dd7d9bf1139c35842582f690c513ed525fbe60bcb8c8e414ea96508e13f49fe42ac0284180967de65103114ec5b881310ff0a7ef6d05b663ee3ad96eed"}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)="660473e86ddf9e3bf1455fabaa3b82d54071fd66be0803d6fff7b07c79cbad5b69273fab30116d9551830d374f4b2cdc4c7c8f1f298dc6128c191381e9399610eee243c2548092eed92ed7c6a30f87efa680b303fa0acc41f1af03db85955e1e29f858daff8e72f5498447bdaf92832a56373b4d470a30cc5e3f62d6868e968c4f104090d837263b64ba17c6b5a25528530dfd7b9ef503fb4803656686b249cb04747c065f7e4bddcf083612f9231554da187e5e0d580608645a69b0ce622e1c7d23252c0219d658cbfe01462c", 0xcd}, {&(0x7f0000000180)="42660e0c5beda7c0c954ff616c6cb2edf3e5ea9830162abdf4371b62e1b1f8a0302f3d4c3be203988fd6459d8b7efb94d2e37238a46d5d6cb7bca9293cc4b1aa393b6073fef738bace190626cefe75a048f308f0cd3e6c135b8b0f1c96b3e0844d6a9f9161b4ab0cc194bb4319d114c42234c66aedbf3785b07b26502ba29db6f0ff17c3aa09c8c6b13cfa3cf222fd03e89390d11bb1f49f25ce4bbfe807d85de00779b36acb312dbcd8425cbbe019c2bc48cc1914107707c9c76402cbfa0f5da70d8fc97fada400b1cc38e0", 0xcc}, {&(0x7f00000002c0)="3b4233b2c587a27c183cd655e70a376871976577c73e0de951ac169d1a884d2265013d24f04fa0c2a0a7e73038eec694328a1d72997c59c4d6b48385086b594cd22294931fed28dd03aab6130937de40815d42e473fac87e9a22ebf74a68fe5ccd52b474c7b2a1956643290ab69c486a0483863ed15d522f7d6320fcf1b31a414d9c4dd895f8237a2e4a942cf4782ebdd65d00bcec04b7d4bca16e80ae00", 0x9e}, {&(0x7f0000000380)="c5ce011c78b2b8bc5b", 0x9}, {&(0x7f00000003c0)="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", 0x1000}], 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="400000000000000017010000020000008ae01ba1af2c6f96c7f9ec7880b3c0b497caf6e92b02b4e72972e7a86b6579972cb595678b4198ad88a706554b53d600a0000000000000001100000000800000c07b7dc5b0beb1997abb17773e20014ed3db85c787dcae5c6fa353853cbe4cc27b940cf7329677d61617fc3b6a1a9da470e488980289e2722c902c95deed5f9152cfbfec6d847fc19682a6f11ed3c1f92ba9a9a34e01bf5939cd0caba67b5b167dbc6c16b620a781b5479819d5bef509f7362345e8030baca5e66eac663881c9f82a2b3a0964a25187df40000000000090000000000000008400000001010000e31b541cbbcd2698c8da371a35ec130c1c069b6d904dbd83e8a6c13f010247e008bc55f64d958b9a535d43b9108ffab88d32651d3f6622ab3512ccb870d1f10490adb5beb3b15e1f2ef79764d9d5c2921a41fff854f260ddb66e2f3db3cea0126e3f72ec093cb81a69edbc02ff06e888b0624eb878de13dd6e8b177199c85b00e00000000000000006000000080000007710c0981f4f6e0f51601619cd40890aa8b7a70e70488f3fb52237c8337168dd61b5c0ac50d6fd97995f24af9741cbc6b21b4f91cbc96f3eba410dcdb6fdfb316a5890c7346104355b6d386b58fcb1f73e6e0900000000000000f5bd924f170a03caaf38485827550095da4ccbdabe9f56d89cf0dbdf5b6f40fdccd0ffe8c385abc5c762f656f749a9f73251d5338b87b4870ce23b0ff6d6c1ad054effa6146a64eada9e66c7544f440b237aa1960daaf1bb43067596dfef017f90bd2b0100000000000000c7467a3df576d3cecfc8ef2800000000000000010000000400000080fee28440ea4c7c70b65fb8251310169b95e82c0240000068000000000000000d010000050000006472d7f7a0c4e9f116a123a976c819fef9262b8f7407512bd17530e946573b5415fe42402831760e313f3b26def7cbf6bbe451db77be29b58b62a54accef73eba285a79ccc8b4130e100507c62e9fad1b84cedb74ccf0cef"], 0x320}, 0x40) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file3\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0xc7028a80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) (async) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffffffffffed4) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x5b) 400.918527ms ago: executing program 5 (id=4192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="c2", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000600)="a852", 0x2, 0x805, 0x0, 0x300) 358.418137ms ago: executing program 5 (id=4193): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x8b, 0x3, 0xffffd190, 0x14, 0x604, 0x823c, 0xc, 0x2, 0x7, 0x7ff, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 156.923804ms ago: executing program 0 (id=4194): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000440)={0x81, 0x3432564e, 0x1, @discrete={0xfffffff8, 0x7e}}) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x7, 0x6, 0x8, 0x4, 0x0, 0x4000000, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x6, 0xa3}, @sadb_key={0x1, 0x8}]}, 0x2b}}, 0x40080) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000700)={0x6, 0x118, 0xfa00, {{0xb, 0x3, "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", 0x9b, 0x8, 0x3, 0xfa, 0xc2, 0x8, 0x37, 0x1}, r4}}, 0x120) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0x5, 0x1800}], 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x8680}, {0xffffffffffffffff, 0x1000}, {r1, 0x5400}, {r0, 0x4021}, {r2, 0x2056}, {r3, 0x24}, {r1, 0x2041}], 0x7, &(0x7f00000001c0), &(0x7f0000000200)={[0x4]}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0xb}, 0x20) ioctl(r2, 0x3b93, &(0x7f00000000c0)) 0s ago: executing program 8 (id=4195): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c1e030700800009", 0x23) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000012c0)) syz_usb_connect$uac2(0x5, 0xae, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x2c, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="43032a991298fbfb823432acfd99ea03e200780218f77945af2de8cc87c76c3a2cdbf19f10c6a741a83ce7f471b5f2aa1940cd84ddf0194f95e25905bbbaff34ccb25a"]}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bond0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'dummy0\x00', 0x1}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4}) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00"}) kernel console output (not intermixed with test programs): 0.0: Error: mce write submit urb error = -90 [ 882.454786][T18559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.468480][T18559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.471767][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.494834][ T5680] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 882.508834][ T5680] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.511750][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.553275][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.575921][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.602437][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.621610][T16213] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 882.629515][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.651740][T11193] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 882.674189][T11193] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 882.683509][T11193] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 882.761862][T16213] usb 10-1: device descriptor read/64, error -71 [ 882.872094][T16213] usb usb10-port1: attempt power cycle [ 882.934489][ T5680] wacom 0003:056A:033B.0042: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 882.950163][ T5680] wacom 0003:056A:033B.0042: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 882.961689][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 882.965549][ T5680] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:033B.0042/input/input100 [ 883.154022][T18568] xt_hashlimit: size too large, truncated to 1048576 [ 883.212239][T16213] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 883.225862][T18577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 883.253466][ T5680] usb 2-1: USB disconnect, device number 122 [ 883.255185][T16213] usb 10-1: device descriptor read/8, error -71 [ 883.501675][T16213] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 883.517036][T18568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.527136][T18568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.532156][T16213] usb 10-1: device descriptor read/8, error -71 [ 883.652860][T16213] usb usb10-port1: unable to enumerate USB device [ 883.746036][T11193] usb 9-1: USB disconnect, device number 25 [ 884.291655][T11193] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 884.451648][T11193] usb 10-1: Using ep0 maxpacket: 8 [ 884.471043][T11193] usb 10-1: unable to get BOS descriptor or descriptor too short [ 884.489604][T11193] usb 10-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 884.500280][T11193] usb 10-1: config 1 has an invalid interface number: 211 but max is 0 [ 884.510642][T11193] usb 10-1: config 1 has no interface number 0 [ 884.521564][T11193] usb 10-1: config 1 interface 211 has no altsetting 0 [ 884.536875][T11193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.545708][T11193] usb 10-1: Product: syz [ 884.550110][T11193] usb 10-1: Manufacturer: syz [ 884.555369][T11193] usb 10-1: SerialNumber: syz [ 884.670443][T18598] IPVS: length: 197 != 8 [ 884.795945][T18586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.844936][T18586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.286936][T11193] dvb-usb: found a 'Yuan EC372S' in warm state. [ 885.331114][T11193] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 885.404513][T18613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3928'. [ 885.415727][T11193] dvb-usb: Yuan EC372S error while loading driver (-23) [ 885.498300][T17486] usb 10-1: USB disconnect, device number 24 [ 885.661775][ T5725] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 885.859825][ T5725] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 885.939597][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.025503][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.174152][ T5725] usb 2-1: config 0 descriptor?? [ 886.225615][ T5725] pwc: Askey VC010 type 2 USB webcam detected. [ 886.619668][ T5725] pwc: recv_control_msg error -32 req 02 val 2b00 [ 886.629728][ T5725] pwc: recv_control_msg error -32 req 02 val 2700 [ 886.637996][ T5725] pwc: recv_control_msg error -32 req 02 val 2c00 [ 886.654265][ T5725] pwc: recv_control_msg error -32 req 04 val 1000 [ 886.662850][ T5725] pwc: recv_control_msg error -32 req 04 val 1300 [ 886.671160][ T5725] pwc: recv_control_msg error -32 req 04 val 1400 [ 886.692100][ T5725] pwc: recv_control_msg error -32 req 02 val 2000 [ 886.704582][ T5725] pwc: recv_control_msg error -32 req 02 val 2100 [ 886.715933][ T5725] pwc: recv_control_msg error -32 req 04 val 1500 [ 886.726056][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3932'. [ 886.727320][ T5725] pwc: recv_control_msg error -32 req 02 val 2500 [ 886.748828][ T5725] pwc: recv_control_msg error -32 req 02 val 2400 [ 886.972845][ T5725] pwc: recv_control_msg error -71 req 02 val 2900 [ 886.999596][ T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 887.016934][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 887.027151][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 887.042340][ T5725] pwc: Registered as video103. [ 887.062383][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 887.105948][ T5725] usb 2-1: USB disconnect, device number 123 [ 887.297770][T18635] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3935'. [ 887.443643][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 887.970564][T18642] atomic_op ffff8880320b4198 conn xmit_atomic 0000000000000000 [ 888.231641][ T5725] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 888.403184][ T5725] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 888.433936][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.462886][ T5725] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 888.470977][ T5725] usb 2-1: Manufacturer: syz [ 888.477946][ T5725] usb 2-1: config 0 descriptor?? [ 888.486949][ T5725] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 888.653156][T18653] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 888.691623][T11193] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 888.841577][T11193] usb 10-1: Using ep0 maxpacket: 32 [ 888.847631][T11193] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 888.859103][T11193] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 888.867594][T11193] usb 10-1: config 0 has no interface number 0 [ 888.873891][T11193] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.885357][T11193] usb 10-1: config 0 interface 85 has no altsetting 0 [ 888.895692][T11193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.904063][T11193] usb 10-1: Product: syz [ 888.908374][T11193] usb 10-1: Manufacturer: syz [ 888.913168][T11193] usb 10-1: SerialNumber: syz [ 888.920040][T11193] usb 10-1: config 0 descriptor?? [ 889.128823][T11193] appletouch 10-1:0.85: Failed to read mode from device. [ 889.136160][T11193] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 889.559988][T11193] usb 10-1: USB disconnect, device number 25 [ 890.121580][T11193] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 890.283916][T11193] usb 9-1: Using ep0 maxpacket: 8 [ 890.309205][T11193] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 890.323655][T11193] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.355710][T11193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.389806][T11193] usb 9-1: config 0 descriptor?? [ 890.417555][T11193] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 890.591639][ T5608] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 890.697539][ T5725] logitech-hidpp-device 0005:046D:B012.0043: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 890.745764][T18679] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.761577][ T5608] usb 10-1: Using ep0 maxpacket: 8 [ 890.768590][ T5608] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 890.782397][ T5608] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 890.796363][ T5608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 890.813348][ T5608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 890.824306][ T5608] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.837781][ T5608] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.959116][ T5725] usb 2-1: USB disconnect, device number 124 [ 891.026359][T11193] gspca_vc032x: reg_r err -71 [ 891.031359][T11193] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 891.053273][T11193] usb 9-1: USB disconnect, device number 26 [ 891.060548][ T5608] usb 10-1: GET_CAPABILITIES returned 0 [ 891.077298][ T5608] usbtmc 10-1:16.0: can't read capabilities [ 891.237355][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 891.248582][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 891.261394][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 891.274856][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 891.284688][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 891.598528][T17486] usb 10-1: USB disconnect, device number 26 [ 891.788312][T18687] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.799833][T18687] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.807621][T18687] bridge_slave_0: entered allmulticast mode [ 891.820938][T18687] bridge_slave_0: entered promiscuous mode [ 891.856560][T18687] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.868797][T18687] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.876919][T18687] bridge_slave_1: entered allmulticast mode [ 891.885926][T18687] bridge_slave_1: entered promiscuous mode [ 891.901976][ T46] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 891.928640][T18687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.942821][T18687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.982479][T18687] team0: Port device team_slave_0 added [ 891.990877][T18687] team0: Port device team_slave_1 added [ 892.020676][T18687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.027988][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.055702][T18687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.069380][T18687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.076601][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.082352][ T46] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 892.102992][T18687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.133093][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.141377][ T46] usb 9-1: Product: syz [ 892.146365][ T46] usb 9-1: Manufacturer: syz [ 892.151070][ T46] usb 9-1: SerialNumber: syz [ 892.159133][ T46] usb 9-1: config 0 descriptor?? [ 892.170367][ T46] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 892.176714][T18687] hsr_slave_0: entered promiscuous mode [ 892.184548][T18687] hsr_slave_1: entered promiscuous mode [ 892.192669][T18687] debugfs: 'hsr0' already exists in 'hsr' [ 892.198519][T18687] Cannot create hsr debugfs directory [ 892.333899][T18710] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 892.386465][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3955'. [ 892.428976][T18699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 892.446966][ T5610] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 892.485668][ T46] gspca_sunplus: reg_r err -71 [ 892.504592][ T46] usb 9-1: USB disconnect, device number 27 [ 892.571581][T17486] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 892.743805][T17486] usb 10-1: Using ep0 maxpacket: 32 [ 892.756754][T17486] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 892.774009][T17486] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 892.785438][T17486] usb 10-1: config 0 has no interface number 0 [ 892.798565][T17486] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 892.820341][T17486] usb 10-1: config 0 interface 85 has no altsetting 0 [ 892.839855][T17486] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.860593][T17486] usb 10-1: Product: syz [ 892.865700][T17486] usb 10-1: Manufacturer: syz [ 892.870651][T17486] usb 10-1: SerialNumber: syz [ 892.885979][T17486] usb 10-1: config 0 descriptor?? [ 893.104121][T17486] appletouch 10-1:0.85: Failed to read mode from device. [ 893.122912][T17486] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 893.186578][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3962'. [ 893.292661][ T46] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 893.380215][ T5610] Bluetooth: hci8: command tx timeout [ 893.432019][ T5680] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 893.452086][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 893.464438][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 893.484059][ T46] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=65.08 [ 893.514659][ T46] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 893.545823][ T46] usb 2-1: config 6 has no interface number 0 [ 893.566782][ T46] usb 2-1: config 6 interface 200 has no altsetting 0 [ 893.603563][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.620973][T17486] usb 10-1: USB disconnect, device number 27 [ 893.632828][ T46] usb 2-1: Product: syz [ 893.649913][ T46] usb 2-1: Manufacturer: syz [ 893.656334][ T46] usb 2-1: SerialNumber: syz [ 893.705599][ T5680] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 893.718219][ T5680] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.732668][ T5680] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 893.744246][ T5680] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 893.757043][ T5680] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.777964][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.788232][ T5680] usb 9-1: Product: syz [ 893.793066][ T5680] usb 9-1: Manufacturer: syz [ 893.799333][ T5680] usb 9-1: SerialNumber: syz [ 893.850544][T18687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 893.863959][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.873984][T18687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 893.887553][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.067596][ T5680] usb 9-1: Cannot retrieve CPort count: 0 [ 894.089142][ T5680] usb 9-1: Cannot retrieve CPort count: -5 [ 894.110120][ T5680] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 894.225687][T18687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 894.241392][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.253782][T18687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.285275][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.308718][ T46] bfusb 2-1:6.200: probe with driver bfusb failed with error -5 [ 894.329088][ T46] usb 2-1: USB disconnect, device number 125 [ 894.506978][T18765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 894.573845][T18687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.584453][T11193] usb 9-1: USB disconnect, device number 28 [ 894.618546][T18687] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.651373][T18209] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.658695][T18209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.680373][T18209] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.687670][T18209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.844944][T18687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.022224][T18687] veth0_vlan: entered promiscuous mode [ 895.090146][T18687] veth1_vlan: entered promiscuous mode [ 895.152003][T18687] veth0_macvtap: entered promiscuous mode [ 895.184937][T18687] veth1_macvtap: entered promiscuous mode [ 895.219579][T18687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.239109][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3967'. [ 895.256825][T18687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.369121][T18209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.433480][T18208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.442263][ T5610] Bluetooth: hci8: command tx timeout [ 895.465005][T18208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.542487][T10348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.726787][T10344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.745133][T10344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.878161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.907873][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.932986][T18807] FAULT_INJECTION: forcing a failure. [ 895.932986][T18807] name failslab, interval 1, probability 0, space 0, times 0 [ 895.954771][T18807] CPU: 0 UID: 0 PID: 18807 Comm: syz.7.3970 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.954798][T18807] Tainted: [L]=SOFTLOCKUP [ 895.954804][T18807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.954813][T18807] Call Trace: [ 895.954820][T18807] [ 895.954831][T18807] dump_stack_lvl+0xe8/0x150 [ 895.954859][T18807] should_fail_ex+0x40c/0x560 [ 895.954882][T18807] should_failslab+0xa8/0x100 [ 895.954903][T18807] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 895.954922][T18807] ? skb_clone+0x212/0x3a0 [ 895.954939][T18807] ? skb_clone+0x212/0x3a0 [ 895.954958][T18807] skb_clone+0x212/0x3a0 [ 895.954978][T18807] __netlink_deliver_tap+0x413/0x860 [ 895.955003][T18807] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.955020][T18807] netlink_deliver_tap+0x19c/0x1b0 [ 895.955037][T18807] netlink_sendskb+0x68/0x140 [ 895.955054][T18807] netlink_rcv_skb+0x2a4/0x4a0 [ 895.955071][T18807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 895.955096][T18807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 895.955126][T18807] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.955141][T18807] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.955161][T18807] netlink_unicast+0x7bb/0x940 [ 895.955185][T18807] netlink_sendmsg+0x813/0xb40 [ 895.955210][T18807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.955232][T18807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.955251][T18807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.955268][T18807] sock_sendmsg_nosec+0x13a/0x180 [ 895.955292][T18807] ____sys_sendmsg+0x54e/0x850 [ 895.955313][T18807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.955340][T18807] ? import_iovec+0x73/0xa0 [ 895.955363][T18807] ___sys_sendmsg+0x2a5/0x360 [ 895.955379][T18807] ? __lock_acquire+0x683/0x2cf0 [ 895.955402][T18807] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.955450][T18807] ? __fget_files+0x2a/0x420 [ 895.955469][T18807] ? __fget_files+0x3a2/0x420 [ 895.955498][T18807] __x64_sys_sendmsg+0x1b1/0x290 [ 895.955518][T18807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.955551][T18807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.955568][T18807] do_syscall_64+0x174/0x580 [ 895.955590][T18807] ? clear_bhb_loop+0x70/0xc0 [ 895.955610][T18807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.955626][T18807] RIP: 0033:0x7fd93cd9e0d9 [ 895.955643][T18807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.955657][T18807] RSP: 002b:00007fd93dccd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.955674][T18807] RAX: ffffffffffffffda RBX: 00007fd93d025fa0 RCX: 00007fd93cd9e0d9 [ 895.955685][T18807] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 895.955695][T18807] RBP: 00007fd93dccd090 R08: 0000000000000000 R09: 0000000000000000 [ 895.955705][T18807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.955714][T18807] R13: 00007fd93d026038 R14: 00007fd93d025fa0 R15: 00007fd93d14fa48 [ 895.955738][T18807] [ 896.576404][T18823] openvswitch: netlink: Duplicate or invalid key (type 0). [ 896.610974][T18823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.627581][ T5610] Bluetooth: hci7: unexpected event for opcode 0x2016 [ 896.628390][T18826] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 896.654983][T18823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.761617][T16213] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 896.782006][T11465] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 896.920778][T16213] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.947956][T16213] usb 9-1: config 1 has an invalid interface number: 128 but max is 1 [ 896.976158][T18819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.990024][T16213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.008982][T18819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.031330][T16213] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.072355][T16213] usb 9-1: config 1 has no interface number 0 [ 897.076364][T18819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.101906][T16213] usb 9-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.146259][T16213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.174426][T16213] usb 9-1: Product: syz [ 897.186594][T16213] usb 9-1: Manufacturer: syz [ 897.188160][T18819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.200132][T16213] usb 9-1: SerialNumber: syz [ 897.225582][T16213] cdc_wdm 9-1:1.128: skipping garbage [ 897.239074][T16213] cdc_wdm 9-1:1.128: probe with driver cdc_wdm failed with error -22 [ 897.459030][T18822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.503800][T18822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.522748][ T5610] Bluetooth: hci8: command tx timeout [ 897.546436][T18822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.566154][T18822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.585757][T11465] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 897.589231][T16213] usb 9-1: USB disconnect, device number 29 [ 897.640859][T11465] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 897.669636][T11465] usb 1-1: can't read configurations, error -71 [ 897.683417][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 897.700795][T18843] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3978'. [ 897.801895][ T5680] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 897.964909][ T5680] usb 10-1: Using ep0 maxpacket: 32 [ 897.978461][ T5680] usb 10-1: unable to get BOS descriptor or descriptor too short [ 897.986904][ T5680] usb 10-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 897.998589][ T5680] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.009269][ T5680] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 898.023209][ T5680] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.032074][ T5680] usb 10-1: Product: syz [ 898.036743][ T5680] usb 10-1: Manufacturer: syz [ 898.042285][ T5680] usb 10-1: SerialNumber: syz [ 898.277964][ T5680] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 898.290164][ T5680] usb 10-1: 1:1 : format type 0 is detected, processed as PCM [ 898.448046][ T5680] usb 10-1: USB disconnect, device number 28 [ 898.521860][T11465] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 898.683426][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 898.693769][T11465] usb 1-1: Using ep0 maxpacket: 8 [ 898.706470][T11465] usb 1-1: unable to get BOS descriptor or descriptor too short [ 898.723453][T11465] usb 1-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 898.743754][T11465] usb 1-1: config 1 has an invalid interface number: 211 but max is 0 [ 898.753765][T11465] usb 1-1: config 1 has no interface number 0 [ 898.760609][T11465] usb 1-1: config 1 interface 211 has no altsetting 0 [ 898.770900][T11465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.781645][T11465] usb 1-1: Product: syz [ 898.786196][T11465] usb 1-1: Manufacturer: syz [ 898.790855][T11465] usb 1-1: SerialNumber: syz [ 898.843386][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.871334][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.891579][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.919696][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.947161][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.990808][ T10] usb 9-1: config 0 descriptor?? [ 899.015125][T18858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.062560][T18858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.448727][ T10] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 899.466463][ T5680] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 899.502899][T11465] dvb-usb: found a 'Yuan EC372S' in warm state. [ 899.528640][T11465] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.564958][T11465] dvb-usb: Yuan EC372S error while loading driver (-23) [ 899.601715][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 899.610784][ T5610] Bluetooth: hci8: command tx timeout [ 899.654548][ T5680] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 899.670781][ T5680] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.717247][T17486] usb 1-1: USB disconnect, device number 45 [ 900.114121][ T5680] wacom 0003:056A:033B.0045: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 900.142954][ T5680] wacom 0003:056A:033B.0045: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.9-1/input0 [ 900.178817][ T5680] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:056A:033B.0045/input/input106 [ 900.367800][T18890] dvmrp0: entered allmulticast mode [ 900.390273][T18918] xt_hashlimit: size too large, truncated to 1048576 [ 900.473452][T18890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.702998][T18890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.712864][T18890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.743955][ T5680] usb 10-1: USB disconnect, device number 29 [ 900.758028][T18903] FAULT_INJECTION: forcing a failure. [ 900.758028][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.787377][T18903] CPU: 0 UID: 0 PID: 18903 Comm: syz.8.3981 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.787401][T18903] Tainted: [L]=SOFTLOCKUP [ 900.787405][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.787413][T18903] Call Trace: [ 900.787419][T18903] [ 900.787429][T18903] dump_stack_lvl+0xe8/0x150 [ 900.787453][T18903] should_fail_ex+0x40c/0x560 [ 900.787481][T18903] _copy_to_user+0x31/0xb0 [ 900.787502][T18903] hiddev_ioctl+0x830/0x16f0 [ 900.787531][T18903] ? __pfx_hiddev_ioctl+0x10/0x10 [ 900.787563][T18903] ? __fget_files+0x2a/0x420 [ 900.787585][T18903] ? bpf_lsm_file_ioctl+0x9/0x20 [ 900.787600][T18903] ? __pfx_hiddev_ioctl+0x10/0x10 [ 900.787615][T18903] __se_sys_ioctl+0xfc/0x170 [ 900.787627][T18903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.787642][T18903] do_syscall_64+0x174/0x580 [ 900.787659][T18903] ? trace_irq_disable+0x3b/0x140 [ 900.787676][T18903] ? clear_bhb_loop+0x70/0xc0 [ 900.787693][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.787707][T18903] RIP: 0033:0x7fa822d9e0d9 [ 900.787721][T18903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.787734][T18903] RSP: 002b:00007fa823c29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.787751][T18903] RAX: ffffffffffffffda RBX: 00007fa823026090 RCX: 00007fa822d9e0d9 [ 900.787763][T18903] RDX: 0000200000000140 RSI: 00000000801c4803 RDI: 0000000000000004 [ 900.787773][T18903] RBP: 00007fa823c29090 R08: 0000000000000000 R09: 0000000000000000 [ 900.787782][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.787790][T18903] R13: 00007fa823026128 R14: 00007fa823026090 R15: 00007fa82314fa48 [ 900.787814][T18903] [ 901.514408][T18947] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 901.605418][T17486] usb 9-1: USB disconnect, device number 30 [ 902.471756][T18951] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 902.495257][T18951] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 903.004893][T18985] openvswitch: netlink: Duplicate or invalid key (type 0). [ 903.022531][T18985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.035119][T18989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.072510][T18991] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3996'. [ 903.442575][T17486] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 903.692229][T17486] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 903.714535][T17486] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.745599][T17486] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.780089][T17486] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 903.832242][T17486] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.877725][T17486] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.889092][T17486] usb 9-1: Product: syz [ 903.902981][T17486] usb 9-1: Manufacturer: syz [ 903.919617][T17486] usb 9-1: SerialNumber: syz [ 903.951230][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3999'. [ 904.140660][T17486] usb 9-1: Cannot retrieve CPort count: 0 [ 904.158997][T17486] usb 9-1: Cannot retrieve CPort count: -5 [ 904.184593][T17486] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 904.372803][ T5608] usb 9-1: USB disconnect, device number 31 [ 904.437723][T11465] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 904.703478][T11465] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 904.751803][T11465] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.867571][T19018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4001'. [ 905.103898][T19020] FAULT_INJECTION: forcing a failure. [ 905.103898][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 905.117578][ T46] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 905.133007][T19020] CPU: 1 UID: 0 PID: 19020 Comm: syz.8.4002 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.133038][T19020] Tainted: [L]=SOFTLOCKUP [ 905.133044][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.133053][T19020] Call Trace: [ 905.133060][T19020] [ 905.133068][T19020] dump_stack_lvl+0xe8/0x150 [ 905.133103][T19020] should_fail_ex+0x40c/0x560 [ 905.133128][T19020] should_failslab+0xa8/0x100 [ 905.133153][T19020] __kmalloc_cache_noprof+0xa8/0x660 [ 905.133175][T19020] ? sctp_stream_init_ext+0x57/0x180 [ 905.133192][T19020] ? sctp_stream_init_ext+0x57/0x180 [ 905.133215][T19020] sctp_stream_init_ext+0x57/0x180 [ 905.133235][T19020] sctp_sendmsg_to_asoc+0x88d/0x1880 [ 905.133258][T19020] ? sctp_assoc_set_primary+0x240/0x340 [ 905.133284][T19020] ? sctp_assoc_add_peer+0xd57/0x1430 [ 905.133317][T19020] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 905.133339][T19020] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 905.133359][T19020] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 905.133382][T19020] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 905.133404][T19020] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 905.133424][T19020] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 905.133446][T19020] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 905.133463][T19020] ? security_sctp_bind_connect+0x7e/0x2c0 [ 905.133487][T19020] sctp_sendmsg+0x1bb5/0x2d00 [ 905.133522][T19020] ? __pfx_sctp_sendmsg+0x10/0x10 [ 905.133549][T19020] ? aa_sk_perm+0x6d5/0x900 [ 905.133577][T19020] ? __might_fault+0xaf/0x130 [ 905.133599][T19020] ? sock_rps_record_flow+0x19/0x350 [ 905.133621][T19020] ? inet_sendmsg+0x298/0x320 [ 905.133641][T19020] ? __pfx_inet_sendmsg+0x10/0x10 [ 905.133657][T19020] sock_sendmsg_nosec+0x10e/0x180 [ 905.133681][T19020] __sys_sendto+0x408/0x5a0 [ 905.133697][T19020] ? ksys_write+0x1e6/0x270 [ 905.133721][T19020] ? __pfx___sys_sendto+0x10/0x10 [ 905.133736][T19020] ? __mutex_unlock_slowpath+0x731/0x900 [ 905.133784][T19020] ? __pfx_ksys_write+0x10/0x10 [ 905.133810][T19020] __x64_sys_sendto+0xde/0x100 [ 905.133827][T19020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.133846][T19020] do_syscall_64+0x174/0x580 [ 905.133866][T19020] ? trace_irq_disable+0x3b/0x140 [ 905.133885][T19020] ? clear_bhb_loop+0x70/0xc0 [ 905.133906][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.133923][T19020] RIP: 0033:0x7fa822d9e0d9 [ 905.133940][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.133954][T19020] RSP: 002b:00007fa823c4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 905.133972][T19020] RAX: ffffffffffffffda RBX: 00007fa823025fa0 RCX: 00007fa822d9e0d9 [ 905.133984][T19020] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000003 [ 905.133995][T19020] RBP: 00007fa823c4a090 R08: 000020000005ffe4 R09: 000000000000001c [ 905.134006][T19020] R10: 00000000200080c1 R11: 0000000000000246 R12: 0000000000000001 [ 905.134016][T19020] R13: 00007fa823026038 R14: 00007fa823025fa0 R15: 00007fa82314fa48 [ 905.134044][T19020] [ 905.449965][T11465] wacom 0003:056A:033B.0046: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 905.542686][ T46] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 905.556548][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.566792][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.587057][T11465] wacom 0003:056A:033B.0046: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.9-1/input0 [ 905.600884][T11465] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:056A:033B.0046/input/input109 [ 905.616952][ T46] usb 1-1: config 0 descriptor?? [ 905.625160][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 905.635420][T18938] Set syz1 is full, maxelem 65536 reached [ 905.666807][T19014] xt_hashlimit: size too large, truncated to 1048576 [ 905.809226][T19021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 906.027022][T19029] 8021q: VLANs not supported on ip_vti0 [ 906.045999][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 906.056898][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 906.065302][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 906.073511][ T46] pwc: recv_control_msg error -32 req 04 val 1000 [ 906.080809][ T46] pwc: recv_control_msg error -32 req 04 val 1300 [ 906.094218][ T46] pwc: recv_control_msg error -32 req 04 val 1400 [ 906.112313][ T46] pwc: recv_control_msg error -32 req 02 val 2000 [ 906.127623][T19014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.136630][ T46] pwc: recv_control_msg error -32 req 02 val 2100 [ 906.145772][ T46] pwc: recv_control_msg error -32 req 04 val 1500 [ 906.146460][T19014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.154309][ T46] pwc: recv_control_msg error -32 req 02 val 2500 [ 906.187071][ T46] pwc: recv_control_msg error -32 req 02 val 2400 [ 906.390661][ T5680] usb 10-1: USB disconnect, device number 30 [ 906.404546][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 906.414349][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 906.428639][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 906.445167][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 906.470979][ T46] pwc: Registered as video103. [ 906.501387][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input112 [ 906.538256][ T46] usb 1-1: USB disconnect, device number 46 [ 907.729229][T19048] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4009'. [ 907.827830][T19050] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 907.922282][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 908.181664][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 908.342412][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 908.363237][ T10] usb 10-1: config 0 has no interfaces? [ 908.376592][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.392800][ T10] usb 10-1: Product: syz [ 908.403083][ T10] usb 10-1: Manufacturer: syz [ 908.413525][ T10] usb 10-1: SerialNumber: syz [ 908.427638][ T10] usb 10-1: config 0 descriptor?? [ 908.847795][T19063] fuse: Bad value for 'fd' [ 908.981415][T19067] netlink: 'syz.7.4014': attribute type 1 has an invalid length. [ 909.060874][T19067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 909.131312][T19069] bond2: (slave geneve2): making interface the new active one [ 909.229137][T19069] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 909.672550][ T46] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 909.846995][ T46] usb 1-1: device descriptor read/64, error -71 [ 910.093716][ T46] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 910.231644][ T46] usb 1-1: device descriptor read/64, error -71 [ 910.342053][ T46] usb usb1-port1: attempt power cycle [ 910.683224][ T46] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 910.724987][ T46] usb 1-1: device descriptor read/8, error -71 [ 910.732751][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 910.732766][ T29] audit: type=1400 audit(1786579368.962:737): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3ADFB0C387CF pid=19085 comm="syz.8.4021" [ 910.765275][ T5725] usb 10-1: USB disconnect, device number 31 [ 910.844236][T19089] openvswitch: netlink: Duplicate or invalid key (type 0). [ 910.851871][T19089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.864452][T19089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.012037][ T46] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 911.032138][ T46] usb 1-1: device descriptor read/8, error -71 [ 911.142315][ T46] usb usb1-port1: unable to enumerate USB device [ 911.946868][ T5612] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 911.969696][ T5612] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 911.982281][ T5612] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 911.999277][ T5612] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 912.010721][ T5612] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 912.304303][T19109] program syz.8.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.361009][T19107] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4028'. [ 912.934126][ T5610] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 912.979179][T19123] loop9: detected capacity change from 0 to 7 [ 913.037182][ C1] blk_print_req_error: 10 callbacks suppressed [ 913.037212][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.053209][ C1] buffer_io_error: 10 callbacks suppressed [ 913.053226][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.081002][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.090891][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.102019][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.112643][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.128814][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.138574][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.146900][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.156555][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.213180][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.222877][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.231091][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.240771][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.248674][T19123] ldm_validate_partition_table(): Disk read failed. [ 913.263927][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.273617][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.282214][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.291907][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.300214][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 913.309960][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 913.318503][ T5725] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 913.326659][T19123] Dev loop9: unable to read RDB block 0 [ 913.336650][T19123] loop9: unable to read partition table [ 913.368951][T19123] loop9: partition table beyond EOD, truncated [ 913.387953][T19123] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 913.497318][ T5725] usb 10-1: Using ep0 maxpacket: 32 [ 913.527283][ T5725] usb 10-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 913.556124][ T5725] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.565977][T19133] syzkaller1: entered promiscuous mode [ 913.566000][T19133] syzkaller1: entered allmulticast mode [ 913.616429][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.625576][T19102] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.645194][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.653679][ T5725] usb 10-1: Product: 졄廼燃雓ä„ꉉ멈î¹é•³ë…­ïš™í½âŒ«ç°é±–â‹íšæ•šî½ä§†è‘¡ä­›ç‘·ä·å´¥ã£½é¸¹é™¿ [ 913.678281][T19102] bridge_slave_0: entered allmulticast mode [ 913.703779][ T5725] usb 10-1: Manufacturer: ì¾î·†æ½®ë¶¨ã§„륑Ű䳲;è´î¿•á…‘î¶¿á‚›áƒ…ê™³ì¤æ”„ꥠ玀㽢ি뗨ꡓã¼ã—æ˜ê°®è³¿æ¼âŽ‘ï—«íŠŸá¶¥â¼Œæ£°ìŠŒã‘Ÿï¬Šë¹ ïƒ¾æµ›çˆ›è¢«ì·Šè¬˜ãƒï¶ç”æ““ê´”ï»è•†í’国ᗵ胻Ṭ敢보䔸å‚貧㜞뻼阇䤠땂ힻ꣬㟉ç˜â°Šï´¶â²¹ã”¿é®…ç—æ¬ŠïŽºã—„á“—ê¼»à¦´î¬°åˆ¼î´¾ä¥å¦«ã­°ì˜”ꆟäªâ¾…罔ⰳ [ 913.735546][T19102] bridge_slave_0: entered promiscuous mode [ 913.744756][T19102] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.755304][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.767536][T19102] bridge_slave_1: entered allmulticast mode [ 913.774831][ T5725] usb 10-1: SerialNumber: 䮇뷘ɵ⧡ॆä¬é†¡í‡–á‡à¶¤ï‹»ìµ°î å•ºã¤¢êšŠè±¯î”€ç­‘᫖⦌뮣骳싞 [ 913.788610][T19102] bridge_slave_1: entered promiscuous mode [ 913.877634][T19102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.898634][T19102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.985675][T19102] team0: Port device team_slave_0 added [ 914.000110][T19102] team0: Port device team_slave_1 added [ 914.050781][ T5725] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.069190][ T5725] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 914.085533][ T5610] Bluetooth: hci9: command tx timeout [ 914.102776][T19102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.118583][ T5725] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.125983][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.153143][ T5725] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 914.167185][ T5725] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.204580][T19102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.252612][T19102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.276905][ T5725] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 914.291398][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.323740][ T5725] usb 10-1: USB disconnect, device number 32 [ 914.330984][T19102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.398590][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 914.556525][T19102] hsr_slave_0: entered promiscuous mode [ 914.571764][T19102] hsr_slave_1: entered promiscuous mode [ 914.583599][T19102] debugfs: 'hsr0' already exists in 'hsr' [ 914.597197][T19102] Cannot create hsr debugfs directory [ 915.040575][T19151] FAULT_INJECTION: forcing a failure. [ 915.040575][T19151] name failslab, interval 1, probability 0, space 0, times 0 [ 915.054436][T19151] CPU: 1 UID: 0 PID: 19151 Comm: syz.9.4040 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.054465][T19151] Tainted: [L]=SOFTLOCKUP [ 915.054471][T19151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.054481][T19151] Call Trace: [ 915.054489][T19151] [ 915.054497][T19151] dump_stack_lvl+0xe8/0x150 [ 915.054525][T19151] should_fail_ex+0x40c/0x560 [ 915.054549][T19151] should_failslab+0xa8/0x100 [ 915.054574][T19151] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 915.054594][T19151] ? skb_clone+0x212/0x3a0 [ 915.054615][T19151] ? skb_clone+0x212/0x3a0 [ 915.054639][T19151] skb_clone+0x212/0x3a0 [ 915.054660][T19151] __netlink_deliver_tap+0x413/0x860 [ 915.054689][T19151] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.054710][T19151] netlink_deliver_tap+0x19c/0x1b0 [ 915.054729][T19151] netlink_unicast+0x77f/0x940 [ 915.054755][T19151] netlink_sendmsg+0x813/0xb40 [ 915.054783][T19151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.054805][T19151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 915.054828][T19151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 915.054845][T19151] sock_sendmsg_nosec+0x13a/0x180 [ 915.054874][T19151] ____sys_sendmsg+0x54e/0x850 [ 915.054897][T19151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.054924][T19151] ? import_iovec+0x73/0xa0 [ 915.054949][T19151] ___sys_sendmsg+0x2a5/0x360 [ 915.054966][T19151] ? __lock_acquire+0x683/0x2cf0 [ 915.054990][T19151] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.055041][T19151] ? __fget_files+0x2a/0x420 [ 915.055060][T19151] ? __fget_files+0x3a2/0x420 [ 915.055089][T19151] __x64_sys_sendmsg+0x1b1/0x290 [ 915.055110][T19151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.055145][T19151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.055172][T19151] do_syscall_64+0x174/0x580 [ 915.055193][T19151] ? trace_irq_disable+0x3b/0x140 [ 915.055213][T19151] ? clear_bhb_loop+0x70/0xc0 [ 915.055235][T19151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.055252][T19151] RIP: 0033:0x7f87b219e0d9 [ 915.055268][T19151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.055282][T19151] RSP: 002b:00007f87b3069028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.055300][T19151] RAX: ffffffffffffffda RBX: 00007f87b2425fa0 RCX: 00007f87b219e0d9 [ 915.055312][T19151] RDX: 00000000000080c4 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 915.055323][T19151] RBP: 00007f87b3069090 R08: 0000000000000000 R09: 0000000000000000 [ 915.055338][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.055348][T19151] R13: 00007f87b2426038 R14: 00007f87b2425fa0 R15: 00007f87b254fa48 [ 915.055376][T19151] [ 915.241654][ T5725] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 915.591557][ T46] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 915.606939][ T5725] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 915.654269][ T5725] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 915.665929][ T5725] usb 1-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 915.677774][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.682372][T19155] FAULT_INJECTION: forcing a failure. [ 915.682372][T19155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.718409][T19102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.721856][ T5725] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 915.733745][T19155] CPU: 1 UID: 0 PID: 19155 Comm: syz.8.4042 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.733775][T19155] Tainted: [L]=SOFTLOCKUP [ 915.733781][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.733791][T19155] Call Trace: [ 915.733798][T19155] [ 915.733805][T19155] dump_stack_lvl+0xe8/0x150 [ 915.733833][T19155] should_fail_ex+0x40c/0x560 [ 915.733857][T19155] _copy_to_user+0x31/0xb0 [ 915.733882][T19155] simple_read_from_buffer+0xe1/0x170 [ 915.733907][T19155] proc_fail_nth_read+0x1bb/0x230 [ 915.733932][T19155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.733955][T19155] ? rw_verify_area+0x24a/0x4c0 [ 915.733980][T19155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.733999][T19155] vfs_read+0x213/0xa80 [ 915.734025][T19155] ? __pfx___mutex_lock+0x10/0x10 [ 915.734048][T19155] ? __pfx_vfs_read+0x10/0x10 [ 915.734070][T19155] ? __fget_files+0x2a/0x420 [ 915.734092][T19155] ? __fget_files+0x3a2/0x420 [ 915.734111][T19155] ? __fget_files+0x2a/0x420 [ 915.734136][T19155] ksys_read+0x150/0x270 [ 915.734159][T19155] ? __pfx_ksys_read+0x10/0x10 [ 915.734188][T19155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.734206][T19155] do_syscall_64+0x174/0x580 [ 915.734225][T19155] ? trace_irq_disable+0x3b/0x140 [ 915.734245][T19155] ? clear_bhb_loop+0x70/0xc0 [ 915.734264][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.734280][T19155] RIP: 0033:0x7fa822d5e90e [ 915.734296][T19155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.734310][T19155] RSP: 002b:00007fa823c49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.734328][T19155] RAX: ffffffffffffffda RBX: 00007fa823c4a6c0 RCX: 00007fa822d5e90e [ 915.734339][T19155] RDX: 000000000000000f RSI: 00007fa823c4a0a0 RDI: 0000000000000003 [ 915.734350][T19155] RBP: 00007fa823c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 915.734360][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.734371][T19155] R13: 00007fa823026038 R14: 00007fa823025fa0 R15: 00007fa82314fa48 [ 915.734404][T19155] [ 915.924688][ T46] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 915.965944][ T46] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 916.005614][ T46] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.021836][ T46] usb 10-1: config 0 has no interface number 0 [ 916.032974][ T46] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 916.044524][ T46] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 916.056531][ T46] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.168060][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.177233][ T5610] Bluetooth: hci9: command tx timeout [ 916.237981][ T46] usb 10-1: Product: syz [ 916.278868][ T46] usb 10-1: Manufacturer: syz [ 916.307249][ T46] usb 10-1: SerialNumber: syz [ 916.345989][ T46] usb 10-1: config 0 descriptor?? [ 916.517141][T19102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.744829][T19102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.810565][ T46] usbtouchscreen 10-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 916.865268][ T46] usb 10-1: USB disconnect, device number 33 [ 917.041317][T19102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.175575][ T5725] usb 1-1: USB disconnect, device number 51 [ 917.258650][T19171] FAULT_INJECTION: forcing a failure. [ 917.258650][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 917.272630][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.8.4046 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.272656][T19171] Tainted: [L]=SOFTLOCKUP [ 917.272662][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.272671][T19171] Call Trace: [ 917.272678][T19171] [ 917.272685][T19171] dump_stack_lvl+0xe8/0x150 [ 917.272713][T19171] should_fail_ex+0x40c/0x560 [ 917.272740][T19171] should_failslab+0xa8/0x100 [ 917.272765][T19171] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 917.272785][T19171] ? skb_clone+0x212/0x3a0 [ 917.272802][T19171] ? skb_clone+0x212/0x3a0 [ 917.272825][T19171] skb_clone+0x212/0x3a0 [ 917.272847][T19171] __netlink_deliver_tap+0x413/0x860 [ 917.272877][T19171] ? netlink_deliver_tap+0x2e/0x1b0 [ 917.272896][T19171] netlink_deliver_tap+0x19c/0x1b0 [ 917.272916][T19171] netlink_sendskb+0x68/0x140 [ 917.272936][T19171] netlink_rcv_skb+0x2a4/0x4a0 [ 917.272954][T19171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 917.272977][T19171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 917.273010][T19171] ? down_read+0x2be/0x330 [ 917.273036][T19171] genl_rcv+0x28/0x40 [ 917.273062][T19171] netlink_unicast+0x7bb/0x940 [ 917.273090][T19171] netlink_sendmsg+0x813/0xb40 [ 917.273118][T19171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.273141][T19171] ? aa_sock_msg_perm+0xf1/0x1b0 [ 917.273163][T19171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.273180][T19171] sock_sendmsg_nosec+0x13a/0x180 [ 917.273205][T19171] ____sys_sendmsg+0x54e/0x850 [ 917.273228][T19171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.273254][T19171] ? import_iovec+0x73/0xa0 [ 917.273280][T19171] ___sys_sendmsg+0x2a5/0x360 [ 917.273296][T19171] ? __lock_acquire+0x683/0x2cf0 [ 917.273321][T19171] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.273373][T19171] ? __fget_files+0x2a/0x420 [ 917.273392][T19171] ? __fget_files+0x3a2/0x420 [ 917.273422][T19171] __x64_sys_sendmsg+0x1b1/0x290 [ 917.273441][T19171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 917.273473][T19171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.273490][T19171] do_syscall_64+0x174/0x580 [ 917.273508][T19171] ? trace_irq_disable+0x3b/0x140 [ 917.273527][T19171] ? clear_bhb_loop+0x70/0xc0 [ 917.273546][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.273563][T19171] RIP: 0033:0x7fa822d9e0d9 [ 917.273578][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.273591][T19171] RSP: 002b:00007fa823c4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.273609][T19171] RAX: ffffffffffffffda RBX: 00007fa823025fa0 RCX: 00007fa822d9e0d9 [ 917.273620][T19171] RDX: 0000000004000010 RSI: 0000200000001080 RDI: 0000000000000003 [ 917.273631][T19171] RBP: 00007fa823c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 917.273641][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.273652][T19171] R13: 00007fa823026038 R14: 00007fa823025fa0 R15: 00007fa82314fa48 [ 917.273680][T19171] [ 917.734854][T19178] x_tables: duplicate underflow at hook 2 [ 918.099552][T19102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 918.110875][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.121818][T19102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 918.134516][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.146462][T19102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 918.170641][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 918.200037][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.212742][T19102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 918.225606][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.242318][ T5610] Bluetooth: hci9: command tx timeout [ 918.316817][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.338560][T19102] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.353686][T18209] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.361037][T18209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.380880][T18209] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.388145][T18209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.461863][ T5725] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 918.465637][T19102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.526023][T19102] veth0_vlan: entered promiscuous mode [ 918.540666][T19102] veth1_vlan: entered promiscuous mode [ 918.580107][T19102] veth0_macvtap: entered promiscuous mode [ 918.591132][T19102] veth1_macvtap: entered promiscuous mode [ 918.614986][T19102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.624951][ T5725] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 918.638676][T19102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.650293][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.681738][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.690859][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.736470][T10344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.755279][T10344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.943161][T18209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.972531][T18209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.067636][T10336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.093383][T10336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.105438][T19205] netlink: 'syz.8.4057': attribute type 1 has an invalid length. [ 919.115784][ T5725] wacom 0003:056A:033B.0047: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 919.145880][ T5725] wacom 0003:056A:033B.0047: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 919.164965][ T5725] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0047/input/input114 [ 919.229740][T19205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.452756][T19209] bond1: (slave geneve2): making interface the new active one [ 919.477369][T19211] xt_hashlimit: size too large, truncated to 1048576 [ 919.503016][T19209] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 919.597405][T19191] dvmrp0: entered allmulticast mode [ 919.618161][T19213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.903276][T19191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.952136][T19191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.053536][ T46] usb 1-1: USB disconnect, device number 52 [ 920.145779][T19233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.156580][T19233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.231785][T17601] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 920.321796][ T5610] Bluetooth: hci9: command tx timeout [ 920.382707][T17601] usb 9-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 920.395616][T17601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.405080][T17601] usb 9-1: Product: syz [ 920.409321][T17601] usb 9-1: Manufacturer: syz [ 920.415931][T17601] usb 9-1: SerialNumber: syz [ 920.431333][T17601] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 921.091821][T11465] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 921.251678][T11465] usb 1-1: Using ep0 maxpacket: 32 [ 921.259107][T11465] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 921.262234][T11193] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 921.270933][T11465] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 921.286239][T11465] usb 1-1: config 0 has no interface number 0 [ 921.292959][T11465] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.304699][T11465] usb 1-1: config 0 interface 85 has no altsetting 0 [ 921.314509][T11465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.323184][T11465] usb 1-1: Product: syz [ 921.327700][T11465] usb 1-1: Manufacturer: syz [ 921.332410][T11465] usb 1-1: SerialNumber: syz [ 921.341401][T11465] usb 1-1: config 0 descriptor?? [ 921.421718][T11193] usb 10-1: Using ep0 maxpacket: 32 [ 921.430796][T11193] usb 10-1: unable to get BOS descriptor or descriptor too short [ 921.439003][T11193] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 921.453687][T11193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.462349][T11193] usb 10-1: Product: syz [ 921.466738][T11193] usb 10-1: Manufacturer: syz [ 921.471677][T11193] usb 10-1: SerialNumber: syz [ 921.553884][T11465] appletouch 1-1:0.85: Failed to read mode from device. [ 921.561974][T11465] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 921.691157][T19246] bond0: left promiscuous mode [ 921.698240][T19246] bond_slave_0: left promiscuous mode [ 921.704409][T19246] bond_slave_1: left promiscuous mode [ 921.713434][T19246] gretap0: left promiscuous mode [ 921.745663][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4067'. [ 921.830339][T11193] usb 10-1: 1:1 : bogus bTerminalLink 5 [ 921.838551][T11193] usb 10-1: unit 5 not found! [ 921.844037][T11193] usb 10-1: unit 0 not found! [ 921.896034][T11193] usb 10-1: USB disconnect, device number 34 [ 921.957519][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 922.691725][ T5666] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 922.861751][ T5666] usb 10-1: Using ep0 maxpacket: 32 [ 922.878630][ T5666] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 922.904842][ T5666] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 922.923975][ T5666] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 922.938921][ T5666] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.953532][ T5666] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 922.965223][ T5666] usb 10-1: config 1 has no interface number 0 [ 922.985253][ T5666] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.037574][ T5666] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 923.050149][T17601] uvcvideo 9-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 923.080859][T17601] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 923.138774][T17601] usb 9-1: USB disconnect, device number 32 [ 923.237598][T19250] cifs: Unknown parameter '0' [ 923.258931][ T5666] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 923.270990][ T5666] snd_usb_pod 10-1:1.1: invalid control EP [ 923.279005][ T5666] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 923.291164][ T5666] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 923.299912][ T5666] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 923.471092][T17486] usb 10-1: USB disconnect, device number 35 [ 923.551861][T17601] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 923.721952][T17601] usb 9-1: Using ep0 maxpacket: 8 [ 923.736486][T17601] usb 9-1: unable to get BOS descriptor or descriptor too short [ 923.751679][T17601] usb 9-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 923.763011][T17601] usb 9-1: config 1 has an invalid interface number: 211 but max is 0 [ 923.778759][T17601] usb 9-1: config 1 has no interface number 0 [ 923.794116][T17601] usb 9-1: config 1 interface 211 has no altsetting 0 [ 923.807125][T17601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.817830][T17601] usb 9-1: Product: syz [ 923.823233][T17601] usb 9-1: Manufacturer: syz [ 923.828376][T17601] usb 9-1: SerialNumber: syz [ 923.945704][T11465] usb 1-1: USB disconnect, device number 53 [ 924.059886][T19259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.099142][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.099331][T19259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.123289][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.132894][T19275] syzkaller0: entered promiscuous mode [ 924.139530][T19275] syzkaller0: entered allmulticast mode [ 924.411636][T11193] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 924.419303][ T5725] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 924.572129][ T5725] usb 10-1: Using ep0 maxpacket: 32 [ 924.580642][T17601] dvb-usb: found a 'Yuan EC372S' in warm state. [ 924.580712][T11193] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 924.591751][T17601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 924.600915][T11193] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.619001][T11193] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 924.631331][ T5725] usb 10-1: unable to get BOS descriptor or descriptor too short [ 924.639843][ T5725] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 924.640162][T17601] dvb-usb: Yuan EC372S error while loading driver (-23) [ 924.649746][T11193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.656781][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.684322][T19275] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 924.705069][T11193] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.722054][ T5725] usb 10-1: Product: syz [ 924.735839][ T5725] usb 10-1: Manufacturer: syz [ 924.758041][ T5725] usb 10-1: SerialNumber: syz [ 924.844874][T17601] usb 9-1: USB disconnect, device number 33 [ 924.980322][T11465] usb 1-1: USB disconnect, device number 54 [ 924.999727][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4078'. [ 925.130331][ T5725] usb 10-1: 1:1 : bogus bTerminalLink 5 [ 925.142113][ T5725] usb 10-1: unit 5 not found! [ 925.160728][ T5725] usb 10-1: unit 0 not found! [ 925.198865][T19275] program syz.0.4077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.228296][T19275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4077'. [ 925.276791][ T5725] usb 10-1: USB disconnect, device number 36 [ 925.375976][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 925.711614][T17601] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 925.862320][T17601] usb 9-1: Using ep0 maxpacket: 16 [ 925.868363][T17601] usb 9-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 925.879197][T17601] usb 9-1: config 0 has an invalid interface number: 66 but max is 0 [ 925.887357][T17601] usb 9-1: config 0 has no interface number 0 [ 925.893972][T17601] usb 9-1: config 0 interface 66 has no altsetting 0 [ 925.902989][T17601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.911004][T17601] usb 9-1: Product: syz [ 925.915876][T17601] usb 9-1: Manufacturer: syz [ 925.920688][T17601] usb 9-1: SerialNumber: syz [ 925.926339][T11465] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 925.937739][T17601] usb 9-1: config 0 descriptor?? [ 926.092307][T11465] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 926.133137][T11465] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 926.163544][T11465] usb 10-1: Product: syz [ 926.196153][T11465] usb 10-1: config 0 descriptor?? [ 926.211379][T11465] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 926.221128][T11465] usb 10-1: Detected FT232H [ 926.311842][T17486] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 926.395849][T19300] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4086'. [ 926.419824][T11465] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 926.514680][T17486] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 926.539131][T17486] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 926.549228][T17486] usb 1-1: Product: syz [ 926.559076][T17486] usb 1-1: config 0 descriptor?? [ 926.576680][T17486] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 926.608989][T17486] usb 1-1: Detected FT232H [ 926.667035][T17601] usb 9-1: selecting invalid altsetting 3 [ 926.682425][T17601] comedi comedi5: could not set alternate setting 3 in high speed [ 926.701520][T17601] usbduxsigma 9-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 926.726004][T17601] usbduxsigma 9-1:0.66: probe with driver usbduxsigma failed with error -22 [ 926.744617][T17601] usb 9-1: USB disconnect, device number 34 [ 926.777460][T17486] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 926.855322][T11465] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 926.990267][T19309] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 926.998384][T19309] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 927.050512][T17601] usb 10-1: USB disconnect, device number 37 [ 927.083484][T17601] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 927.103349][T17601] ftdi_sio 10-1:0.0: device disconnected [ 927.187403][T19312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4090'. [ 927.230000][T17486] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 927.342135][T19317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.351116][T19317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.370007][T19317] dvmrp0: entered allmulticast mode [ 927.380410][T19317] xt_hashlimit: size too large, truncated to 1048576 [ 927.418503][T17601] usb 1-1: USB disconnect, device number 55 [ 927.471807][T17601] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 927.476191][T19319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.483916][T17601] ftdi_sio 1-1:0.0: device disconnected [ 927.571937][ T5725] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 927.722110][ T5725] usb 9-1: Using ep0 maxpacket: 32 [ 927.729870][ T5725] usb 9-1: unable to get BOS descriptor or descriptor too short [ 927.739166][ T5725] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 927.753640][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.762460][ T5725] usb 9-1: Product: syz [ 927.766819][ T5725] usb 9-1: Manufacturer: syz [ 927.772173][ T5725] usb 9-1: SerialNumber: syz [ 928.024460][T19316] bond0: left promiscuous mode [ 928.038268][T19316] bond_slave_0: left promiscuous mode [ 928.060964][T19316] bond_slave_1: left promiscuous mode [ 928.097547][T19316] gretap0: left promiscuous mode [ 928.121116][ T5610] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 928.132018][ T5610] Bluetooth: Wrong link type (-22) [ 928.160325][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4091'. [ 928.254659][ T5725] usb 9-1: 1:1 : bogus bTerminalLink 5 [ 928.265987][ T5725] usb 9-1: unit 5 not found! [ 928.293342][ T5725] usb 9-1: unit 0 not found! [ 928.381676][T11193] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 928.397039][ T5725] usb 9-1: USB disconnect, device number 35 [ 928.417687][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 928.562174][T11193] usb 1-1: Using ep0 maxpacket: 32 [ 928.572581][T11193] usb 1-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 928.584875][T11193] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 928.633789][T11193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.658307][T11193] usb 1-1: Product: 졄廼燃雓ä„ꉉ멈î¹é•³ë…­ïš™í½âŒ«ç°é±–â‹íšæ•šî½ä§†è‘¡ä­›ç‘·ä·å´¥ã£½é¸¹é™¿ [ 928.700941][T11193] usb 1-1: Manufacturer: ì¾î·†æ½®ë¶¨ã§„륑Ű䳲;è´î¿•á…‘î¶¿á‚›áƒ…ê™³ì¤æ”„ꥠ玀㽢ি뗨ꡓã¼ã—æ˜ê°®è³¿æ¼âŽ‘ï—«íŠŸá¶¥â¼Œæ£°ìŠŒã‘Ÿï¬Šë¹ ïƒ¾æµ›çˆ›è¢«ì·Šè¬˜ãƒï¶ç”æ““ê´”ï»è•†í’国ᗵ胻Ṭ敢보䔸å‚貧㜞뻼阇䤠땂ힻ꣬㟉ç˜â°Šï´¶â²¹ã”¿é®…ç—æ¬ŠïŽºã—„á“—ê¼»à¦´î¬°åˆ¼î´¾ä¥å¦«ã­°ì˜”ꆟäªâ¾…罔ⰳ [ 928.771258][T11193] usb 1-1: SerialNumber: 䮇뷘ɵ⧡ॆä¬é†¡í‡–á‡à¶¤ï‹»ìµ°î å•ºã¤¢êšŠè±¯î”€ç­‘᫖⦌뮣骳싞 [ 929.040554][T11193] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.063881][T11193] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 929.077259][T11193] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.095555][T19349] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4101'. [ 929.105180][T11193] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 929.120952][T11193] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.172897][T11193] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 929.189555][T11193] usb 1-1: USB disconnect, device number 56 [ 929.271413][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 929.616921][T19345] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 929.649163][T19345] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 929.719456][T19353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4102'. [ 929.944616][T19357] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4103'. [ 930.221674][T11193] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 930.386007][T11193] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 930.431094][T11193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.456162][T11193] usb 9-1: Product: syz [ 930.477685][T11193] usb 9-1: Manufacturer: syz [ 930.495748][T11193] usb 9-1: SerialNumber: syz [ 930.538368][T11193] usb 9-1: config 0 descriptor?? [ 930.580683][T11193] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 930.775807][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4104'. [ 930.830346][ T5610] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 930.962338][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 931.052861][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 931.060224][T11193] gspca_sunplus: reg_r err -71 [ 931.082607][T19367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.096473][T11193] usb 9-1: USB disconnect, device number 36 [ 931.123818][T19367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.153335][T19367] xt_hashlimit: size too large, truncated to 1048576 [ 931.249316][T19368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 931.469101][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.607592][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.636088][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.004513][T17486] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 932.301591][T11193] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 932.429404][T19403] FAULT_INJECTION: forcing a failure. [ 932.429404][T19403] name failslab, interval 1, probability 0, space 0, times 0 [ 932.447359][T19403] CPU: 1 UID: 0 PID: 19403 Comm: syz.3.4116 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.447388][T19403] Tainted: [L]=SOFTLOCKUP [ 932.447393][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.447403][T19403] Call Trace: [ 932.447410][T19403] [ 932.447417][T19403] dump_stack_lvl+0xe8/0x150 [ 932.447445][T19403] should_fail_ex+0x40c/0x560 [ 932.447468][T19403] should_failslab+0xa8/0x100 [ 932.447493][T19403] __kmalloc_cache_noprof+0xa8/0x660 [ 932.447513][T19403] ? asymmetric_key_preparse+0x5a/0x1b0 [ 932.447541][T19403] ? x509_cert_parse+0x5a/0x7a0 [ 932.447560][T19403] ? x509_cert_parse+0x5a/0x7a0 [ 932.447587][T19403] x509_cert_parse+0x5a/0x7a0 [ 932.447612][T19403] x509_key_preparse+0x64/0x6d0 [ 932.447633][T19403] ? down_read+0x2be/0x330 [ 932.447659][T19403] asymmetric_key_preparse+0xb9/0x1b0 [ 932.447681][T19403] __key_create_or_update+0x3a9/0xa80 [ 932.447708][T19403] ? __pfx___key_create_or_update+0x10/0x10 [ 932.447729][T19403] ? lookup_user_key+0xb68/0x1150 [ 932.447761][T19403] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 932.447791][T19403] key_create_or_update+0x42/0x60 [ 932.447809][T19403] __se_sys_add_key+0x349/0x420 [ 932.447830][T19403] ? __pfx___se_sys_add_key+0x10/0x10 [ 932.447858][T19403] ? __x64_sys_add_key+0x20/0xc0 [ 932.447875][T19403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.447891][T19403] do_syscall_64+0x174/0x580 [ 932.447911][T19403] ? trace_irq_disable+0x3b/0x140 [ 932.447930][T19403] ? clear_bhb_loop+0x70/0xc0 [ 932.447950][T19403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.447967][T19403] RIP: 0033:0x7fa6c8d9e0d9 [ 932.447990][T19403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.448001][T19403] RSP: 002b:00007fa6c9c17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 932.448015][T19403] RAX: ffffffffffffffda RBX: 00007fa6c9025fa0 RCX: 00007fa6c8d9e0d9 [ 932.448022][T19403] RDX: 0000200000000600 RSI: 0000000000000000 RDI: 0000200000000180 [ 932.448029][T19403] RBP: 00007fa6c9c17090 R08: ffffffffffffffff R09: 0000000000000000 [ 932.448035][T19403] R10: 00000000000001d8 R11: 0000000000000246 R12: 0000000000000001 [ 932.448041][T19403] R13: 00007fa6c9026038 R14: 00007fa6c9025fa0 R15: 00007fa6c914fa48 [ 932.448114][T19403] [ 932.461726][T11193] usb 9-1: Using ep0 maxpacket: 32 [ 932.548578][T17486] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 932.553512][T11193] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 932.713268][T11193] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 932.722439][T11193] usb 9-1: config 0 has no interface number 0 [ 932.728629][T11193] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 932.739796][T11193] usb 9-1: config 0 interface 85 has no altsetting 0 [ 932.743999][T17486] usb 1-1: Using ep0 maxpacket: 32 [ 932.750152][T11193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.754759][T17486] usb 1-1: unable to get BOS descriptor or descriptor too short [ 932.759778][T11193] usb 9-1: Product: syz [ 932.774662][T11193] usb 9-1: Manufacturer: syz [ 932.779344][T11193] usb 9-1: SerialNumber: syz [ 932.780376][T17486] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 932.798042][T11193] usb 9-1: config 0 descriptor?? [ 932.799808][T17486] usb 1-1: config 199 has an invalid interface number: 162 but max is 0 [ 932.816605][T17486] usb 1-1: config 199 has no interface number 0 [ 932.823463][T17486] usb 1-1: config 199 interface 162 has no altsetting 0 [ 932.833269][T17486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.842442][T17486] usb 1-1: Product: syz [ 932.843415][T19407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4118'. [ 932.846722][T17486] usb 1-1: Manufacturer: syz [ 932.861039][T17486] usb 1-1: SerialNumber: syz [ 932.868266][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.879082][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.897086][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.910724][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.026512][T11193] appletouch 9-1:0.85: Failed to read mode from device. [ 933.042004][T11193] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 933.099466][T17486] usb 1-1: USB disconnect, device number 57 [ 934.046881][T19417] JFS: charset not found [ 934.730669][T19427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.755704][T19427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.823063][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4122'. [ 934.887413][ T5610] Bluetooth: hci9: Ignoring connect complete event for invalid link type [ 935.079327][T11193] usb 9-1: USB disconnect, device number 37 [ 935.623610][T11193] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 935.793984][T11193] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 935.832387][T11193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.037641][T19447] syzkaller1: entered promiscuous mode [ 936.043260][T19447] syzkaller1: entered allmulticast mode [ 936.191068][T19450] netlink: 'syz.0.4130': attribute type 1 has an invalid length. [ 936.221699][T19450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.253547][T19450] bond1: (slave geneve2): making interface the new active one [ 936.265512][T19450] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 936.304017][T11193] wacom 0003:056A:033B.0048: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 936.355893][T11193] wacom 0003:056A:033B.0048: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 936.387756][T11193] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:033B.0048/input/input119 [ 936.509144][T19436] xt_hashlimit: size too large, truncated to 1048576 [ 936.572771][T19458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 936.683283][ T5725] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 936.835499][ T5725] usb 1-1: device descriptor read/64, error -71 [ 936.973145][T19465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.983160][T19465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.010251][T19465] hsr_slave_0: left promiscuous mode [ 937.023401][T19465] hsr_slave_1: left promiscuous mode [ 937.068505][T11198] usb 9-1: USB disconnect, device number 38 [ 937.082397][ T5725] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 937.231660][ T5725] usb 1-1: device descriptor read/64, error -71 [ 937.347602][ T5725] usb usb1-port1: attempt power cycle [ 937.692407][ T5725] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 937.722329][ T5725] usb 1-1: device descriptor read/8, error -71 [ 938.026320][ T5725] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 938.093108][ T5725] usb 1-1: device descriptor read/8, error -71 [ 938.210625][ T5725] usb usb1-port1: unable to enumerate USB device [ 938.330151][T19475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.356182][T19475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.646420][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 939.050086][T19479] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[19102] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[19479] [ 939.296742][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4141'. [ 940.910758][T19468] Set syz1 is full, maxelem 65536 reached [ 941.039721][T19500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.049153][T19500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.144169][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4147'. [ 941.179506][T19502] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 941.261583][T17486] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 941.339112][T19504] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4148'. [ 941.359629][ T29] audit: type=1326 audit(1786579399.582:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.413875][ T29] audit: type=1326 audit(1786579399.612:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.451257][T17486] usb 9-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 941.463203][ T29] audit: type=1326 audit(1786579399.612:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.489471][ T29] audit: type=1326 audit(1786579399.612:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.519691][T17486] usb 9-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 941.526250][T19508] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.4150'. [ 941.528807][T17486] usb 9-1: Product: syz [ 941.547878][T17486] usb 9-1: config 0 descriptor?? [ 941.555095][ T29] audit: type=1326 audit(1786579399.612:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.582316][ T29] audit: type=1326 audit(1786579399.612:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.584672][T17486] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 941.618324][ T29] audit: type=1326 audit(1786579399.612:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.645945][T17486] usb 9-1: Detected FT232H [ 941.651348][ T29] audit: type=1326 audit(1786579399.612:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.678353][ T29] audit: type=1326 audit(1786579399.612:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.705448][ T29] audit: type=1326 audit(1786579399.612:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.0.4149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b719e0d9 code=0x7ffc0000 [ 941.787605][T19510] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 941.806991][T17486] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 942.058210][T19518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.070384][T19518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.186858][T19520] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 942.233885][T17486] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 942.381248][T19524] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4156'. [ 942.433392][T16213] usb 9-1: USB disconnect, device number 39 [ 942.449409][T16213] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 942.460870][T16213] ftdi_sio 9-1:0.0: device disconnected [ 942.632121][ T5725] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 942.646097][T19526] FAULT_INJECTION: forcing a failure. [ 942.646097][T19526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.660066][T19526] CPU: 1 UID: 0 PID: 19526 Comm: syz.3.4157 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.660093][T19526] Tainted: [L]=SOFTLOCKUP [ 942.660098][T19526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.660104][T19526] Call Trace: [ 942.660109][T19526] [ 942.660114][T19526] dump_stack_lvl+0xe8/0x150 [ 942.660133][T19526] should_fail_ex+0x40c/0x560 [ 942.660147][T19526] _copy_to_iter+0x59c/0x1810 [ 942.660163][T19526] ? arch_stack_walk+0xfb/0x150 [ 942.660191][T19526] ? __pfx__copy_to_iter+0x10/0x10 [ 942.660213][T19526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 942.660232][T19526] ? lockdep_hardirqs_on+0x7a/0x110 [ 942.660252][T19526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 942.660262][T19526] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 942.660276][T19526] __skb_datagram_iter+0xf8/0x980 [ 942.660288][T19526] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 942.660303][T19526] skb_copy_datagram_iter+0xb5/0x240 [ 942.660320][T19526] netlink_recvmsg+0x2b9/0xa50 [ 942.660356][T19526] ? __pfx_netlink_recvmsg+0x10/0x10 [ 942.660380][T19526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 942.660398][T19526] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 942.660409][T19526] ? security_socket_recvmsg+0x7e/0x2c0 [ 942.660421][T19526] ? __pfx_netlink_recvmsg+0x10/0x10 [ 942.660432][T19526] sock_recvmsg+0x196/0x1e0 [ 942.660446][T19526] ____sys_recvmsg+0x1e6/0x4a0 [ 942.660457][T19526] ? iovec_from_user+0x87/0x250 [ 942.660481][T19526] ? __pfx_____sys_recvmsg+0x10/0x10 [ 942.660513][T19526] ? import_iovec+0x73/0xa0 [ 942.660537][T19526] ___sys_recvmsg+0x213/0x5a0 [ 942.660554][T19526] ? ktime_get_ts64+0xa9/0x410 [ 942.660569][T19526] ? __pfx____sys_recvmsg+0x10/0x10 [ 942.660582][T19526] ? __fget_files+0x2a/0x420 [ 942.660604][T19526] ? __fget_files+0x3a2/0x420 [ 942.660626][T19526] do_recvmmsg+0x31a/0x7f0 [ 942.660652][T19526] ? __pfx_do_recvmmsg+0x10/0x10 [ 942.660682][T19526] ? get_timespec64+0x119/0x1b0 [ 942.660702][T19526] ? __pfx_get_timespec64+0x10/0x10 [ 942.660720][T19526] __x64_sys_recvmmsg+0x1b7/0x250 [ 942.660733][T19526] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 942.660750][T19526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.660760][T19526] do_syscall_64+0x174/0x580 [ 942.660778][T19526] ? trace_irq_disable+0x3b/0x140 [ 942.660799][T19526] ? clear_bhb_loop+0x70/0xc0 [ 942.660819][T19526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.660835][T19526] RIP: 0033:0x7fa6c8d9e0d9 [ 942.660852][T19526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.660861][T19526] RSP: 002b:00007fa6c9c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 942.660872][T19526] RAX: ffffffffffffffda RBX: 00007fa6c9025fa0 RCX: 00007fa6c8d9e0d9 [ 942.660879][T19526] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 942.660885][T19526] RBP: 00007fa6c9c17090 R08: 0000200000003700 R09: 0000000000000000 [ 942.660891][T19526] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 942.660897][T19526] R13: 00007fa6c9026038 R14: 00007fa6c9025fa0 R15: 00007fa6c914fa48 [ 942.660912][T19526] [ 942.998755][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 943.043694][ T5725] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 943.054278][T11465] IPVS: starting estimator thread 0... [ 943.084331][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.112343][ T5725] usb 1-1: config 0 descriptor?? [ 943.154976][T19530] IPVS: using max 36 ests per chain, 86400 per kthread [ 943.168571][T19533] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 943.181020][T19529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.212324][T19529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.260234][ T5612] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 943.280819][ T5612] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 943.295412][ T5612] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 943.319799][ T5612] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 943.330306][ T5612] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 943.394048][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 943.447674][ T5725] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 943.465214][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.496847][ T5725] dvb-usb: Elgato EyeTV Sat error while loading driver (-23) [ 943.506208][ T5725] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -23 [ 943.656565][T19524] FAULT_INJECTION: forcing a failure. [ 943.656565][T19524] name failslab, interval 1, probability 0, space 0, times 0 [ 943.680144][T19524] CPU: 1 UID: 0 PID: 19524 Comm: syz.0.4156 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.680173][T19524] Tainted: [L]=SOFTLOCKUP [ 943.680178][T19524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.680187][T19524] Call Trace: [ 943.680193][T19524] [ 943.680200][T19524] dump_stack_lvl+0xe8/0x150 [ 943.680226][T19524] should_fail_ex+0x40c/0x560 [ 943.680248][T19524] should_failslab+0xa8/0x100 [ 943.680270][T19524] __kmalloc_cache_noprof+0xa8/0x660 [ 943.680299][T19524] ? __i2c_smbus_xfer+0xa75/0x27d0 [ 943.680317][T19524] ? __i2c_smbus_xfer+0xa75/0x27d0 [ 943.680338][T19524] __i2c_smbus_xfer+0xa75/0x27d0 [ 943.680368][T19524] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 943.680399][T19524] ? lockdep_hardirqs_on+0x7a/0x110 [ 943.680420][T19524] ? rt_mutex_lock_nested+0x156/0x1c0 [ 943.680446][T19524] i2c_smbus_xfer+0x1f4/0x310 [ 943.680466][T19524] i2cdev_ioctl_smbus+0x407/0x700 [ 943.680490][T19524] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 943.680524][T19524] i2cdev_ioctl+0x615/0x880 [ 943.680542][T19524] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 943.680562][T19524] ? __fget_files+0x2a/0x420 [ 943.680579][T19524] ? __fget_files+0x3a2/0x420 [ 943.680603][T19524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 943.680621][T19524] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 943.680637][T19524] __se_sys_ioctl+0xfc/0x170 [ 943.680652][T19524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.680670][T19524] do_syscall_64+0x174/0x580 [ 943.680688][T19524] ? trace_irq_disable+0x3b/0x140 [ 943.680705][T19524] ? clear_bhb_loop+0x70/0xc0 [ 943.680724][T19524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.680740][T19524] RIP: 0033:0x7fd8b719e0d9 [ 943.680756][T19524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.680769][T19524] RSP: 002b:00007fd8b8075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.680786][T19524] RAX: ffffffffffffffda RBX: 00007fd8b7425fa0 RCX: 00007fd8b719e0d9 [ 943.680797][T19524] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 000000000000000e [ 943.680807][T19524] RBP: 00007fd8b8075090 R08: 0000000000000000 R09: 0000000000000000 [ 943.680817][T19524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.680827][T19524] R13: 00007fd8b7426038 R14: 00007fd8b7425fa0 R15: 00007fd8b754fa48 [ 943.680853][T19524] [ 943.976634][T17486] usb 1-1: USB disconnect, device number 62 [ 944.022067][ T46] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 944.028220][T19537] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.038182][T19537] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.046286][T19537] bridge_slave_0: entered allmulticast mode [ 944.055266][T19537] bridge_slave_0: entered promiscuous mode [ 944.066687][T19537] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.074166][T19537] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.085583][T19537] bridge_slave_1: entered allmulticast mode [ 944.097753][T19537] bridge_slave_1: entered promiscuous mode [ 944.107554][T19550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.118799][T19550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.134863][T19550] xt_hashlimit: size too large, truncated to 1048576 [ 944.169766][T19537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.189444][T19552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 944.201656][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 944.208472][T19537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.220810][ T46] usb 9-1: unable to get BOS descriptor or descriptor too short [ 944.229515][ T46] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 944.246026][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.264437][ T46] usb 9-1: Product: syz [ 944.273114][ T46] usb 9-1: Manufacturer: syz [ 944.284511][ T46] usb 9-1: SerialNumber: syz [ 944.332155][T19537] team0: Port device team_slave_0 added [ 944.342895][T19537] team0: Port device team_slave_1 added [ 944.435728][T19537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.443761][T19537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.470886][T19537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.485444][T19537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.492790][T19537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.536302][T19537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.690999][ T46] usb 9-1: 1:1 : bogus bTerminalLink 5 [ 944.707227][ T46] usb 9-1: unit 5 not found! [ 944.724135][ T46] usb 9-1: unit 0 not found! [ 944.741008][T19537] hsr_slave_0: entered promiscuous mode [ 944.760976][T19537] hsr_slave_1: entered promiscuous mode [ 944.768554][T19537] debugfs: 'hsr0' already exists in 'hsr' [ 944.780255][T19537] Cannot create hsr debugfs directory [ 944.825840][ T46] usb 9-1: USB disconnect, device number 40 [ 944.887950][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 945.046685][T19564] netlink: 'syz.3.4166': attribute type 1 has an invalid length. [ 945.314434][T19537] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.327410][T19537] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.383431][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4169'. [ 945.394385][T19570] FAULT_INJECTION: forcing a failure. [ 945.394385][T19570] name failslab, interval 1, probability 0, space 0, times 0 [ 945.413260][T19570] CPU: 0 UID: 0 PID: 19570 Comm: syz.8.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.413287][T19570] Tainted: [L]=SOFTLOCKUP [ 945.413294][T19570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.413303][T19570] Call Trace: [ 945.413311][T19570] [ 945.413319][T19570] dump_stack_lvl+0xe8/0x150 [ 945.413351][T19570] should_fail_ex+0x40c/0x560 [ 945.413375][T19570] should_failslab+0xa8/0x100 [ 945.413397][T19570] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 945.413418][T19570] ? skb_clone+0x212/0x3a0 [ 945.413435][T19570] ? skb_clone+0x212/0x3a0 [ 945.413467][T19570] skb_clone+0x212/0x3a0 [ 945.413488][T19570] __netlink_deliver_tap+0x413/0x860 [ 945.413519][T19570] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.413536][T19570] netlink_deliver_tap+0x19c/0x1b0 [ 945.413556][T19570] __netlink_sendskb+0x47/0x90 [ 945.413574][T19570] netlink_dump+0xa8c/0xee0 [ 945.413591][T19570] ? __netlink_lookup+0xc6/0x8b0 [ 945.413618][T19570] ? __pfx_netlink_dump+0x10/0x10 [ 945.413646][T19570] ? netlink_lookup+0x30/0x200 [ 945.413662][T19570] ? netlink_lookup+0x30/0x200 [ 945.413686][T19570] __netlink_dump_start+0x589/0x7b0 [ 945.413710][T19570] rtnetlink_rcv_msg+0xa48/0xc00 [ 945.413729][T19570] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 945.413746][T19570] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 945.413762][T19570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.413783][T19570] ? ref_tracker_free+0x689/0x830 [ 945.413802][T19570] ? __pfx_rtnl_dumpit+0x10/0x10 [ 945.413816][T19570] ? __pfx_rtnl_stats_dump+0x10/0x10 [ 945.413841][T19570] netlink_rcv_skb+0x226/0x4a0 [ 945.413859][T19570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.413882][T19570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.413909][T19570] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.413926][T19570] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.413946][T19570] netlink_unicast+0x7bb/0x940 [ 945.413969][T19570] netlink_sendmsg+0x813/0xb40 [ 945.413995][T19570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.414016][T19570] ? aa_sock_msg_perm+0xf1/0x1b0 [ 945.414036][T19570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.414053][T19570] sock_sendmsg_nosec+0x13a/0x180 [ 945.414074][T19570] ____sys_sendmsg+0x54e/0x850 [ 945.414095][T19570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.414118][T19570] ? import_iovec+0x73/0xa0 [ 945.414138][T19570] ___sys_sendmsg+0x2a5/0x360 [ 945.414151][T19570] ? __lock_acquire+0x683/0x2cf0 [ 945.414170][T19570] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.414209][T19570] ? __fget_files+0x2a/0x420 [ 945.414225][T19570] ? __fget_files+0x3a2/0x420 [ 945.414247][T19570] __x64_sys_sendmsg+0x1b1/0x290 [ 945.414263][T19570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.414289][T19570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.414303][T19570] do_syscall_64+0x174/0x580 [ 945.414319][T19570] ? trace_irq_disable+0x3b/0x140 [ 945.414335][T19570] ? clear_bhb_loop+0x70/0xc0 [ 945.414350][T19570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.414363][T19570] RIP: 0033:0x7fa822d9e0d9 [ 945.414376][T19570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.414387][T19570] RSP: 002b:00007fa823c4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.414402][T19570] RAX: ffffffffffffffda RBX: 00007fa823025fa0 RCX: 00007fa822d9e0d9 [ 945.414411][T19570] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 945.414419][T19570] RBP: 00007fa823c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 945.414427][T19570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.414435][T19570] R13: 00007fa823026038 R14: 00007fa823025fa0 R15: 00007fa82314fa48 [ 945.414464][T19570] [ 945.793981][ T5610] Bluetooth: hci10: command tx timeout [ 945.892014][T19537] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.903242][T19537] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.016901][T19581] binder: BINDER_SET_CONTEXT_MGR already set [ 946.031864][T19537] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.038694][T19581] binder: 19580:19581 ioctl 4018620d 200000004a80 returned -16 [ 946.044996][T19537] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.077379][T19582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.098598][T19582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.129887][T19581] binder: 19580:19581 ioctl 80106f05 200000004280 returned -22 [ 946.155432][T19537] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.165952][T19537] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.238150][T19581] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4172'. [ 946.384551][T19590] FAULT_INJECTION: forcing a failure. [ 946.384551][T19590] name failslab, interval 1, probability 0, space 0, times 0 [ 946.398138][T19590] CPU: 0 UID: 0 PID: 19590 Comm: syz.0.4174 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.398163][T19590] Tainted: [L]=SOFTLOCKUP [ 946.398169][T19590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.398177][T19590] Call Trace: [ 946.398183][T19590] [ 946.398193][T19590] dump_stack_lvl+0xe8/0x150 [ 946.398219][T19590] should_fail_ex+0x40c/0x560 [ 946.398240][T19590] should_failslab+0xa8/0x100 [ 946.398260][T19590] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 946.398277][T19590] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 946.398293][T19590] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 946.398306][T19590] ? ovs_flow_alloc+0x103/0x1f0 [ 946.398324][T19590] ? ovs_flow_alloc+0x103/0x1f0 [ 946.398355][T19590] ovs_flow_alloc+0x103/0x1f0 [ 946.398376][T19590] ovs_flow_cmd_new+0x28b/0xea0 [ 946.398396][T19590] ? __kasan_kmalloc+0x93/0xb0 [ 946.398415][T19590] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 946.398471][T19590] ? __kmalloc_noprof+0x396/0x720 [ 946.398489][T19590] ? __nla_parse+0x40/0x60 [ 946.398510][T19590] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 946.398530][T19590] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 946.398554][T19590] genl_family_rcv_msg_doit+0x233/0x340 [ 946.398578][T19590] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 946.398607][T19590] ? bpf_lsm_capable+0x9/0x20 [ 946.398623][T19590] ? security_capable+0x7e/0x2c0 [ 946.398649][T19590] genl_rcv_msg+0x614/0x7a0 [ 946.398672][T19590] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.398690][T19590] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 946.398706][T19590] ? __pfx_ref_tracker_free+0x10/0x10 [ 946.398732][T19590] netlink_rcv_skb+0x226/0x4a0 [ 946.398749][T19590] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.398768][T19590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.398796][T19590] ? down_read+0x2be/0x330 [ 946.398818][T19590] genl_rcv+0x28/0x40 [ 946.398835][T19590] netlink_unicast+0x7bb/0x940 [ 946.398858][T19590] netlink_sendmsg+0x813/0xb40 [ 946.398882][T19590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.398901][T19590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 946.398919][T19590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.398933][T19590] sock_sendmsg_nosec+0x13a/0x180 [ 946.398955][T19590] ____sys_sendmsg+0x54e/0x850 [ 946.398975][T19590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.398998][T19590] ? import_iovec+0x73/0xa0 [ 946.399020][T19590] ___sys_sendmsg+0x2a5/0x360 [ 946.399034][T19590] ? __lock_acquire+0x683/0x2cf0 [ 946.399055][T19590] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.399099][T19590] ? __fget_files+0x2a/0x420 [ 946.399117][T19590] ? __fget_files+0x3a2/0x420 [ 946.399142][T19590] __x64_sys_sendmsg+0x1b1/0x290 [ 946.399160][T19590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.399190][T19590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.399207][T19590] do_syscall_64+0x174/0x580 [ 946.399224][T19590] ? trace_irq_disable+0x3b/0x140 [ 946.399241][T19590] ? clear_bhb_loop+0x70/0xc0 [ 946.399259][T19590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.399273][T19590] RIP: 0033:0x7fd8b719e0d9 [ 946.399287][T19590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.399299][T19590] RSP: 002b:00007fd8b8075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.399315][T19590] RAX: ffffffffffffffda RBX: 00007fd8b7425fa0 RCX: 00007fd8b719e0d9 [ 946.399325][T19590] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000019 [ 946.399353][T19590] RBP: 00007fd8b8075090 R08: 0000000000000000 R09: 0000000000000000 [ 946.399362][T19590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.399370][T19590] R13: 00007fd8b7426038 R14: 00007fd8b7425fa0 R15: 00007fd8b754fa48 [ 946.399395][T19590] [ 946.560270][T19537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 946.782437][T19537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.791360][T19537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 946.806059][T19537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.817088][T19537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 946.829294][T19537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.837958][T19537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 946.874357][T19537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.964589][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 947.119851][T19537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.169259][T19537] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.187332][T10317] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.194663][T10317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.201549][T17486] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 947.225752][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.233000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.351650][T11465] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 947.365406][T17486] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 947.377131][T17486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.382415][T19537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.453832][T19537] veth0_vlan: entered promiscuous mode [ 947.472829][T19537] veth1_vlan: entered promiscuous mode [ 947.502366][T11465] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 947.507617][T19537] veth0_macvtap: entered promiscuous mode [ 947.515998][T11465] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.525507][T19537] veth1_macvtap: entered promiscuous mode [ 947.530159][T11465] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 947.546801][T11465] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 947.563566][T11465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.573869][T11465] usb 9-1: Product: syz [ 947.578197][T11465] usb 9-1: Manufacturer: syz [ 947.586492][T11465] usb 9-1: SerialNumber: syz [ 947.595961][T19537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.598163][T19601] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 947.629734][T19537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.637378][T11465] usb 9-1: selecting invalid altsetting 1 [ 947.724678][T18209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.810994][T18209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.828734][T17486] wacom 0003:056A:033B.0049: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 947.841869][ T5610] Bluetooth: hci10: command tx timeout [ 947.903005][T17486] wacom 0003:056A:033B.0049: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 947.911893][T10344] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.924195][T17486] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0049/input/input122 [ 947.969222][T18208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.982444][T10348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.000960][T18208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.020099][T19604] openvswitch: netlink: Duplicate or invalid key (type 0). [ 948.046119][T19604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.067393][T19598] xt_hashlimit: size too large, truncated to 1048576 [ 948.086089][T19604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.091675][T11465] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 948.120196][T11465] cdc_ncm 9-1:1.0: bind() failure [ 948.189821][T10344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.240638][T10344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.265883][T19606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 948.613681][T11465] usb 1-1: USB disconnect, device number 63 [ 948.888578][T17363] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 949.683923][T11465] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 949.747718][T19625] FAULT_INJECTION: forcing a failure. [ 949.747718][T19625] name failslab, interval 1, probability 0, space 0, times 0 [ 949.761379][T19625] CPU: 0 UID: 0 PID: 19625 Comm: syz.5.4182 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.761397][T19625] Tainted: [L]=SOFTLOCKUP [ 949.761401][T19625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.761407][T19625] Call Trace: [ 949.761412][T19625] [ 949.761416][T19625] dump_stack_lvl+0xe8/0x150 [ 949.761443][T19625] should_fail_ex+0x40c/0x560 [ 949.761466][T19625] should_failslab+0xa8/0x100 [ 949.761489][T19625] __kmalloc_noprof+0xfe/0x720 [ 949.761508][T19625] ? hash_ipportnet_create+0x2fc/0xed0 [ 949.761524][T19625] ? hash_ipportnet_create+0x2fc/0xed0 [ 949.761546][T19625] hash_ipportnet_create+0x2fc/0xed0 [ 949.761570][T19625] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 949.761590][T19625] ip_set_create+0xae8/0x1a50 [ 949.761609][T19625] ? ip_set_create+0x4ef/0x1a50 [ 949.761637][T19625] ? __pfx_ip_set_create+0x10/0x10 [ 949.761685][T19625] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 949.761703][T19625] ? unwind_get_return_address+0x4d/0x90 [ 949.761720][T19625] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 949.761754][T19625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 949.761814][T19625] netlink_rcv_skb+0x226/0x4a0 [ 949.761833][T19625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 949.761851][T19625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 949.761876][T19625] ? bpf_lsm_capable+0x9/0x20 [ 949.761894][T19625] ? security_capable+0x7e/0x2c0 [ 949.761923][T19625] nfnetlink_rcv+0x2b9/0x28c0 [ 949.761951][T19625] ? __dev_queue_xmit+0x29b/0x3820 [ 949.761973][T19625] ? __local_bh_enable_ip+0xd0/0x130 [ 949.761990][T19625] ? lockdep_hardirqs_on+0x7a/0x110 [ 949.762011][T19625] ? __dev_queue_xmit+0x29b/0x3820 [ 949.762027][T19625] ? __local_bh_enable_ip+0xd0/0x130 [ 949.762043][T19625] ? __dev_queue_xmit+0x29b/0x3820 [ 949.762060][T19625] ? __dev_queue_xmit+0x1edc/0x3820 [ 949.762077][T19625] ? do_syscall_64+0x174/0x580 [ 949.762096][T19625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.762124][T19625] ? __dev_queue_xmit+0x29b/0x3820 [ 949.762143][T19625] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 949.762165][T19625] ? __pfx___dev_queue_xmit+0x10/0x10 [ 949.762191][T19625] ? ref_tracker_free+0x689/0x830 [ 949.762214][T19625] ? __pfx_ref_tracker_free+0x10/0x10 [ 949.762242][T19625] ? __skb_clone+0x449/0x6c0 [ 949.762266][T19625] ? skb_clone+0x246/0x3a0 [ 949.762287][T19625] ? __netlink_deliver_tap+0x811/0x860 [ 949.762304][T19625] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.762328][T19625] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.762346][T19625] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.762369][T19625] netlink_unicast+0x7bb/0x940 [ 949.762397][T19625] netlink_sendmsg+0x813/0xb40 [ 949.762425][T19625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.762448][T19625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 949.762469][T19625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.762486][T19625] sock_sendmsg_nosec+0x13a/0x180 [ 949.762511][T19625] ____sys_sendmsg+0x54e/0x850 [ 949.762534][T19625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.762561][T19625] ? import_iovec+0x73/0xa0 [ 949.762586][T19625] ___sys_sendmsg+0x2a5/0x360 [ 949.762603][T19625] ? __lock_acquire+0x683/0x2cf0 [ 949.762635][T19625] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.762686][T19625] ? __fget_files+0x2a/0x420 [ 949.762703][T19625] ? __fget_files+0x3a2/0x420 [ 949.762731][T19625] __x64_sys_sendmsg+0x1b1/0x290 [ 949.762751][T19625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.762786][T19625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.762804][T19625] do_syscall_64+0x174/0x580 [ 949.762823][T19625] ? trace_irq_disable+0x3b/0x140 [ 949.762842][T19625] ? clear_bhb_loop+0x70/0xc0 [ 949.762862][T19625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.762878][T19625] RIP: 0033:0x7fb98639e0d9 [ 949.762895][T19625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.762909][T19625] RSP: 002b:00007fb987214028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.762927][T19625] RAX: ffffffffffffffda RBX: 00007fb986625fa0 RCX: 00007fb98639e0d9 [ 949.762939][T19625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 949.762955][T19625] RBP: 00007fb987214090 R08: 0000000000000000 R09: 0000000000000000 [ 949.762965][T19625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.762976][T19625] R13: 00007fb986626038 R14: 00007fb986625fa0 R15: 00007fb98674fa48 [ 949.763004][T19625] [ 950.194163][T11465] usb 1-1: Using ep0 maxpacket: 32 [ 950.194170][ T5610] Bluetooth: hci10: command tx timeout [ 950.215072][T11465] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 950.271779][T11465] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 950.293453][T11465] usb 1-1: config 0 has no interface number 0 [ 950.299702][ T46] usb 9-1: USB disconnect, device number 41 [ 950.312219][T11465] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.342429][T11465] usb 1-1: config 0 interface 85 has no altsetting 0 [ 950.377204][T19629] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4184'. [ 950.386614][T11465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.398574][T11465] usb 1-1: Product: syz [ 950.409984][T11465] usb 1-1: Manufacturer: syz [ 950.415391][T11465] usb 1-1: SerialNumber: syz [ 950.423952][T11465] usb 1-1: config 0 descriptor?? [ 950.476349][T19630] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4183'. [ 950.631577][T11198] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 950.632470][T11465] appletouch 1-1:0.85: Failed to read mode from device. [ 950.646690][T11465] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 950.791562][T11198] usb 6-1: Using ep0 maxpacket: 32 [ 950.791686][ T46] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 950.797738][T11198] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 950.818018][T11198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.828971][T11198] usb 6-1: config 0 descriptor?? [ 950.951625][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 950.964191][ T46] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 950.985138][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 951.014369][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.031542][ T46] usb 9-1: Product: syz [ 951.042940][ T46] usb 9-1: Manufacturer: syz [ 951.051535][ T46] usb 9-1: SerialNumber: syz [ 951.058379][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4184'. [ 951.066470][ T46] usb 9-1: config 0 descriptor?? [ 951.128213][T11198] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 951.154753][T11198] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.190891][T11198] dvb-usb: Elgato EyeTV Sat error while loading driver (-23) [ 951.199546][T11198] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -23 [ 951.373400][ T5666] usb 6-1: USB disconnect, device number 10 [ 952.242639][ T5610] Bluetooth: hci10: command tx timeout [ 952.521025][T11465] usb 1-1: USB disconnect, device number 64 [ 952.742334][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4189'. [ 952.751761][T19650] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 953.295063][T19670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 953.334446][ T5702] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 953.349853][T11198] usb 9-1: USB disconnect, device number 42 [ 953.364365][ T30] INFO: task syz.4.3616:17390 blocked for more than 143 seconds. [ 953.404074][ T30] Tainted: G L syzkaller #0 [ 953.419315][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 953.444285][ T30] task:syz.4.3616 state:D stack:28424 pid:17390 tgid:17389 ppid:14248 task_flags:0x400040 flags:0x00080002 [ 953.473278][ T30] Call Trace: [ 953.477070][ T30] [ 953.482524][ T30] __schedule+0x17d9/0x56c0 [ 953.502348][ T5702] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.509034][ T30] ? __lock_acquire+0x683/0x2cf0 [ 953.525827][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.528530][ T30] ? __lock_acquire+0x683/0x2cf0 [ 953.542068][ T30] ? __pfx___schedule+0x10/0x10 [ 953.544320][ T5702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.547359][ T30] ? schedule+0x90/0x2b0 [ 953.558616][ T5702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 953.566152][ T30] schedule+0x164/0x2b0 [ 953.578838][ T30] schedule_preempt_disabled+0x13/0x30 [ 953.585633][ T5702] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 953.586222][ T30] __mutex_lock+0x7bf/0x1550 [ 953.602545][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.611896][ T30] ? __mutex_lock+0x5d4/0x1550 [ 953.615795][ T5702] usb 6-1: Product: syz [ 953.616793][ T30] ? odev_open+0x5c/0xa0 [ 953.620962][ T5702] usb 6-1: Manufacturer: syz [ 953.626253][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 953.635836][ T5702] usb 6-1: SerialNumber: syz [ 953.636552][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 953.645048][T19668] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 953.650684][ T30] ? soundcore_open+0x2da/0x490 [ 953.658199][ T30] odev_open+0x5c/0xa0 [ 953.662918][ T30] chrdev_open+0x4d9/0x600 [ 953.667385][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 953.674566][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 953.681064][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 953.687356][ T30] do_dentry_open+0x816/0x1380 [ 953.692352][ T30] vfs_open+0x3b/0x340 [ 953.696482][ T30] ? path_openat+0x2e2d/0x3830 [ 953.701697][ T30] path_openat+0x2e44/0x3830 [ 953.706788][ T30] ? kasan_save_track+0x3e/0x80 [ 953.711935][ T30] ? do_sys_openat2+0xcc/0x200 [ 953.716747][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.723067][ T30] do_file_open+0x23e/0x4a0 [ 953.727924][ T30] ? __pfx_do_file_open+0x10/0x10 [ 953.733195][ T30] ? _raw_spin_unlock+0x28/0x50 [ 953.738079][ T30] ? alloc_fd+0x651/0x6c0 [ 953.742913][ T30] do_sys_openat2+0x115/0x200 [ 953.748280][ T30] ? __se_sys_futex+0x3a8/0x450 [ 953.753238][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 953.758477][ T30] ? __pfx___se_sys_futex+0x10/0x10 [ 953.764155][ T30] ? __pfx___se_sys_prctl+0x10/0x10 [ 953.769743][ T30] __x64_sys_openat+0x138/0x170 [ 953.774789][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.780990][ T30] do_syscall_64+0x174/0x580 [ 953.787768][ T30] ? trace_irq_disable+0x3b/0x140 [ 953.792907][ T30] ? clear_bhb_loop+0x70/0xc0 [ 953.797614][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.804003][ T30] RIP: 0033:0x7fe7f479e0d9 [ 953.808566][ T30] RSP: 002b:00007fe7f5700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 953.817272][ T30] RAX: ffffffffffffffda RBX: 00007fe7f4a25fa0 RCX: 00007fe7f479e0d9 [ 953.825504][T11198] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 953.825866][ T30] RDX: 0000000000040000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 953.841324][ T30] RBP: 00007fe7f4835024 R08: 0000000000000000 R09: 0000000000000000 [ 953.851000][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.859287][ T30] R13: 00007fe7f4a26038 R14: 00007fe7f4a25fa0 R15: 00007fe7f4b4fa48 [ 953.867957][ T30] [ 953.871261][ T30] INFO: task syz.5.3617:17394 blocked for more than 143 seconds. [ 953.880204][ T30] Tainted: G L syzkaller #0 [ 953.891303][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 953.900253][ T30] task:syz.5.3617 state:D stack:26704 pid:17394 tgid:17393 ppid:11093 task_flags:0x400140 flags:0x00080002 [ 953.912728][ T30] Call Trace: [ 953.916060][ T30] [ 953.919090][ T30] __schedule+0x17d9/0x56c0 [ 953.924431][ T30] ? __lock_acquire+0x683/0x2cf0 [ 953.929512][ T30] ? __lock_acquire+0x683/0x2cf0 [ 953.935116][ T30] ? __pfx___schedule+0x10/0x10 [ 953.940027][ T30] ? schedule+0x90/0x2b0 [ 953.944418][ T30] schedule+0x164/0x2b0 [ 953.948723][ T30] schedule_preempt_disabled+0x13/0x30 [ 953.954771][ T30] __mutex_lock+0x7bf/0x1550 [ 953.959421][ T30] ? __mutex_lock+0x5d4/0x1550 [ 953.964294][ T30] ? odev_open+0x5c/0xa0 [ 953.968552][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 953.974090][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 953.979409][ T30] ? soundcore_open+0x2da/0x490 [ 953.984398][ T30] odev_open+0x5c/0xa0 [ 953.988618][ T30] chrdev_open+0x4d9/0x600 [ 953.991594][T11198] usb 9-1: Using ep0 maxpacket: 32 [ 953.994249][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 954.005827][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 954.012636][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 954.014551][T11198] usb 9-1: unable to get BOS descriptor or descriptor too short [ 954.018080][ T30] do_dentry_open+0x816/0x1380 [ 954.025836][T11198] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 954.031153][ T30] vfs_open+0x3b/0x340 [ 954.044496][ T30] ? path_openat+0x2e2d/0x3830 [ 954.044992][T11198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.049424][ T30] path_openat+0x2e44/0x3830 [ 954.057661][T11198] usb 9-1: Product: syz [ 954.063021][ T30] ? kasan_save_track+0x3e/0x80 [ 954.066961][T11198] usb 9-1: Manufacturer: syz [ 954.071777][ T30] ? do_sys_openat2+0xcc/0x200 [ 954.078058][T11198] usb 9-1: SerialNumber: syz [ 954.081125][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.081174][ T30] do_file_open+0x23e/0x4a0 [ 954.098415][ T30] ? __pfx_do_file_open+0x10/0x10 [ 954.103866][ T30] ? _raw_spin_unlock+0x28/0x50 [ 954.108785][ T30] ? alloc_fd+0x651/0x6c0 [ 954.116036][ T30] do_sys_openat2+0x115/0x200 [ 954.120766][ T30] ? __se_sys_futex+0x3a8/0x450 [ 954.125749][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 954.130977][ T30] ? rcu_is_watching+0x15/0xb0 [ 954.136248][ T30] __x64_sys_openat+0x138/0x170 [ 954.141171][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.147371][ T30] do_syscall_64+0x174/0x580 [ 954.152511][ T30] ? clear_bhb_loop+0x70/0xc0 [ 954.157267][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.164521][ T30] RIP: 0033:0x7f293eb9e0d9 [ 954.169007][ T30] RSP: 002b:00007f293fb0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 954.178090][ T30] RAX: ffffffffffffffda RBX: 00007f293ee25fa0 RCX: 00007f293eb9e0d9 [ 954.186208][ T30] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 954.195728][ T30] RBP: 00007f293ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 954.204139][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.212760][ T30] R13: 00007f293ee26038 R14: 00007f293ee25fa0 R15: 00007f293ef4fa48 [ 954.220805][ T30] [ 954.225447][ T30] [ 954.225447][ T30] Showing all locks held in the system: [ 954.233676][ T30] 2 locks held by ksoftirqd/0/15: [ 954.238739][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 954.248771][ T30] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 954.258167][ T30] 1 lock held by khungtaskd/30: [ 954.263301][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 954.273748][ T30] 2 locks held by getty/5366: [ 954.278463][ T30] #0: ffff888035c570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 954.288430][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 954.300735][ T30] 5 locks held by kworker/0:5/5702: [ 954.306114][ T30] #0: ffff888022aa6140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 954.318681][ T30] #1: ffffc9000442fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 954.350483][ T30] #2: ffff88802a3341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 954.359899][ T30] #3: ffff888012c811d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 954.369251][ T30] #4: ffff8880841b81a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 954.379059][ T30] 4 locks held by udevd/6249: [ 954.379604][T11198] usb 9-1: 1:1 : bogus bTerminalLink 5 [ 954.384221][ T30] #0: ffff8880342a9e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 954.390113][T11198] usb 9-1: unit 5 not found! [ 954.398987][ T30] #1: ffff88807ab3d080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 954.406881][T11198] usb 9-1: unit 0 not found! [ 954.415757][ T30] #2: ffff8880836bd698 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 954.429894][ T30] #3: ffff88807e72a1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 954.440087][ T30] 4 locks held by udevd/6250: [ 954.446841][ T30] #0: ffff888075637758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 954.456967][ T30] #1: ffff888086dc0c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 954.467122][ T30] #2: ffff888035ac3d28 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 954.477177][ T30] #3: ffff888012c811d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 954.495154][ T30] 4 locks held by kworker/0:4/11198: [ 954.500711][ T30] 2 locks held by kworker/1:5/11466: [ 954.508093][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 954.509056][T11198] usb 9-1: USB disconnect, device number 43 [ 954.519866][ T30] #1: ffffc90004157c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 954.555925][ T30] 3 locks held by syz.3.3607/17363: [ 954.567569][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x4b/0x70 [ 954.585531][ T30] #1: ffff888044dda8b0 (&mdev->open_mutex){+.+.}-{4:4}, at: snd_seq_oss_midi_close+0x187/0x670 [ 954.597075][ T30] #2: ffff88807cd0e1e0 (&grp->list_mutex){++++}-{4:4}, at: snd_seq_port_disconnect+0x57/0x660 [ 954.611114][ T30] 1 lock held by syz.4.3616/17390: [ 954.617258][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.627080][ T30] 1 lock held by syz.5.3617/17394: [ 954.633627][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.645865][ T30] 1 lock held by syz.2.3672/17624: [ 954.651097][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.673670][ T30] 1 lock held by syz.2.3672/17625: [ 954.679024][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.689138][ T30] 1 lock held by syz.6.3892/18491: [ 954.702578][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.713165][ T30] 1 lock held by syz.1.3972/18815: [ 954.718329][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.728013][ T30] 1 lock held by syz.9.4095/19326: [ 954.733455][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.743446][ T30] 1 lock held by syz.3.4172/19582: [ 954.748621][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.757987][ T30] 1 lock held by syz.3.4172/19586: [ 954.763480][ T30] #0: ffffffff8ff865c0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5c/0xa0 [ 954.775449][ T30] [ 954.777806][ T30] ============================================= [ 954.777806][ T30] [ 954.786768][ T30] NMI backtrace for cpu 1 [ 954.786797][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 954.786819][ T30] Tainted: [L]=SOFTLOCKUP [ 954.786826][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.786835][ T30] Call Trace: [ 954.786843][ T30] [ 954.786850][ T30] dump_stack_lvl+0xe8/0x150 [ 954.786878][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 954.786898][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 954.786922][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 954.786943][ T30] sys_info+0x135/0x170 [ 954.786957][ T30] watchdog+0xfd7/0x1030 [ 954.786983][ T30] ? watchdog+0x1c7/0x1030 [ 954.787006][ T30] kthread+0x388/0x470 [ 954.787027][ T30] ? __pfx_watchdog+0x10/0x10 [ 954.787044][ T30] ? __pfx_kthread+0x10/0x10 [ 954.787065][ T30] ret_from_fork+0x514/0xb70 [ 954.787089][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 954.787109][ T30] ? __switch_to+0xc89/0x1420 [ 954.787131][ T30] ? __pfx_kthread+0x10/0x10 [ 954.787151][ T30] ret_from_fork_asm+0x1a/0x30 [ 954.787186][ T30] [ 954.787193][ T30] Sending NMI from CPU 1 to CPUs 0: [ 954.902506][ T5702] cdc_ncm 6-1:1.0: bind() failure [ 954.905447][ C0] NMI backtrace for cpu 0 [ 954.905466][ C0] CPU: 0 UID: 0 PID: 5702 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.905488][ C0] Tainted: [L]=SOFTLOCKUP [ 954.905498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.905516][ C0] Workqueue: usb_hub_wq hub_event [ 954.905545][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 954.905564][ C0] Code: 9b 60 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5c 37 ce fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 97 52 6d 06 cc 44 89 f9 80 e1 07 38 c1 [ 954.905579][ C0] RSP: 0018:ffffc9000442e3b0 EFLAGS: 00000002 [ 954.905592][ C0] RAX: 0000000000000039 RBX: 0000000000000039 RCX: 0000000000000000 [ 954.905603][ C0] RDX: 00000000000003f8 RSI: 00000000000a2e76 RDI: 00000000000a2e77 [ 954.905614][ C0] RBP: 00000000000003f8 R08: ffff888026510237 R09: 1ffff11004ca2046 [ 954.905627][ C0] R10: dffffc0000000000 R11: ffffffff856665c0 R12: dffffc0000000000 [ 954.905638][ C0] R13: ffffffff9aad6460 R14: ffffffff9aad64a0 R15: 0000000000000000 [ 954.905650][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 954.905663][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.905675][ C0] CR2: 000000110c385212 CR3: 0000000074f30000 CR4: 00000000003526f0 [ 954.905690][ C0] Call Trace: [ 954.905697][ C0] [ 954.905705][ C0] serial8250_console_write+0x13b6/0x1ba0 [ 954.905724][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 954.905748][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 954.905765][ C0] ? console_flush_all+0x123/0xaf0 [ 954.905785][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 954.905804][ C0] ? console_flush_all+0x123/0xaf0 [ 954.905820][ C0] console_flush_all+0x6ea/0xaf0 [ 954.905857][ C0] ? console_flush_all+0x123/0xaf0 [ 954.905881][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 954.905900][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 954.905921][ C0] console_unlock+0xd1/0x1c0 [ 954.905944][ C0] ? vprintk_emit+0x2cf/0x560 [ 954.905967][ C0] ? __pfx_console_unlock+0x10/0x10 [ 954.905997][ C0] ? vprintk_emit+0x240/0x560 [ 954.906021][ C0] ? vprintk_emit+0x455/0x560 [ 954.906044][ C0] ? vprintk_emit+0x2cf/0x560 [ 954.906079][ C0] ? vprintk_emit+0x2cf/0x560 [ 954.906116][ C0] vprintk_emit+0x485/0x560 [ 954.906140][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 954.906175][ C0] dev_vprintk_emit+0x338/0x400 [ 954.906201][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 954.906229][ C0] ? __kasan_slab_free+0x5c/0x80 [ 954.906250][ C0] ? kfree+0x1c5/0x640 [ 954.906265][ C0] ? cdc_ncm_bind_common+0x1e3d/0x3160 [ 954.906282][ C0] ? usbnet_probe+0xab3/0x2ad0 [ 954.906305][ C0] dev_printk_emit+0xee/0x140 [ 954.906326][ C0] ? usb_probe_device+0x1c3/0x3b0 [ 954.906341][ C0] ? really_probe+0x254/0xae0 [ 954.906359][ C0] ? __driver_probe_device+0x1e8/0x360 [ 954.906377][ C0] ? __device_attach+0x2c4/0x450 [ 954.906393][ C0] ? device_initial_probe+0xa1/0xd0 [ 954.906409][ C0] ? bus_probe_device+0x12a/0x220 [ 954.906432][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 954.906453][ C0] ? ret_from_fork+0x514/0xb70 [ 954.906479][ C0] ? __dev_printk+0x131/0x190 [ 954.906497][ C0] _dev_info+0x11e/0x180 [ 954.906522][ C0] ? __pfx__dev_info+0x10/0x10 [ 954.906542][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 954.906561][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.906584][ C0] ? kfree+0x1c5/0x640 [ 954.906599][ C0] ? cdc_ncm_bind_common+0x1e3d/0x3160 [ 954.906619][ C0] cdc_ncm_bind_common+0x1e76/0x3160 [ 954.906639][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 954.906662][ C0] ? __pfx_cdc_ncm_bind_common+0x10/0x10 [ 954.906687][ C0] ? usbnet_probe+0x8fc/0x2ad0 [ 954.906707][ C0] ? cdc_ncm_bind+0x13b/0x1e0 [ 954.906727][ C0] usbnet_probe+0xab3/0x2ad0 [ 954.906755][ C0] ? __pfx_usbnet_probe+0x10/0x10 [ 954.906776][ C0] ? usb_disable_lpm+0x77/0x3e0 [ 954.906800][ C0] usb_probe_interface+0x653/0xc60 [ 954.906822][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 954.906841][ C0] really_probe+0x254/0xae0 [ 954.906862][ C0] __driver_probe_device+0x1e8/0x360 [ 954.906882][ C0] driver_probe_device+0x4f/0x240 [ 954.906902][ C0] __device_attach_driver+0x270/0x410 [ 954.906923][ C0] bus_for_each_drv+0x258/0x2f0 [ 954.906945][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 954.906964][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 954.906987][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.907007][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 954.907029][ C0] __device_attach+0x2c4/0x450 [ 954.907048][ C0] ? __pfx___device_attach+0x10/0x10 [ 954.907064][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 954.907083][ C0] ? _raw_spin_unlock+0x28/0x50 [ 954.907102][ C0] device_initial_probe+0xa1/0xd0 [ 954.907121][ C0] bus_probe_device+0x12a/0x220 [ 954.907145][ C0] device_add+0x7d7/0xb80 [ 954.907162][ C0] usb_set_configuration+0x1ad8/0x2180 [ 954.907200][ C0] usb_generic_driver_probe+0x8d/0x150 [ 954.907224][ C0] usb_probe_device+0x1c3/0x3b0 [ 954.907242][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 954.907256][ C0] really_probe+0x254/0xae0 [ 954.907277][ C0] __driver_probe_device+0x1e8/0x360 [ 954.907296][ C0] driver_probe_device+0x4f/0x240 [ 954.907317][ C0] __device_attach_driver+0x270/0x410 [ 954.907338][ C0] bus_for_each_drv+0x258/0x2f0 [ 954.907360][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 954.907379][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 954.907402][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.907423][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 954.907444][ C0] __device_attach+0x2c4/0x450 [ 954.907463][ C0] ? __pfx___device_attach+0x10/0x10 [ 954.907480][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 954.907498][ C0] ? _raw_spin_unlock+0x28/0x50 [ 954.907517][ C0] device_initial_probe+0xa1/0xd0 [ 954.907542][ C0] bus_probe_device+0x12a/0x220 [ 954.907566][ C0] device_add+0x7d7/0xb80 [ 954.907583][ C0] usb_new_device+0x9aa/0x1690 [ 954.907608][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 954.907630][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 954.907650][ C0] hub_event+0x28e8/0x4d30 [ 954.907672][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 954.907713][ C0] ? __pfx_hub_event+0x10/0x10 [ 954.907735][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 954.907756][ C0] ? rcu_is_watching+0x15/0xb0 [ 954.907781][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 954.907798][ C0] process_scheduled_works+0xa8e/0x14e0 [ 954.907834][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 954.907854][ C0] ? assign_work+0x3cf/0x5d0 [ 954.907873][ C0] worker_thread+0xa47/0xfb0 [ 954.907898][ C0] ? __kthread_parkme+0x71/0x1f0 [ 954.907922][ C0] kthread+0x388/0x470 [ 954.907942][ C0] ? __pfx_worker_thread+0x10/0x10 [ 954.907959][ C0] ? __pfx_kthread+0x10/0x10 [ 954.907980][ C0] ret_from_fork+0x514/0xb70 [ 954.908003][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 954.908024][ C0] ? __switch_to+0xc89/0x1420 [ 954.908044][ C0] ? __pfx_kthread+0x10/0x10 [ 954.908065][ C0] ret_from_fork_asm+0x1a/0x30 [ 954.908096][ C0] [ 954.909143][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 954.909166][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 954.909189][ T30] Tainted: [L]=SOFTLOCKUP [ 954.909196][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.909206][ T30] Call Trace: [ 954.909214][ T30] [ 954.909222][ T30] vpanic+0x56c/0xa60 [ 954.909247][ T30] ? __pfx___schedule+0x10/0x10 [ 954.909269][ T30] ? __pfx_vpanic+0x10/0x10 [ 954.909297][ T30] panic+0xc5/0xd0 [ 954.909317][ T30] ? __pfx_panic+0x10/0x10 [ 954.909336][ T30] ? preempt_schedule_common+0x82/0xd0 [ 954.909355][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 954.909373][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 954.909395][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 954.909415][ T30] watchdog+0x1030/0x1030 [ 954.909440][ T30] ? watchdog+0x1c7/0x1030 [ 954.909464][ T30] kthread+0x388/0x470 [ 954.909484][ T30] ? __pfx_watchdog+0x10/0x10 [ 954.909501][ T30] ? __pfx_kthread+0x10/0x10 [ 954.909522][ T30] ret_from_fork+0x514/0xb70 [ 954.909546][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 954.909567][ T30] ? __switch_to+0xc89/0x1420 [ 954.909594][ T30] ? __pfx_kthread+0x10/0x10 [ 954.909616][ T30] ret_from_fork_asm+0x1a/0x30 [ 954.909649][ T30] [ 954.913098][ T30] Kernel Offset: disabled